PT-2026-27261

Name of the Vulnerable Software and Affected Versions Active Support versions prior to 8.1.2.1 Active Support versions prior to 8.0.4.1 Active Support versions prior to 7.2.3.1 Description Active Support number helpers are susceptible to a denial-of-service condition. The number helpers accept...

PT-2026-27176

Name of the Vulnerable Software and Affected Versions cbor2 versions prior to 5.9.0 Description The cbor2 library is susceptible to a Denial of Service DoS attack due to uncontrolled recursion when decoding deeply nested CBOR structures. This affects both the pure Python implementation and the C...

PT-2026-27283

Name of the Vulnerable Software and Affected Versions Roadiz versions prior to 2.7.9 Roadiz versions prior to 2.6.28 Roadiz versions prior to 2.5.44 Roadiz versions prior to 2.3.42 Description Roadiz is a polymorphic content management system based on a node system. A flaw in the...

PT-2026-27271

WPGraphQL provides a GraphQL API for WordPress sites. Prior to version 2.10.0, an authorization flaw in updateComment allows an authenticated low-privileged user including a custom role with zero capabilities to change moderation status of their own comment for example to APPROVE without the...

PT-2026-27216

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the /api/v1/comment/create endpoint has an unauthorized access vulnerability, allowing attackers to post comments on any note including private notes without authorization, even if the note has not been publicly shared. The...

Exploit for Cross-site Scripting in Codex-Themes Thegem

TheGem-Theme-Exploit-Chain-One-Click-Full-Compromise-Subscribe...

pcapplusplus:FuzzTargetNg: Use-of-uninitialized-value in pcpp::SomeIpSdEntry::SomeIpSdEntry

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5226311319879680 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

assimp:assimp_fuzzer: Use-of-uninitialized-value in Assimp::MDLImporter::ReplaceTextureWithColor

Detailed Report: https://oss-fuzz.com/testcase?key=4877139169312768 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Assimp::MDLImporter::ReplaceTextureWithColor...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in ___interceptor_strncpy

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=4834546616172544 Project: ntopng Fuzzing Engine: libFuzzer Fuzz Target: fuzzdissectpacket Job Type: libfuzzerasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address:...

libvips:vips_fuzzer: Heap-use-after-free in vips_image_get_typeof

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=4571363267641344 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: vipsfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

wireshark:fuzzshark_ip: Heap-use-after-free in dissect_ttl_segmented_message_entry

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=6636477663739904 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

xnu:net_fuzzer: Stack-buffer-overflow in strlcpy

Detailed Report: https://oss-fuzz.com/testcase?key=6416180201193472 Project: xnu Fuzzing Engine: honggfuzz Fuzz Target: netfuzzer Job Type: honggfuzzasanxnu Platform Id: linux Crash Type: Stack-buffer-overflow READ 5 Crash Address: 0x78d83eed110c Crash State: strlcpy sosettcdbg sosetoptlock...

libjxl:djxl_fuzzer: Use-of-uninitialized-value in jxl::N_SSE2::StrengthEvalLut::operator

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5106827745624064 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzermsanlibjxl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

c-blosc2:decompress_frame_fuzzer: Use-of-uninitialized-value in get_coffset

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=4998749188587520 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in frame_to_schunk

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=4600686351548416 Project: c-blosc2 Fuzzing Engine: afl Fuzz Target: decompressframefuzzer Job Type: aflasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

PT-2026-27013

A flaw has been found in Linksys MR9600 2.0.6.206937. Affected is the function smartConnectConfigure of the file SmartConnect.lua. Executing a manipulation of the argument configApSsid/configApPassphrase/srpLogin/srpPassword can lead to os command injection. The attack may be launched remotely. T...

PT-2026-27016

Name of the Vulnerable Software and Affected Versions Tenda A15 version 15.13.07.13 Description A stack-based buffer overflow exists in the UploadCfg function of the /cgi-bin/UploadCfg file. The issue is triggered by manipulating the File argument. This allows for remote exploitation. The exploit...

gpac:fuzz_probe_analyze: Stack-buffer-overflow in gf_text_process_ssa

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6167396904927232 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x758481a3a820...

graphicsmagick:coder_HEIC_fuzzer: Use-of-uninitialized-value in residual_coding

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5897318355501056 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderHEICfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

libraw:libraw_raf_fuzzer: Use-of-uninitialized-value in LibRaw::parse_rollei

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4832321084915712 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawraffuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...