CVE-2026-101053 Thinkware U3000 TCP Service wpa_supplicant.conf PUT_FILE access control

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUTFILE of the file /tmp/wpasupplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls. The attack may be launched remotely. The exploit...

EUVD-2026-88221

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUTFILE of the file /tmp/wpasupplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls. The attack may be launched remotely. The exploit...

CVE-2026-101053 Thinkware U3000 TCP Service wpa_supplicant.conf PUT_FILE access control

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUTFILE of the file /tmp/wpasupplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls. The attack may be launched remotely. The exploit...

CVE-2026-101040

A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. T...

CVE-2026-101039

A vulnerability was identified in FAST FAC1900R 201908272.0.2. Affected by this issue is the function copymsgelement of the component devdiscover Service. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be...

CVE-2026-101052 refly-ai refly JWT Token app.config.ts hard-coded credentials

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...

CVE-2026-101052

The refly-ai refly software, version up to 1.1.0 , contains a security vulnerability in the JWT Token Handler component. The issue originates from the file apps/api/src/modules/config/app.config.ts, where unknown processing leads to the exposure of hard-coded credentials . This vulnerability can ...

EUVD-2026-88217

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...

CVE-2026-101052 refly-ai refly JWT Token app.config.ts hard-coded credentials

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...

CVE-2026-94398

A flaw was found in Elasticsearch. An authenticated remote attacker can exploit this vulnerability by submitting requests that trigger disproportionate memory allocation. This excessive resource consumption can lead to process termination and a Denial of Service DoS for the service. Mitigation...

CVE-2026-101039 FAST FAC1900R devdiscover Service copy_msg_element stack-based overflow

A vulnerability was identified in FAST FAC1900R 201908272.0.2. Affected by this issue is the function copymsgelement of the component devdiscover Service. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be...

CVE-2026-101039 FAST FAC1900R devdiscover Service copy_msg_element stack-based overflow

A vulnerability was identified in FAST FAC1900R 201908272.0.2. Affected by this issue is the function copymsgelement of the component devdiscover Service. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be...

CVE-2026-101039

A stack-based buffer overflow vulnerability exists in the devdiscover Service of FAST FAC1900R 20190827_2.0.2 . The flaw is located in the copy_msg_element function and can be triggered remotely. An exploit is publicly available and may be used for exploitation. The vendor has not responded to th...

EUVD-2026-88211

A vulnerability was identified in FAST FAC1900R 201908272.0.2. Affected by this issue is the function copymsgelement of the component devdiscover Service. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be...

CVE-2026-94408

A flaw was found in Elasticsearch. An authenticated remote attacker with high privileges can cause a Denial of Service DoS by triggering excessive resource allocation. Successful exploitation can lead to system resource exhaustion, rendering the service unresponsive or unavailable to legitimate...

CVE-2026-101017

A flaw was found in OpenDMARC. A NULL pointer dereference occurs in the strcasecmp call within libopendmarc/opendmarcpolicy.c during subdomain walking when processing Domain-based Message Authentication, Reporting, and Conformance DMARC records. A remote attacker could exploit this flaw by sendin...

CVE-2026-101018

A vulnerability was determined in dayrui XunruiCMS up to 4.7.2. This issue affects the function groupalledit of the file dayrui/App/Member/Controllers/Admin/Home.php of the component Group Editing. This manipulation of the argument groupid causes sql injection. The attack is possible to be carrie...

CVE-2026-101037

A vulnerability was found in FAST FAC1200R 5.0202011191.0.2. Affected is the function parseadvertisementframe of the component devdiscover Service. The manipulation results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The...

CVE-2026-101035

A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component nr-gnb. Executing a manipulation can lead to uncaught exception. The attack can be launched remotely. The exploit has been published and ma...

CVE-2026-101037

A stack-based buffer overflow vulnerability exists in the devdiscover Service of FAST FAC1200R 5.0_20201119_1.0.2 . The flaw is located in the parse_advertisement_frame function and can be triggered remotely. Public exploits for this vulnerability are available. The vendor has not provided a resp...