EUVD-2026-64677

A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing of the file /user/note.php of the component User Notes Handler. The manipulation of the argument ID leads to authorization bypass. The attack can be initiated remotely. Upgrading...

CVE-2026-78156

A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hssogsdiams6aaircb of the file src/hss/hss-s6a-path.c of the component S6a Authentication-Information-Request Handler. Such manipulation of the argument Visited-PLMN-Id leads to heap-based buffer...

CVE-2026-78148

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpcserver::graphcompute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pu...

EUVD-2026-64676

A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseRequest Path Handler. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely...

CVE-2026-78158

Open5GS 2.8.0 contains an improper authorization flaw in the AMF UEContextReleaseRequest Path Handler . The root cause is not further specified in the provided documents. A remote attacker with low privileges can exploit this to bypass authorization controls, resulting in low impact on confidenti...

CVE-2026-78157 Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-bounds

A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The patch is named...

EUVD-2026-64675

A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The patch is named...

CVE-2026-78157

Open5GS 2.8.0 contains an out-of-bounds read vulnerability in the function pcrf_rx_aar_cb within src/pcrf/pcrf-rx-path.c , part of the Rx AA-Request Handler component. The flaw can be triggered remotely with low privileges and no user interaction. CVSS 3.1 scores it 7.4 (HIGH) with scope changed ...

EUVD-2026-65117

Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrenthelper.cc, which allows a remote malicious user to cause a Denial of Service...

PT-2026-79806

Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 Description An issue exists in the HTTP Request Handler component where a stack-based buffer overflow occurs. This happens when the strcpy function in the '/goform/aspRemoteApConfTempSend'...

CVE-2026-71832

Aria2 versions 1.37.0 and below contain a Divide By Zero flaw in src/bittorrent_helper.cc that allows a remote malicious user to trigger a Denial of Service . The vulnerability is related to the BitTorrent helper component and can be exploited remotely. Red Hat recommends that if Aria2 is deploye...

PT-2026-79795

A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report raw cbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made public and could be...

CVE-2026-78156

A heap-based buffer overflow exists in Open5GS 2.8.0 , specifically in the function hss_ogs_diam_s6a_air_cb within the file src/hss/hss-s6a-path.c, which implements the S6a Authentication-Information-Request Handler . The flaw is triggered by manipulation of the Visited-PLMN-Id argument, enabling...

CVE-2026-78145

A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function issafeurl of the file CTFd/utils/validators/init.py. Such manipulation of the argument Next leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be...

CVE-2026-78147

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Performing a manipulation of the argument op/opparams results in deserialization. The attack may be...

CVE-2026-78144

A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to authorization bypass. T...

CVE-2026-78148

A null pointer dereference exists in the ggml-RPC Server component of ggml-org llama.cpp (commit bec4772f6), specifically in the function rpc_server::graph_compute within the file ggml/src/ggml-rpc/ggml-rpc.cpp. A remote attacker can trigger this without authentication or user interaction, result...

CVE-2026-78148 ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpcserver::graphcompute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pu...

CVE-2026-78147

A deserialization vulnerability exists in the ggml-RPC Server component of llama.cpp (commit bec4772f6), specifically in the deserialize_tensor function in ggml/src/ggml-rpc/ggml-rpc.cpp. Remote attackers can manipulate the op/op_params argument to trigger the flaw with no privileges or user inte...

CVE-2026-78145 CTFd __init__.py _is_safe_url redirect

A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function issafeurl of the file CTFd/utils/validators/init.py. Such manipulation of the argument Next leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be...