CVE-2026-110196

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the administrator-only restriction and execute arbitrary code on the server by configuring a built-in code-execution component with attacker-supplied inputs...

EUVD-2026-113125

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-96198

A heap-based buffer overflow exists in Microsoft Edge (Chromium-based) , potentially allowing an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. Versions prior to 155.0.4283.62 are identified as affected. A fix is available in version 155.0.4283.62 or later. While the...

EUVD-2026-113124

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-96199

A heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is present in versions prior to 155.0.4283.62 , as indicated by associated security scanning data. While specific exploitation d...

EUVD-2026-113123

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-85897

A heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. The vulnerability has been observed in the wild, as noted in security bulletins. Versions prior to 155.0.4283.62 are identified as affected; remediation is available via...

EUVD-2026-113122

Double free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-85890

A double free vulnerability exists in Microsoft Edge (Chromium-based) , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is present in versions prior to 155.0.4283.62 . While specific technical root causes or internal components are not...

OPENSUSE-SU-2026:22184-1 Security update for rsyslog

This update for rsyslog fixes the following issues: - CVE-2026-19654: imptcp regex-framing remote denial of service bsc1271910. - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite bsc1272414. - CVE-2026-78002: RainerScript replace heap buffer overflow...

OPENSUSE-SU-2026:22183-1 Security update for python-Brotli

This update for python-Brotli fixes the following issues: - CVE-2025-6176: denial of service DoS due to a flaw in its brotli decompression bsc1252945. - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution bsc1287779. Update to 1.2.1: - decoder / encoder: added static...

CVE-2026-116723

FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in FlBMPImage::loadbmp that allows attackers to corrupt stack memory by supplying an oversized BMP colorsused field. Attackers can craft BMP or ICO files with colorsused above 256 to overflow the 768-byte colormap array,...

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

Overview agno is an Agno: a lightweight library for building Multi-Agent Systems Affected versions of this package are vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' via unsafe reflection in PandasTools, where model-controlled function names are...

brotli: Out-of-Bounds Write in Google Brotli Decoder

A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or...

Advisory ROSA-SA-2026-3326

Software: ruby4.0 OS: ROSA-CHROME Affected versions: = ruby4.0-4.0.9-2 Unaffected versions: ruby4.0-4.0.9-2 CVE-ID: CVE-2026-110264, CVE-2026-93577, CVE-2026-97229 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Allows an unauthenticated user to execute arbitrary code on the server CVE-STATUS: Vulnerabili...

Advisory ROSA-SA-2026-3325

Software: Ruby OS: ROSA-CHROME Affected versions: = ruby-3.2.10-17 Affected versions: ruby-3.2.10-17 CVE-ID: CVE-2026-110264, CVE-2026-93577, CVE-2026-97229 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Allows an unauthenticated user to execute arbitrary code on the server CVE-STATUS: Vulnerability has...

CVE-2026-119050

Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr. Attackers can use prompt injection to make the agent call pandas.readpickle on attacker-controlled pat...

Exploit for CVE-2026-98432

cve-2026-98432-audit !CVEhttps://img.shields.io/badge/CVE-...

Advisory ROSA-SA-2026-3324

Software: ruby3.2 OS: ROSA-CHROME Affected versions: = ruby3.2-3.2.10-3 Unaffected versions: ruby3.2-3.2.10-3 CVE-ID: CVE-2026-110264, CVE-2026-93577, CVE-2026-97229 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Allows an unauthenticated user to execute arbitrary code on the server CVE-STATUS:...

openjdk: Enhance Kerberos validation (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Java Generic Security Services JGSS component. An unauthenticated remote attacker could exploit this vulnerability by enticing a user to execute untrusted code within a sandboxed Java environment. Successful exploitation results in unauthorized information disclosure...