33041 matches found
PT-2026-83299
StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute directly instead of implementing executeWithoutPassword. Attackers can access six unauthenticated endpoints on the frontend HTTP port to disclose cluster topology, database...
CVE-2026-82276: Missing Authentication for Critical Function
StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute directly instead of implementing executeWithoutPassword. Attackers can access six unauthenticated endpoints on the frontend HTTP port to disclose cluster topology, database...
PT-2026-82978
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition and error handling flaw exist in the i2c imx driver. In the i2c imx reg slave function, the slave pointer is assigned before the pm runtime resume and get function is...
CVE-2026-50152: Improper Authorization
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Monitor subscription handler fails to properly authorize access to the configuration-key store, allowing any CephX user with only mon allow r capabilities to...
The vulnerability of the setSystemConfig() function in the CGI Handler component of the Totolink-N600R router’s microprogramming system allows a hacker to execute arbitrary code.
The vulnerability of the setSystemConfig function in the CGI Handler component of the Totolink-N600R router’s microprogramming system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2026-54330: Improper Verification of Cryptographic Signature
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Ceph Object Gateway RGW SigV4 handler does not reject requests that carry x-amz- headers absent from the signed header set, allowing anyone holding a presigne...
PT-2026-82914
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the emac probe function. This occurs because devm request irq is called before devm platform ioremap resource, allowing an early interrupt to trigger...
CVE-2026-82235: Uncontrolled Resource Consumption
filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...
CVE-2026-54330
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Ceph Object Gateway RGW SigV4 handler does not reject requests that carry x-amz- headers absent from the signed header set, allowing anyone holding a presigne...
CVE-2026-50152 Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Monitor subscription handler fails to properly authorize access to the configuration-key store, allowing any CephX user with only mon allow r capabilities to...
CVE-2026-50152
Ceph 's Monitor subscription handler improperly authorizes reads of the config-key store in versions prior to 20.2.4 and 19.2.6 . Any CephX user with only mon allow r permissions can send a single crafted MMonSubscribe message to read the entire store, which contains OSD LUKS disk-encryption pass...
CVE-2026-50152
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Monitor subscription handler fails to properly authorize access to the configuration-key store, allowing any CephX user with only "mon allow r" capabilities t...
CVE-2026-81834
A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a manipulation can lead to code injection. The attack can be executed remotely. The exploit has been made available to th...
EUVD-2026-67231
A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a manipulation can lead to code injection. The attack can be executed remotely. The exploit has been made available to th...
CVE-2026-81834
A code injection vulnerability exists in RooCodeInc Roo-Code (versions up to 3.51.1 ), specifically in the ExecaTerminalProcess function within the README File Handler component. The flaw allows remote attackers to inject code by manipulating this function. A public proof-of-concept exploit is av...
CVE-2026-81834 RooCodeInc Roo-Code README File ExecaTerminalProcess code injection
A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a manipulation can lead to code injection. The attack can be executed remotely. The exploit has been made available to th...
CVE-2026-81834
A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a manipulation can lead to code injection. The attack can be executed remotely. The exploit has been made available to th...
CVE-2026-81834 RooCodeInc Roo-Code README File ExecaTerminalProcess code injection
A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a manipulation can lead to code injection. The attack can be executed remotely. The exploit has been made available to th...
CVE-2026-80209
The updateWorkspace handler in mods/identity/src/workspaces/createUpdateWorkspace.ts in Fonoster through 0.22.7 invokes the gRPC callback with PERMISSIONDENIED when createIsWorkspaceMember reports that the caller is not a member of the target workspace, but it does not return. Execution continues...