CVE-2026-24254

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosu...

CVE-2026-24254

CVE-2026-24254 affects NVIDIA Dynamo for Linux in the multimodal serving topology. The vulnerability permits an out-of-bounds write, with potential consequences including code execution, privilege escalation, data tampering, denial of service, and information disclosure. Affected software/version...

CVE-2026-69264 Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation

Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly into a Python source-code template that is then executed by Pyodide. Because Pyodide is loaded with the default js bridge to globalThis, which on Node.js exposes eval and dynamic import,...

CVE-2026-69264

Flowise CSVAgent is affected. Prior to 3.1.3, an attacker-controlled segment of csvFile’s data URI is interpolated into a Python source-template executed by Pyodide; due to the default js bridge to globalThis in Node.js, this can be passed to js.eval and dynamically import Node built-ins (e.g., f...

CVE-2026-24253

NVIDIA Dynamo for Linux contains CVE-2026-24253, a vulnerability that could allow an attacker to cause an out-of-bounds write, potentially leading to denial of service and data tampering. The NVIDIA security bulletin lists this CVE under the NVIDIA Dynamo - August 2026 update, with remediation vi...

EUVD-2026-52800

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service and data tampering...

CVE-2026-24253

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service and data tampering...

EUVD-2026-52799

NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vulnerability might lead to denial of...

CVE-2026-69255

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the CSVAgent in packages/components/nodes/agents/CSVAgent/CSVAgent.ts extracted attacker-controlled CSV data with file.split','.pop and interpolated it directly into executable Python as...

CVE-2026-64630

A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...

CVE-2026-63455

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

CVE-2026-18785 o6 open62541 client_types_custom.c UA_Client_getRemoteDataTypes use after free

A vulnerability was determined in o6 open62541 ca356b088ada7dee824d1b4acd07c1ff07ce242b. Impacted is the function UAClientgetRemoteDataTypes of the file examples/customdatatype/clienttypescustom.c. Executing a manipulation can lead to use after free. It is possible to launch the attack on the loc...

CVE-2026-18785

The CVE-2026-18785 issue affects the open62541 project, specifically the UA_Client_getRemoteDataTypes function in examples/custom_datatype/client_types_custom.c. A manipulation can lead to a use-after-free condition, with exploitation possible on the local host. Public disclosure of the exploit i...

CVE-2026-63456

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

CVE-2026-63456

The CVE-2026-63456 entry describes multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator that allow an unauthenticated remote attacker to bypass web authentication and access system functions. The attacker could view and modify potentially sensitive information ...

EUVD-2026-52791

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

CVE-2026-63455 Authentication bypass via spoofed HTTP headers Orchestrator REST API

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

EUVD-2026-52790

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

CVE-2026-63455

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is affected by an unsafe deserialization and exposure of sensitive information (CVE-2026-14512, CVE-2026-14528)

Summary IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is affected by an unsafe deserialization and exposure of sensitive information. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Version...