CVE-2026-21034

Improper export of android application components in Samsung Auto prior to version 3.1.2.61 in Android 15 and 3.2.0.38 in Android 16 allows local attacker to change audio configuration...

CVE-2026-21034: Undefined Security Weakness

Improper export of android application components in Samsung Auto prior to version 3.1.2.61 in Android 15 and 3.2.0.38 in Android 16 allows local attacker to change audio configuration...

Samsung Auto Android security vulnerabilities

Samsung Auto Android is a mobile screen mirroring and intelligent driving assistant platform developed by South Korea’s Samsung Corporation for use in vehicle scenarios. There were security vulnerabilities in versions prior to 3.1.2.61 of Samsung Auto Android 15, as well as versions prior to...

PT-2026-46924

Name of the Vulnerable Software and Affected Versions Samsung Auto versions prior to 3.1.2.61 in Android 15 Samsung Auto versions prior to 3.2.0.38 in Android 16 Description Improper export of android application components allows a local attacker to change the audio configuration. Recommendation...

auto-mlflow (1.5.0), databricks-genai (>=1.2.0a23, <=1.2.0a24) +2 more potentially affected by CVE-2026-10803 via mlflow (2.20.3)

mlflow PYPI version 2.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - auto-mlflow 1.5.0 - databricks-genai =1.2.0a23, =0.1.0, =0.99.9, =0.99.9.post1 Source cves: CVE-2026-10803 Source advisory: OSV:GHSA-5QMP-P3C4-72QJ...

auto-mlflow (1.5.0), databricks-genai (>=1.2.0a23, <=1.2.0a24) +2 more potentially affected by CVE-2026-10803 via mlflow (2.20.3)

mlflow PYPI version 2.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - auto-mlflow 1.5.0 - databricks-genai =1.2.0a23, =0.1.0, =0.99.9, =0.99.9.post1 Source cves: CVE-2026-10803 Source advisory: OSV:PYSEC-2026-195...

PT-2026-46338

Unauthenticated Local File Inclusion in Deliciosa = 1.10.0 versions...

CVE-2026-22054

Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations...

CVE-2026-22054

CVE-2026-22054 affects NetApp Active IQ Config Advisor, version 6.7.3. The root cause is hard-coded credentials, which could let an authenticated attacker with low privileges perform unauthorized AutoSupport operations. Documents do not provide exploitation details or specific attacker actions be...

agentfoundry (1.2.9.1), ai4rag (>=0.8.0, <=0.8.1) +30 more potentially affected by CVE-2026-47214 via docling (>=2.8.1, <=2.93.0)

docling PYPI version =2.8.1, =0.8.0, =1.0.0, =0.1.0, =0.1.0, =0.19.2, =1.40.0, =0.6.2, =2.0.0, =0.0.1, =0.1.0, =0.2.1, =0.6.1, =0.6.3 - knowledgefeed 0.1.0 and more Source cves: CVE-2026-47214 Source advisory: SNYK:PYTHON-DOCLING-17151773...

ai4rag (>=0.8.0, <=0.8.1), auto-survey (>=0.1.0, <=0.3.1) +7 more potentially affected by CVE-2026-44022 via docling (>=2.73.1, <=2.90.0)

docling PYPI version =2.73.1, =0.8.0, =0.1.0, =0.1.0, =0.30.1, =0.0.1, =2026.2.27, =0.1.0, =0.0.1, =0.0.2 Source cves: CVE-2026-44022 Source advisory: OSV:GHSA-2J5P-7P5M-CVQR...

ai4rag (>=0.8.0, <=0.8.1), auto-survey (>=0.1.0, <=0.3.1) +7 more potentially affected by CVE-2026-44022 via docling (>=2.73.1, <=2.90.0)

docling PYPI version =2.73.1, =0.8.0, =0.1.0, =0.1.0, =0.30.1, =0.0.1, =2026.2.27, =0.1.0, =0.0.1, =0.0.2 Source cves: CVE-2026-44022 Source advisory: GHSA-2J5P-7P5M-CVQR...

ai4rag (>=0.8.0, <=0.8.1), auto-survey (>=0.1.0, <=0.3.1) +6 more potentially affected by CVE-2026-44016 via docling (>=2.82.0, <=2.90.0)

docling PYPI version =2.82.0, =0.8.0, =0.1.0, =0.1.0, =0.40.0, =0.0.1, =0.1.0, =0.0.1, =0.0.2 Source cves: CVE-2026-44016 Source advisory: SNYK:PYTHON-DOCLING-17151857...

ai4rag (>=0.8.0, <=0.8.1), auto-survey (>=0.1.0, <=0.3.1) +6 more potentially affected by CVE-2026-44016 via docling (>=2.82.0, <=2.90.0)

docling PYPI version =2.82.0, =0.8.0, =0.1.0, =0.1.0, =0.40.0, =0.0.1, =0.1.0, =0.0.1, =0.0.2 Source cves: CVE-2026-44016 Source advisory: GHSA-PJ2V-GGQH-CMQ2...

ai4rag (>=0.8.0, <=0.8.1), auto-survey (>=0.1.0, <=0.3.1) +6 more potentially affected by CVE-2026-44016 via docling (>=2.82.0, <=2.90.0)

docling PYPI version =2.82.0, =0.8.0, =0.1.0, =0.1.0, =0.40.0, =0.0.1, =0.1.0, =0.0.1, =0.0.2 Source cves: CVE-2026-44016 Source advisory: OSV:GHSA-PJ2V-GGQH-CMQ2...

allennlp (>=2.2.1.dev20210408, <=2.7.0), allennlp-dataframe-mapper (0.2.1) +20 more potentially affected by CVE-2026-5241 via transformers (4.5.1)

transformers PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.2.1.dev20210408, =2.2.1.dev20210329, =0.0.0.2, =1.37.0, =0.0.1, =0.1.0, =0.3.0b1, =0.0.1, =1.0.23, =1.1.3 - nlp-nn 0.0.11.0...

auto-obsidian (>=0.1.0, <=0.1.3), autogluon (0.5.3) +10 more potentially affected by CVE-2026-5241 via transformers (4.23.1)

transformers PYPI version 4.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-obsidian =0.1.0, =0.5.3b20221025, =0.1.0, =0.0.8, =0.0.14 Source cves: CVE-2026-5241 Source advisory: OSV:GHSA-FGCW-684Q-JJ6R...

auto-obsidian (>=0.1.0, <=0.1.3), autogluon (0.5.3) +10 more potentially affected by CVE-2026-5241 via transformers (4.23.1)

transformers PYPI version 4.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-obsidian =0.1.0, =0.5.3b20221025, =0.1.0, =0.0.8, =0.0.14 Source cves: CVE-2026-5241 Source advisory: OSV:PYSEC-2026-2290...

CVE-2026-5241

A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the trustremotecode parameter, intended to prevent remote code execution, is...

auto-mlflow (1.5.0), databricks-genai (>=1.2.0a23, <=1.2.0a24) +2 more potentially affected by CVE-2026-4035 via mlflow (2.20.3)

mlflow PYPI version 2.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - auto-mlflow 1.5.0 - databricks-genai =1.2.0a23, =0.1.0, =0.99.9, =0.99.9.post1 Source cves: CVE-2026-4035 Source advisory: OSV:GHSA-G35P-PX32-WHV6...