postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments

A type confusion vulnerability in PostgreSQL allows any user to execute arbitrary code as the database's operating system user by calling functions with mishandled "internal" data type arguments...

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

The vulnerability of the CreateInstanceFromBackup() function in the `internal/server/storage/backend.go` file of the container management system and the virtual machine manager Incus allows a attacker to trigger a service failure.

The vulnerability of the CreateInstanceFromBackup function in the internal/server/storage/backend.go file of the container management system and the virtual machine manager Incus is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause service interruptio...

The vulnerability of the CreateCustomVolumeFromBackup() function in the `internal/server/storage/backend.go` file of the container management system and the virtual machine manager Incus allows a attacker to trigger a service failure.

The vulnerability of the CreateCustomVolumeFromBackup function in the internal/server/storage/backend.go file of the container management system and the virtual machine manager software Incus is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

PT-2026-99950

Name of the Vulnerable Software and Affected Versions Axios versions 1.17.0 through 1.19.x Description The fetch adapter bypasses the maxRedirects: 0 redirect policy. When a request is configured with maxRedirects set to zero and receives a redirect response, the underlying fetch implementation...

CVE-2026-86102: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...

CVE-2026-19759: Incorrect Authorization

An Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions prior to 2026-06-17 on Google Cloud Platform allows an authenticated Google Cloud user to execute arbitrary internal RPCs from inside Google's production network under a privileged...

CVE-2026-55160: Server-Side Request Forgery (SSRF)

Stringer is a self-hosted, anti-social RSS reader. Prior to commit 75cb095, an unrestricted Server-Side Request Forgery SSRF vulnerability allows any authenticated user to force the Stringer server to send arbitrary HTTP/HTTPS requests to internal networks, localhost services, and cloud metadata...

CVE-2026-101891: Improper Access Control

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session...

PT-2026-99793

Name of the Vulnerable Software and Affected Versions Apache Roller version 6.1.5 Description Improper restriction of XML External Entity XXE references allows a weblog administrator to read files accessible by the Roller process and access internal network addresses. This occurs when importing a...

PT-2026-99936

Name of the Vulnerable Software and Affected Versions WatchGuard Access Points affected versions not specified Description An improper access control issue exists within an internal API service. This allows an unauthenticated attacker with network access to the access point to obtain a valid API...

CVE-2026-101907: Unintended Proxy or Intermediary

Axios is a promise-based HTTP client for the browser and Node.js. From 1.17.0 until 1.20.0, the fetch adapter bypasses the maxRedirects: 0 redirect policy. An Axios request uses the fetch adapter with maxRedirects set to zero and receives a redirect response. The underlying fetch implementation...

PT-2026-99942

Name of the Vulnerable Software and Affected Versions WatchGuard AP affected versions not specified Description An OS command injection flaw exists in the internal API service. This issue allows an attacker with network access to the access point to execute arbitrary shell commands on the...

PT-2026-99869

Name of the Vulnerable Software and Affected Versions NooBaa affected versions not specified Description An OS command injection flaw exists in the set hostname internal function of the 'cluster internal api' component, which manages the Multi-Cloud Object Gateway in OpenShift Data Foundation. Th...

PT-2026-102289

Name of the Vulnerable Software and Affected Versions Stringer versions prior to commit 75cb095 Description An unrestricted Server-Side Request Forgery SSRF allows authenticated users to force the server to send arbitrary HTTP/HTTPS requests to internal networks, localhost services, and cloud...

PT-2026-99930

Name of the Vulnerable Software and Affected Versions fast-mcp-telegram versions prior to 30.1 Description The server is subject to a full-read, exfiltrating Server-Side Request Forgery SSRF, a condition where an attacker can force the server to make requests to internal resources. The send messa...

CVE-2026-96283

By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped...

EUVD-2026-88031

Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows privileged users to specify arbitrary URLs without destination validation. Attackers with Power User or higher roles can coerce Obot to make requests to internal services and clo...

CVE-2026-101064 Obot before v0.23.0 Server-Side Request Forgery via MCP

Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows privileged users to specify arbitrary URLs without destination validation. Attackers with Power User or higher roles can coerce Obot to make requests to internal services and clo...

CVE-2026-101061

The utcp-gql and utcp-websocket libraries, in versions before 1.1.1 , are vulnerable to server-side request forgery (SSRF) . The vulnerability stems from an incomplete application of fixes for CVE-2026-44661. Specifically, the GraphQL plugin utilizes a flawed prefix check that allows bypasses usi...