EUVD-2026-97519

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized database scope, which could result in unauthorized access to or...

CVE-2026-108906 Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds

A vulnerability has been found in Netcore NR268 1.7.121109. This affects the function filterarpputfilecgi of the file /router/filterarpputfile.cgi. The manipulation of the argument putfile leads to out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2026-85948 Improper privilege management in Progress MarkLogic Server Management API

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path. A remote attacker with manage-user-level privileges could exploit this flaw to obtain persistent unauthorized administrative control...

CVE-2026-108900

A SQL injection vulnerability exists in Exponent CMS up to version 3.0.2patch2 . The flaw is located within the userLogin function of the xmlrpc.php file in the XML-RPC component. This vulnerability allows for remote execution of unauthorized SQL commands. While the exploit has been disclosed to ...

CVE-2026-108900 Exponent CMS XML-RPC xmlrpc.php userLogin sql injection

A vulnerability has been found in Exponent CMS up to 3.0.2patch2. Affected is the function userLogin of the file xmlrpc.php of the component XML-RPC. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...

CVE-2026-102268

A flaw was found in PyJWT. When an application allows both symmetric and asymmetric signing algorithms, minor formatting variations in a public key can prevent the library from properly identifying it as an asymmetric key. Consequently, the library improperly treats the public key as a shared...

CVE-2026-105081

A flaw was found in ImageMagick. The application does not properly validate symbolic links shortcuts pointing to other files during security policy authorization checks. A local attacker can exploit this vulnerability by creating a symbolic link that points to a restricted file path, allowing the...

CVE-2026-108895

A weakness has been identified in Linksys E1700 1.0.0.4.003. The affected element is the function setDMZ of the file /goform/setDMZ. Executing a manipulation of the argument MACaddr can lead to os command injection. The attack can be executed remotely. The exploit has been made available to the...

CVE-2026-108898

A vulnerability was detected in Netis WF2409E 3.3.42541. This affects an unknown function of the component Wireless Settings. The manipulation of the argument SSID results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. The vendor was...

CVE-2026-108897

A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The...

CVE-2026-108899 tobychui zoraxy Path Exception Matcher authProviders.go handleBasicAuth improper authorization

A flaw has been found in tobychui zoraxy up to 3.3.4. This impacts the function handleBasicAuth of the file mod/dynamicproxy/authProviders.go of the component Path Exception Matcher. This manipulation of the argument PathPrefix causes improper authorization. It is possible to initiate the attack...

CVE-2026-108899 tobychui zoraxy Path Exception Matcher authProviders.go handleBasicAuth improper authorization

A flaw has been found in tobychui zoraxy up to 3.3.4. This impacts the function handleBasicAuth of the file mod/dynamicproxy/authProviders.go of the component Path Exception Matcher. This manipulation of the argument PathPrefix causes improper authorization. It is possible to initiate the attack...

CVE-2026-108898

A cross-site scripting (XSS) vulnerability exists in the Wireless Settings component of the Netis WF2409E (version 3.3.42541). The root cause is the improper neutralization of input when the SSID argument is manipulated, which may be exploited remotely. The documents indicate that an exploit is n...

CVE-2026-108898 Netis WF2409E Wireless Settings cross site scripting

A vulnerability was detected in Netis WF2409E 3.3.42541. This affects an unknown function of the component Wireless Settings. The manipulation of the argument SSID results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. The vendor was...

CVE-2026-108896

The Linksys E1700 (version 1.0.0.4.003 ) is vulnerable to OS command injection due to improper neutralization of special elements in the setLinksysIpv6 function located at /goform/setLinksysIpv6. An attacker can achieve remote command execution by manipulating the _6rd_prefix or _6rd_prefix_len a...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack through the IsRightsAuthorizedByName process. An attacker can bypass configured policy restrictions by creating a symbolic link that points to a policy-restricted path. Remediation A fix was pushed into the master branch...

CVE-2026-109226

SGLang through 0.5.21 contains a decompression amplification vulnerability in loadaudio that allows remote attackers to exhaust memory by submitting highly compressed audio decoded without duration or sample limits. Attackers can supply small FLAC-encoded silence files through audiourl or audioda...

CVE-2026-108890

A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue is the function terminalManager.spawn of the file packages/server/src/browser-handlers/terminal-handler.ts of the component Terminal Handler. The manipulation of the argument cwd leads to...

CVE-2026-109225 SGLang through 0.5.21 Memory Exhaustion DoS via /v1/audio/transcriptions Upload

SGLang through 0.5.21 contains an unbounded memory allocation vulnerability that allows unauthenticated remote attackers to exhaust memory by uploading oversized files to /v1/audio/transcriptions. Attackers can send concurrent large multipart uploads, which are fully read into memory before...

CVE-2026-108894

A security flaw in the Linksys E1700 (version 1.0.0.4.003) allows for OS command injection due to improper neutralization of special elements in the Static Route Handler component. Specifically, manipulating the staticRoute_IP_setting, staticRoute_Netmask_setting, staticRoute_Gateway_setting, or ...