BIT-MONGODB-2026-18712 Improper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unauthorized Modification of Other Collections

An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain...

CVE-2026-100680

Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import...

EUVD-2026-87653

Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import...

CVE-2026-100680 Budibase before 3.45.0 Arbitrary Local File Read via OpenAPI Import

Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import...

CVE-2026-100680

Budibase versions prior to 3.45.0 are vulnerable to an arbitrary local file read vulnerability due to the failure to disable external JSON reference resolution in the OpenAPI/Swagger import validator . An authenticated user with builder access can submit OpenAPI specifications containing file:// ...

CVE-2026-100680 Budibase before 3.45.0 Arbitrary Local File Read via OpenAPI Import

Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import...

CVE-2026-100680 Budibase before 3.45.0 Arbitrary Local File Read via OpenAPI Import

Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import...

CVE-2026-100680: Exposure of Sensitive Information to an Unauthorized Actor

Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import...

The vulnerability of the Go programming language, related to the tracking of symbolic references, allows attackers to escalate their privileges.

The vulnerability of the Go programming language is related to the tracking of symbolic references. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2026-97452

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references Prevent adding references for local, argument, and debug objects in acpiutcopysimpleobject...

DEBIAN-CVE-2026-97452

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references Prevent adding references for local, argument, and debug objects in acpiutcopysimpleobject...

AZL-104012 CVE-2026-97452 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references Prevent adding references for local, argument, and debug objects in acpiutcopysimpleobject...

UBUNTU-CVE-2026-97452

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references Prevent adding references for local, argument, and debug objects in acpiutcopysimpleobject...

kernel: ipvs: do not propagate one-packet flag to synced conns

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When a synced connection is established, it can incorrectly inherit a "one-packet" flag from its destination. This misconfiguration causes the connection's expiry process to mishandle its cleanup, leaving behind stale memory...

CVE-2026-97452

The Linux kernel is affected by a vulnerability in the ACPICA component. The issue stems from the acpi_ut_copy_simple_object() function, which incorrectly allowed the addition of invalid references for local, argument, and debug objects . This vulnerability has been resolved in the kernel. No spe...

CVE-2026-97452 ACPICA: Prevent adding invalid references

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references Prevent adding references for local, argument, and debug objects in acpiutcopysimpleobject...

CVE-2026-97452 ACPICA: Prevent adding invalid references

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references Prevent adding references for local, argument, and debug objects in acpiutcopysimpleobject...

EUVD-2026-86065

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references Prevent adding references for local, argument, and debug objects in acpiutcopysimpleobject...

kernel: ipvs: do not propagate one-packet flag to synced conns

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When a synced connection is established, it can incorrectly inherit a "one-packet" flag from its destination. This misconfiguration causes the connection's expiry process to mishandle its cleanup, leaving behind stale memory...

CVE-2026-97452

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references Prevent adding references for local, argument, and debug objects in acpiutcopysimpleobject...