EUVD-2026-44748

OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into /tmp/odhcpd.leases through src/statefiles.c statefileswritestate6 and statefileswritestate4 without escaping, allowing newline injection of forged lease lin...

CVE-2026-61613

Cursor is a code editor built for programming with AI. Prior to the Cloud Agent fix on 03/31/2026, browser-enabled Cursor Cloud Agent sessions allowed attacker-controlled web content to connect from inside the agent container to an unauthenticated local agent endpoint, enabling code execution...

SUSE CVE-2026-57213

RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmqfederationmanagement plugin renders the consumertag field on the Federation Status page without HTML escaping, allowing a user who can configure a federation upstream or policy to execute...

CVE-2026-11898

CVE-2026-11898 affects the White Label CMS WordPress plugin (all versions up to and including 2.7.12). It enables Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. Attack scenario: an authenticated attacker with administrator-level permissi...

Linux Distros Unpatched Vulnerability : CVE-2025-12506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain...

CVE-2025-12506

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user to create a repository where the content displayed in the web interface differed from t...

CVE-2025-12506 Use of Incorrectly-Resolved Name or Reference in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user to create a repository where the content displayed in the web interface differed from t...

Mozilla Thunderbird < 140.12.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.12.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-64 advisory. - An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content,...

Alibaba Cloud Linux 3 : 0180: webkit2gtk3 (ALINUX3-SA-2026:0180)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0180 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-28847: The issue was addressed wi...

Apple Safari buffer overflow vulnerability (CNVD-2026-26364)

Safari is a web browser developed by Apple Inc., whose main function is to browse web content. Apple Safari has security vulnerabilities; these vulnerabilities arise due to improper handling of maliciously constructed web content. Attackers can exploit these vulnerabilities to cause memory...

Apple Safari resource management error vulnerability (CNVD-2026-28245)

Apple Safari is a web browser designed for the Apple operating system. Apple Safari has a resource management vulnerability, which stems from improper memory management leading to incorrect memory references. Attackers can exploit this vulnerability by processing maliciously crafted web content,...

Apple Safari WebKit memory corruption vulnerability (CNVD-2026-26340)

Apple Safari is a web browser developed by Apple Inc., utilizing the WebKit rendering engine. It primarily serves the function of browsing web pages. Apple Safari has a memory corruption vulnerability. This vulnerability stems from the failure to properly manage memory when processing maliciously...

Apple Safari resource management error vulnerability (CNVD-2026-28248)

Apple Safari is a web browser developed by Apple Inc., integrated into iOS, iPadOS, and macOS systems. It is primarily used for browsing web pages and processing web content. There is a resource management vulnerability in Apple Safari. The cause of this vulnerability is the improper handling of...

Apple Safari resource management error vulnerability (CNVD-2026-28250)

Apple Safari is a web browser developed by Apple Inc., primarily designed for browsing internet pages and rendering web content. Apple Safari has a resource management vulnerability, which stems from improper memory management leading to memory-related errors. Attackers can exploit this...

Apple Safari buffer overflow vulnerability (CNVD-2026-26436)

Apple Safari is a web browser developed by Apple Inc., primarily used on iOS, iPadOS, and macOS systems. Apple Safari has a buffer overflow vulnerability, which stems from an inability to properly validate boundaries. Attackers can exploit this vulnerability by processing maliciously crafted web...

Apple Safari buffer overflow vulnerability (CNVD-2026-26434)

Apple Safari is a web browser developed by Apple Inc., primarily used on iOS, iPadOS, and macOS systems. It provides web browsing functionality. Apple Safari has a buffer overflow vulnerability. This vulnerability stems from insufficient validation of boundary checks. Attackers can exploit this...

Apple Safari resource management error vulnerability (CNVD-2026-28244)

Apple Safari is a web browser available for iOS, iPadOS, and macOS platforms, primarily used for accessing internet content. Apple Safari has a resource management vulnerability, which stems from memory error references during processing of maliciously crafted web content. Attackers can exploit...

Apple Safari Content Resource Management Error Vulnerability (CNVD-2026-26337)

Apple Safari is a web browser developed by Apple, primarily used on iOS, iPadOS, and macOS systems. There is a resource management vulnerability in Apple Safari. This vulnerability stems from improper handling of memory management; attackers can exploit this vulnerability to cause Safari to crash...

Apple Safari resource management error vulnerability (CNVD-2026-28251)

Apple Safari is a web browser used primarily for accessing and browsing web content. Apple Safari has a resource management vulnerability, which stems from memory error references during processing of maliciously crafted web content. Attackers can exploit this vulnerability to cause memory...

Apple Safari path traversal vulnerability (CNVD-2026-26335)

Apple Safari is a web browser developed by Apple Inc., integrated into iOS, iPadOS, and macOS systems. It supports web browsing and rendering functions. Apple Safari has a path traversal vulnerability, which stems from an inability to correctly verify file paths. Attackers can exploit this...