com.hazelcast.jet:hazelcast-jet (0.3), com.hazelcast.jet:hazelcast-jet-client-protocol (0.3) +6 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.8-rc1)

com.hazelcast:hazelcast MAVEN version 3.8-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet 0.3 - com.hazelcast.jet:hazelcast-jet-client-protocol 0.3 -...

com.ethlo.keyvalue:keyvalue-cache (>=1.0.0, <=1.1.2), com.ethlo.keyvalue:keyvalue-sync (>=1.0.0, <=1.1.2) +33 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.12.3)

com.hazelcast:hazelcast MAVEN version 3.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.ethlo.keyvalue:keyvalue-cache =1.0.0, =1.0.0, =3.2.11, =3.3.6 and more Source cves: CVE-2026-107726 Source...

com.hazelcast.jet:hazelcast-jet-client-protocol (0.6), com.hazelcast.jet:hazelcast-jet-core (0.6) +4 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.10-beta-2)

com.hazelcast:hazelcast MAVEN version 3.10-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet-client-protocol 0.6 - com.hazelcast.jet:hazelcast-jet-core 0.6 -...

com.hazelcast.jet:hazelcast-jet (0.3), com.hazelcast.jet:hazelcast-jet-client-protocol (0.3) +6 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.8-rc1)

com.hazelcast:hazelcast MAVEN version 3.8-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet 0.3 - com.hazelcast.jet:hazelcast-jet-client-protocol 0.3 -...

Incorrect Behavior Order: Validate Before Canonicalize

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Behavior Order: Validate Before Canonicalize via incorrect classification of alternate file: URL spellings in the Agent Client Protocol ACP handler. Alternate but valid file: UR...

EUVD-2026-87503

OpenClaw is a coding agent distributed as the npm package openclaw. In affected versions 2026.7.1 through 2026.7.2, alternate but valid file: URL spellings supplied over the Agent Client Protocol ACP were treated as relative paths and were incorrectly classified as reads scoped to the session...

CVE-2026-100547

OpenClaw is a coding agent distributed as the npm package "openclaw". In affected versions 2026.7.1 through 2026.7.2, alternate but valid "file:" URL spellings supplied over the Agent Client Protocol ACP were treated as relative paths and were incorrectly classified as reads scoped to the session...

CVE-2026-100547

The OpenClaw coding agent (npm package openclaw) versions 2026.7.1 through 2026.7.2 are vulnerable to a local file disclosure flaw. The root cause is that alternate but valid file: URL spellings supplied over the Agent Client Protocol (ACP) are incorrectly treated as relative paths and classified...

CVE-2026-100547 OpenClaw before 2026.8.1 Authentication Bypass via File URL

OpenClaw is a coding agent distributed as the npm package openclaw. In affected versions 2026.7.1 through 2026.7.2, alternate but valid file: URL spellings supplied over the Agent Client Protocol ACP were treated as relative paths and were incorrectly classified as reads scoped to the session...

CVE-2026-100547 OpenClaw before 2026.8.1 Authentication Bypass via File URL

OpenClaw is a coding agent distributed as the npm package openclaw. In affected versions 2026.7.1 through 2026.7.2, alternate but valid file: URL spellings supplied over the Agent Client Protocol ACP were treated as relative paths and were incorrectly classified as reads scoped to the session...

CVE-2026-100547: Incorrect Behavior Order: Validate Before Canonicalize

OpenClaw is a coding agent distributed as the npm package openclaw. In affected versions 2026.7.1 through 2026.7.2, alternate but valid file: URL spellings supplied over the Agent Client Protocol ACP were treated as relative paths and were incorrectly classified as reads scoped to the session...

PT-2026-99184

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.7.1 through 2026.7.2 Description OpenClaw, distributed as the npm package openclaw, contains an issue where alternate but valid file: URL spellings supplied over the Agent Client Protocol ACP are treated as relative path...

Cisco IOS XMCP DoS

The vulnerability of the Extensible Messaging Client Protocol XMCP in Cisco IOS and Cisco IOS XE operating systems lies in the lack of input validation for cyclic operations. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco IOS XE Software Extensible Messaging Client Protocol DoS (cisco-sa-ios-xmcp-thbAr34t)

According to its self-reported version, Cisco IOS-XE Software is affected by a denial of service vulnerability. A flaw exists in the Extensible Messaging Client Protocol XMCP due to improper handling of malformed XMCP packets. An unauthenticated, remote attacker can exploit this issue, via a...

EUVD-2026-53467

A vulnerability in the Extensible Messaging Client Protocol XMCP, also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability ...

CVE-2026-20301 Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability

A vulnerability in the Extensible Messaging Client Protocol XMCP, also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability ...

CVE-2026-20301

A vulnerability in the Extensible Messaging Client Protocol XMCP, also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability ...

Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability

A vulnerability in the Extensible Messaging Client Protocol XMCP, also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability ...

CVE-2026-20301: Unchecked Input for Loop Condition

A vulnerability in the Extensible Messaging Client Protocol XMCP, also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability ...

Keycloak Generates an Error Message Containing Sensitive Information

A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted SOAP requests to the SAML ECP Security Assertion Markup Language Enhanced Client or Proxy endpoint with varying client IDs. By observing distinct faultstrings in the...