CVE-2026-84126

CVE-2026-84126 is a vulnerability in the Layout: Grid component of Firefox , caused by incorrect boundary conditions . The flaw allows a network-based attack with low complexity and no required privileges , but user interaction is required (e.g., visiting a crafted page). The impact is limited to...

PT-2026-84179

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Thunderbird versions prior to 155 Description Incorrect boundary conditions exist within the Layout: Grid component. Recommendations Update Firefox to version 155. Update Thunderbird to version 155...

ASB-A-397216638

In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-82873

ToolJet through 3.0.0-ee-beta.2 contains authorization bypass vulnerabilities in the POST /api/v2/resources/export endpoint that allow authenticated users to disclose TooljetDB table schemas across workspace boundaries and export app definitions across granular permission boundaries. Attackers ca...

CVE-2026-82859

hulumi versions before v1.3.2 contain a flawed deployment SCP template that permits tag-on-create bypasses against hulumi:iac-role protections, allowing attackers to circumvent intended IAM boundary restrictions in downstream deployments. The vulnerability is scored CVSS 3.1: 9.8 (CRITICAL) and C...

EUVD-2026-68447

hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary restrictions by exploiting the weakened SCP template in downstream deployments...

CVE-2026-82859 hulumi before v1.3.2 SCP Template Tag-on-Create Bypass

hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary restrictions by exploiting the weakened SCP template in downstream deployments...

CVE-2026-82857 hulumi before v1.3.2 Privilege Escalation via IAM Policy

hulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM policy that allows role lifecycle operations on af-e2e- roles without sufficient boundary restrictions. Attackers with the documented principal can create persistent higher-privilege roles in...

CVE-2026-82857 hulumi before v1.3.2 Privilege Escalation via IAM Policy

hulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM policy that allows role lifecycle operations on af-e2e- roles without sufficient boundary restrictions. Attackers with the documented principal can create persistent higher-privilege roles in...

EUVD-2026-68445

hulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM policy that allows role lifecycle operations on af-e2e- roles without sufficient boundary restrictions. Attackers with the documented principal can create persistent higher-privilege roles in...

PT-2026-83750

Name of the Vulnerable Software and Affected Versions ToolJet versions prior to 3.0.0-ee-beta.2 Description An authorization bypass exists in the 'POST /api/v2/resources/export' endpoint. Authenticated users can disclose TooljetDB table schemas across workspace boundaries or export app definition...

EUVD-2026-68201

Dolibarr versions 10.0.0 before 24.0.0 fail to perform per-object authorization checks in the Users::getGroups REST API endpoint, allowing authenticated users to retrieve group memberships of other users. Attackers can call GET /users/id/groups with arbitrary user identifiers to access group name...

EEF-CVE-2026-81316 Same-named aggregates with differing filters are conflated in AshSql

Summary Incorrect Authorization vulnerability in ash-project ashsql allows a caller to receive an aggregate value computed over rows a more restrictive filter should have excluded, disclosing counts, sums, or lists across an authorization or tenancy boundary. AshSql.Aggregate.differentqueries?/2...

CVE-2026-81316

CVE-2026-81316 is an Incorrect Authorization flaw in ash-project ash_sql (versions 0.1.0 through before 0.7.1). The root cause lies in AshSql.Aggregate.different_queries?/2, which treats two aggregates as identical unless both their filter and sort differ. Since aggregate queries rarely carry a s...

CVE-2026-81316 Same-named aggregates with differing filters are conflated in AshSql

Incorrect Authorization vulnerability in ash-project ashsql allows a caller to receive an aggregate value computed over rows a more restrictive filter should have excluded, disclosing counts, sums, or lists across an authorization or tenancy boundary. AshSql.Aggregate.differentqueries?/2 reports...

CVE-2026-76651 Pre-Authentication Multipart Boundary Buffer Overflow in HTTP Service in TP-Link TL-WR841N

A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing multipart/form-data requests. Insufficient validation of an attacker-controlled boundary parameter may allow a remote unauthenticated attacker to submit a crafted request that corrupts memory by...

CVE-2026-76651

A buffer overflow in the embedded HTTP service of the TP-Link TL-WR841N v14 is triggered when processing multipart/form-data requests. Insufficient validation of an attacker-controlled boundary parameter allows a remote, unauthenticated attacker from the adjacent network to corrupt memory beyond ...

CVE-2026-82252

gitoxide before 0.52.1 is vulnerable to a repository boundary violation via symlinked .gitmodules files. When reading the worktree .gitmodules file, gitoxide follows symlinks, allowing an attacker to create a malicious repository where .gitmodules points outside the repository tree. This causes g...

CVE-2026-82252 gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules

gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata. Attackers can create a malicious repository with a symlinked .gitmodules pointing outside the repository tree, causing gitoxide to pars...

CVE-2026-82252 gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules

gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata. Attackers can create a malicious repository with a symlinked .gitmodules pointing outside the repository tree, causing gitoxide to pars...