TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38408)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the delSmartQosCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST...

IBM Langflow OSS Code Execution Vulnerability (CNVD-2026-32373)

IBM Langflow OSS is the open-source version of Langflow that IBM officially integrates and promotes. IBM Langflow OSS has a code execution vulnerability. This vulnerability stems from improper handling of HTTP requests, allowing attackers to execute arbitrary code on the server by exploiting this...

IBM Langflow OSS authorization issue vulnerability (CNVD-2026-31200)

IBM Langflow OSS is an open-source low-code visualization AI workflow building tool developed by IBM. It enables developers to quickly build, deploy, and iterate AI agents and RAG applications by dragging and dropping components. Additionally, it supports deep customization using Python to...

IBM App Connect Enterprise information leakage vulnerability (CNVD-2026-31544)

IBM App Connect Enterprise is an enterprise-level application connection platform used for system integration. It supports connections and conversions between applications, data, and APIs. There is an information leakage vulnerability in IBM App Connect Enterprise. This vulnerability stems from t...

IBM App Connect Enterprise path traversal vulnerability (CNVD-2026-31543)

IBM App Connect Enterprise is an enterprise-level integration platform, primarily used for connecting different applications, data, and APIs to build integrated processes. IBM App Connect Enterprise has a path traversal vulnerability. This vulnerability stems from the failure to properly validate...

Apache Traffic Server buffer overflow vulnerability (CNVD-2026-30698)

Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. Apache Traffic Server has a buffer overflow vulnerability, which stems from improper handling of input by the urisigning and urlsig plugins. Attackers can exploit this...

Apache Traffic Server resource management error vulnerability (CNVD-2026-30704)

Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. There is a resource management vulnerability in Apache Traffic Server, which stems from use-after-free and check-time/usage time errors during remap configuration processing...

Apache Traffic Server buffer overflow vulnerability (CNVD-2026-30702)

Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. There is a buffer overflow vulnerability in Apache Traffic Server, which stems from out-of-bounds writes, path traversal, and memory error references within the Cripts...

Adobe Bridge out-of-bounds write vulnerability (CNVD-2026-30874)

Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has a out-of-bounds write vulnerability, which allows attackers to execute arbitrary code within the context of the current user...

Apache Traffic Server resource management error vulnerability (CNVD-2026-30694)

Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. There is a resource management vulnerability in Apache Traffic Server, which stems from improper handling of object lifecycle in the intercept plugin. Currently, no detailed...

Apache Traffic Server buffer overflow vulnerability (CNVD-2026-30692)

Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. Apache Traffic Server has a buffer overflow vulnerability, which stems from the Multiplexer plugin failing to properly handle upstream inputs. Attackers can exploit this...

Adobe Bridge permissions and access control issues (CNVD-2026-30877)

Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has vulnerabilities related to permission management and access control. These vulnerabilities stem from issues with unsanable search paths, and attackers can exploit these...

Adobe Bridge authorization issue vulnerability (CNVD-2026-30875)

Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has vulnerabilities related to authorization; attackers can exploit these vulnerabilities to gain unauthorized read/write permissions...

Adobe Bridge out-of-bounds write vulnerability (CNVD-2026-30873)

Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has a out-of-bounds write vulnerability, which allows attackers to execute arbitrary code within the context of the current user...

IBM WebSphere Application Server Liberty resource management error vulnerability (CNVD-2026-31547)

IBM WebSphere Application Server Liberty is an application server runtime environment developed by American company IBM. There is a resource management vulnerability in IBM WebSphere Application Server Liberty, which stems from a flaw in the restConnector-2.0 feature when it is enabled. This...

Apache Traffic Server resource management error vulnerability (CNVD-2026-30697)

Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. There is a resource management vulnerability in Apache Traffic Server, which stems from the improper handling of initialization, transform contexts, and per-instance state by...

IBM WebSphere Application Server deserialization vulnerability (CNVD-2026-31549)

IBM WebSphere Application Server is an application server product from IBM. There is a security vulnerability in IBM WebSphere Application Server. This vulnerability stems from the lack of adequate security checks during the serialization data processing process, allowing unauthenticated users to...

Apache Syncope permissions and access control vulnerabilities (CNVD-2026-30665)

Apache Syncope is an open-source digital identity management system, primarily used for authentication, authorization, and account management. There are security vulnerabilities in Apache Syncope. These vulnerabilities stem from insufficient protection of the Groovy security sandbox, which leads ...

Google Chrome buffer overflow vulnerability (CNVD-2026-30666)

Google Chrome is a web browser developed by Google, offering fast and secure browsing experiences. Google Chrome has a security vulnerability that stems from the Codecs component’s failure to properly handle boundary conditions. Attackers can exploit this vulnerability to achieve sandbox escape...

Apache Syncope SQL Injection Vulnerability (CNVD-2026-30664)

Apache Syncope is an open-source identity management system, primarily used for managing the identity lifecycle of enterprise-level users and devices. Apache Syncope has a SQL injection vulnerability. This vulnerability stems from improper handling of the sort parameter in the Audit Events search...