PT-2026-108122

For a hybrid KEM public key of type PublicKey::WingKemDraft06 or PublicKey::X25519MlKem768Draft06, the PublicKey::encapsulate derand function would panic in an indexing operation on a seed input of length shorter than 32 bytes. Impact Applications encapsulating with an attacker controlled seed...

PT-2026-99920

Name of the Vulnerable Software and Affected Versions IdentityIQ affected versions not specified Description An unauthenticated user can achieve remote code execution on the server due to improper input validation of content submitted to web service API endpoints. Recommendations At the moment,...

PT-2026-102340

Name of the Vulnerable Software and Affected Versions DOMSanitizer versions prior to 1.0.15 Description An incomplete input-validation defect exists in the isDangerousUrl function, which is used to reject dangerous URL values in the href and xlink:href attributes. While the javascript: scheme is...

NetScaler ADC Access Control Command Execution

The vulnerability of NetScaler ADC formerly Citrix ADC and the NetScaler Gateway access control system formerly Citrix Gateway is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Improper Validation of Specified Type of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input in the run method of the ProviderSpecificBootstrapImpl class in Validation.java, which passes a caller influenced action to the single argument form of AccessController.doPrivileged, droppi...

CVE-2026-88771

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated...

EUVD-2026-87958

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated...

CVE-2026-88771 A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated...

CVE-2026-88771

Citrix NetScaler ADC and NetScaler Gateway are vulnerable to a critical improper input validation vulnerability (CWE-20). This flaw allows an unauthenticated attacker to execute arbitrary commands remotely. The issue impacts all deployments, including those in default configuration , with no addi...

CVE-2026-88771 A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated...

Eleveo Call Recording Software has a vulnerability related to input validation.

Eleveo Call Recording Software version 9.7.0 has a vulnerability in input validation. This vulnerability stems from incorrect handling of the parameter Username in the file/callrec/userAddAction.do, which may lead to LDAP injection...

RUSTSEC-2026-0311 Stack overflow on deeply nested LaTeX input

The parser and layout engine in affected versions of latex-rust recurse once per level of nesting with no limit. Deeply nested input, such as \frac1…, braces, \sqrt…, \left, or superscripts nested hundreds or thousands of levels deep, exhausts the call stack. A stack overflow in Rust aborts the...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-88771 Citrix NetScaler Improper Input Validation Vulnerability CVE-2026-88772 Citrix NetScaler Improper Restriction of Operations within the Bounds of a...

CVE-2026-100833: Improper Input Validation

Contrast edgelesssys/contrast versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions. A bad rebase during a Kata Containers update accidentally introduced an allowstorage rule that accepts storage entries using the imageguestpull driver witho...

PT-2026-102445

Name of the Vulnerable Software and Affected Versions shell-quote versions prior to 1.11.0 Description The quote function emits a comment token starting with , which comments out the remainder of the shell line, including opening quotes of subsequent string tokens. If a subsequent string contains...

CVE-2026-88771: Improper Input Validation

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated...

CVE-2026-100863: Server-Side Request Forgery (SSRF)

Heym versions 0.0.90 and earlier contain two server-side request forgery SSRF egress gaps, both remediated in app/services/ssrfguard.py in 0.0.91. First, the LLM image-edit input loader loadimagebytes fetched caller-controlled HTTP/HTTPS URLs with a bare httpx.get, applying only a scheme check an...

VulnCheck KEV: CVE-2026-88771

Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker to execute arbitrary commands...

Citrix NetScaler Improper Input Validation Vulnerability

Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker to execute arbitrary commands...

Improper Validation of Specified Quantity in Input

Overview nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via the addressparser module's handling of quoted local-part addresses. When an address of the form...