CVE-2026-35869

The LB-link Router AC450M V4.0.0 is affected by a Command Injection vulnerability in the bs_SetLimitCli_info function of the libshare.so library. The root cause is the insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. ...

CVE-2026-30067

The free5gc v4.0.1 software is affected by a Denial of Service (DoS) vulnerability within the NRF Discovery service. The flaw exists specifically in the complexQueryFilterSubprocess function, where a crafted input can be used by an attacker to trigger the DoS condition. No specific remediation, e...

CVE-2026-30071

An issue in the RechargePut function of free5gc v4.0.1 allows an attacker to trigger a Denial of Service (DoS) condition by providing a crafted input . The vulnerability is characterized as an Allocation of Resources Without Limits or Throttling . No specific exploit details or remediation instru...

CVE-2026-30063

The free5gc v4.0.1 software contains a vulnerability in its NF Discovery endpoint . An attacker can trigger a Denial of Service (DoS) by sending a crafted snssais query . According to the Rapid7 documentation, the root cause is the allocation of resources without limits or throttling . Exploitati...

CVE-2026-30064

The software free5gc v4.0.1 is vulnerable to a Denial of Service (DoS) attack due to improper input validation in the buildFilter function located in processor/processor.go . An attacker can trigger this condition by providing a crafted input . No specific exploitation details or remediation step...

CVE-2026-30058

The free5gc software, version v4.0.1 , is vulnerable to a Denial of Service (DoS) condition due to Improper Input Validation in the HTTPModifySubscription handler. An attacker can exploit this by providing a crafted input to trigger the service disruption. No specific remediation instructions or ...

CVE-2026-30070

The free5gc v4.0.1 software contains a vulnerability in the HandleGetSharedData function. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted input . The vulnerability is categorized as a high-severity issue with a CVSS score of 7.5, primarily impacting availa...

CVE-2026-30068

The software free5gc v4.0.1 is affected by a Denial of Service (DoS) vulnerability due to improper input validation within the HandleUpdate function located in /sbi/parameter_provision.go. An attacker can exploit this by providing a crafted input . No specific exploit details, proof-of-concept li...

CVE-2026-30058

Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-30067

An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-82419

The Workeera WordPress plugin before 1.0.6 does not restrict which values may be written to a user's own candidate profile, and does not validate or contain the stored file path before deleting it, allowing users with a role as low as subscriber to delete arbitrary files on the server...

EUVD-2026-67116

Improper input validation in the HandleUpdate function /sbi/parameterprovision.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-82494

SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the id video parameter. The application does not sanitize input before constructing SQL queries, which results in execution errors when malicious input is provided. The vulnerability exposes...

PT-2026-82770

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response scripts pass attacker-influenced alert fields to privileged system commands without validating their format, allowing...

UltraJSON 5.13.0-6-g733f9e1 Out-Of-Bounds Read

UltraJSON version 5.13.0-6-g733f9e1 suffers from an out of bounds read vulnerability. UltraJSON contains an out-of-bounds read in its native C JSON decoder when processing certain incomplete JSON values supplied through an explicitly length-bounded input buffer. The affected native entry point,...

CVE-2026-59298: Improper Input Validation

Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...

EUVD-2026-67114

Improper input validation in the buildFilter function processor/processor.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-81521: Improper Control of Resource Identifiers

The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name...

PT-2026-82759

Name of the Vulnerable Software and Affected Versions FFmpeg version N-122528-gdd2976b9e1 Description A Division-by-Zero issue exists in the ff sws init single context function located in /libswscale/utils.c. This flaw allows an attacker to trigger a Denial of Service DoS by providing a specially...

PT-2026-82761

Name of the Vulnerable Software and Affected Versions FFmpeg git-master commit 722a217 Description A heap overflow occurs in the ff sws alphablendaway function within the libswscale/alphablend.c component. This issue allows an attacker to trigger a Denial of Service DoS by providing a specially...