CVE-2026-101098

A security vulnerability exists in the ag-ui-protocol ag-ui software (versions up to 2026-09-23). The flaw is located in the readAllBytes function within the JdkAgentHttpHandler.java file of the HTTP Handler component. Exploitation of this issue allows for remote resource consumption . A pull req...

EUVD-2026-88366

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pu...

CVE-2026-101098 ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pu...

CVE-2026-101098 ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pu...

CVE-2026-98152

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over Fabrics RDMA Remote Direct Memory Access target subsystem. When pending disconnecting queues exceed the backlog threshold, the connection handler fails to release newly allocated queue structures and associated network...

GO-2026-6541 Grafana: Pre-authentication denial of service in the public dashboard query handler in github.com/grafana/grafana

Grafana: Pre-authentication denial of service in the public dashboard query handler in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive report...

GO-2026-6544 Grafana Loki datasource plugin's callResource handler contains a path traversal vulnerability. in github.com/grafana/grafana

Grafana Loki datasource plugin's callResource handler contains a path traversal vulnerability. in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...

CVE-2026-101077

A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function processrequest of the component boatemp Handler. This manipulation causes missing authentication. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contact...

CVE-2026-101076

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /setntpserverip.cgi of the component CGI Handler. The manipulation of the argument ntpip results in os command injection. The attack can be executed remotely. The exploit is now public and may ...

CVE-2026-74246

A flaw was found in Red Hat Quay's custom build trigger handler. This vulnerability allows a user with organization repository administrative privileges and the FEATUREBUILDSUPPORT enabled to read arbitrary files on the build worker. This is possible due to insufficient validation of the build...

CVE-2026-101075

A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /locationtime.cgi of the component Location Time Handler. The manipulation of the argument mac leads to os command injection. Remote exploitation of the attack is...

EUVD-2026-88319

A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function processrequest of the component boatemp Handler. This manipulation causes missing authentication. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contact...

CVE-2026-101077

The Netcore NR289-GE (version 1.4.5102 ) is vulnerable to a missing authentication flaw within the boa_temp Handler component, specifically affecting the process_request function. This vulnerability allows for remote exploitation, potentially leading to high impact on confidentiality, integrity, ...

CVE-2026-101076 Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /setntpserverip.cgi of the component CGI Handler. The manipulation of the argument ntpip results in os command injection. The attack can be executed remotely. The exploit is now public and may ...

CVE-2026-101076

The Netcore NR289-GE (version 1.4.5102) is susceptible to a remote OS command injection vulnerability in the CGI Handler component. Specifically, the system function within the /set_ntp_server_ip.cgi file fails to properly sanitize the ntp_ip argument, allowing an attacker to execute arbitrary co...

EUVD-2026-88317

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /setntpserverip.cgi of the component CGI Handler. The manipulation of the argument ntpip results in os command injection. The attack can be executed remotely. The exploit is now public and may ...

CVE-2026-101076 Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /setntpserverip.cgi of the component CGI Handler. The manipulation of the argument ntpip results in os command injection. The attack can be executed remotely. The exploit is now public and may ...

CVE-2026-101075 Netcore NR289-GE Location Time location_time.cgi system os command injection

A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /locationtime.cgi of the component Location Time Handler. The manipulation of the argument mac leads to os command injection. Remote exploitation of the attack is...

CVE-2026-101075 Netcore NR289-GE Location Time location_time.cgi system os command injection

A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /locationtime.cgi of the component Location Time Handler. The manipulation of the argument mac leads to os command injection. Remote exploitation of the attack is...

CVE-2026-101075

A critical OS command injection vulnerability exists in Netcore NR289-GE 1.4.5102 within the Location Time Handler component. The flaw resides in the system function of the /location_time.cgi file, where manipulating the mac argument allows for remote code execution. Public exploits for this vuln...