CVE-2026-38350

An integer overflow in the targetswsfuzzer function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

Tenda CH22 Router Code Execution

The vulnerability of the formeditFileName function in the Tenda CH22 router’s software lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Tenda CH22 Router Command Execution

The vulnerability of the formexeCommand function in the Tenda CH22 router’s microprogramming system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-30070

The free5gc v4.0.1 software contains a vulnerability in the HandleGetSharedData function. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted input . The vulnerability is categorized as a high-severity issue with a CVSS score of 7.5, primarily impacting availa...

CVE-2026-30068

The software free5gc v4.0.1 is affected by a Denial of Service (DoS) vulnerability due to improper input validation within the HandleUpdate function located in /sbi/parameter_provision.go. An attacker can exploit this by providing a crafted input . No specific exploit details, proof-of-concept li...

CVE-2026-30064

Improper input validation in the buildFilter function processor/processor.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-30071

An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-82419

The Workeera WordPress plugin before 1.0.6 does not restrict which values may be written to a user's own candidate profile, and does not validate or contain the stored file path before deleting it, allowing users with a role as low as subscriber to delete arbitrary files on the server...

CVE-2026-30063

An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted snssais query...

CVE-2026-30058

Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-30063

The free5gc v4.0.1 software contains a vulnerability in its NF Discovery endpoint . An attacker can trigger a Denial of Service (DoS) by sending a crafted snssais query . According to the Rapid7 documentation, the root cause is the allocation of resources without limits or throttling . Exploitati...

PT-2026-82594

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description The software fails to validate the total field within QR JSON payloads before materializing ranges. An attacker can provide specially crafted QR images containing extremely large values in th...

PT-2026-82525

Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-82535

An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-82534

Name of the Vulnerable Software and Affected Versions free5gc version 4.0.1 Description A flaw in the HandleGetSharedData function allows an attacker to trigger a Denial of Service DoS by providing a specially crafted input. Recommendations At the moment, there is no information about a newer...

PT-2026-82530

Name of the Vulnerable Software and Affected Versions free5gc version 4.0.1 Description Improper input validation in the buildFilter function located in processor/processor.go allows attackers to cause a Denial of Service DoS, a condition where the system becomes unavailable to its intended users...

EUVD-2026-67119

An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-67114

Improper input validation in the buildFilter function processor/processor.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-35869

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

PT-2026-82737

Name of the Vulnerable Software and Affected Versions MongoDB libmongocrypt affected versions not specified Description A missing input-validation issue exists in the automatic-encryption context setup of MongoDB libmongocrypt. This flaw allows a caller-supplied database identifier to be accepted...