CVE-2026-113661 ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLs

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Prior to sanitize-html 2.18.0, a non-default configuration that allows meta refresh elements and their http-equiv and content attributes can retain unsafe script...

Access Control Bypass

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Access Control Bypass in the HTTP/2 asynchronous servlet processing. An attacker can cause requests and responses to be mixed up between users by exploiting...

Access Control Bypass

Overview org.apache.tomcat:tomcat-coyote is a Tomcat Connectors and HTTP parser. Affected versions of this package are vulnerable to Access Control Bypass in the HTTP/2 asynchronous servlet processing. An attacker can cause requests and responses to be mixed up between users by exploiting incorre...

Incomplete Cleanup

Overview org.apache.tomcat:tomcat-coyote is a Tomcat Connectors and HTTP parser. Affected versions of this package are vulnerable to Incomplete Cleanup due to incomplete cleanup in the HTTP/2 trailer header process. An attacker can access sensitive information from previous requests by sending...

Incomplete Cleanup

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Incomplete Cleanup due to incomplete cleanup in the HTTP/2 trailer header process. An attacker can access sensitive information from previous requests by sending...

CVE-2026-94018

The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a Content-Length underflow while processing a PUT request. The condition is reachable by an unauthenticated remote client with a single malformed request...

CVE-2026-93003

The Web add-on's HTTP server searches the entire request packet for header fields instead of stopping at the end of the header section. A header field name placed in the request body is therefore reported to the server as though it were a header, which lets a client control request framing...

CVE-2026-90798

A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of service via creating an infinite HTTP redirect loop. Users are recommended to upgrade to version 3.5.3, which fixes this issue...

Cisco Unified Communications Manager: Vulnerabilities in Permission Authorization and Access Control

Cisco Unified Communications Manager versions 14, 14SU1, 14SU2, 14SU3, 15, 15SU1, 14SU4, 14SU4a, 15SU1a, 15SU2, 15.0.1.13010-1, 15.0.1.13011-1, 15.0.1.13012-1, 15.0.1.13013-1, 15.0.1.13014-1, 15.0.1.13015-1, 15.0.1.13016-1, 15.0.1.13017-1, 15SU3a, 14SU5, 15SU4, 15SU4a, and 14SU6 have...

ArcadeData ArcadeDB authorization issue vulnerability

In ArcadeData ArcadeDB versions 26.8.1 through 26.10.1, there is an authorization issue vulnerability stemming from authorization bypass. Read-only users can modify the lightweight and unique mode flags of edge types without requiring UPDATESCHEMA privileges. Attackers can send ALTER TYPE command...

SvelteKit server-side request forgery vulnerability

Versions of SvelteKit prior to 3.0.0 contain a server-side request forgery vulnerability. This vulnerability arises from self-fetch fallback behavior that automatically follows HTTP redirects. Attackers can manipulate the Host or forwarded headers to redirect the fallback requests to their own...

Apache Traffic Server input validation error vulnerability

A input validation error vulnerability exists in Apache Traffic Server versions 8.0.0 through 8.1.11, 9.0.0 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0. This vulnerability stems from improper handling when Content-Length or Transfer-Encoding is included in HEAD requests, potentially leading...

Apache Traffic Server digital error vulnerability

A numerical error vulnerability exists in Apache Traffic Server versions 8.0.0 through 8.1.11, 9.0.0 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0. This vulnerability stems from improper handling of specially crafted HTTP/2 DATA frames, potentially leading to exhaustion of the worker pool on...

hMailServer cross-site request forgery vulnerability

Versions 6.0.0 through 6.3.6 of hMailServer contain a cross-site request forgery vulnerability. This flaw arises because the REST API’s cross-site request forgery protection only applies to cookie sessions and does not cover HTTP Basic authentication. As a result, remote attackers may exploit the...

Cisco TelePresence Video Communication Server Expressway information leakage vulnerability

The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to information leakage. This vulnerability stems from insufficient authorization checks for HTTP requests during the Mobile and Remote Access MRA provisioning process. As a result, unauthenticated remote...

Apache Traffic Server resource management error vulnerability

A resource management error vulnerability exists in Apache Traffic Server versions 8.0.0 through 8.1.11, 9.0.0 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0. This vulnerability arises from exhausting the worker pool of HTTP/1.1 sources by truncating the HTTP/2 Content-Length value, potentiall...

CVE-2026-90798 Apache CouchDB: Replicator follows redirects indefinitely

A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of service via creating an infinite HTTP redirect loop. Users are recommended to upgrade to version 3.5.3, which fixes this issue...

CVE-2026-90798

Apache CouchDB versions 3.5.2 and below on all platforms are vulnerable to a denial of service (DoS) . The issue stems from a missing circuit-breaker in the replicator component, which allows an owner of a replication source or target to trigger an infinite HTTP redirect loop . Users are recommen...

CVE-2026-90798

A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of service via creating an infinite HTTP redirect loop. Users are recommended to upgrade to version 3.5.3, which fixes this issue...

CVE-2026-90798 Apache CouchDB: Replicator follows redirects indefinitely

A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of service via creating an infinite HTTP redirect loop. Users are recommended to upgrade to version 3.5.3, which fixes this issue...