EUVD-2026-124146

A vulnerability was detected in Moonshot AI Kimi Code up to 2.0.2. This vulnerability affects unknown code of the file .kimi-code/local.toml of the component WorkspaceDirsService. Performing a manipulation of the argument additionaldir results in reliance on untrusted inputs in a security decisio...

CVE-2026-126758

A vulnerability was detected in Moonshot AI Kimi Code up to 2.0.2. This vulnerability affects unknown code of the file .kimi-code/local.toml of the component WorkspaceDirsService. Performing a manipulation of the argument additionaldir results in reliance on untrusted inputs in a security decisio...

CVE-2026-126758

A vulnerability was detected in Moonshot AI Kimi Code up to 2.0.2. This vulnerability affects unknown code of the file .kimi-code/local.toml of the component WorkspaceDirsService. Performing a manipulation of the argument additionaldir results in reliance on untrusted inputs in a security decisio...

CVE-2026-126758

A vulnerability exists in Moonshot AI Kimi Code up to version 2.0.2 within the WorkspaceDirsService component. The flaw resides in the handling of the .kimi-code/local.toml file, where manipulation of the additional_dir argument leads to reliance on untrusted inputs in a security decision (CWE-80...

CVE-2026-126758 Moonshot AI Kimi Code WorkspaceDirsService local.toml reliance on untrusted inputs in a security decision

A vulnerability was detected in Moonshot AI Kimi Code up to 2.0.2. This vulnerability affects unknown code of the file .kimi-code/local.toml of the component WorkspaceDirsService. Performing a manipulation of the argument additionaldir results in reliance on untrusted inputs in a security decisio...

CVE-2026-126758 Moonshot AI Kimi Code WorkspaceDirsService local.toml reliance on untrusted inputs in a security decision

A vulnerability was detected in Moonshot AI Kimi Code up to 2.0.2. This vulnerability affects unknown code of the file .kimi-code/local.toml of the component WorkspaceDirsService. Performing a manipulation of the argument additionaldir results in reliance on untrusted inputs in a security decisio...

CVE-2026-126758: Moonshot AI Kimi Code: A vulnerability was detected in Moonshot AI Kimi Code up to 2.0.2

A vulnerability was detected in Moonshot AI Kimi Code up to 2.0.2. This vulnerability affects unknown code of the file .kimi-code/local.toml of the component WorkspaceDirsService. Performing a manipulation of the argument additionaldir results in reliance on untrusted inputs in a security decisio...

PT-2026-145544

A vulnerability was detected in Moonshot AI Kimi Code up to 2.0.2. This vulnerability affects unknown code of the file .kimi-code/local.toml of the component WorkspaceDirsService. Performing a manipulation of the argument additional dir results in reliance on untrusted inputs in a security...

EUVD-2026-122245

Reliance on untrusted inputs in a security decision in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-118154: Microsoft Microsoft Exchange Server Subscription Edition RTM: Reliance on untrusted inputs in a security decision in Microsoft Exchange Server allows an authorized attacker to…

Reliance on untrusted inputs in a security decision in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

PT-2026-143728

Reliance on untrusted inputs in a security decision in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-17167 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to falsify audit log information due to reliance on untrusted inputs. Information supplied by the client is relied on when recording the source of a request, so audit records could contain inaccurate details...

BIT-POWERSHELL-2026-96251 Microsoft PowerShell Remote Code Execution Vulnerability

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network...

CVE-2026-111869

A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For leads to reliance on untrusted inputs in a security decision. It is possible to launch the attack remotely. The exploit i...

CVE-2026-111869

A vulnerability exists in makeplane plane (up to version 1.4.2) affecting an unknown function within the API Endpoint component. The flaw stems from reliance on untrusted inputs in a security decision when processing the X-Forwarded-For argument. This issue allows for a remote attack vector. Whil...

CVE-2026-111869 makeplane API Endpoint reliance on untrusted inputs in a security decision

A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For leads to reliance on untrusted inputs in a security decision. It is possible to launch the attack remotely. The exploit i...

CVE-2026-111869 makeplane API Endpoint reliance on untrusted inputs in a security decision

A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For leads to reliance on untrusted inputs in a security decision. It is possible to launch the attack remotely. The exploit i...

EUVD-2026-103380

A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For leads to reliance on untrusted inputs in a security decision. It is possible to launch the attack remotely. The exploit i...

CVE-2026-111869: Reliance on Untrusted Inputs in a Security Decision

A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For leads to reliance on untrusted inputs in a security decision. It is possible to launch the attack remotely. The exploit i...

Microsoft PowerShell 7.4.x < 7.4.21 / 7.5.x < 7.5.12 / 7.6.x < 7.6.7 RCE (macOS)

The version of Microsoft PowerShell installed on the remote macOS host is 7.4.x prior to 7.4.21, 7.5.x prior to 7.5.12, or 7.6.x prior to 7.6.7. It is, therefore, affected by a remote code execution vulnerability. Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows ...