EUVD-2026-78169

Takahe through 0.11.0 fails to restrict URL schemes in link hrefs within federated post content and profile summaries, allowing remote actors to inject javascript: links. Attackers can deliver federated content with malicious javascript: hrefs that execute in the instance origin when clicked,...

PT-2026-92122

Concrete CMS 9 before 9.5.3 was vulnerable to stored cross-site scripting XSS in the Feature, Feature Link, Hero Image, and Image blocks and before Concrete 8.5.21 in the feature and Image blocks because the external link URL was insufficiently validated by the link filter and was rendered withou...

CVE-2026-90881: Exposure of Sensitive Information to an Unauthorized Actor

A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the...

PT-2026-92095

Name of the Vulnerable Software and Affected Versions Vikunja versions prior to 2.6.0 Description Improper validation of link-share tokens in the v2 API user search endpoints allows attackers possessing a read-only share link to enumerate project users through the 'projects' endpoint and verify t...

CVE-2026-91003: Stack-based Buffer Overflow

A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzglasp of the file /rzgl.asp of the component CGI Service. This manipulation of the argument redircturl causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-18111: Missing Authentication for Critical Function

Concrete CMS 9 before 9.5.3 was vulnerable to stored cross-site scripting XSS in the Feature, Feature Link, Hero Image, and Image blocks and before Concrete 8.5.21 in the feature and Image blocks because the external link URL was insufficiently validated by the link filter and was rendered withou...

The vulnerability of the SetWan3Settings function in the WAN Settings component of D-Link DIR-878 wireless routers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SetWan3Settings function in the WAN Settings component of the D-Link DIR-878 wireless router’s microprogramming system is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the strcpy function in the HNAP1 component of D-Link’s DIR-823G router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the strcpy function in the HNAP1 component of D-Link DIR-823G microprogrammed router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the SetDynamicDNSIPv6Settings function in the Dynamic DNS IPv6 Settings component of the D-Link DIR-878 wireless router allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SetDynamicDNSIPv6Settings function in the Dynamic DNS IPv6 Settings component of the D-Link DIR-878 wireless router lies in the fact that the operation’s output is stored outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise...

PT-2026-98970

A weakness has been identified in GNU Binutils 2.47. This impacts the function elf link add object symbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could...

PT-2026-93222

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A Reflected Cross-Site Scripting issue exists where an attacker can craft a malicious link. If a legitimate user interacts with this link, it may cause the user...

CVE-2026-83348: Improper Privilege Management

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create DB Link privilege with network access via Oracle Net to compromise RDBM...

PT-2026-92373

In link load gnss image of link device.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-91001: Stack-based Buffer Overflow

A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddnsasp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results in stack-based buffer overflow. The attack can be initiate...

CVE-2026-90880: Improper Neutralization of Special Elements used in a Command

A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/NewGUI/Set/Diagnostics.asp of the component Diagnostics. Performing a manipulation of the argument Addr results in command injection. The attack may be initiated remotely...

CVE-2026-79699: Improper Link Resolution Before File Access

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

CVE-2026-79699: Improper Link Resolution Before File Access

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

CVE-2026-91985: Exposure of Sensitive Information to an Unauthorized Actor

Vikunja before 2.6.0 fails to properly restrict access to the link-share hash field in single-share read endpoints, allowing read-only members to obtain the share's secret credential. Attackers can exchange the disclosed hash for a link-share JWT at the share's permission level to escalate...

CVE-2026-91981: Exposure of Sensitive Information to an Unauthorized Actor

Vikunja versions before 2.6.0 fail to properly validate link-share tokens in the v2 API user search endpoints. Attackers with a read-only share link can enumerate project users via the projects endpoint and confirm arbitrary usernames exist via the global search endpoint...

PT-2026-93219

On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss...