EUVD-2026-67113

An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted snssais query...

CVE-2026-30063

CVE-2026-30063 affects the NF Discovery endpoint of free5gc v4.0.1 , an open-source 5G Core implementation. An unauthenticated, remote attacker can trigger a Denial of Service by sending a crafted snssais query to this endpoint. The vulnerability is rated CVSS 7.5 (HIGH) with a vector of AV:N/AC:...

CVE-2026-30063

An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted snssais query...

PT-2026-82527

An issue in free5gc v4.0.1 allows attackers to cause a Denial of Service DoS when parsing crafted SUCI data during UE registration...

CVE-2026-26456

A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes withou...

PT-2026-82534

An issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-82535

An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-67119

An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-82836

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API user can read the cleartext cluster key from a configuration endpoint that fails to redact it. The REST API provides a...

CVE-2026-30612

An issue in Time4 Popcorn for Windows = 6.2.1.18 and Time4Popcorn for MacOS = 6.2.1.17 and Time4Popcorn for Android = 3.5.0.173 allows a remote attacker to execute arbitrary code via the updater.exe for windows, PT.updd on MacOS components...

CVE-2026-30057

An issue in the CreateUEContext handler component of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted request...

CVE-2026-30062

An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted NAS PDU...

PT-2026-82768

Name of the Vulnerable Software and Affected Versions Wazuh versions prior to 4.14.7 Description The ip-customblock active response script contains a path traversal flaw allowing an attacker to create or delete arbitrary files on the filesystem with root privileges. The issue occurs because the...

CVE-2026-71832

Aria2 version 1.37.0 and below is affected by a Divide By Zero issue i...

EUVD-2026-67256

An issue in Time4 Popcorn for Windows = 6.2.1.18 and Time4Popcorn for MacOS = 6.2.1.17 and Time4Popcorn for Android = 3.5.0.173 allows a remote attacker to execute arbitrary code via the updater.exe for windows, PT.updd on MacOS components...

CVE-2026-75417

A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the getarrchildid function within application/admin/controller/category.class.php, where the user-controlled parentid parameter is concatenated directly into a FINDINSET SQL clause without proper sanitization. This allows ...

PT-2026-82449

Name of the Vulnerable Software and Affected Versions Apache APISIX version 3.17.0 Description An inefficient algorithmic complexity issue exists where a single small request can cause a gateway worker to reach 100% CPU usage for an extended period when using graphql-limit-count routes...

PT-2026-82593

openssl encrypt pip: openssl-encrypt versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO total samples field of FLAC files before using it to size an allocation np.random.randintsize=total samples, channels. A 50-byte crafted FLAC file declaring 100 million samples causes a...

PT-2026-82737

A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of...

PT-2026-82796

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdown and close the SSL object is freed and the pointe...