760 matches found
CVE-2026-32011 OpenClaw < 2026.3.2 - Slow-Request Denial of Service via Pre-Auth Webhook Body Parsing
OpenClaw versions prior to 2026.3.2 contain a denial of service vulnerability in webhook handlers for BlueBubbles and Google Chat that parse request bodies before performing authentication and signature validation. Unauthenticated attackers can exploit this by sending slow or oversized request...
Phoenix Contact多款产品 安全漏洞
PHOENIX CONTACT FL SWITCH and PHOENIX CONTACT FL NAT are products of the German company PHOENIX CONTACT. PHOENIX CONTACT FL SWITCH is an industrial-grade Ethernet switch. PHOENIX CONTACT FL NAT is a series of industrial security gateways. Several products from Phoenix Contact have security...
CVE-2026-32062 OpenClaw 2026.2.21-2 < 2026.2.22 - Unauthenticated WebSocket Resource Exhaustion via Media Stream
OpenClaw versions 2026.2.21-2 up to, but not including, 2026.2.22, and @openclaw/voice-call versions 2026.2.21 up to, but not including, 2026.2.22 accept media-stream WebSocket upgrades before stream validation, allowing unauthenticated clients to establish connections. Remote attackers can hold...
EUVD-2026-10459
Due to a Missing Authorization Check in SAP Business Warehouse Service API, an authenticated attacker could perform unauthorized actions via an affected RFC function module. Successful exploitation could enable unauthorized configuration and control changes, potentially disrupting request...
hisilicon VFIO Kernel Data Compromise
The vulnerability of the functions hisiaccvfiopciopendevice and hisiaccvfiopciclosedevice in the drivers/vfio/pci/hisilicon/hisiaccvfiopci.c driver for VFIO devices in the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to...
Access Control Web Interface Module Data Compromise
The vulnerability of the Access Control web interface module in IP-telephony systems like FreePBX allows attackers to compromise the confidentiality, integrity, and accessibility of protected information...
CVE-2026-26999
Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a potential vulnerability in Traefik managing TLS handshake on TCP routers. When Traefik processes a TLS connection on a TCP router, the read deadline used to bound protocol sniffing is cleared befor...
EUVD-2026-9808
Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28549
Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28549
Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-23432
Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-2584
A critical SQL Injection SQLi vulnerability has been identified in the authentication module of the system. An unauthenticated, remote attacker AV:N/PR:N can exploit this flaw by sending specially crafted SQL queries through the login interface. Due to low attack complexity AC:L and the absence o...
fs/nfsd/nfs4callback.c NFS Data Compromise
The vulnerability of the setupcallbackclient function in the fs/nfsd/nfs4callback.c module, which supports the Network File System in Linux kernels, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
PT-2026-34868
Name of the Vulnerable Software and Affected Versions Grafana Tempo versions prior to 2.8.4 Grafana Tempo versions 2.9.0 through 2.9.1 Grafana Tempo versions 2.10.0 through 2.10.1 Description An uncontrolled resource consumption issue exists where queries with large limits can trigger excessive...
Linux nilfs_relax_pressure_in_lock Heap Buffer Overflow DoS
The vulnerabilities of the nilfsrelaxpressureinlock and nilfsconstructsegment functions in the Linux operating system are related to the repeated use of previously released memory. Exploiting these vulnerabilities could allow an attacker to compromise the confidentiality, integrity, and...
CVE-2026-25547
A flaw was found in the brace-expansion component. This denial of service DoS vulnerability allows a remote attacker to provide specially crafted input containing repeated numeric brace ranges. This input causes the library to attempt an unbounded expansion, consuming excessive CPU and memory...
CVE-2026-22229
A command injection vulnerability may be exploited after the admin's authentication via the import of a crafted VPN client configuration file on the TP-Link Archer BE230 v1.2 and Deco BE25 v1.0. Successful exploitation could allow an attacker to gain full administrative control of the device,...
EUVD-2026-5006
LobeHub Vulnerable to Improper Authorization in Presigned Upload...
GHSA-273P-M2CW-6833 Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message
Summary Rekor’s cose v0.0.1 entry implementation can panic on attacker-controlled input when canonicalizing a proposed entry with an empty spec.message. validate returns nil success when message is empty, leaving sign1Msg uninitialized, and Canonicalize later dereferences v.sign1Msg.Payload. Impa...