63944 matches found
EUVD-2026-58499
luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access backend container management routes without proper authorization checks. Attackers can exploit path traversal via /.%2E in the lxcname parameter to escape container directories a...
EUVD-2026-58549
luci-app-openvpn fails to properly validate the instancename2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outside the intended directory. Attackers can upload malicious payloads to gain persistent root code execution by placing SS...
EUVD-2026-58548
OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write,...
ROOT-APP-MAVEN-CVE-2026-5795 CVE-2026-5795 in org.eclipse.jetty.ee10:jetty-ee10-jaspi - Patched by Root
Root has patched CVE-2026-5795 in the org.eclipse.jetty.ee10:jetty-ee10-jaspi package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-2332 CVE-2026-2332 in org.eclipse.jetty:jetty-http - Patched by Root
Root has patched CVE-2026-2332 in the org.eclipse.jetty:jetty-http package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-1948 CVE-2025-1948 in org.eclipse.jetty.http2:jetty-http2-common - Patched by Root
Root has patched CVE-2025-1948 in the org.eclipse.jetty.http2:jetty-http2-common package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-5115 CVE-2025-5115 in org.eclipse.jetty.http2:jetty-http2-common - Patched by Root
Root has patched CVE-2025-5115 in the org.eclipse.jetty.http2:jetty-http2-common package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-11143 CVE-2025-11143 in org.eclipse.jetty:jetty-http - Patched by Root
Root has patched CVE-2025-11143 in the org.eclipse.jetty:jetty-http package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-10051 CVE-2026-10051 in org.eclipse.jetty:jetty-server - Patched by Root
Root has patched CVE-2026-10051 in the org.eclipse.jetty:jetty-server package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-1605 CVE-2026-1605 in org.eclipse.jetty:jetty-server - Patched by Root
Root has patched CVE-2026-1605 in the org.eclipse.jetty:jetty-server package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-10050 CVE-2026-10050 in org.eclipse.jetty:jetty-security - Patched by Root
Root has patched CVE-2026-10050 in the org.eclipse.jetty:jetty-security package for Root:Maven. Multiple fixed versions available...
CVE-2026-72842
The CVE-2026-72842 entry concerns luci-app-lxc on OpenWrt. It describes an ACL inconsistency that lets low-privileged, authenticated LuCI users access backend container management routes without proper authorization checks. A path traversal via /.%2E in the lxc_name parameter can escape container...
CVE-2026-72839
CVE-2026-72839 affects filebrowser up to version 2.63.16, where self-signup with default CreateUserDir permits accounts to inherit the server root scope with full create, modify, delete, rename, share, and download permissions. This unauthenticated access can reach all files, yielding high confid...
Malicious code in root-locator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ad4997bf5e31232686b0a816d477f72cb28a716c99908c6bf1d622643bb7695 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ROOT-APP-MAVEN-CVE-2026-34197 CVE-2026-34197 in org.apache.activemq:activemq-broker - Patched by Root
Root has patched CVE-2026-34197 in the org.apache.activemq:activemq-broker package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-41044 CVE-2026-41044 in org.apache.activemq:activemq-broker - Patched by Root
Root has patched CVE-2026-41044 in the org.apache.activemq:activemq-broker package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-39304 CVE-2026-39304 in org.apache.activemq:activemq-client - Patched by Root
Root has patched CVE-2026-39304 in the org.apache.activemq:activemq-client package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-40466 CVE-2026-40466 in org.apache.activemq:activemq-broker - Patched by Root
Root has patched CVE-2026-40466 in the org.apache.activemq:activemq-broker package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-42588 CVE-2026-42588 in org.apache.activemq:activemq-broker - Patched by Root
Root has patched CVE-2026-42588 in the org.apache.activemq:activemq-broker package for Root:Maven. Multiple fixed versions available...