CVE-2026-80894 iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix wrong hwpt passed to iommufdautoresponsefaults on replace iommufdhwptreplacedevice calls: iommufdautoresponsefaultshwpt, oldhandle; passing the new hwpt together with the handle of the device's old domain. This shoul...

CVE-2026-18073 IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to inject parameters into a CL command due to improper neutralization of special elements...

CVE-2026-18073

CVE-2026-18073 affects the Debug Server component of IBM i (versions 7.3 through 7.6). A local authenticated attacker can inject parameters into a CL command due to improper neutralization of special elements (CWE-78, OS Command Injection). The CVSS 3.1 base score is 4.4 (Medium) , with impacts t...

EUVD-2026-71461

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to inject parameters into a CL command due to improper neutralization of special elements...

CVE-2026-18073 IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to inject parameters into a CL command due to improper neutralization of special elements...

CVE-2026-18221

IBM i versions 7.3 through 7.6 are vulnerable to improper authentication (CWE-287) in Distributed Data Management (DDM) / Distributed Relational Database Architecture (DRDA) . A remote attacker with no privileges or user interaction can gain unauthorized access by supplying crafted authentication...

CVE-2026-79419

A reflected cross-site scripting XSS vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is caused by insufficient validation and sanitization of the mensagem parameter in the /Configuracao/Imagens.aspx endpoint, allowing an authenticated attacker to...

CVE-2026-75170

Cross-site scripting XSS vulnerability in the /loginController/doLogin endpoint of the HubCore platform version 14.1.1 allows a remote unauthenticated attacker to inject arbitrary JavaScript into the application's response via the language POST parameter...

CVE-2026-75164

An arbitrary file read vulnerability in /cgi-bin/ugwdownload.cgi of MBS-Solutions X-Serie Gateway firmware V60005 allows a remote authenticated user with the low-privileged Standard role to retrieve arbitrary files from the device filesystem via the file query string parameter...

CVE-2026-19306

IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from the server filesystem — including server secret material secretkey, JWT signing keys, the application database, /proc/self/environ, and other tenants' upload directories — by supplying absolute pat...

EUVD-2026-71260

IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from the server filesystem — including server secret material secretkey, JWT signing keys, the application database, /proc/self/environ, and other tenants' upload directories — by supplying absolute pat...

CVE-2026-85687

surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /process routes that accept raw filepath parameters. Attackers can read any image or PDF file on the host by supplying arbitrary file paths to Image.open or pypdfium2.PdfDocument,...

CVE-2026-85685

AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.addskill that copies arbitrary server directories into the agent workspace via an unconfined source path parameter. Attackers can supply any directory path in the skillpath request parameter to copy files int...

CVE-2026-85676

Dub contains an open redirect vulnerability in the redirurl query parameter that is accepted on every short link without validation or domain allowlist enforcement. Attackers can append the redirurl parameter to any short link to redirect visitors to arbitrary external URLs through the trusted Du...

CVE-2026-85664

Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters maxneighbors, efconstruction, and efsearch in collection-create requests. Unauthenticated attackers can supply arbitrarily large parameter values to exhaust server memory and cause denial of service during index compaction...

CVE-2026-85668

Xinference affected commit 4a94832, v3.x contains an unauthenticated arbitrary-path file read vulnerability in the POST /v1/models/llm/auto-register endpoint, which accepts a caller-supplied modelpath parameter without authentication or path confinement. The endpoint reads and parses config.json,...

CVE-2026-85608

DouyinTikTokDownloadAPI through 4.1.2 contains a server-side request forgery vulnerability in the /api/download and /api/hybrid/videodata endpoints that allows unauthenticated attackers to fetch arbitrary URLs by supplying a url query parameter. Attackers can request internal services including...

CVE-2026-85687 surya 0.22.1 Unauthenticated Arbitrary File Read via screenshot server

surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /process routes that accept raw filepath parameters. Attackers can read any image or PDF file on the host by supplying arbitrary file paths to Image.open or pypdfium2.PdfDocument,...

CVE-2026-85687

CVE-2026-85687 affects the surya 0.22.1 screenshot server, where the /info, /page, and /process routes accept raw file_path parameters without validation. The unsanitized paths are passed directly to Image.open or pypdfium2.PdfDocument , allowing an unauthenticated attacker to read any image or P...

CVE-2026-85687 surya 0.22.1 Unauthenticated Arbitrary File Read via screenshot server

surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /process routes that accept raw filepath parameters. Attackers can read any image or PDF file on the host by supplying arbitrary file paths to Image.open or pypdfium2.PdfDocument,...