CVE-2026-49114

In ONNX before 1.21.0, the saveexternaldata function builds the ex...

PT-2026-82801

A security vulnerability has been detected in RooCodeInc Roo-Code up to 3.51.1. This affects the function fetch instructions of the file malicious mcp server.py of the component MCP Integration Trust Model. The manipulation leads to code injection. The attack is possible to be carried out remotel...

PT-2026-82774

Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedomete...

TencentOS Server 3: 389-ds:1.4 (TSSA-2026:0909)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0909 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

The vulnerability of the punkt_pickle_load() function in the Natural Language processing and statistical processing library package allows a hacker to execute arbitrary code.

The vulnerability of the punktpickleload function in the NLTK library for symbolic and statistical processing of natural language is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

PT-2026-82701

Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

PT-2026-82754

Name of the Vulnerable Software and Affected Versions Redis versions prior to 8.2.9 Redis versions prior to 8.4.6 Redis versions prior to 8.6.6 Redis versions prior to 8.8.2 Redis versions prior to 8.10.1 Description A use-after-free issue exists in the tlsProcessPendingData function, which manag...

CVE-2026-35869

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

CVE-2026-30051

CVE-2026-30051 affects the free5gc v4.1.0 open-source 5G core network implementation. The vulnerability resides in the CreateUEContextProcedure function, reachable at the API endpoint /v1/ue-contexts/{supi} . An unauthenticated remote attacker can cause a Denial of Service by sending a crafted PU...

CVE-2026-30051

An issue in the CreateUEContextProcedure function /v1/ue-contexts/supi of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted PUT request...

PT-2026-82530

Improper input validation in the buildFilter function processor/processor.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-35868

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of LB-link Router AC2100AZ3 V1.0.4. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

PT-2026-82758

A NULL pointer dereference in the get min buffer size function /libswscale/slice.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...

CVE-2026-38347

A heap overflow in the ffswsalphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-82534

An issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-82535

An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-67119

An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-67114

Improper input validation in the buildFilter function processor/processor.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-82521

An issue in the ModifyAMFEventSubscriptionProcedure function processor/event exposure.go of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted PATCH request...

PT-2026-82707

Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...