CVE-2026-10682

The userspace verifier zvrfylogfilterset for the logfilterset syscall in subsys/logging/logmgmt.c performed a signed comparison against the int16t srcid parameter: srcid int16tlogsrccntgetdomainid. Any negative value for srcid e.g. -1 trivially satisfied this check and was forwarded into...

CVE-2026-10682 Out-of-bounds write in Zephyr `log_filter_set` syscall verifier reachable from userspace

The userspace verifier zvrfylogfilterset for the logfilterset syscall in subsys/logging/logmgmt.c performed a signed comparison against the int16t srcid parameter: srcid int16tlogsrccntgetdomainid. Any negative value for srcid e.g. -1 trivially satisfied this check and was forwarded into...

EUVD-2026-49398

The userspace verifier zvrfylogfilterset for the logfilterset syscall in subsys/logging/logmgmt.c performed a signed comparison against the int16t srcid parameter: srcid int16tlogsrccntgetdomainid. Any negative value for srcid e.g. -1 trivially satisfied this check and was forwarded into...

CVE-2026-17531

A weakness has been identified in unitedbyai droidclaw up to 0.5.3. Affected by this issue is some unknown functionality of the file server/src/routes/goals.ts of the component Unsigned Scheduled Callback. This manipulation causes authorization bypass. Remote exploitation of the attack is possibl...

CVE-2026-47078

Relative Path Traversal vulnerability in Erlang OTP stdlib zip module allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:checkdirlevel/2, which tracks directory depth as a running integer...

CVE-2026-59729: Improper Neutralization of Input During Web Page Generation

Astro is a web framework for content-driven websites. Versions prior to 7.0.6 are vulnerable to XSS through unescaped spread attribute names in renderHTMLElement. The fix for CVE-2026-54298 GHSA-jrpj-wcv7-9fh9 added an INVALIDATTRNAMECHAR guard to addAttribute so that spread-prop attribute names...

CVE-2026-59728: XML Injection (aka Blind XPath Injection)

Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.type item fields in packages/astro-rss/src/index.ts are interpolated directly into XML template strings without XML-character escaping before being parsed by fast-xml-parser. Bot...

CVE-2026-17433: Improper Authorization

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in improper authorization. The attack needs to be approached...

CVE-2026-66035: Heap-based Buffer Overflow

libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SSH server to corrupt heap metadata in any connecting client by sending a packet with a packetlength smaller than the cipher's block size during Encrypt-then-M...

PT-2026-67582

Summary [email protected], the latest published version at the time of testing, appears to be vulnerable to prototype pollution through the public extend utility exported from the package root. When extendtrue, target, source is used for a deep merge, attacker-controlled object keys are recursively...

PT-2026-67372

A weakness has been identified in libssh up to 0.11.3. The impacted element is the function sftp extensions get name/sftp extensions get data of the file src/sftp.c of the component SFTP Extension Name Handler. Executing a manipulation of the argument idx can lead to out-of-bounds read. The attac...

CVE-2026-16767: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile::extractTo of the file src/ZipFile.php of the component ZIP Handler. Performing a manipulation of the argument entryName results in path traversal. It is possible to initiate the attack remotely. The...

CVE-2026-16733: Improper Neutralization of Special Elements used in an OS Command

A weakness has been identified in bahmutov find-cypress-specs up to 1.54.12. The impacted element is the function shell.exec of the file src/index.js of the component Branch Handler. This manipulation of the argument --branch causes os command injection. The attack is restricted to local executio...

CVE-2026-16763: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...

CVE-2026-16492: Improper Neutralization of Special Elements used in an OS Command

A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of the file packages/utils/src/getFileGitIno.ts of the component GIT File Helper. This manipulation causes os command injection. The exploit has been made available to the public a...

PT-2026-95643

Name of the Vulnerable Software and Affected Versions Suricata versions 8.0.0 through 8.0.5 Description Suricata is a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine. The file src/datasets-context-json.c incorrectly assumes that a configured...

PT-2026-95644

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.17 Suricata versions prior to 8.0.6 Description HTTP SWF decompression, when using the non-default swf-decompression feature and an unsafe decompress-depth, may use the configured depth for allocation in...

PT-2026-95656

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.6 Description The FTP parser in src/app-layer-ftp.c incorrectly handles RETR or STOR commands when they are sent before PORT or PASV negotiation. Instead of treating this as a recoverable protocol event, the syst...

PT-2026-95705

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.17 Suricata versions prior to 8.0.6 Description The Windows service installation and parameter-update logic in src/win32-service.c can pass an unquoted service ImagePath to the CreateServiceA function. If the...

PT-2026-95657

Name of the Vulnerable Software and Affected Versions Suricata versions 8.0.0 through 8.0.5 Description A heap buffer overflow can occur when loading a locally supplied detection rule that combines frame inspection without content and a transformed match without content. This causes the...