CVE-2026-65618

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data...

CVE-2026-12001 Hardcoded Credential Vulnerability in Multiple TP-Link Router Models

A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5. Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through...

EUVD-2026-49587

A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers TL-WR845N v4, TL-WR850N v3, Archer C20 v6 & Archer MR200 v5. Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through firmware analysis...

CVE-2026-65618 Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data...

CVE-2026-65618

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data...

CVE-2026-65921 Potential path traversal leading to unauthorized file writes

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location...

CVE-2026-65921 Potential path traversal leading to unauthorized file writes

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location...

CVE-2026-65921

Technical details, including affected product/version, root cause, and remediation, are not publicly available in the provided documents; monitor for updates.

CVE-2026-17612

The CVE-2026-17612 affects Honeywell S35 Series cameras (3M/5M/8M/PinHole) with firmware versions up to HC5.26.1.14.20260207. The vulnerability enables an unauthenticated attacker to access audit logs, potentially exposing sensitive information. Attack vector is NETWORK with low attack complexity...

EUVD-2026-49392

Ekushey Project Manager CRM through version 5.0 contains a missing uniqueness constraint vulnerability that allows authenticated administrators to create duplicate client accounts with identical email and password credentials. Attackers can exploit the lack of email field uniqueness enforcement t...

CVE-2026-48052 Papra: Cross-organization tag deletion and modification via authenticated cross-tenant request

Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, an authenticated user who is a member of any organization can delete or rename tags belonging to a different organization, given the target tag's ID. The route handler verifies the caller's membership of...

CVE-2026-55578

CVE-2026-55578 - Pheditor (PHP) terminal command sanitization flaw Affected: Pheditor versions 2.0.1 through before 2.0.6. After the GHSA-9643-6xjp-vx57 fix added a blocklist for certain characters, three remain unblockable: the single pipe (|), the backtick (`), and the newline (0x0A). An authen...

CVE-2026-17570

CVE-2026-17570 : Improper access control in the PAM password history endpoints of Devolutions Server allows an authenticated low-privileged user to disclose plaintext credential secrets via crafted API requests. Affected: Devolutions Server 2026.2.4.0–2026.2.12.0 and 2026.1.23.0 and earlier. CVSS...

CVE-2026-17191

An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in unauthorized access to data beyond their intended privileges and cause the underlying system to initiate unintended...

CVE-2026-17191

An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in unauthorized access to data beyond their intended privileges and cause the underlying system to initiate unintended...

CVE-2026-17191

CVE-2026-17191 is an input-validation vulnerability in the VeloCloud Orchestrator Flow Metrics API. An authenticated user can abuse the API component to manipulate backend queries, which may lead to unauthorized access to data beyond the user’s privileges and could trigger unintended outbound net...

CVE-2026-17530 AstrBotDevs AstrBot Subagent astr_agent_tool_exec.py _build_handoff_toolset authorization

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function buildhandofftoolset of the file AstrBot/astrbot/core/astragenttoolexec.py of the component Subagent. The manipulation results in incorrect authorization. The attack may be...

CVE-2026-56746

A flaw was found in Netty, a network application framework. A remote attacker can bypass security controls in the CorsHandler component by sending a specially crafted request with a null origin header. This bypasses the intended access restrictions, allowing unauthorized requests to reach the...

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues Upgrade to upstream tag jdk-11.0.32+9 July 2026 CPU. Security issues fixed: CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in CubeSize bsc1264994. CVE-2026-46917: unauthenticated attacker with...

CVE-2026-56537

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data...