CVE-2026-56121_exploit

CVE-2026-56121 — Feast 레지스트리 인증 없는 RCE dill.loads Feast 피처 스토어의 레지스트리 gRPC 서버 에서 인증 없는 원격 코드 실행 취약점입니다. ApplyFeatureView RPC는 요청 프로토proto에서 OnDemandFeatureView를 재구성합니다. 이 과정에서 spec.userdefinedfunction.body를 base64 디코딩하여 인증 검사 전에 dill.loads로 전달합니다. dill은 pickle의 상위 집합이므로 reduce가 os.system, cmd,을...

CVE-2026-53714

A flaw was found in Envoy Gateway. When operating in GatewayNamespaceMode, the xDS gRPC server fails to properly authenticate certain unary Fetch RPCs and State-of-the-World protocol messages. This oversight allows any pod with network access to port 18000 to retrieve sensitive information. An...

CVE-2026-25255

Exposed dangerous function lead to privilege escalation via gRPC server...

CVE-2026-25255 Exposed function in Qualcomm Package Manager and Qualcomm Software Center.

Exposed dangerous function lead to privilege escalation via gRPC server...

CVE-2026-25255

CVE-2026-25255 affects Qualcomm Package Manager and Qualcomm Software Center , where an exposed dangerous function in a gRPC server allows an attacker with local access and low privileges to achieve privilege escalation with a changed scope , impacting confidentiality, integrity, and availability...

CVE-2026-25255: Exposed Dangerous Method or Function

Exposed dangerous function lead to privilege escalation via gRPC server...

BIT-ENVOY-GATEWAY-2026-53714 Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, configured through provider.kubernetes.deploy.type=GatewayNamespace, installs a JWT StreamInterceptor bu...

CVE-2026-53714

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, configured through provider.kubernetes.deploy.type=GatewayNamespace, installs a JWT StreamInterceptor bu...

CVE-2026-53714: Missing Authentication for Critical Function

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, configured through provider.kubernetes.deploy.type=GatewayNamespace, installs a JWT StreamInterceptor bu...

CVE-2026-86502

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...

CVE-2026-86502

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...

CVE-2026-86502

JetBrains IntelliJ IDEA versions before 2026.2.2 contain a vulnerability in the IJent gRPC server , where missing TLS encryption and authentication allowed an attacker with local access to achieve arbitrary code execution on Remote Development hosts. The CVSS 3.1 score is 8.4 (High) , reflecting ...

CVE-2026-86502: Missing Authentication for Critical Function

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...

PT-2026-86874

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...

yakit v1.4.8-0905

YAKIT-A Cyber Security ALL-IN-ONE Platform based on Yak language Whitepaper • Official documentation • Issue feedback • Official website • Community • Architecture :book:Language： English • 中文 Introduction Security integration is a reform of security operations and management for enterprises in t...

CVE-2026-18675

The dataplane token validator in kuma-cp performs an unchecked Go type assertion on the JWT kid header. A token whose kid is a JSON number decodes as a float64 and triggers a runtime panic before any signature, claims, or authorization check runs. The panic terminates the entire kuma-cp process,...

CVE-2026-18675 Kong Mesh: control plane denial of service via a malformed dataplane token with a non-string JWT kid

The dataplane token validator in kuma-cp performs an unchecked Go type assertion on the JWT kid header. A token whose kid is a JSON number decodes as a float64 and triggers a runtime panic before any signature, claims, or authorization check runs. The panic terminates the entire kuma-cp process,...

CVE-2026-47470: Improper Input Validation

NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC server chat API endpoint, where an attacker could cause CWE-20 by local attack. A successful exploit of this vulnerability might lead to denial of service...

cve-2026-40983 - HIGH - Micrometer gRPC server instrumentation DoS vulnerability

cve-2026-40983 - HIGH - Micrometer gRPC server instrumentation DoS vulnerability...

CVE-2026-31251: Improper Input Validation

CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e 2025-30-21 contains an insecure deserialization vulnerability CWE-502 in its gRPC server component. When the server starts, it loads the speech synthesis model from a user-specified directory using torch.load without enabling the...