EUVD-2026-102135

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, src/www/systemadvancedadmin.php reads certificate records into $acert but omits that array from legacyhtmlescapeformdata before rendering each certificate descr value in the SSL Certificate selector. The...

CVE-2026-57568: Improper Neutralization of Input During Web Page Generation

Lychee is a free, open-source photo-management tool. Prior to 7.6.0, Lychee permits an authenticated user with album-edit permissions to store a javascript URI in an album or photo Markdown description because config/markdown.php enables allowunsafelinks...

CVE-2026-111344: Authorization Bypass Through User-Controlled Key

APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controlled nodeId. Attackers can request GET /node/nodeId/description, which skips space membership and node permission check...

DEBIAN-CVE-2026-53615

util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, parsedosextended in libblkid/src/partitions/dos.c computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who...

DEBIAN-CVE-2026-53614

util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID mount utility reads the attacker-controlled LIBMOUNTFORCEMOUNT2 environment variable with getenv, allowing a local low-privileged user to force the non-atomic legacy...

DEBIAN-CVE-2026-84471

The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7alpha1 through 2.7.7 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry...

DEBIAN-CVE-2026-53612

util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID mount utility's hookowner.c post-mount hook performs path-based chmod and lchown operations on a previously validated mount target. A local low-privileged user authorized by a...

CVE-2026-63171

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious script by submitting a crafted forum category description containing a double-quote character that breaks out of an HTML input value attribute...

CVE-2026-63171 Omnispace Agora Project < 26.10.0 Stored XSS via Category Description

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious script by submitting a crafted forum category description containing a double-quote character that breaks out of an HTML input value attribute...

CVE-2026-63171

Omnispace Agora Project versions prior to 26.10.0 are susceptible to a stored cross-site scripting (XSS) vulnerability. The root cause lies in the HTMLPurifier configuration , which preserves double-quote characters, allowing authenticated attackers to submit a crafted forum category description ...

CVE-2026-63171 Omnispace Agora Project < 26.10.0 Stored XSS via Category Description

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious script by submitting a crafted forum category description containing a double-quote character that breaks out of an HTML input value attribute...

BIT-ELASTICSEARCH-2026-103005 Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service

Memory Allocation with Excessive Size Value CWE-789 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user with connector management privileges could cause the cluster to allocate an uncontrolled amount of memory when connector resources with an...

CVE-2026-108942 philz1337x clarity-upscaler Extra Networks Card Rendering ui_extra_networks.py create_html_for_item cross site scripting

A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impacts the function createhtmlforitem of the file modules/uiextranetworks.py of the component Extra Networks Card Rendering. The manipulation of the argument Description result...

PT-2026-111336

Memory Allocation with Excessive Size Value CWE-789 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user with connector management privileges could cause the cluster to allocate an uncontrolled amount of memory when connector resources with an...

CVE-2026-63171: Improper Neutralization of Input During Web Page Generation

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious script by submitting a crafted forum category description containing a double-quote character that breaks out of an HTML input value attribute...

CVE-2026-109352

LibreNMS versions prior to 26.9.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability located in includes/html/pages/device/wireless.inc.php. The root cause is the lack of proper output escaping when the application echoes sensor_descr values, which are populated from SNMP Display...

CVE-2026-108094

A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local attacker who can run a malicious Wayland client can destroy a wpimagedescriptionv1 resource while an asynchronous ICC file read is still in progress. When the read completes, the composit...

CVE-2026-108094

A use-after-free vulnerability exists in mutter within the Wayland color-management ICC image-description path. A local attacker running a malicious Wayland client can trigger this by destroying a wp_image_description_v1 resource while an asynchronous ICC file read is still in progress. Upon comp...

Elasticsearch 8.12.x < 8.19.23 / 9.3.x / 9.3.8 / 9.4.0 < 9.4.8 / 9.5.x < 9.5.5 DoS (ESA-2026-195)

The version of Elasticsearch installed on the remote host is prior to 8.19.23, 9.4.8, or 9.5.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-195 advisory. - Memory Allocation with Excessive Size Value CWE-789 in Elasticsearch can lead to denial of service via...

CVE-2026-107391

music-metadata is a metadata parser for audio and video media files. In the public development revision introduced after 11.14.0, a development-branch regression in the MP4 stsd sample-description parser allows an attacker-controlled sample-entry size of zero to prevent the StsdAtom.get cursor fr...