CVE-2026-92962 vm2 before 3.11.4 Defense Invariant Violation via setup-sandbox.js

vm2 is a sandbox for running untrusted JavaScript. In vm2 versions up to and including 3.11.3, the defaultSandboxPrepareStackTrace function in lib/setup-sandbox.js builds its output array using prototype-walking index assignment lineslines.length = value rather than a prototype-bypassing...

CVE-2026-92962

vm2 is a JavaScript sandbox for running untrusted code. In versions up to and including 3.11.3 , the defaultSandboxPrepareStackTrace function in lib/setup-sandbox.js builds its output array using prototype-walking index assignment (lines[lines.length] = value) instead of a prototype-bypassing Ref...

CVE-2026-92962: Protection Mechanism Failure

vm2 is a sandbox for running untrusted JavaScript. In vm2 versions up to and including 3.11.3, the defaultSandboxPrepareStackTrace function in lib/setup-sandbox.js builds its output array using prototype-walking index assignment lineslines.length = value rather than a prototype-bypassing...

PT-2026-94491

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the kernel cipher manager KCM where the kcm parse func strparser function calls bpf prog run pin on cpu without establishing an RCU read-side critical section. RCU...

CVE-2026-61793: Improper Input Validation

Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...

PT-2026-95048

Summary nuxt-og-image exposes an unauthenticated HTTP endpoint at / og/d/ that base64url-decodes and JSON.parses a fonts URL segment, then passes each fontsi.path value directly into fetch server-side without any URL validation no scheme allowlist, no loopback/RFC1918 block, no host allowlist, no...

PT-2026-94458

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The inetpeer rate limiting system uses a Red-Black tree to store peer entries keyed deterministically by remote IP address. Since lookups use standard lexicographical comparisons via the...

PT-2026-99690

cosmian kyber is a fork of Argyle-Software/kyber that has seen no maintainer activity. It inherits the fork parent's broken AVX2 constant-time code, and the open fix pull request Cosmian/kyber6 has gone unanswered. Recommended alternatives: - aws-lc-rs - graviola...

CVE-2026-90110: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: inetpeer: randomize RB-tree node comparison using SipHash The inetpeer rate limiting system stores peer entries in a Red-Black tree keyed deterministically on the remote IP address. Because tree lookups walk the RB-tree using...

CVE-2026-92593

Craft CMS versions 5.10.0 through 5.10.12 contain an incomplete fix for CVE-2026-55794. The Controller::getPostedRedirectUrl() → View::renderObjectTemplate() sink remained unsandboxed, and the same fix commit introduced a self-signing oracle in Cp::elementLabelHtml(). Because Craft/Yii HMAC token...

CVE-2026-20286

A vulnerability in the web-based management interface of Cisco Identify Services Engine ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permissions. An...

EUVD-2026-81164

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-si...

CVE-2026-20285 Cisco Identity Services Engine Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-si...

CVE-2026-20286 Cisco Identity Services Engine Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Identify Services Engine ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permissions. An...

CVE-2026-87116

Tanium addressed a server-side request forgery (SSRF) vulnerability in its Threat Response product. The flaw allows a network-based attacker with low privileges to forge requests from the server, resulting in a high confidentiality impact with no integrity or availability impact. Tanium scored th...

CVE-2026-85756 SSH.NET: ScpClient allows server-side RCE via default SCP path handling

SSH.NET is a Secure Shell SSH library for .NET. Prior to 2026.0.0, ScpClient places caller-supplied remote paths into the command used to run scp on the server, and the default RemotePathTransformation.DoubleQuote transformation cannot safely quote every remote command interpreter. When an...

CVE-2026-92602 TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URL

TDuck survey form through version 5.3 fails to validate webhook URLs or verify form ownership in the WebhookConfigController. Authenticated attackers can attach webhooks to other users' forms and exfiltrate submissions to arbitrary external or internal addresses...

CVE-2026-19857

The Formidable Forms WordPress plugin before 6.35 does not prevent a request-derived value from reaching the WordPress shortcode parser when it substitutes a supported token into a form's custom HTML, allowing unauthenticated visitors to have arbitrary shortcodes, with attacker-chosen attributes,...

CVE-2026-19857 Formidable Forms < 6.35 - Unauthenticated Arbitrary Shortcode Execution via [entry_key] Custom HTML Token

The Formidable Forms WordPress plugin before 6.35 does not prevent a request-derived value from reaching the WordPress shortcode parser when it substitutes a supported token into a form's custom HTML, allowing unauthenticated visitors to have arbitrary shortcodes, with attacker-chosen attributes,...

CVE-2026-19857

The Formidable Forms WordPress plugin before version 6.35 is vulnerable to unauthenticated arbitrary shortcode execution . The root cause is that a request-derived value can reach the WordPress shortcode parser when the plugin substitutes the [entry_key] token into a form's custom HTML, allowing ...