openjdk: Enhance font rendering (Oracle CPU 2026-10)

A flaw was found in OpenJDK's 2D component. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to exposed application programming interfaces APIs, such as through a web service or application that processes graphics data. A successful attack...

CVE-2026-93434

An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting a specially crafted request...

CVE-2026-93864

A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution as a low-privileged system process to overwrite arbitrary files with root privileges, and to tamper with firewall IP set data, by planting a crafted file system object and...

rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert

In rustls 0.23.44 and 0.23.45, application data that a client buffers before the handshake completes is sent to the server even when the server rejects Encrypted Client Hello ECH. When the server rejects ECH, the client completes the handshake with the outer ClientHello and authenticates the serv...

EUVD-2026-111152

An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting a specially crafted request...

CVE-2026-93864

A link following vulnerability exists in the WatchGuard Fireware OS firewall daemon. A local attacker with code execution as a low-privileged system process can overwrite arbitrary files with root privileges and tamper with firewall IP set data. This is achieved by planting a crafted file system ...

CVE-2026-93864 Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root

A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution as a low-privileged system process to overwrite arbitrary files with root privileges, and to tamper with firewall IP set data, by planting a crafted file system object and...

GHSA-763V-5PJM-FX36 Strands Agents: Default FileSessionManager storage is world-readable on shared systems

There is a local confidentiality issue in the default FileSessionManager storage behavior. By default it writes session data under /tmp/strands/sessions and relies on the process umask for directory and file permissions. On systems using the common umask 022, the session directories are 0755 and...

Strands Agents: Default FileSessionManager storage is world-readable on shared systems

There is a local confidentiality issue in the default FileSessionManager storage behavior. By default it writes session data under /tmp/strands/sessions and relies on the process umask for directory and file permissions. On systems using the common umask 022, the session directories are 0755 and...

EUVD-2026-108207

Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter escape - full graph wipe from ingested-document content...

CVE-2026-117604

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized that allows unauthenticated visitors to read /clockwork/ profiler data via a loopback REMOTEADDR fallback. Behind a same-host reverse proxy, remote requests appear as loopback, letting...

EUVD-2026-111073

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited ...

CVE-2026-34157

Wails v2 provides "BindingsAllowedOrigins" to restrict which web origins can invoke Go backend methods via IPC. The wildcard pattern matching in "wildcardPatternToRegex" converts "" to "." without anchoring subcomponents, allowing suffix-matched origins to bypass the restriction. An attacker who...

CVE-2026-33944

A SQL Injection vulnerability exists in the Third Party Company update functionality of Dolibarr ERP/CRM. The "localtax1value" parameter "lt1" is concatenated directly into an SQL UPDATE statement in "societe/class/societe.class.php" at line 1672 without any escaping, type casting, or parameteriz...

CVE-2026-48705

An unauthenticated remote attacker can crash a running MONAILabel server or silently corrupt its medical AI inference results by uploading a single crafted DICOM file 132 KB via the REST API. The vulnerability stems from pydicom's lack of validation for Decimal String DS and Integer String IS DIC...

atxm (0.3.0), cli-progress (1.9.0) +7 more potentially affected by CVE-2026-83813 via twisted (24.3.0)

twisted PYPI version 24.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - atxm 0.3.0 - cli-progress 1.9.0 - ctrader-open-api =0.9.2, =0.2.8, =4.3.0, =7.3.0, =1.2.5, =0.3.0b0, =2.3.0rc39, =2.3.0rc40 Source cves:...

EUVD-2026-90681

Ghost: Authorization Bypass in Comment Like Feature...

CVE-2026-117604 Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized that allows unauthenticated visitors to read /clockwork/ profiler data via a loopback REMOTEADDR fallback. Behind a same-host reverse proxy, remote requests appear as loopback, letting...

EUVD-2026-110928

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized that allows unauthenticated visitors to read /clockwork/ profiler data via a loopback REMOTEADDR fallback. Behind a same-host reverse proxy, remote requests appear as loopback, letting...

CVE-2026-117604

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized that allows unauthenticated visitors to read /clockwork/ profiler data via a loopback REMOTEADDR fallback. Behind a same-host reverse proxy, remote requests appear as loopback, letting...