CVE-2026-49472

CVE-2026-49472 affects FreeSWITCH (pre-1.11.0). The issue is a vulnerable PREFIX(prologTok)() in libs/xmlrpc-c/lib/expat/xmltok/xmltok_impl.c, cloned from an outdated libexpat lacking a security patch. Root cause: missing patch in the referenced expat-derived code. Impact: potential network-expos...

CVE-2025-32788 OctoPrint Authenticated Reverse Proxy Page Authentication Bypass

OctoPrint provides a web interface for controlling consumer 3D printers. In versions up to and including 1.10.3, OctoPrint has a vulnerability that allows an attacker to bypass the login redirect and directly access the rendered HTML of certain frontend pages. The primary risk lies in potential...