CVE-2026-88964

A flaw was found in OpenVPN. An integer underflow vulnerability allows a remote authenticated server to trigger a Denial of Service DoS or disclose sensitive memory contents on connected client systems. By providing specially crafted domain search options, a malicious or compromised server can...

CVE-2026-84471

A flaw was found in OpenVPN due to an incomplete fix for a previously identified use-after-free memory vulnerability. A remote authenticated peer can exploit this issue by sending specially crafted network packets during Transport Layer Security TLS session promotion or expiration. Successful...

CVE-2026-73260

A flaw was found in Mongoose. The built-in Transport Layer Security TLS certificate parser fails to verify that element lengths fit within the remaining certificate buffer, leading to an out-of-bounds memory read. An unauthenticated remote attacker can exploit this vulnerability by presenting a...

CVE-2026-73261

A flaw was found in Mongoose. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS by sending network packets with malformed TCP options. Due to improper length validation in the built-in TCP/IP stack, these crafted packets corrupt connection settings,...

CVE-2026-73252

A flaw was found in Mongoose. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a specially crafted Transport Layer Security TLS record to an affected server. Due to improper message length validation in the built-in TLS implementation, processing the malformed recor...

CVE-2026-59951

A flaw was found in the Model Context Protocol MCP Python SDK. Stateful streamable HTTP servers fail to enforce idle session expiration or limits on active sessions, preventing terminated or rejected requests from releasing their resources. A remote attacker can exploit this issue by repeatedly...

CVE-2026-55453

A flaw was found in CUPS. A remote attacker controlling a network printer can achieve arbitrary code execution by returning crafted printer status messages containing newline characters. The CUPS Internet Printing Protocol IPP backend fails to sanitize line breaks in status attributes, allowing...

CVE-2026-87018

The undici HTTP client library for Node.js is vulnerable to a Denial of Service (DoS) in versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1. The root cause is an uncaught assertion triggered when a TLS 1.2 server performs a certificate-changing renegotiation. If the ser...

CVE-2026-87018 undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation

undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, the client process crashes when a TLS 1.2 server renegotiates after the connection is established and presents a different, CA-trusted certificate whose hostname does no...

EUVD-2026-102318

undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, the client process crashes when a TLS 1.2 server renegotiates after the connection is established and presents a different, CA-trusted certificate whose hostname does no...

CVE-2026-87018

undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, the client process crashes when a TLS 1.2 server renegotiates after the connection is established and presents a different, CA-trusted certificate whose hostname does no...

CVE-2026-105660

The bandit web framework (versions 0.6.0 before 1.13.0 ) is vulnerable to an Improper Validation of Syntactic Correctness of Input (CWE-1286) issue. An unauthenticated remote attacker can manipulate the conn.host and conn.port values by providing an HTTP/1 absolute-form or authority-form request ...

CVE-2026-105660 Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit

Improper Validation of Syntactic Correctness of Input vulnerability in mtrudel bandit allows an unauthenticated remote attacker to set conn.host and conn.port to values outside the RFC 3986 host grammar via the authority of an HTTP/1 absolute-form or authority-form request target. Bandit validate...

EUVD-2026-102317

Improper Validation of Syntactic Correctness of Input vulnerability in mtrudel bandit allows an unauthenticated remote attacker to set conn.host and conn.port to values outside the RFC 3986 host grammar via the authority of an HTTP/1 absolute-form or authority-form request target. Bandit validate...

MessagePack: Nested arrays can blow past buffer length limits

Impact MessagePack-CSharp is vulnerable to denial of service through excessive memory allocation when deserializing attacker-controlled data into System.Object. When PrimitiveObjectFormatter encounters an array, it allocates an object using the declared array length before enforcing the configure...

CVE-2026-95127

A flaw was found in libass. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS by providing specially crafted subtitle input. When processed by the outline construction routine assoutlineconstruct, the malformed data triggers an unexpected failure that causes the...

SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit

= doi.org/10.5281/zenodo.18278825 = orcid.org/0009-0007-7728-256X RECONSTRUCTIONANALYSIS CVE-2026-21858: Ni8mare - n8n RCE Full Chain Exploit 1. Executive Summary & Overview This document presents a deterministic technical reconstruction analysis of the CVE-2026-21858 vulnerability, internally...

CVE-2026-31431

CVE-2026-31431 - Copy Fail Copy Fail is a logic bug in the Linux kernel's crypto subsystem CVE-2026-31431. A 2017 optimization in algifaead.c accidentally placed page cache pages into a writable scatterlist. The authencesn AEAD algorithm writes 4 scratch bytes past the output boundary during...

CVE-2026-31281

CVE-2026-31281 Description Totara LMS is vulnerable to HTLM Injection. An attacker can inject malicious HTLM code in a message and send it to all the users in the application, resulting in executing the code and may lead to session hijacking and executing commands on the victim's browser CVSS 3...

Dissecting-CVE-2026-0628-Chromium-Extension-Privilege-Escalation

= doi.org/10.5281/zenodo.18413764 = orcid.org/0009-0007-7728-256X README.md CVE-2026-0628: Chromium WebView Privilege Escalation Origin Spoofing – Technical Research & Proof-of-Concept Author: Sastra Adi Wiguna Purple Elite Teaming Research Date: January 2026 CVE ID: CVE-2026-0628 CVSS v3.1: 8.8...