CVE-2026-110256 Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth

Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function in src/lib/server/auth.ts, which inserts the login username into the LDAP search filter without escaping wildcard characters. Unauthenticated attackers can submit incremental wildcard patterns such...

CVE-2026-110254 Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory

Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory function in src/lib/server/url-safety.ts, which fails to check NAT64, 6to4, and Teredo IPv6 transition ranges. Authenticated attackers can embed loopback, cloud metadata, or private IPv4 addresses...

CVE-2026-108129

An out-of-bounds read vulnerability exists in the DNS Server , which allows an authorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 6.5 (MEDIUM) . While the vulnerability is confirmed, specific details regarding ...

EUVD-2026-100443

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100441

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100445

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-97844

A vulnerability in the DNS Server involves an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a CVSS 3.1 base score of 6.5 (Medium) , with a high impact on confidentiality. Official remediation is available via Mi...

EUVD-2026-100442

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100444

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100440

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-108128

The DNS Server is impacted by an out-of-bounds read vulnerability (CWE-125), which allows an authorized attacker to disclose information over a network. While the vulnerability is confirmed to have a high confidentiality impact , specific details regarding the vulnerable component or function are...

CVE-2026-97839

An out-of-bounds read vulnerability in the DNS Server allows an authorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 6.5 (Medium) . Official remediation is available via Microsoft updates, though specific patch v...

CVE-2026-97843

An out-of-bounds read vulnerability in the DNS Server allows an authorized attacker to disclose information over a network. The vulnerability is categorized under CWE-125 and has a CVSS 3.1 base score of 6.5 (Medium) . While the impact involves information disclosure, specific exploit details and...

CVE-2026-97840

An out-of-bounds read vulnerability exists in the DNS Server , which allows an authorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has been assigned a CVSS 3.1 base score of 6.5 (Medium) . While the documents identify the root cause as an o...

CVE-2026-97841

The DNS Server is vulnerable to an out-of-bounds read (CWE-125) vulnerability. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a MEDIUM severity rating with a CVSS 3.1 score of 6.5. While the documents confirm an official fix is available via ...

CVE-2026-97842

An out-of-bounds read vulnerability exists in the DNS Server , which could allow an authorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 . While the CVSS v3.1 score is 6.5 (Medium) , the base metrics indicate a High impact on confidentiality. No...

CVE-2026-108127

An out-of-bounds read vulnerability in the DNS Server allows an authorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 6.5 (Medium) . While the documents confirm the existence of an official fix , specific technica...

EUVD-2026-100434

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-97829

An out-of-bounds read vulnerability in the DNS Server allows an authorized attacker to disclose information over a network. The vulnerability is categorized under CWE-125 and has been assigned a MEDIUM severity (CVSS 3.1 score of 6.5). While the technical details regarding specific affected versi...

CVE-2026-97838

An out-of-bounds read vulnerability exists in the DNS Server , which may allow an authorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 6.5. No specific software versions, affected components, or remediation steps...