CVE-2026-5777

This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge ADB service over the local network without authentication or access controls. An unauthenticated attacker on the same network can exploit this vulnerability to obtain root-level access, leading...

CVE-2026-49185

The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec, allowing command/instruction injection...

CVE-2026-40289

PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.140 of praisonaiagents, the browser bridge praisonai browser start is vulnerable to unauthenticated remote session hijacking due to missing authentication and a bypassable origin check on its /ws WebSocket...

CVE-2026-44698

Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.4.1 for iOS and 2026.4.4 for Android, he Home Assistant Companion apps for Android and iOS expose a JavaScript bridge to the in-app WebView window.externalApp on Android and...

CVE-2026-35589

nanobot is a personal AI assistant. Versions prior to 0.1.5 contain a Cross-Site WebSocket Hijacking CSWSH vulnerability exists in the bridge's WebSocket server in bridge/src/server.ts, resulting from an incomplete remediation of CVE-2026-2577. The original fix changed the binding from 0.0.0.0 to...

BIT-ACTIVEMQ-2026-42588 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy...

esmerald (1.2.3), htagweb (>=0.10.0, <=0.42.3) +3 more potentially affected by CVE-2026-48710 via starlette (0.29.0)

starlette PYPI version 0.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - esmerald 1.2.3 - htagweb =0.10.0, =1.0.0, =1.0.1 - starlette-authlib 0.1.27 - starlette-bridge 0.2.0 Source cves: CVE-2026-48710 Source...

CVE-2026-49185 Instruction Injection via FieldX MDM

The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec, allowing command/instruction injection...

CVE-2026-49185

The CVE-2026-49185 entry concerns FieldX MDM where the adb messaging topic passes unverified payloads directly into Runtime.exec(), enabling command/instruction injection. Affected component: adb messaging topic within FieldX MDM; root cause is unverified payloads executed via Runtime.exec(). Imp...

EUVD-2026-34199

The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec, allowing command/instruction injection...

biomni-bridge (>=0.3.1, <=0.3.3), github-pr-mcp-server (1.0.3) potentially affected by CVE-2026-10783 via gradio (5.39.0)

gradio PYPI version 5.39.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - biomni-bridge =0.3.1, =0.3.3 - github-pr-mcp-server 1.0.3 Source cves: CVE-2026-10783 Source advisory: OSV:PYSEC-2026-211...

CVE-2026-10264

A vulnerability was determined in lharries whatsapp-mcp 0.0.1. Affected by this vulnerability is the function SendMessageRequest of the file whatsapp-bridge/main.go of the component Send API Endpoint. This manipulation of the argument mediaPath causes path traversal. The exploit has been publicly...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2026-5241 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2026-5241 Source advisory: OSV:PYSEC-2026-2290...

PT-2026-46055

Name of the Vulnerable Software and Affected Versions DD-WRT versions prior to 45724 Description An unsafe strcpy function in the UPnP handling functionality within router/upnp/src/ssdp.c allows an unauthenticated remote attacker to overflow an internal fixed buffer. This issue is triggered via a...

CVE-2026-10528 Orthanc DICOM Server DCMTK FromDcmtkBridge.cpp read stack-based overflow

A security flaw has been discovered in Orthanc DICOM Server up to 1.12.11. This issue affects the function DcmItem::read of the file OrthancFramework/Sources/DicomParsing/FromDcmtkBridge.cpp of the component DCMTK Parser. Performing a manipulation results in stack-based buffer overflow. Attacking...

Linux Distros Unpatched Vulnerability : CVE-2026-42588

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ...

ch.qos.logback:log4j-bridge (0.7.1), ch.qos.logback:logback-access (0.7.1) +2 more potentially affected by CVE-2026-10532 via ch.qos.logback:logback-core (0.7.1)

ch.qos.logback:logback-core MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.7.1 - ch.qos.logback:logback-access 0.7.1 - ch.qos.logback:logback-classic...

ch.qos.logback:log4j-bridge (0.9.3), ch.qos.logback:logback-access (0.9.3) +2 more potentially affected by CVE-2026-10532 via ch.qos.logback:logback-core (0.9.3)

ch.qos.logback:logback-core MAVEN version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9.3 - ch.qos.logback:logback-access 0.9.3 - ch.qos.logback:logback-classic...

ch.hortis.sonar:sonar-commons (0.2), ch.hortis.sonar:sonar-maven-plugin (0.2) +4 more potentially affected by CVE-2026-10532 via ch.qos.logback:logback-core (0.9.5)

ch.qos.logback:logback-core MAVEN version 0.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.hortis.sonar:sonar-commons 0.2 - ch.hortis.sonar:sonar-maven-plugin 0.2 - ch.qos.logback:log4j-bridge...

CVE-2026-10264

A vulnerability was determined in lharries whatsapp-mcp 0.0.1. Affected by this vulnerability is the function SendMessageRequest of the file whatsapp-bridge/main.go of the component Send API Endpoint. This manipulation of the argument mediaPath causes path traversal. The exploit has been publicly...