EUVD-2026-109936

Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases googleapis/mcp-toolbox versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local...

Security Bulletin:Multiple vulnerabilities in bcpkix-jdk18on may affect IBM Infosphere Change Data Capture (CVE-2026-17508, CVE-2026-18036)

Summary Multiple security vulnerabilities have been identified in bcpkix-jdk18on, the Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. bcpkix-jdk18on is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the...

Red Hat Data Grid 8 information disclosure vulnerability

Red Hat Data Grid 8 has an information disclosure vulnerability. This vulnerability arises because Infinispan Operator passes the passwords for keystore and truststore via plaintext command-line parameters when enabling cross-site TLS. As a result, entities with get pods privileges, node-level...

Linux Distros Unpatched Vulnerability : CVE-2026-110879

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its generic arguments, even when those classes...

CVE-2026-116203

The YesWiki software, in versions prior to 4.7.0 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw within the filtertags action. The root cause is the lack of output encoding when the application echoes attacker-controlled token values. Specifically, anonymous attackers can inject marku...

CVE-2026-116203 YesWiki before 4.7.0 Stored XSS via filtertags Action Parameters

YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags action, which echoes attacker-controlled token values without output encoding. Anonymous attackers can inject markup via action-attribute parameters that bypasses the allowrawhtml gate, executing JavaScrip...

CVE-2026-116203 YesWiki before 4.7.0 Stored XSS via filtertags Action Parameters

YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags action, which echoes attacker-controlled token values without output encoding. Anonymous attackers can inject markup via action-attribute parameters that bypasses the allowrawhtml gate, executing JavaScrip...

Security Bulletin: IBM MQ Appliance is affected by an improper validation vulnerability (CVE-2026-12550)

Summary IBM MQ Appliance has addressed an improper validation vulnerability that could allow an authenticated attacker to obtain sensitive information or cause a denial of service. Vulnerability Details CVEID:CVE-2026-12550 DESCRIPTION: IBM MQ could allow an authenticated attacker to obtain...

CVE-2026-114621

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request query parameters, including contain, conditions, fields, finder, and order, directly to the ORM as options. A user able to l...

EUVD-2026-108991

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request query parameters, including contain, conditions, fields, finder, and order, directly to the ORM as options. A user able to l...

CVE-2026-50053 Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL Parameters

A request attribute override vulnerability in Zimbra Collaboration Suite ZCS allows unauthenticated requests to /h/ to populate servlet attributes intended for trusted internal dispatch. RestFilter copies URL parameters specifying an authentication token, target account, target item and dispatch...

CVE-2026-50053

The Zimbra Collaboration Suite (ZCS) contains a request attribute override vulnerability where unauthenticated requests to /h/* can populate servlet attributes used for trusted internal dispatch. The RestFilter component improperly copies URL parameters—including authentication tokens , target ac...

CVE-2026-98744

A flaw was found in the Linux kernel's MAX98363 audio codec driver. A local user could trigger this vulnerability during audio stream configuration because internal stream parameters are left uninitialized in memory. This issue allows uninitialized values to be processed by the sound subsystem,...

PT-2026-122100

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request query parameters, including contain, conditions, fields, finder, and order, directly to the ORM as options. A user able to l...

CLSA-2026-1792688250 pcs: Fix of 4 CVEs

Fix CVE-2025-46727: limit number and bytesize of query parameters in bundled rubygem rack - Fix CVE-2025-61919: bound the read of urlencoded request bodies in bundled rubygem rack - Fix CVE-2025-61771: limit multipart data retained in memory in bundled rubygem rack - Fix CVE-2025-61772: limit the...

Exploit for Code Injection in Geoserver

CVE-2024-36401 — GeoServer OGC filter evaluation RCE PoC and...

CLSA-2026-1778071148 openssl: Fix of 5 CVEs

CVE-2026-28387: fix use of OPENSSLfree instead of X509free on dane-mcert in danematch X509 reference-count bypass / UAF - CVE-2026-28388: fix NULL deref in checkdeltabase when a delta CRL carries the Delta CRL Indicator extension but lacks a CRL Number - CVE-2026-28389: fix NULL deref in...

FreeBSD : jackson-databind -- type parameters bypass the polymorphic type validator (8c1b47e2-cf3d-11f1-a655-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8c1b47e2-cf3d-11f1-a655-3497f65b111b advisory. The Jackson project reports: Type parameters of generic type ids, and element types of array type ids,...

OpenBao log information leakage vulnerability

Versions prior to OpenBao 2.6.3 and versions 2.7.0 through 2.7.1 contain a log information leakage vulnerability. This vulnerability arises when plugin parameters such as malformed TypeKVPair or TypeHeader field values are sent, resulting in error messages containing sensitive inputs being logged...

CVE-2026-114055

A flaw was found in vLLM. A remote attacker can cause a Denial of Service DoS by supplying manipulated multimodal processing parameters with excessively large image, frame, or patch values. Because the application processes these unvalidated parameters directly, it exhausts available memory and...