CVE-2026-47671 Nhost CLI local configserver allows cross-origin unauthenticated read/write access to local development configuration and secrets

Nhost is an open source Firebase alternative with GraphQL. In versions of Nhost CLI prior to 1.46.0, the hidden nhost configserver used by nhost dev exposes the Mimir GraphQL API with dummy authorization directives and permissive CORS. When a developer is running the local development environment...

CVE-2026-47671

Nhost CLI prior to 1.46.0 exposes an unauthenticated, cross-origin-configurable configserver via nhost dev. The hidden configserver serves Mimir GraphQL with dummy authorization and permissive CORS (Access-Control-Allow-Origin: *). An attacker-controlled web page can reach localhost and perform q...

CVE-2026-47671 Nhost CLI local configserver allows cross-origin unauthenticated read/write access to local development configuration and secrets

Nhost is an open source Firebase alternative with GraphQL. In versions of Nhost CLI prior to 1.46.0, the hidden nhost configserver used by nhost dev exposes the Mimir GraphQL API with dummy authorization directives and permissive CORS. When a developer is running the local development environment...

CVE-2026-63880

A flaw was found in the Linux kernel's drm/amdgpu graphics driver. An unprivileged local attacker with access to /dev/dri/renderD can trigger an out-of-memory condition during a specific graphics operation, leading to a resource lock not being released. This lock leak causes subsequent operations...

GHSA-V396-V7Q4-X2QJ GitPython unsafe clone option gate bypass through joined short options

GitPython version 3.1.50 blocks unsafe git clone options such as --upload-pack, -u, --config, and -c unless callers explicitly pass allowunsafeoptions=True. However, the default unsafe-option gate does not recognize joined short-option forms such as -u/path/to/helper. Git itself accepts -u as the...

CVE-2026-65068

CVE-2026-65068 affects Data::SpatialHash::Shared prior to 0.02 for Perl. The code opens a shared mmap backing file with open(path, O_RDWR|O_CREAT, 0666) and creates the file with mode 0666 (often 0644 under default umask) in a world‑readable location (e.g., /tmp or /dev/shm). Because O_NOFOLLOW i...

CVE-2026-63860

A flaw was found in the Linux kernel's RDMA/core component. This vulnerability arises from the improper handling of Netlink Attribute NLA strings, where attributes evaluated as C-strings do not properly check for a null terminator. A local attacker could potentially provide specially crafted inpu...

kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...

CVE-2026-63952

A flaw was found in the Linux kernel's memfd component. When the SEALEXEC flag is used to create a memory file descriptor, the SEALWRITE flag is implicitly applied to prevent writing to executable memory. However, this implicit write protection is applied after checks that should deny writable...

CVE-2026-63988

A flaw was found in the Linux kernel's bridge module. A local user, by interacting with the sysfs path for bridge port attributes, could trigger a 'sleep in atomic context' issue. This occurs because the brportstore function, while holding a lock that requires an atomic context, calls a function...

libssh: libssh: authentication bypass via missing GSSAPI principal check

A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users...

CVE-2026-63917

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET SDK Microsoft.NET.Build.Containers. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A tampering...

EUVD-2026-44394

Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerability...

GHSA-55JH-FWMH-39M4 Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET SDK Microsoft.NET.Build.Containers. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A tampering...

CVE-2026-15789

The CVE-2026-15789 entry describes a vulnerability in the BuildKit daemon where a malicious client can bypass destination directory validation during local sources uploads, allowing files to escape the BuildKit-controlled state directory. Exploitation requires the attacker to have valid permissio...

CVE-2026-15789 Malicious client can bypass destination directory validation on local sources upload

A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc...

CVE-2026-15789 Malicious client can bypass destination directory validation on local sources upload

A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc...

EUVD-2026-44400

Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability...

acl: Symlink traversal privilege escalation via libacl functions

A flaw was found in the acl package, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list ACL read or write operations to...