65273 matches found
CVE-2026-54008
Summary of CVE-2026-54008 (Open WebUI) : The vulnerable code path in backend/open_webui/utils/oauth.py::_process_picture_url validates only the initial picture_url and then fetches it with aiohttp (session.get) using default redirect-follow behavior. This enables an attacker with a valid OAuth Id...
CVE-2026-54010 Open WebUI: Forged chat-file link allows cross-user file read and deletion
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI lets an authenticated user attach arbitrary fileid values to their own chat message without checking whether they own or can read those files. If the attacker then shares...
CVE-2026-54010
CVE-2026-54010 affects Open WebUI prior to version 0.9.6. An authenticated user could attach arbitrary file_id values to their own chat messages without ownership/read checks, and then leverage a forged chat-file link to access or delete the victim’s file via shared-chat authorization. The root c...
CVE-2026-27604
creationtimestamp| type| source ---|---|--- 2026-06-23 16:16:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxsdzkx7u2a...
EUVD-2026-38496
dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement route information handling that allows an unauthenticated same-link attacker to cause denial of service by sending crafted Router Advertisements. Attackers can repeatedly send...
CVE-2026-56116
dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement route information handling that allows an unauthenticated same-link attacker to cause denial of service by sending crafted Router Advertisements. Attackers can repeatedly send...
CVE-2026-56115
Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role enforcement in the JWTMiddleware function in internal/auth/auth.go, which validates JWT tokens and account status but...
CVE-2026-50023
yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files such as .desktop, .url, .webloc to the user's filesystem, bypassing the remediation for CVE-2024-38519. The allowlist explicitl...
CVE-2026-50023 yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)
yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files such as .desktop, .url, .webloc to the user's filesystem, bypassing the remediation for CVE-2024-38519. The allowlist explicitl...
CVE-2026-56114
dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds write vulnerability in dhcp6makemessage in src/dhcp6.c that allows unauthenticated same-link attackers to write beyond a fixed local buffer by serializing an oversized RFC6603 OPTIONPDEXCLUDE option body...
CVE-2026-10609
creationtimestamp| type| source ---|---|--- 2026-06-23 16:01:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxrkfzp7i2a...
CVE-2026-4610
creationtimestamp| type| source ---|---|--- 2026-06-23 15:58:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxrdorszy2l...
CVE-2026-12969
creationtimestamp| type| source ---|---|--- 2026-06-23 15:54:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxr5pmmtj2l...
CVE-2026-56248
creationtimestamp| type| source ---|---|--- 2026-06-23 14:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxmjserwm2r...
CVE-2026-56322
creationtimestamp| type| source ---|---|--- 2026-06-23 14:09:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxlc63flt2q...
CVE-2026-56222
creationtimestamp| type| source ---|---|--- 2026-06-23 14:02:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxkvowk242n...
CVE-2026-10711
creationtimestamp| type| source ---|---|--- 2026-06-23 13:54:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxkhdtk2l2t...
CVE-2025-71365
creationtimestamp| type| source ---|---|--- 2026-06-23 13:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxk6f6zbv2o...