CVE-2026-55626

xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process is launched with insufficient authentication mechanisms. A local authenticated attacker could exploit this...

CVE-2026-8170

The affected component is the mv, cp, and rm utilities in the ExtremeXOS (EXOS) shell. The vulnerability stems from unsafe path canonicalization and following symbolic links outside the intended privilege boundary, allowing a low-privilege attacker to reference privileged filesystem locations. An...

CVE-2026-63826

A flaw was found in the Linux kernel's framebuffer device fbdev component. When the storemodes function replaces a framebuffer's list of display modes, it fails to properly clear old pointers before freeing the old list. This can result in a use-after-free vulnerability, a type of memory...

CVE-2026-63824

A flaw was found in the Linux kernel's keyctlpkeyparamsget2 function within the KEYS subsystem. The vulnerability arises from an incorrect calculation of the internal output buffer's length, which can lead to a buffer overflow when a user-provided buffer is too small. This flaw could allow a loca...

CVE-2026-46555

WhatsApp MCP Server is a Model Context Protocol MCP server for WhatsApp, enabling Claude to read and send WhatsApp messages. Prior to version 0.2.1, the whatsapp-bridge HTTP API listens on 127.0.0.1:8080 without authentication and without Host header validation, and the /api/send endpoint accepts...

CVE-2026-35048

The Piwigo installer in versions 16.3.0 and earlier accepts POST parameters for database configuration and writes them directly into a PHP configuration file without proper sanitization. On PHP 8+, the addslashes protection is bypassed because it checks for getmagicquotesgpc, a function removed i...

CVE-2026-64099

A flaw was found in the Linux kernel's drm/v3d graphics driver. This vulnerability, a use-after-free error, occurs in the CPU job input/output control ioctl error path. When an error is encountered, the system attempts to access memory that has already been freed, which can lead to system...

CVE-2026-55626

xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process is launched with insufficient authentication mechanisms. A local authenticated attacker could exploit this...

CVE-2026-55626 xrdp: No authentication required with Xvnc backend on RHEL 9

xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process is launched with insufficient authentication mechanisms. A local authenticated attacker could exploit this...

CVE-2026-55626 xrdp: No authentication required with Xvnc backend on RHEL 9

xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process is launched with insufficient authentication mechanisms. A local authenticated attacker could exploit this...

CVE-2026-64073

A flaw was found in the Linux kernel, specifically within the irqwork subsystem when running on systems configured with PREEMPTRT. This vulnerability is a use-after-free, where the system attempts to access memory after it has been released. A local attacker could exploit this timing issue to cau...

CVE-2026-63800

A flaw was found in the Linux kernel's parallel Network File System pNFS component. An issue in the pnfsupdatelayout function causes a use-after-free vulnerability due to incorrect ordering of memory management operations. This flaw can be triggered when the system attempts to update a pNFS layou...

CVE-2026-46555

The CVE applies to WhatsApp MCP Server, where the whatsapp-bridge HTTP API on 127.0.0.1:8080 is unauthenticated and lacks Host header validation. The /api/send endpoint accepts an absolute media_path, enabling a local caller (including sibling MCP servers, IDE extensions, or other processes in th...

CVE-2026-46555 WhatsApp MCP: Unauthenticated bridge API allows message sending and arbitrary file exfiltration

WhatsApp MCP Server is a Model Context Protocol MCP server for WhatsApp, enabling Claude to read and send WhatsApp messages. Prior to version 0.2.1, the whatsapp-bridge HTTP API listens on 127.0.0.1:8080 without authentication and without Host header validation, and the /api/send endpoint accepts...

CVE-2026-64047

A flaw was found in the Linux kernel's Transport Layer Security TLS component. An off-by-one error in how memory is managed for network messages can lead to memory corruption. This vulnerability may allow a local attacker to cause the system to crash, resulting in a denial of service DoS...

CVE-2026-58482

In Network-AI, the ApprovalInbox HTTP surface (lib/approval-inbox.ts) exposes state-changing endpoints POST /approvals/:id/approve and /deny without authentication and with Access-Control-Allow-Origin: * across all routes. This allows any reachable actor to enumerate and approve high-risk actions...

CVE-2026-63830

A flaw was found in the Linux kernel's skmsg networking component. This vulnerability arises when the sg.copy bitmap, which controls memory access permissions, is not properly maintained during data transformations. This can allow a local attacker to bypass memory protection mechanisms, enabling...

CVE-2026-46701 Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.4.5, the MCP SSE server defaults to an empty secret process.env'NETWORKAIMCPSECRET' ?? '' at bin/mcp-server.ts:89, which causes isAuthorized lib/mcp-transport-sse.ts:254 to return true unconditionally for every reques...

CVE-2026-35048 Piwigo RCE via PHP Code Injection into Config File in Installer

The Piwigo installer in versions 16.3.0 and earlier accepts POST parameters for database configuration and writes them directly into a PHP configuration file without proper sanitization. On PHP 8+, the addslashes protection is bypassed because it checks for getmagicquotesgpc, a function removed i...

CVE-2026-35048 Piwigo RCE via PHP Code Injection into Config File in Installer

The Piwigo installer in versions 16.3.0 and earlier accepts POST parameters for database configuration and writes them directly into a PHP configuration file without proper sanitization. On PHP 8+, the addslashes protection is bypassed because it checks for getmagicquotesgpc, a function removed i...