CVE-2026-126461

OpenEMR before 8.5.0 contains a missing authorization vulnerability in library/ajax/usersettings.php that lets any authenticated user persist arbitrary global configuration overrides. Attackers can POST global:-prefixed keys to re-point external service hosts like CouchDB, eRx, phiMail, or SMTP t...

EUVD-2026-124963

OpenEMR before 8.5.0 contains a missing authorization vulnerability in library/ajax/usersettings.php that lets any authenticated user persist arbitrary global configuration overrides. Attackers can POST global:-prefixed keys to re-point external service hosts like CouchDB, eRx, phiMail, or SMTP t...

CVE-2026-126461 OpenEMR before 8.5.0 Missing Authorization via user_settings.php Global Override

OpenEMR before 8.5.0 contains a missing authorization vulnerability in library/ajax/usersettings.php that lets any authenticated user persist arbitrary global configuration overrides. Attackers can POST global:-prefixed keys to re-point external service hosts like CouchDB, eRx, phiMail, or SMTP t...

CVE-2026-126461 OpenEMR before 8.5.0 Missing Authorization via user_settings.php Global Override

OpenEMR before 8.5.0 contains a missing authorization vulnerability in library/ajax/usersettings.php that lets any authenticated user persist arbitrary global configuration overrides. Attackers can POST global:-prefixed keys to re-point external service hosts like CouchDB, eRx, phiMail, or SMTP t...

gate0

gate0 A small, auditable, terminating, deterministic micro-policy engine. Why Gate0? I built Gate0 because I was tired of debugging RegEx-based policies in production. I wanted something that was boring, bounded, and impossible to crash. If you want a flexible, general-purpose policy engine, you...

next-picomatch-cve-repro

Next.js bundled picomatch CVE-2026-33671 repro Minimal reproduction for: Next.js 16.2.4 ships with picomatch 4.0.3 vendored at nodemodules/next/dist/compiled/picomatch/, which is affected by CVE-2026-33671 HIGH. npm overrides cannot reach the bundled copy. Steps npm install 1. Inspect the vendore...

CVE-2026-123867

A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a protected hostname it is not authorized for. When a TLS server assigns a hostname a different client-certificate CA with server.addContexthost, ca: protectedCA but no server certificate...

CVE-2026-99186

A flaw was found in the Linux kernel's x86 instruction evaluation component. A local user can exploit this vulnerability to cause a Denial of Service DoS by executing instructions with segment register overrides that trigger an infinite loop during instruction decoding. This condition traps the...

CVE-2026-119707

SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collection and /api/content write routes that only check coarse role labels. Authenticated authors or editors can use a bearer JWT or API key to create, modify, publish, or soft-delete other users' documents,...

CVE-2026-116019

Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to invoke arbitrary public static methods by relocating data-@ directives with unset-name@ or integer keys. Attackers with page-edit permission can embed crafted fields in Flex form overrides in page...

CVE-2026-116019

Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to invoke arbitrary public static methods by relocating data-@ directives with unset-name@ or integer keys. Attackers with page-edit permission can embed crafted fields in Flex form overrides in page...

EUVD-2026-109277

Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to invoke arbitrary public static methods by relocating data-@ directives with unset-name@ or integer keys. Attackers with page-edit permission can embed crafted fields in Flex form overrides in page...

PT-2026-122600

Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to invoke arbitrary public static methods by relocating data-@ directives with unset-name@ or integer keys. Attackers with page-edit permission can embed crafted fields in Flex form overrides in page...

EEF-CVE-2026-81856 Terminal escape sequence injection in Hex via unneutralized server-supplied output

Summary Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in hexpm hex allows a malicious package publisher or a hostile repository server to inject terminal control sequences into the output of Mix tasks. Hex prints strings supplied by the package repository and the...

CVE-2026-27159

Before this fix, model-driven TTS directives accepted provider overrides by default. A reply containing "tts:provider=..." could switch TTS provider for that reply...

CVE-2026-81856: Improper Neutralization of Escape, Meta, or Control Sequences

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in hexpm hex allows a malicious package publisher or a hostile repository server to inject terminal control sequences into the output of Mix tasks. Hex prints strings supplied by the package repository and the documentati...

PT-2026-117907

Security vulnerability affects the airflow-3 package. The Config API in Apache Airflow surfaced per-key secrets-backend overrides environment variables like AIRFLOW SECRETS BACKEND KWARG SECRET ID and AIRFLOW WORKERS SECRETS BACKEND KWARG SECRET ID as synthetic config options whose option names...

CVE-2026-106440

A flaw was found in hydra-optuna-sweeper. This vulnerability allows an attacker who controls sweep configuration settings or command-line overrides to achieve arbitrary code execution. The component dynamically resolves and invokes callable objects specified in user-controlled configuration paths...

PT-2026-99781

Name of the Vulnerable Software and Affected Versions Modules Anywhere versions 1.5.0 through 9.0.5 Description Modules Anywhere Pro allows additional attributes on a module tag to replace arbitrary parameters of the selected module, a feature enabled by default. These overrides are applied witho...

PT-2026-99284

Name of the Vulnerable Software and Affected Versions capgo.app affected versions not specified Description The transfer app database function fails to delete or revalidate existing rows in channel permission overrides when transferring an app, its channels, versions, and related records to a...