EUVD-2026-78086

IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2026-15893

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...

CVE-2026-49250

Conform, a type-safe form validation library, allows the parsing of nested objects in the form of object.property. From 1.8.0 until 1.19.4, the parseSubmission future API in packages/conform-dom/formdata.ts repeatedly scans FormData or URLSearchParams entries by each unique field name. An...

CVE-2026-91080

webhook through 2.8.3 (a Go-based webhook receiver) is vulnerable to unauthenticated memory exhaustion . The service reads the entire request body into memory before evaluating trigger rules, with no enforced size limit. An attacker can send a multi-gigabyte request body with an invalid signature...

CVE-2026-91080 webhook through 2.8.3 Memory Exhaustion via Oversized Request Body

webhook through 2.8.3 reads the entire request body into memory before evaluating trigger rules, allowing unauthenticated attackers to exhaust memory by sending oversized bodies. Attackers can send multi-gigabyte request bodies with invalid signatures to trigger out-of-memory conditions and crash...

OESA-2026-3753 openjdk-17 security update

The OpenJDK runtime environment. Security Fixes: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: RMI. Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9...

OESA-2026-3740 openjdk-1.8.0 security update

Security Fixes: Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.cCVE-2023-48161 Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of...

EUVD-2026-77624

node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to 2.166.0, the process-global galreadyUsedNonce cache used by nonceAlreadyBeenUsed in packages/node-opcua-secure-channel/source/server/serversecurechannellayer.ts records nonces from OpenSecureChannelRequest and CreateSessi...

Astra Linux – Vulnerability in Ruby-Rack

Rack is a modular Ruby web server interface. In versions 3.0.0.beta1 through 3.1.21, and from 3.2.0 through 3.2.6, Rack::Multipart::Parserhandlemimehead parsed quoted multipart parameters such as Content-Disposition: form-data; name="..." using repeated Stringindex searches combined with...

CVE-2026-89180

EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime affecting Tivoli Netcool/OMNIbus

Summary Vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 8 that is used by Tivoli Netcool/OMNIbus probes and/or gateways have been addressed. Vulnerability Details CVEID:CVE-2026-22016 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with...

EUVD-2026-77360

EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

openssl: invalid pointer dereference in CMP server via crafted protectionAlg

A flaw was found in OpenSSL. A crafted CMP Certificate Management Protocol message can cause an invalid pointer dereference due to a missing type check in the password-based protection verification. A remote, unauthenticated attacker can crash applications acting as a CMP server or client,...

PT-2026-91155

Name of the Vulnerable Software and Affected Versions EFence affected versions not specified Description An issue exists where unauthenticated remote attackers can perform a SQL Injection, which is a technique used to insert malicious SQL code into a query. This allows the attacker to execute...

CVE-2026-90780

SIPp through 3.7.7 contains a buffer overflow vulnerability in the getheader function in src/sipparser.cpp when processing SIP messages with header content exceeding 20,490 bytes. Unauthenticated remote attackers can send crafted SIP messages with oversized headers to overflow the static buffer a...

CVE-2026-88802: Missing Authorization

The MDJM Event Management WordPress plugin before 1.7.8.5 and the Mobile Events Manager WordPress plugin through 1.4.8.3 do not check a capability, a nonce or the type of the record before permanently deleting the post identified in a request to their playlist entry removal, allowing...

google-osconfig-agent-20260908.00-1.1 on GA media (moderate)

google-osconfig-agent-20260908.00-1.1 on GA media Announcement ID: openSUSE-SU-2026:11743-1 Rating: moderate Cross-References: CVE-2026-84303 CVE-2026-84445 CVSS scores: CVE-2026-84303 SUSE : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-84303 SUSE : 9.1...

CVE-2026-90543

WWBN AVideo (with the Live plugin enabled) contains a missing authentication vulnerability in plugin/Live/socketMessageLiveOwner.json.php. The script resolves the stream owner via LiveTransmition::keyExists and checks that the owner is an administrator, but performs no User::isLogged() check and ...

EUVD-2026-76832

The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.4 via the issafewidgetinstance function. This is due to insufficient protection in issafewidgetinstance, which can be bypassed because PHP fires magic methods during its...

PT-2026-90559

The Booking for Appointments and Events Calendar WordPress plugin before 9.8.1 does not verify that a payment was actually taken before recording a booking as paid, trusting the payment gateway named in a public, unauthenticated booking request even when the site has never configured that gateway...