CVE-2026-46457

A flaw was found in Apache Camel NATS component. Due to improper input validation, a client capable of publishing to a NATS subject can inject arbitrary Camel control headers into the Camel Exchange. These injected headers can then influence the behavior of downstream producers in the route,...

CVE-2026-12522: Out-of-bounds Write

The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...

ROS-20260819-73-0050

The vulnerability in Tomcat is related to the implementation of incorrect control flow. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

ROS-20260819-73-0052

The vulnerability in Tomcat11 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

ROS-20260819-73-0057

The vulnerability in Tomcat10 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260819-73-0051

The vulnerability in Tomcat10 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260819-73-0056

The vulnerability in Tomcat is related to the implementation of incorrect control flow. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

ROS-20260819-73-0058

The vulnerability in Tomcat11 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

MobSF Vulnerable to Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction

Summary When extracting uploaded ZIP/APK files, MobSF checks if individual files exceed ZIPMAXUNCOMPRESSEDFILESIZE 400 MB and logs "Skipping" — but the code lacks a continue statement, so extraction proceeds anyway. The log message is misleading; the file is still written to disk. Verified Impact...

ANT-2026-C6E98TYX · liboqs · Uninitialized Function Pointer (CWE-824)

other high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-C6E98TYX: 01-liboqs-ntru-uninit-fn-ptr The NTRU constructors in...

ANT-2026-QRPT15J8 · duckdb · Stack-buffer-overflow

stack-buffer-overflow high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-QRPT15J8: Stack-buffer-overflow in...

ROS-20260817-73-0202

The vulnerability in uriparser is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Apache Tomcat Unauthorized Access

The vulnerability of the Apache Tomcat application server is related to the implementation of incorrect control flow management. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

SAEFUZZ: Smart Contract Vulnerability Detection through Statically Guided Evolutionary Fuzzing

The effectiveness of smart contract fuzzing depends strongly on whether generated transactions reach deep, state-dependent execution paths. Existing fuzzers often generate highly random call sequences, wasting executions on semantically invalid or low-value states and leaving vulnerabilities that...

SUSE CVE-2026-20713

Always-incorrect control flow implementation in some firmware for some IntelR XeonR processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via...

ROS-20260813-73-0022

The vulnerability in Gitea is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROLoad-PMP: Securing Sensitive Operations for Kernels and Bare-Metal Firmware

A common way for attackers to compromise victim systems is hijacking sensitive operations e.g., control-flow transfers with attacker-controlled inputs. Existing solutions in general only protect parts of these targets and have high performance overheads, which are impractical and hard to deploy o...

BASM (Broken Authentication & Session Management) at Apache Tomcat Dependency in Bamboo Data Center

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-53404 was introduced in 10.1.1 and later of Bamboo Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 7.3 and a CVSS Vector of...

BASM (Broken Authentication & Session Management) Apache Tomcat Dependency in Confluence Data Center

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-53404 was introduced in versions 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CV...

BASM (Broken Authentication & Session Management) Apache Tomcat Dependency in Jira Service Management Data Center and Server

This is a vulnerability in a non-Atlassian Jira Service Management dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-55276 was introduced in...