EUVD-2026-83680

A vulnerability was found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this issue is the function generatehosttask of the file backend/aiops/services.py of the component Command Handler. Performing a manipulation of the argument command results in command injection. Remote exploitation of the attac...

CVE-2026-93967

CVE-2026-93967 affects aiyiyi121 SxDevOps 1.0/1.1 , a DevOps platform. The vulnerability is a command injection in the function generate_host_task within the file backend/aiops/services.py (component: Command Handler). Manipulating the command argument allows an authenticated remote user to injec...

CVE-2026-93960

A vulnerability was identified in Pixelfed up to 0.12.11. Impacted is the function instancePeers of the file app/Http/Controllers/Api/ApiV1Controller.php of the component OAuth Scope Handler. Such manipulation of the argument ID leads to missing authentication. The attack may be performed from...

CVE-2026-93960 Pixelfed OAuth Scope ApiV1Controller.php instancePeers missing authentication

A vulnerability was identified in Pixelfed up to 0.12.11. Impacted is the function instancePeers of the file app/Http/Controllers/Api/ApiV1Controller.php of the component OAuth Scope Handler. Such manipulation of the argument ID leads to missing authentication. The attack may be performed from...

EUVD-2026-83647

A vulnerability was identified in Pixelfed up to 0.12.11. Impacted is the function instancePeers of the file app/Http/Controllers/Api/ApiV1Controller.php of the component OAuth Scope Handler. Such manipulation of the argument ID leads to missing authentication. The attack may be performed from...

CVE-2026-93960

A vulnerability in Pixelfed (up to version 0.12.11 ) affects the OAuth Scope Handler component, specifically the instancePeers function in app/Http/Controllers/Api/ApiV1Controller.php. Manipulation of the ID argument leads to missing authentication , enabling a remote attacker with low privileges...

CVE-2026-93960 Pixelfed OAuth Scope ApiV1Controller.php instancePeers missing authentication

A vulnerability was identified in Pixelfed up to 0.12.11. Impacted is the function instancePeers of the file app/Http/Controllers/Api/ApiV1Controller.php of the component OAuth Scope Handler. Such manipulation of the argument ID leads to missing authentication. The attack may be performed from...

CVE-2026-93960 Pixelfed OAuth Scope ApiV1Controller.php instancePeers missing authentication

A vulnerability was identified in Pixelfed up to 0.12.11. Impacted is the function instancePeers of the file app/Http/Controllers/Api/ApiV1Controller.php of the component OAuth Scope Handler. Such manipulation of the argument ID leads to missing authentication. The attack may be performed from...

PT-2026-95974

Name of the Vulnerable Software and Affected Versions D-Link DIR-868L version 2.01b05 Description A stack-based buffer overflow exists in the Authentication Handler component within the /webfa authentication.cgi endpoint. The issue occurs when the strcpy function processes the id and password...

PT-2026-96015

Name of the Vulnerable Software and Affected Versions Netcore NBR200V2 version 1.3.241127.071246 Description An issue exists in the LAN IP Configuration Handler component within the /usr/bin/network tools file. A remote attacker can perform command injection by manipulating the ipv4 argument...

PT-2026-95907

Name of the Vulnerable Software and Affected Versions Pixelfed versions prior to 0.12.10 Description An issue exists in the OAuth Scope Handler component within the instancePeers function of the app/Http/Controllers/Api/ApiV1Controller.php file. Remote manipulation of the ID argument can lead to...

CVE-2026-93960: Missing Authentication for Critical Function

A vulnerability was identified in Pixelfed up to 0.12.11. Impacted is the function instancePeers of the file app/Http/Controllers/Api/ApiV1Controller.php of the component OAuth Scope Handler. Such manipulation of the argument ID leads to missing authentication. The attack may be performed from...

CVE-2026-94089: Stack-based Buffer Overflow

A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfaauthentication.cgi of the component Authentication Handler. Executing a manipulation of the argument id/password can lead to stack-based buffer overflow. The attack can be executed...

CVE-2026-93967: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this issue is the function generatehosttask of the file backend/aiops/services.py of the component Command Handler. Performing a manipulation of the argument command results in command injection. Remote exploitation of the attac...

PT-2026-95937

Name of the Vulnerable Software and Affected Versions aiyiyi121 SxDevOps versions 1.0 through 1.1 Description A security flaw in the Settings Handler component involves improper processing of the backend/sxdevops/settings.py file. This issue allows a remote attacker to exploit hard-coded...

CVE-2026-93970: Use of Hard-coded Credentials

A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the file backend/sxdevops/settings.py of the component Settings Handler. The manipulation results in hard-coded credentials. The attack may be performed from remote. The patch is...

PT-2026-95934

Name of the Vulnerable Software and Affected Versions aiyiyi121 SxDevOps versions 1.0 through 1.1 Description A command injection issue exists within the Command Handler component. The generate host task function in the backend/aiops/services.py file fails to properly handle the command argument,...

PT-2026-96000

Name of the Vulnerable Software and Affected Versions Free5GC versions prior to 4.2.4 Description A race condition exists in the Gmm Handler component within the file /corefuzzer deps/free5gc/NFs/amf/internal/gmm/handler.go. A race condition is a situation where the system's substantive behavior ...

CVE-2026-94043: Concurrent Execution using Shared Resource with Improper Synchronization

A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzerdeps/free5gc/NFs/amf/internal/gmm/handler.go of the component Gmm Handler. This manipulation causes race condition. The attack can be initiated remotely. Patch name:...

SUSE CVE-2026-93493

A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...