CVE-2026-37604

pH7Software pH7Builder pH7 Social Dating CMS through 18.2.0 resolves the client IP address in protected/framework/Ip/Ip.class.php from the HTTPCLIENTIP and HTTPXFORWARDEDFOR headers without verifying the request comes from a trusted proxy. Because the admin login attempt counter and lockout are...

PT-2026-96761

Name of the Vulnerable Software and Affected Versions BIG-IP APM version 21.1.0 BIG-IP APM versions 17.5.0 through 17.5.1 BIG-IP APM versions 17.1.0 through 17.1.3 Description An unauthenticated heap-based buffer overflow exists in the BIG-IP APM when configured as an OAuth Authorization Server...

PT-2026-96848

Name of the Vulnerable Software and Affected Versions Netdata versions 2.0.0 through 2.10.x Description An issue exists where the '/api/v3/settings' endpoint is registered with permissions that allow unauthenticated PUT requests to bypass IP restrictions configured by the operator. A...

PT-2026-97024

Name of the Vulnerable Software and Affected Versions lwIP TCP/IP Stack MQTT affected versions not specified Description The MQTT client in the lwIP TCP/IP Stack contains an out-of-bounds write flaw. This issue allows an unauthenticated attacker to achieve remote code execution on the device,...

PT-2026-96821

Name of the Vulnerable Software and Affected Versions 9Router versions prior to 0.5.6 Description In deployments where requests reach Next.js without the sanitizing custom-server.js wrapper, the application uses the client-supplied X-9r-Real-Ip header as the bucket key for rate limiting. This...

CVE-2026-62985: Uncaught Exception

request-filtering-agent is an https.Agent implementation that blocks requests to Private/Reserved IP addresses. Prior to 3.2.1, RequestFilteringHttpAgent and RequestFilteringHttpsAgent synchronously threw from createConnection when rejecting a literal private-IP host such as 169.254.169.254 or...

CVE-2026-37604: Inconsistent Interpretation of HTTP Requests

pH7Software pH7Builder pH7 Social Dating CMS through 18.2.0 resolves the client IP address in protected/framework/Ip/Ip.class.php from the HTTPCLIENTIP and HTTPXFORWARDEDFOR headers without verifying the request comes from a trusted proxy. Because the admin login attempt counter and lockout are...

CVE-2026-37604

pH7Software pH7Builder pH7 Social Dating CMS through 18.2.0 resolves the client IP address in protected/framework/Ip/Ip.class.php from the HTTPCLIENTIP and HTTPXFORWARDEDFOR headers without verifying the request comes from a trusted proxy. Because the admin login attempt counter and lockout are...

CVE-2026-94127: Heap-based Buffer Overflow

When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution RCE. This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Deployments using APM strictly as an OAuth...

9Router has a Login Brute-Force Lockout Bypass via Spoofable X-9r-Real-Ip Header

9router enforces a progressive login lockout 5 failed attempts → temporary 30s+ lock keyed on the client IP. The client IP used for this limiter is taken from the X-9r-Real-Ip request header, which is intended to be set only by the bundled custom-server.js layer from the unspoofable TCP socket...

EUVD-2026-84812

pH7Software pH7Builder pH7 Social Dating CMS through 18.2.0 resolves the client IP address in protected/framework/Ip/Ip.class.php from the HTTPCLIENTIP and HTTPXFORWARDEDFOR headers without verifying the request comes from a trusted proxy. Because the admin login attempt counter and lockout are...

CVE-2026-91164

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. From 0.23.0 until 0.27.3, HTTP API token authentication resolves ConfigProvider::validateapitoken into RequestAuthorization::UserToken without enforcing the owning user's allowedipranges against the trusted client address in...

CVE-2026-91164 Warpgate: API tokens bypass the user's allowed_ip_ranges restriction

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. From 0.23.0 until 0.27.3, HTTP API token authentication resolves ConfigProvider::validateapitoken into RequestAuthorization::UserToken without enforcing the owning user's allowedipranges against the trusted client address in...

CLSA-2026-1790006158 TuxCare security update for ip-address (1 CVE)

TuxCare rebuilt ip-address to address 1 CVE. Fixed in 6.4.0-tuxcare.3...

EUVD-2026-83941

GoCD is a continuous deliver server. Prior to 26.1.0, the internal GoCD UI /jobStatus.json API does not validate that a requested server-assigned job ID belongs to the pipeline and stage named in the request. An authenticated user can guess job IDs and retrieve status for jobs in pipelines the us...

kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. A remote attacker could send a specially crafted sequence of ASCONF Add IP Address Configuration chunks, including DEL-IP Delete IP Address parameters, to trigger a use-after-free condition...

CVE-2026-94096: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/networktools of the component LAN IP Configuration Handler. The manipulation of the argument ipv4 results in command injection. The attack may be launched...

PT-2026-96222

Name of the Vulnerable Software and Affected Versions Warpgate versions 0.23.0 through 0.27.2 Description HTTP API token authentication fails to enforce the allowed ip ranges of the owning user against the trusted client address during the resolution of ConfigProvider::validate api token into...

CVE-2026-94096 Netcore NBR200V2 LAN IP Configuration network_tools command injection

A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/networktools of the component LAN IP Configuration Handler. The manipulation of the argument ipv4 results in command injection. The attack may be launched...

CVE-2026-94096

CVE-2026-94096 is a command injection vulnerability in Netcore NBR200V2 firmware 1.3.241127.071246 , located in the LAN IP Configuration Handler component (file /usr/bin/network_tools). The injection is triggered by manipulating the ipv4 argument and can be launched remotely . The exploit is rate...