EUVD-2026-55234

A path traversal vulnerability in o1lab/xmysql all versions allows an unauthenticated remote attacker to read and download arbitrary files from the server. The lib/xapi.js file at lines 338 and 424 uses the user-controlled req.query.name parameter in path.joincwd, name without sanitization before...

EUVD-2026-55241

A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator...

EUVD-2026-55260

GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index boundary check in sfntvarysimpleglyph and sfntvarycompoundglyph uses a strict greater-than comparison instead of greater-than-or-equal, allowing a crafted TrueType variable font ...

CVE-2026-19429 Jenkins Project Jenkins - Symlink Target Validation Bypass Arbitrary File Read

Jenkins FilePath.untarFrom all versions validates symlink destinations but not targets, bypassing CVE-2026-33001. Any user with Item/Build access triggers malicious tar extraction via POST /job/name/build, writing persistent symlinks into the Jenkins tool cache. Symlinks to secrets/master.key and...

CVE-2026-68420

The CVE affects the Linux kernel xfrm outbound policy handling. A stack-out-of-bounds read in __xfrm6_addr_hash was triggered via xfrm_state_find and xfrm_tmpl_resolve_one when using IPTFS templates in outbound policies. A prior fix already disallowed optional tunnel/BEET templates in outbound po...

CVE-2026-68402

The CVE-2026-68402 issue affects the Linux kernel’s wifi cfg80211 handling. Specifically, cfg80211_is_element_inherited() may read the first data octet of an element (elem->data[0]) to locate it in an extension non-inheritance list after testing elem->id, without verifying that the element ...

CVE-2026-68393

The CVE-2026-68393 entry concerns the Linux kernel Bluetooth hci_sync code. Affected component: Bluetooth subsystem’s hci_conn_hash lookup in the kernel; issue arises from using RCU-protected pointers outside critical sections without refcount, potentially causing a use-after-free. The fix extend...

CVE-2026-68374

The CVE refers to the Linux kernel’s USB core sysfs path, where bos_descriptors_read() could access udev->bos that might be freed by usb_reset_and_verify_device(). The vulnerability fix adds a lock to bos_descriptors_read() to synchronize access and prevent use-after-free. Details in the descr...

CVE-2026-68351

The CVE-2026-68351 entry describes a Linux kernel issue in the wifi carl9170 driver where a command-response length mismatch could cause an out-of-bounds read. The bug occurred because carl9170_cmd_callback() could fall through to memcpy(ar->readbuf, buffer + 4, len - 4) with len derived from ...

CVE-2026-68334

CVE-2026-68334 concerns the Linux kernel rxrpc subsystem. The issue arises in rxrpc_wake_up_io_thread(), which checks local->io_thread before waking it but then reloads the pointer for wake_up_process(), allowing a race because local->io_thread can be cleared by WRITE_ONCE() when the I/O th...

CVE-2026-68332

The CVE concerns a Linux kernel net/airoha issue where airoha_ppe_deinit() replaces the NPU pointer with NULL via rcu_replace_pointer() but does not wait for existing RCU readers, risking use-after-free when a reader still holds a reference. The fix adds synchronize_rcu() before ppe_deinit() to e...

CVE-2026-68277

The CVE-2026-68277 entry concerns Linux kernel DRM/DP/MST sideband reply parsers where three 16-bit reads check bounds after reading, risking out-of-bounds access (idx == curlen). A fix was applied: pre-check using a single combined condition (idx + 2 > curlen) before each 2-byte read. Affecte...

CVE-2026-72689

A broken object-level authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read complete contract records via the getDocument Parse cloud function. The function fetches documents using useMasterKey, bypassing the object ACL, and...

CVE-2026-72688

A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupload Parse cloud function. The function mints MASTERKEY-signed file access tokens for any caller-supplied URL without...

CVE-2026-68100

In ksmbd (Linux kernel), set_ntacl_dacl() copies ACEs from a stored security descriptor without validating ntace->sid.num_subauth. An attacker-controlled SD can specify a crafted num_subauth, and since num_subauth is not checked here (unlike parse_dacl/parse_sid/smb_copy_sid gates), a crafted ...

CVE-2026-72593

A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading, writing, deleting, and uploading files anywhere on the server filesystem...

CVE-2026-72568

An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port...

CVE-2026-72571

A path traversal vulnerability in mustafaakin/cast-localvideo all versions allows an unauthenticated remote attacker to read arbitrary files from the server. The app.js handler at lines 151-153 passes the user-supplied req.body.dir parameter directly to res.sendFile without sanitization, enabling...

CVE-2026-72565

A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator...

CVE-2026-72593 dulldusk phpfm - Missing Authentication by Default Allows Full Filesystem Access

A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading, writing, deleting, and uploading files anywhere on the server filesystem...