CVE-2026-33844

Improper input validation in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...

CVE-2026-33844

Azure Managed Instance for Apache Cassandra is affected by a vulnerability described as improper input validation that enables an authorized attacker to perform remote code execution over the network. The CVSS v3.1 base score is 9.0 (CRITICAL) with network attack, low complexity, required privile...

CVE-2026-33844 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

...

CVE-2026-33109 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

...

CVE-2026-33109

CVE-2026-33109 affects Azure Managed Instance for Apache Cassandra. The vulnerability is described as improper access control that allows an authenticated, network-adjacent attacker to execute code on the instance. The CVSS 3.1 base score is 9.9 (CRITICAL) with NETWORK attack vector, LOW attack c...

CVE-2026-33109 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

...

CVE-2026-33109

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...

Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...

PT-2026-38580

Name of the Vulnerable Software and Affected Versions Azure Managed Instance for Apache Cassandra affected versions not specified Description Improper input validation allows an authorized attacker to execute code over a network. Recommendations At the moment, there is no information about a newe...

Microsoft Azure Managed Instance for Apache Cassandra 访问控制错误漏洞

Microsoft Azure Managed Instance for Apache Cassandra is a service provided by Microsoft for Apache Cassandra on Azure. There is an access control vulnerability in Microsoft Azure Managed Instance for Apache Cassandra; this vulnerability stems from improper access control mechanisms, which may...

Microsoft Azure Managed Instance for Apache Cassandra 输入验证错误漏洞

Microsoft Azure Managed Instance for Apache Cassandra is a service provided by Microsoft for Apache Cassandra on Azure. There is an input validation vulnerability in Microsoft Azure Managed Instance for Apache Cassandra; this vulnerability stems from improper input validation and could allow...

GHSA-JMXC-HHWX-GVV3 Private Lemmy instances expose multi-community metadata without authentication

NOTE: Only affects development version. Summary readmulticommunity does not enforce the private-instance setting. On a private instance, an unauthenticated visitor can read multi-community names, titles, summaries, sidebars, owner identities, and member community lists. Details Other read handler...

Private Lemmy instances expose multi-community metadata without authentication

NOTE: Only affects development version. Summary readmulticommunity does not enforce the private-instance setting. On a private instance, an unauthenticated visitor can read multi-community names, titles, summaries, sidebars, owner identities, and member community lists. Details Other read handler...

GHSA-GH9P-Q46P-57G2 phpMyFAQ: Path Traversal in Client::deleteClientFolder enables arbitrary directory deletion by non-super-admin admins

Summary Client::deleteClientFolder in phpmyfaq/src/phpMyFAQ/Instance/Client.php:583 takes a URL from the caller, strips the https:// prefix, and passes the remainder to Filesystem::deleteDirectory relative to the multisite clientFolder. No path-traversal validation runs. An admin with the...

Directory Traversal

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Directory Traversal in the deleteClientFolder process. An attacker can delete arbitrary directories on the server by submitting a crafted URL containing...

phpMyFAQ: Path Traversal in Client::deleteClientFolder enables arbitrary directory deletion by non-super-admin admins

Summary Client::deleteClientFolder in phpmyfaq/src/phpMyFAQ/Instance/Client.php:583 takes a URL from the caller, strips the https:// prefix, and passes the remainder to Filesystem::deleteDirectory relative to the multisite clientFolder. No path-traversal validation runs. An admin with the...

EUVD-2026-27660

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Null reference while testing fluster When multi instances are created/destroyed, many interrupts happens and structures for decoder are removed. "struct vpuinstance" this structure is shared for all...

CVE-2026-43263

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Null reference while testing fluster When multi instances are created/destroyed, many interrupts happens and structures for decoder are removed. "struct vpuinstance" this structure is shared for all...

CVE-2026-43263

The CVE-2026-43263 entry concerns the Linux kernel chips-media wave5 driver. The vulnerability arises when multiple driver instances are created and destroyed, causing many interrupts and removal of decoder structures. The shared vpu_instance structure is not protected by a lock, allowing a poten...

PT-2026-37603

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference can occur in the wave5 chips-media component when multiple instances are created and destroyed, leading to frequent interrupts and the removal of decoder...