Exploit for CVE-2026-103437

CVE-2026-103437: ReadingLists imported canonical URL XSS Repo...

CVE-2026-46711

Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, the workspace HTTP service that listens on 0.0.0.0:8080 inside each sm-ws- Fly Machine exposes endpoints /health, /file/, /archive/ without any authentication or origin check. Any ho...

PYSEC-2026-4186

A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has bee...

PYSEC-2026-4186

A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has bee...

CVE-2026-103241

A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has bee...

CVE-2026-103241 vllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of service

A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has bee...

CVE-2026-103241 vllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of service

A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has bee...

CVE-2026-103241

A flaw in the vllm-project vLLM software (versions up to 0.26.0 ) affects the Gemma4UnifiedParser component, specifically within the file rust/src/parser/src/unified/gemma4.rs. An attacker can execute a remote manipulation to trigger a denial of service (DoS). The vulnerability is categorized as ...

EUVD-2026-90191

A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has bee...

CVE-2026-100269

In JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorized Reporters list could be bypassed...

CVE-2026-100262

In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates...

CVE-2026-100258

In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings...

CVE-2026-100280

In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible...

CVE-2026-100280

In JetBrains YouTrack versions prior to 2026.2.19197 , a vulnerability exists that allows the creation of a project from an unreadable custom template . This issue is associated with a Missing Authorization flaw (CWE-862). No specific exploit details or remediation instructions are provided in th...

CVE-2026-100274

In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template...

EUVD-2026-90018

In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template...

CVE-2026-100272

In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...

CVE-2026-100269

In JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorized Reporters list could be bypassed...

EUVD-2026-90012

In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates...

CVE-2026-100269

In JetBrains YouTrack versions prior to 2026.2.19197 , a vulnerability exists where the Authorized Reporters list for helpdesk projects could be bypassed. This flaw allows for unauthorized access or actions regarding reporter permissions. No specific exploit details or remediation instructions ar...