CVE-2026-78147 ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp deserialize_tensor deserialization

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Performing a manipulation of the argument op/opparams results in deserialization. The attack may be...

CVE-2026-78147

A deserialization vulnerability exists in the ggml-RPC Server component of llama.cpp (commit bec4772f6), specifically in the deserialize_tensor function in ggml/src/ggml-rpc/ggml-rpc.cpp. Remote attackers can manipulate the op/op_params argument to trigger the flaw with no privileges or user inte...

CVE-2026-78140

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of...

CVE-2026-78140

Dromara UJCMS up to 10.1.3 is affected by a Server-Side Template Injection (SSTI) vulnerability in the update function of WebFileTemplateController.java (web-file-template endpoint). The root cause is improper neutralization of special elements used in the FreeMarker template engine. The attack i...

ROOT-OS-DEBIAN-11-CVE-2026-50257 CVE-2026-50257 in xorg-server - Patched by Root

Root has patched CVE-2026-50257 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-50256 CVE-2026-50256 in xorg-server - Patched by Root

Root has patched CVE-2026-50256 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-5574 CVE-2023-5574 in xorg-server - Patched by Root

Root has patched CVE-2023-5574 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-34001 CVE-2026-34001 in xorg-server - Patched by Root

Root has patched CVE-2026-34001 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-34002 CVE-2026-34002 in xorg-server - Patched by Root

Root has patched CVE-2026-34002 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-34000 CVE-2026-34000 in xorg-server - Patched by Root

Root has patched CVE-2026-34000 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-50260 CVE-2026-50260 in xorg-server - Patched by Root

Root has patched CVE-2026-50260 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-33999 CVE-2026-33999 in xorg-server - Patched by Root

Root has patched CVE-2026-33999 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-50259 CVE-2026-50259 in xorg-server - Patched by Root

Root has patched CVE-2026-50259 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-34003 CVE-2026-34003 in xorg-server - Patched by Root

Root has patched CVE-2026-34003 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-50264 CVE-2026-50264 in xorg-server - Patched by Root

Root has patched CVE-2026-50264 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-78061

CVE-2026-78061 affects vas3k TaxHacker up to version 0.8.2 . The vulnerability is a server-side request forgery (SSRF) in the Email Sync component, specifically in the function buildImapConfig within lib/email-sync/imap-client.ts. An attacker can manipulate the host/port arguments to force the se...

CVE-2026-78061 vas3k TaxHacker Email Sync imap-client.ts buildImapConfig server-side request forgery

A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/email-sync/imap-client.ts of the component Email Sync. Executing a manipulation of the argument host/port can lead to server-side request forgery. It is possible to launch the...

EUVD-2026-64626

A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/email-sync/imap-client.ts of the component Email Sync. Executing a manipulation of the argument host/port can lead to server-side request forgery. It is possible to launch the...

PT-2026-79789

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpc server::graph compute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The...

PT-2026-79788

Name of the Vulnerable Software and Affected Versions llama.cpp version bec4772f6 Description A deserialization flaw exists in the ggml-RPC Server component. A remote attacker can trigger this issue by manipulating the op or op params arguments within the deserialize tensor function located in th...