Consul vulnerable to an authorization bypass in the Connect service mesh

Summary Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a service to reach a destination it is not authorized to access. When building Envoy RBAC rules to enforce Connect intentions, Consul did not correctly escape certain characte...

vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator

A flaw was found in Vim. A remote attacker could exploit a heap-based buffer overflow and an out-of-bounds read vulnerability in Vim's terminal emulator. This occurs when processing specially crafted Unicode supplementary plane characters, potentially leading to information disclosure and denial ...

WebOb: Open redirect in Location header normalization via leading C0 control / space characters

SummaryThis is a third follow-up to CVE-2024-42353 / GHSA-mg3v-6m49-jhp3and CVE-2026-44889 / GHSA-fh3h-vg37-cc95.WebOb makes the Location header absolute when it serves a redirect. To stop arelative or protocol-relative target from redirecting users off-host, it checksthe value for a URI scheme a...

PYSEC-2026-3943 WebOb: Open redirect in Location header normalization via leading C0 control / space characters

Summary This is a third follow-up to CVE-2024-42353 / GHSA-mg3v-6m49-jhp3 and CVE-2026-44889 / GHSA-fh3h-vg37-cc95. WebOb makes the Location header absolute when it serves a redirect. To stop a relative or protocol-relative target from redirecting users off-host, it checks the value for a URI...

vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator

A flaw was found in Vim. A remote attacker could exploit a heap-based buffer overflow and an out-of-bounds read vulnerability in Vim's terminal emulator. This occurs when processing specially crafted Unicode supplementary plane characters, potentially leading to information disclosure and denial ...

vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator

A flaw was found in Vim. A remote attacker could exploit a heap-based buffer overflow and an out-of-bounds read vulnerability in Vim's terminal emulator. This occurs when processing specially crafted Unicode supplementary plane characters, potentially leading to information disclosure and denial ...

PT-2026-89570

Name of the Vulnerable Software and Affected Versions Consul versions prior to 2.0.4 Consul Enterprise versions prior to 1.21.18 Consul Enterprise versions prior to 1.22.12 Consul Enterprise versions prior to 2.0.4 Description An authorization bypass exists in the Connect service mesh. This occur...

CVE-2026-87016 Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.41 until 0.11.1, getuserbyoauthsub and getuserbyscimexternalid in backend/openwebui/models/users.py used JSON contains matching that compiled to SQL LIKE substring matching on SQLite. An OAuth subject...

CVE-2026-79971

Dell Secure Connect Gateway (SCG) 5.0 contains an Improper Sanitization of Custom Special Characters vulnerability that allows an unauthenticated remote attacker to perform script injection . The affected versions are SCG 5.0 Appliance prior to 5.36.00.16 and SCG 5.0 Application prior to 5.36.00....

EUVD-2026-75012

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Sanitization of Custom Special Characters vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to scri...

CVE-2026-79971

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Sanitization of Custom Special Characters vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to scri...

NPM: morgan vulnerable to Log Forging via unescaped Unicode line separators

NPM: morgan vulnerable to Log Forging via unescaped Unicode line separators vulnerability discovered by ? in WordPress Npm morgan versions 1.12.0...

EUVD-2026-72939

The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server mongod. Under certain specific conditions the regex match can start in the middle of a multi-code-unit character, triggering an assertion during query execution...

CVE-2026-85656

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...

CVE-2026-78658 IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an information disclosure vulnerability

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.25, and 7.3 through 7.3.2.20 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.15, 8.1 through 8.1.2.8, and 8.2 through 8.2.2.1 IBM DevOps Deploy / IBM UrbanCode Deploy UCD is susceptible to an formation disclosure vulnerability when processing...

EUVD-2026-71399

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.25, and 7.3 through 7.3.2.20 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.15, 8.1 through 8.1.2.8, and 8.2 through 8.2.2.1 IBM DevOps Deploy / IBM UrbanCode Deploy UCD is susceptible to an formation disclosure vulnerability when processing...

CVE-2026-78658

IBM UrbanCode Deploy (UCD) and IBM DevOps Deploy contain an information disclosure vulnerability (CWE-212) in the redaction engine. When a deployment's secure property begins with certain non-ASCII characters , subsequent ASCII secure values embedded inside unsecure properties may fail to be mask...

PT-2026-85744

IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...

Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an information disclosure vulnerability (CVE-2026-78658)

Summary IBM DevOps Deploy / IBM UrbanCode Deploy UCD is susceptible to an information disclosure vulnerability when processing redacted property values. CVE-2026-78658. Vulnerability Details CVEID:CVE-2026-78658 DESCRIPTION: IBM DevOps Deploy / IBM UrbanCode Deploy UCD is susceptible to an...

ASCII smuggling crosses over from AI prompt injection to phishing evasion

In this article 1. What is ASCII smuggling? 2. Writing a practical ASCII-smuggling signature 3. What we observed: ASCII smuggling repurposed for phishing 4. What is known and what is new 5. Is there a detection gap? 6. Mitigation and protection guidance 7. References 8. Learn More Microsoft...