CVE-2026-74487: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: restore write access when removing an entry Registering an entry with the MISCFMTOPENFILE flag opens the interpreter via openexec which denies write access to it for as long as the entry exists. Removing the entry...

Linux Distros Unpatched Vulnerability : CVE-2026-74487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binfmtmisc: restore write access when removing an entry Registering an entry with the MISCFMTOPENFILE flag opens the interpreter via openexec which denies write...

Linux Distros Unpatched Vulnerability : CVE-2026-74486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binfmtmisc: use exefiledenywriteaccess for the interpreter clone For MISCFMTOPENFILE entries loadmiscbinary clones the registered interpreter file and denies...

CVE-2026-74247

A flaw was found in Red Hat Quay. A user with FEATUREBUILDSUPPORT enabled and repository write access can exploit a Server-Side Request Forgery SSRF vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network...

CVE-2026-74247

Red Hat Quay contains a Server-Side Request Forgery (SSRF) vulnerability in its build API , specifically through the archive_url parameter. A user with repository write access and the FEATURE_BUILD_SUPPORT feature enabled can supply a malicious URL, causing the Quay builder to issue requests to i...

PT-2026-72132

Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description A Server-Side Request Forgery SSRF flaw exists within the build API. A user with repository write access and the FEATURE BUILD SUPPORT enabled can provide a malicious URL via the archive...

PT-2026-72002

Name of the Vulnerable Software and Affected Versions Grav API plugin getgrav/grav-plugin-api versions 1.0.6 through 1.0.11 Description A privilege escalation issue exists where a scoped API key created from a super-admin account can bypass its defined scope restrictions. This occurs because four...

PT-2026-72059

Name of the Vulnerable Software and Affected Versions Security Center affected versions not specified Description A local privilege escalation issue allows an attacker with write access to a specific configuration file to execute arbitrary code with elevated privileges. This process does not...

CVE-2026-72853 Budibase before 3.40.0 SQL Injection via Oracle connector

Budibase before 3.40.0 contains a SQL injection vulnerability in the Oracle datasource connector's post-write row lookup that fails to escape table names in identifiers. Attackers with write permission on a table with a double-quote in its name can inject SQL that executes as the datasource's...

EUVD-2026-58170

Public-only repository tokens can update private PR head branches...

PT-2026-71631

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description A path confinement bypass allows remote clients to escape the intended inner-module root confinement. This occurs when the module root contains a /./ boundary marker, enabling the construction of paths...

CVE-2026-53793: Improper Link Resolution Before File Access

rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contains a /./ boundary marker. Attackers can exploit improper...

CVE-2026-43629

A flaw was found in llama.cpp. An attacker with local write access to specific directories can exploit a heap buffer overflow vulnerability. By crafting malicious data files, the attacker can cause the system to write beyond intended memory boundaries. This could lead to data corruption or, in...

CVE-2026-68756

A party with write access to stored session data may affect JFrog Artifactory under specific conditions...

EUVD-2026-57252

A party with write access to stored session data may affect JFrog Artifactory under specific conditions...

CVE-2026-68756 Potential insecure deserialization in JFrog Artifactory

A party with write access to stored session data may affect JFrog Artifactory under specific conditions...

CVE-2026-68756 Potential insecure deserialization in JFrog Artifactory

A party with write access to stored session data may affect JFrog Artifactory under specific conditions...

PT-2026-71111

Name of the Vulnerable Software and Affected Versions JFrog Artifactory affected versions not specified Description An insecure deserialization issue exists where a party with write access to stored session data may affect the system under specific conditions. Insecure deserialization occurs when...

PT-2026-85334

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-x67c-8pwr-m8g3. This link is maintained to preserve external references. Original Description SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute-view template columns...

CVE-2026-18171: Incorrect Authorization

Docker Sandboxes sbx applies the read-only intent of a runtime host mount to the in-guest container bind only: the underlying virtio-fs host-edge grant is added to the sandbox's policy-share allowlist with no access mode. The directory stays writable at its shared-export path, so unprivileged cod...