CVE-2026-101098 ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pu...

CVE-2026-101098 ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pu...

CVE-2026-101098

A security vulnerability exists in the ag-ui-protocol ag-ui software (versions up to 2026-09-23). The flaw is located in the readAllBytes function within the JdkAgentHttpHandler.java file of the HTTP Handler component. Exploitation of this issue allows for remote resource consumption . A pull req...

EUVD-2026-88366

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pu...

CVE-2026-101098 ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pu...

CVE-2026-88804

An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14 and 2.11 before 2.11.18...

CVE-2026-88804 Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher

An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14 and 2.11 before 2.11.18...

CVE-2026-88804 Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher

An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14 and 2.11 before 2.11.18...

EUVD-2026-88340

An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14 and 2.11 before 2.11.18...

CVE-2026-88804 Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher

An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14 and 2.11 before 2.11.18...

CVE-2026-88804

SUSE Rancher is vulnerable to a stored cross-site scripting (XSS) attack due to an unauthenticated update of public UI settings. This vulnerability impacts versions 2.15 before 2.15.2 , 2.14 before 2.14.6 , 2.13 before 2.13.10 , 2.12 before 2.12.14 , and 2.11 before 2.11.18 . Remote attackers can...

CVE-2026-82381

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a user with authoring rights on a weblog to store crafted content that is later written into the authoring UI's JavaScript string literals and markup sinks without proper encoding,...

CVE-2026-82381

Apache Roller version 6.1.5 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. An attacker with authoring rights on a weblog can store crafted content that is injected into the authoring UI's JavaScript string literals and...

CVE-2026-82381 Apache Roller: Stored cross-site scripting in the authoring UI

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a user with authoring rights on a weblog to store crafted content that is later written into the authoring UI's JavaScript string literals and markup sinks without proper encoding,...

CVE-2026-82381 Apache Roller: Stored cross-site scripting in the authoring UI

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a user with authoring rights on a weblog to store crafted content that is later written into the authoring UI's JavaScript string literals and markup sinks without proper encoding,...

CVE-2026-82381 Apache Roller: Stored cross-site scripting in the authoring UI

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a user with authoring rights on a weblog to store crafted content that is later written into the authoring UI's JavaScript string literals and markup sinks without proper encoding,...

freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL

A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting XSS vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute...

PT-2026-99944

A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsMiddleware of the file sdks/typescript/packages/client/src/middleware/filter-tool-calls.ts of the component Middleware. Executing a manipulation can lead to incomplete cleanup. T...

PT-2026-99801

Name of the Vulnerable Software and Affected Versions Apache Roller version 6.1.5 Description Improper neutralization of input during web page generation leads to stored cross-site scripting XSS in the authoring UI. A user with authoring rights can store crafted content that is subsequently writt...

PT-2026-99934

Name of the Vulnerable Software and Affected Versions ag-ui-protocol ag-ui versions prior to 2026-09-23 Description A remote issue exists in the HTTP Handler component within the readAllBytes function of the JdkAgentHttpHandler.java file. Manipulation of this function can lead to excessive resour...