CVE-2026-101280

A vulnerability exists in Trusted Domain Project OpenDMARC (up to version 1.4.2 ) within the Multi-Record Set Handler component. Specifically, the opendmarc_policy_query_dmarc function is susceptible to manipulation, which can lead to an authentication bypass via spoofing . This attack can be exe...

CVE-2026-101280

A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarcpolicyquerydmarc of the component Multi-Record Set Handler. The manipulation results in authentication bypass by spoofing. The attack can be executed remotely. The exploit is now public...

PT-2026-108572

Security vulnerability affects the langfuse package. undici's cache interceptor does not handle the Set-Cookie response header anywhere in its cache path, so it neither refuses to store nor strips that header...

PT-2026-109067

Issue summary: A TLS server that calls SSL set SSL CTX to switch a connection to a different SSL CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was...

PT-2026-109087

Issue summary: A TLS server that calls SSL set SSL CTX to switch a connection to a different SSL CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was...

PT-2026-109102

Issue summary: A TLS server that calls SSL set SSL CTX to switch a connection to a different SSL CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was...

PT-2026-109052

Issue summary: A TLS server that calls SSL set SSL CTX to switch a connection to a different SSL CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was...

PT-2026-109031

Issue summary: A TLS server that calls SSL set SSL CTX to switch a connection to a different SSL CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was...

PT-2026-109023

Issue summary: A TLS server that calls SSL set SSL CTX to switch a connection to a different SSL CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was...

CVE-2026-79535

mbailey VoiceMode = 8.10.1 is vulnerable to OS Command Injection. The updateconfig MCP tool and the "voicemode config set" CLI writes a caller-supplied value into /.voicemode/voicemode.env without shell-safe escaping...

CVE-2026-79535

The mbailey VoiceMode software (versions

CVE-2026-101280

A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarcpolicyquerydmarc of the component Multi-Record Set Handler. The manipulation results in authentication bypass by spoofing. The attack can be executed remotely. The exploit is now public...

EUVD-2026-89361

mbailey VoiceMode = 8.10.1 is vulnerable to OS Command Injection. The updateconfig MCP tool and the "voicemode config set" CLI writes a caller-supplied value into /.voicemode/voicemode.env without shell-safe escaping...

CVE-2026-79535

mbailey VoiceMode = 8.10.1 is vulnerable to OS Command Injection. The updateconfig MCP tool and the "voicemode config set" CLI writes a caller-supplied value into /.voicemode/voicemode.env without shell-safe escaping...

CVE-2026-79535

mbailey VoiceMode = 8.10.1 is vulnerable to OS Command Injection. The updateconfig MCP tool and the "voicemode config set" CLI writes a caller-supplied value into /.voicemode/voicemode.env without shell-safe escaping...

CVE-2026-101280: Authentication Bypass by Spoofing

A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarcpolicyquerydmarc of the component Multi-Record Set Handler. The manipulation results in authentication bypass by spoofing. The attack can be executed remotely. The exploit is now public...

PT-2026-102931

A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. This affects the function set syslog of the file /api/ZRnetwork/set syslog. The manipulation of the argument conloglevel/log size results in command injection. The attack may be performed from remote. The exploit is now public and may be...

PT-2026-102417

Name of the Vulnerable Software and Affected Versions OpenDMARC versions prior to 1.4.3 Description A remote authentication bypass via spoofing is possible in the Multi-Record Set Handler component. The issue resides in the opendmarc policy query dmarc function. Recommendations Update to a versio...

PT-2026-102934

Name of the Vulnerable Software and Affected Versions Ziroom ZHOME A0101 version 1.0.1.0 Description A flaw in the set time zone function within the '/api/ZRFirmware/set time zone' endpoint allows for remote command injection. This occurs through the manipulation of the hostname/zonename argument...

CVE-2026-79535

mbailey VoiceMode = 8.10.1 is vulnerable to OS Command Injection. The updateconfig MCP tool and the "voicemode config set" CLI writes a caller-supplied value into /.voicemode/voicemode.env without shell-safe escaping...