EUVD-2026-71492

IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...

CVE-2026-14350

IBM Cloud Pak for Data System (CPDS 1.0), versions 11.3.0.2 through Interim Fix 1 , is vulnerable to log injection (CWE-117) caused by improper neutralization of special elements when writing to log files. An unauthenticated, remote attacker can inject data into log messages, resulting in low int...

CVE-2026-75168

An issue in the ugw-editfile method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 allows a remote authenticated user with the low-privileged Standard role to write arbitrary content to files within /uxx/config/ and /ugw/config/...

CVE-2026-19303

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete arbitrary local files or directories due to improper limitation of a pathname to a restricted directory...

CVE-2026-19306

IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from the server filesystem — including server secret material secretkey, JWT signing keys, the application database, /proc/self/environ, and other tenants' upload directories — by supplying absolute pat...

CVE-2026-80806

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...

CVE-2026-85690

Plandex 2.2.1 is vulnerable to a path traversal in the ApplyFiles function, which allows files to be written outside the project directory. Attackers can influence model output through poisoned repository files or attacker-controlled context to write to sensitive locations such as shell rc or cro...

CVE-2026-85668

Xinference (v3.x, affected commit 4a94832, specifically v3.3.0) contains an unauthenticated arbitrary-path file read vulnerability in the POST /v1/models/llm/auto-register endpoint. The endpoint accepts a caller-supplied model_path parameter without authentication or path confinement, reads and p...

EUVD-2026-71222

firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawlparse tool that accepts unconstrained filePath arguments without directory containment validation. Attackers can supply absolute paths or directory traversal sequences to read sensitive files like...

MAL-2026-15927 Malicious code in qoeoe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e6c0c50dfb4a99c6e8b2ca640cadd33877e737479d8739d5db5b39271bc967 The package ships a single module qoeoe/starts.py whose entire body is a lambda that base64-decodes a reversed 108 KB string literal and passes the...

Malicious code in astlsi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222a62d677f99497f67476b9cc87886c05fb2a08827430934fb518798abb8339 The package presents itself as a proxy health-check utility, but its exported starts function walks /storage/emulated/0/ Android user-storage, collec...

CVE-2026-82194

WPvivid — Backup, Migration & Staging for WordPress, versions prior to 0.9.134 , fails to validate a user-supplied path before passing it to a file deletion routine . An authenticated user with administrator privileges can exploit this path traversal to delete arbitrary files on the server , incl...

CVE-2026-79631 WPFunnels < 3.13.0 - Unauthenticated Order and Opt-In PII Disclosure via Web-Accessible Log Files

The WPFunnels WordPress plugin before 3.13.0 does not restrict access to the log files it writes to a predictable location under the public uploads directory, allowing unauthenticated users to download customer order details and opt-in form submissions when logging is enabled...

CVE-2026-79631

The WPFunnels WordPress plugin (versions before 3.13.0 ) fails to restrict access to log files it writes to a predictable path under the public uploads directory. When logging is enabled, unauthenticated users can download these files, exposing customer order details and opt-in form submissions (...

CVE-2026-71626

Invoice Ninja v5.13.24 is affected by a vulnerability in its webhook API components (StoreWebhookRequest.php , UpdateWebhookRequest.php , and WebhookSingle.php ) that allows a remote, unauthenticated attacker to obtain sensitive information. The vendor's advisory classifies the issue as SSRF via ...

PT-2026-85647

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4 set inode flagsinode, init=true in ext4 new inode is made before EXT4 INODE ENCRYPT is set. As a result, it c...

PT-2026-85554

excel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCEL FILES PATH is unset, allowing attackers to read and write arbitrary files. Attackers can supply unchecked file paths to read and write tools to access any file accessible to the process...

CVE-2026-85456

MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing attackers to write files outside the split directory. Attackers can supply crafted alog files with backslash sequences in variable names to escape the output directory and...

CVE-2026-9736

IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...

CVE-2026-9736 Vulnerabilities exists in IBM Netezza Software

IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...