CVE-2026-101266: Improper Input Validation

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps...

CVE-2026-68068: Improper Neutralization of Special Elements used in an SQL Command

The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability...

Does the Unsafe Gradient Survive a Conversation? on the Fragility of Gradient-Based Jailbreak Detection in Multi-Turn Dialogue

Safety-aligned language models are commonly deployed as multi-turn assistants, which lets adversaries spread unsafe intent across several user turns instead of a single prompt. Gradient-based jailbreak detectors such as GradSafe were developed for single prompts: they score an input by the...

CVE-2026-102725: Out-of-bounds Read

Out-of-bounds Read from Unvalidated MSRP Attribute List Length...

CVE-2026-102723: NULL Pointer Dereference

NULL Pointer Dereference on MSRP Attribute Table Exhaustion...

CVE-2026-102727: Improper Restriction of Communication Channel to Intended Endpoints

FTP Passive Data Connection Not Bound to the Authenticated Control Peer...

CVE-2026-102719: Use of Insufficiently Random Values

Predictable DTLS HelloVerifyRequest Cookie in NetX Secure...

CVE-2026-100244: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows Excavation. This issue affects Mediawiki - CentralAuth Extension: from before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-72510: Improper Neutralization of Special Elements used in an SQL Command

The "supplierno" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection...

CVE-2026-84409: Improper Neutralization of Input During Web Page Generation

The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface subsequently returns this stored value in a JSON response, and the web interface responsible for displaying update...

CVE-2026-71302: Session Fixation

The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover...

CVE-2026-71189: Improper Neutralization of Input During Web Page Generation

An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application...

CVE-2026-69662: Improper Neutralization of Directives in Dynamically Evaluated Code

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions...

CVE-2026-95509: Out-of-bounds Read

Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg formatting by an incorrect buffer size calculation, causing out-of-bounds reading...

CVE-2026-101271: Insufficient Session Expiration

OAuth credentials access tokens are valid for the entirety of their lifetime, even if the application OAuth client they are bound to is manually disabled...

CVE-2026-71379: Files or Directories Accessible to External Parties

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...

CVE-2026-81841: Missing Authorization

Pausing a shared public dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard could still retrieve, without authenticating, the configuration of the dashboard's data sources, including stored credential...

CVE-2026-96421: Improperly Controlled Sequential Memory Allocation

USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-101269: Improper Authentication

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...

CVE-2026-101267: Missing Authorization

A missing permission check allowed low-privileged users with access to an event but without access to the event's orders to extract some specific information. This information includes the number of attendees and the total revenue...