CVE-2026-102523

A flaw was found in MariaDB. When converting table partitions, the database server does not properly encode user-specified partition names before using them in filesystem path construction. An authenticated database user can exploit this issue by providing a specially crafted partition name to...

CVE-2026-19912: Improper Input Validation

The Kaltura HTML5 player mwEmbed / html5lib contains an unauthenticated remote code execution vulnerability caused by unsafe data deserialization and unsanitized filesystem path construction. mwEmbedLoader.php accepts a user‑controlled ServiceUrl, whose response is passed to unserialize, and the...