EUVD-2026-101363

A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service via a malformed RSVP Path message received on an EVPL LMP control channel...

CVE-2026-102000

A Reachable Assertion vulnerability exists in the rpd process of Juniper Networks Junos OS and Junos OS Evolved . An adjacent unauthenticated attacker can exploit this flaw by sending LDP control traffic to cause a denial of service (DoS) crash. No specific patch versions or exploits are provided...

EUVD-2026-101330

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent unauthenticated attacker to cause a denial of service via LDP control traffic...

CVE-2026-102070

The Two-Way Active Measurement Protocol (TWAMP) client in Juniper Networks Junos OS is vulnerable to a Reachable Assertion vulnerability (CWE-617). An unauthenticated network-based attacker can cause rmopd service disruption by sending a specific TCP packet when TWAMP-Control is used. This flaw r...

CVE-2026-102070 Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used

A Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol TWAMP client of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause rmopd service disruption via a specific TCP packet...

CVE-2026-103994 Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon vgd of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution...

CVE-2026-86562

A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler...

CVE-2026-86562 Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)

A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler...

EUVD-2026-101421

A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler...

CVE-2026-86562

A Time-of-Check to Time-of-Use (TOCTOU) double-fetch vulnerability exists in the DPDK lib/vhost component. Specifically, a double-fetch of control-queue descriptors in the VDUSE control-queue handler allows for a heap buffer overflow containing attacker-controlled content. This flaw is categorize...

WordPress AI Engine Authorization Issue Vulnerability

WordPress AI Engine versions 3.8.3 and earlier have a licensing issue vulnerability. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...

WordPress Ninja Forms Signature Contract Add-On Authorization Issue Vulnerability

WordPress Ninja Forms’ Signature Contract Add-On versions 3.2.5 and earlier have a vulnerability related to authorization. This vulnerability stems from a lack of proper permission authorization, which may lead to improper configuration of access control security levels being exploited...

Cole Medin Archon Authorization Issue Vulnerability

Cole Medin Archon versions 0.2.13 to 0.11.1 have an authorization issue vulnerability. This vulnerability stems from the lack of authentication. Unauthenticated attackers can access the control APIs bound to 0.0.0.0/api/, potentially allowing them to execute commands on the host as an Archon user...

EnergizeLab AI Station Trust Management Vulnerability

EnergizeLab AI Station has a trust management vulnerability. This vulnerability stems from the firmware image enabling SSH by default and containing a default root credential. This allows attackers with network access to log in as root and gain full control over the device...

WordPress Strong Testimonials: Authorization Issue Vulnerability

WordPress versions 3.3.12 and earlier have a vulnerability related to authorization. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit incorrectly configured access control levels...

Eclipse Jetty authorization issue vulnerability

Eclipse Jetty has an authorization issue vulnerability. This occurs when web.xml defines multiple url-patterns for a servlet, and security-constraint applies only to some of these url-patterns. In such cases, the Jakarta specification’s rules governing authoritative url-patterns are not enforced ...

WordPress Flexible Quantity Authorization Issue Vulnerability

WordPress versions 2.3.23 and earlier have a vulnerability related to authorization. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...

HPE NonStop Kernel permission and access control issue vulnerability

The HPE NonStop Kernel T9050L02^BBP version and T9050L02^BBS versions contain a vulnerability related to permission escalation and access control. This vulnerability may allow users to gain access to privileged or unmapped data within the kernel space...

WordPress Knowledge Base: Authorization Issues Vulnerabilities

WordPress Knowledge Base 3.2.0 and earlier versions have a vulnerability related to authorization. This vulnerability stems from insufficient authorization settings, allowing attackers to exploit incorrect access control security levels to gain access...

WordPress PlanetStudio Payment Gateway Authorization Issue Vulnerability

WordPress PlanetStudio Payment Gateway 1.3.3 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the lack of authorization and improper configuration of access control security levels. It is possible for attackers to exploit this issue by using incorrectl...