CVE-2026-86308: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DBDEBUG results in...

cakephp/debug_kit: MailPreview contains unsafe reflection

Impact The MailPreview feature of debugkit is vulnerable to arbitrary constructor execution. For an application to be vulnerable the following conditions must be true: 1. debug mode must be enabled. 2. The hostname must match a 'local' domain or be in an allowlist. Patches 5.2.4 and 4.10.3 contai...

CVE-2026-77357

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbounded loop depends on the user-supplied counter parameter, allowing an unauthenticated attacker to hold worker threads...

CVE-2026-77357 Mesop: DoS in /hot-reload endpoint allows unauthenticated attacker to exhaust worker threads and crash the server

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbounded loop depends on the user-supplied counter parameter, allowing an unauthenticated attacker to hold worker threads...

EUVD-2026-66114

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbounded loop depends on the user-supplied counter parameter, allowing an unauthenticated attacker to hold worker threads...

CVE-2026-77357 Mesop: DoS in /hot-reload endpoint allows unauthenticated attacker to exhaust worker threads and crash the server

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbounded loop depends on the user-supplied counter parameter, allowing an unauthenticated attacker to hold worker threads...

CVE-2026-77357

Mesop is a Python-based UI framework for building web applications. Prior to 1.3.3 , applications running in debug mode expose a GET /hot-reload endpoint containing an unbounded loop that depends on a user-supplied counter parameter. An unauthenticated attacker can send a request with a high coun...

CVE-2026-77357 Mesop: DoS in /hot-reload endpoint allows unauthenticated attacker to exhaust worker threads and crash the server

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbounded loop depends on the user-supplied counter parameter, allowing an unauthenticated attacker to hold worker threads...

CVE-2026-77357: Uncontrolled Resource Consumption

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbounded loop depends on the user-supplied counter parameter, allowing an unauthenticated attacker to hold worker threads...

PT-2026-81850

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbounded loop depends on the user-supplied counter parameter, allowing an unauthenticated attacker to hold worker threads...

CVE-2026-70667

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:16+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-f3qq-49m6-rw8f 2026-08-19 08:31:37+00:00| seen| https://gist.github.com/alon710/db3f4019c2372dbb6dfede560d6093f7...

Linux Distros Unpatched Vulnerability : CVE-2026-68438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d smp: Improve...

SUSE CVE-2026-68438

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

DEBIAN-CVE-2026-68438

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

CVE-2026-68438

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

EUVD-2026-57046

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

CVE-2026-68438 smp: Make CSD lock acquisition atomic for debug mode

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

CVE-2026-68438

The CVE-2026-68438 entry describes a Linux kernel issue in smp_call_function_single() related to the CSD lock diagnostic path. When CSD lock debugging is enabled, the patch makes CSD_FLAG_LOCK acquisition atomic via try_cmpxchg_acquire(), turning the previously non-atomic read-modify-write into a...

CVE-2026-68438

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

PT-2026-70952

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smp call function single CSD-lock diagnostics" changed smp call function single so that, when CSD lock debugging is enabled, async !wait calls...