CVE-2026-8447

Technical details for CVE-2026-8447 are not yet publicly available. The entry has been reserved by an organization or individual pending announcement of a new security problem. Action: monitor for updates when details are publicized.

CVE-2026-12765

CVE-2026-12765 is currently reserved with no public technical details available. The affected product, root cause, and impact are not yet disclosed. Monitor for updates as the responsible party publicizes the vulnerability.

CVE-2026-17631

CVE-2026-17631 is currently in a reserved state with no public technical details available about the affected product, root cause, or impact. Monitor for updates when the reserving organization publishes the full disclosure.

CVE-2026-9138

CVE-2026-9138 is currently reserved with no public technical details available in the provided documents. Monitor for updates when the assigning organization publicizes the vulnerability.

CVE-2026-19303

CVE-2026-19303 is currently in reserved status with no public technical details available. The candidate is held for an organization or individual to disclose a new security problem. Monitor for updates once details are publicized.

CVE-2026-55848

MapFish Print (a component of the MapFish cartographic printing platform) is vulnerable to XML External Entity (XXE) injection in versions prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5. The vulnerability exists in the /api/print3/print endpoint, where an attacker-controlled GML layer URL...

CVE-2025-63607

Technical details for CVE-2025-63607 are not yet publicly available; the entry is reserved and awaiting publication. A single sighting reference exists but provides no concrete product, cause, or impact information. Monitor for updates.

CVE-2026-12763

CVE-2026-12763 is a reserved candidate with no public technical details yet. The affected product, vulnerability type, and impact remain unknown. Action: monitor for future updates when the details are published.

CVE-2026-19300

This CVE has been reserved as a placeholder; no technical details (affected product, root cause, or impact) are publicly available in the provided documents. Monitor for updates when the candidate is publicized.

CVE-2026-19302

CVE-2026-19302 is currently a reserved candidate with no public technical details available. The affected product, root cause, and impact remain unknown. Action: monitor for updates as details are expected to be published when the candidate is publicized.

CVE-2026-19299

CVE-2026-19299 is a reserved candidate with no public technical details yet. The underlying vulnerability, affected products, and impact remain unspecified. Monitor for updates once the reserving organization publicizes the issue.

CVE-2026-19306

CVE-2026-19306 is currently a reserved candidate with no public technical details available. No connected documents provide further information about affected products, root cause, or impact. Monitor for updates as the reserving organization publicizes the vulnerability.

CVE-2026-19298

CVE-2026-19298 is currently a reserved CVE candidate with no public technical details available in the provided documents. No affected product, root cause, or impact has been disclosed yet. Action: monitor for updates once the reserving organization publishes details.

CVE-2026-19301

CVE-2026-19301 is currently a reserved candidate with no public technical details. Affected product, root cause, and impact remain unspecified. Action: monitor for updates when the announcing organization publishes details.

CVE-2026-19304

CVE-2026-19304 has been reserved for a future security announcement. No technical details, affected products, or versions are currently available in the provided documents. Monitor for updates.

CVE-2026-12766

This CVE has been reserved but no technical details (affected product, root cause, or impact) are yet publicly available. Monitor for updates when the candidate is publicized.

CVE-2026-19305

CVE-2026-19305 is currently reserved with no publicly available technical details. Affected product, root cause, and impact are not yet disclosed. Monitor for updates when the candidate is publicized.

CVE-2026-55785

free5GC's AUSF component (prior to version 1.4.5) performs 5G-AKA cryptographic authentication comparisons in ue_authentication.go using non-constant-time helpers: strings.EqualFold for RES*/XRES* and bytes.Equal for AT_MAC/XMAC. Additionally, the expected XRES* value is logged at INFO level befo...

CVE-2026-55784

free5GC is an open-source 5G core network implementation. In versions 1.4.4 and earlier , the AUSF component stores per-subscriber authentication state in a global sync.Map keyed only by SUPI . Because each request unconditionally replaces the active context for that SUPI, an attacker with access...

CVE-2026-55779

Silverstripe Versioned (a versioning module for Silverstripe CMS) contains a stored XSS in RestoreAction::getRestoreMessage() (src/RestoreAction.php). The method builds ArchiveAdmin restore notifications rendered as CAST_HTML but inserts $restoredItem->Title, $restoredItem->URLSegment, $res...