CVE-2026-74842 Kira-Pgr PromptShopMCP Image-Toolkit-MCP-Server server.py download_image server-side request forgery

A vulnerability was found in Kira-Pgr PromptShopMCP up to 5bc0cd17358e19a5415d11a531088170d7b81452. Affected is the function downloadimage of the file server.py of the component Image-Toolkit-MCP-Server. Performing a manipulation of the argument imageurl results in server-side request forgery. Th...

CVE-2026-58561

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58560

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58561

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58561

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-60069

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58561

CVE-2026-58561 is a null pointer dereference in the image codec module that can impact availability. The CVSS 3.1 vector (LOCAL, LOW complexity, NO user interaction, NONE privileges, UNCHANGED scope) yields a MEDIUM base score (4.0) with availability impact set to LOW; exploitation appears to req...

CVE-2026-58560

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-60068

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58560

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58560

Technical details about CVE-2026-58560 are not publicly available in the provided documents. Monitor for updates from Huawei and the CVE entry for further information.

EUVD-2026-60351

A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly...

PT-2026-76643

Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 1.6.18 Roundcube Webmail versions 1.7.x prior to 1.7.3 Description An unclosed url in a FuncIRI attribute of an SVG image allows the evasion of remote image blocking. This flaw could potentially lead to...

PT-2026-76672

In openshift-metal3/fakefish there is a repeated pattern in some of the scripts where shell variables are injected without quoting them either into command lines or into manifests. This mostly applies to the Image URL and BMC credentials which are not verified by FakeFish...

PT-2026-76860

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Tahoe versions prior to 26.6.2 Description An integer overflow occurs during image processing, which may lead to arbitrary code execution. This issue was addressed by...

PT-2026-76747

A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly...

CVE-2026-50775

A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly...

CVE-2026-50775

A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly...

PT-2026-76861

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Tahoe versions prior to 26.6.2 Description Processing an image may lead to a denial-of-service, which is a condition where a system becomes unavailable to its intended users...

CVE-2026-50775

DataHub v1.5.0.1 is vulnerable to a blind SSRF flaw where the server fetches images from attacker-supplied URLs, enabling remote code execution without authentication. CVSS 3.1 scores it CRITICAL (9.8), and CISA's SSVC assessment marks it as automatable with total technical impact. No patch versi...