79096 matches found
CVE-2026-77932
DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock getuserfromheaders function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's unsandbox...
CVE-2026-77932 DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent
DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock getuserfromheaders function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's unsandbox...
CVE-2026-77932 DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent
DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock getuserfromheaders function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's unsandbox...
CLEANSTART-2026-ZB05903 On Windows, when the target of Root
CVE-2026-56857 affects multiple packages. On Windows, when the target of Root. See references for individual vulnerability details...
CLEANSTART-2026-WY78663 On Linux, if the target of Root
Security vulnerability affects the grafana-fips package. On Linux, if the target of Root...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46064)
In the Linux kernel, the following vulnerability has been resolved: ibmasm: fix heap over-read in ibmasmsendi2omessage The ibmasmsendi2omessage function uses getdotcommandsize to compute the byte count for memcpytoio, but this value is derived from user-controlled fields in the dotcommandheader...
Red Hat: CVE-2026-113812: perl-mozilla-ca: Mozilla::CA: TLS server impersonation via compromised intermediate certificates
Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. The bundle includes "emSign ECC Root CA - G3", which provides a trust path for intermediate certificates whose private keys are publicly available. An attacker able...
PT-2026-117950
Name of the Vulnerable Software and Affected Versions DB-GPT versions prior to 0.8.3 Description An unauthenticated remote code execution issue exists because the /api/v1/chat/react-agent endpoint uses a mock get user from headers function that assigns the admin role to all callers regardless of...
PT-2026-117951
DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL ROOT PASSWORD and publishes port 3306 on all interfaces. Attackers reaching port 3306 or the shared dbgptnet network can authenticate as root@% to gain full database acce...
PT-2026-118286
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system...
ProSoft RLX-IFH24E version 2.2.44 Unsigned Upgrade Package Root Command Execution
ProSoft RLX-IFH24E version 2.2.44 firmware upgrades do not verify package authenticity, allowing an authenticated attacker to upload a crafted package that executes commands as root on the appliance. https://packetstorm.news/download/236509...
PT-2026-119044
Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. The bundle includes "emSign ECC Root CA - G3", which provides a trust path for intermediate certificates whose private keys are publicly available. An attacker able...
PT-2026-118361
Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on th...
PT-2026-118476
Name of the Vulnerable Software and Affected Versions Froxlor versions prior to 2.3.15 Description A symlink following issue exists in the Statistics::makeChownWithNewStats function. Authenticated customers can exploit this by replacing the goaccess statistics directory in their document root wit...
PT-2026-120334
Certifi versions before 2026.10.18 include the emSign ECC Root CA - G3 root certificate in their bundled CA store. Eight eMudhra intermediate CA certificates that chain to this root have compromised private keys and the CA has revoked them. An attacker with one of the compromised keys can issue...
PT-2026-120150
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink set root pwd of the file /mnt/mtd/aoni ipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of...
Debian: CVE-2026-92162: flatpak -- security update
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI remote is configured most common on Fedora systems, a malicious local user in an active local session could use a crafted architecture na...
WS-2026-0133
certifi 2019.03.09 through 2026.07.22 ships the "emSign ECC Root CA - G3" root certificate in its CA bundle certifi/cacert.pem. Intermediates under this root were revoked for key compromise cACompromise, so certificates issued with the compromised CA keys are trusted by applications that use...
PT-2026-120303
Certifi versions before 2026.10.18 include the emSign ECC Root CA - G3 root certificate in their bundled CA store. Eight eMudhra intermediate CA certificates that chain to this root have compromised private keys and the CA has revoked them. An attacker with one of the compromised keys can issue...
OpenBSD System V Privilege Escalation
The vulnerability of the Virtual Memory subsystem in the System V operating system of OpenBSD is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...