bind: bind9: Incorrect acceptance of NSEC3 records

BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses...

Spring Cloud Config Server - Local File Inclusion

Spring Cloud Config Server versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user or attacker can send a request using a specially crafte...

Adobe ColdFusion - Arbitrary File Read

ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to sensitive files and perform arbitrary...

MAL-2026-14070 Malicious code in @ai-vertical/ai-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3daa0f3fabdeebe3db0146233d623d65ae16aea601e54fd6519a160db5af8ee On require/import, index.js fetches a hardcoded GitHub Gist gist.github.com/aiverticalsolutions/7676451d2f972137d2482c4a8937a77a via the api.github.c...

Malicious code in @ai-vertical/ai-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3daa0f3fabdeebe3db0146233d623d65ae16aea601e54fd6519a160db5af8ee On require/import, index.js fetches a hardcoded GitHub Gist gist.github.com/aiverticalsolutions/7676451d2f972137d2482c4a8937a77a via the api.github.c...

CVE-2026-50769

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...

EUVD-2026-60445

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...

CVE-2026-67926

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...

PT-2026-73223

Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2026-76621

openssl encrypt versions before 1.4.0 contain a logging bug in restore hidden modules that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another...

PT-2026-76797

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the MiMoV2OmniMultiModalProcessor in vllm/transformers utils/processors/mimo v2 omni.py passes attacker-controlled image and audio strings through fetch image, requests.get, and Image.open instead of MediaConnecto...

PT-2026-76770

ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export module in packages/import-export/lib/formats/gzip.js constructs an attachment source path from the attacker-controlled id, name, and extension fields in aposAttachments.json without ensuring that...

PT-2026-76741

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...

ROS-20260817-73-0205

The vulnerability of the Coturn web server is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100499)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100499 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: terminate table name before findtablelock updatecounters and...

The vulnerability of the auth_gss module in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the authgss module in the Linux operating system’s kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the apparmor module in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the apparmor module in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the parse_longname() function in the fs/ceph/crypto.c module of the distributed file system Ceph’s kernel support for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the parselongname function in the fs/ceph/crypto.c module, which is part of the Ceph distributed file system support for Linux operating systems, relates to the pointer dereferencing. Exploiting this vulnerability could allow a malicious actor to cause service failures remote...

The vulnerability of the rsi_mac80211_config() function in the drivers/net/wireless/rsi/rsi_91x_mac80211.c driver module of the Redpine Signals wireless communication adapter driver for Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the rsimac80211config function in the drivers/net/wireless/rsi/rsi91xmac80211.c driver of the wireless adapter driver from Redpine Signals in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the ActiveMQ NIO SSL module in Apache ActiveMQ products allows a attacker to cause a service failure.

The vulnerability of the ActiveMQ NIO SSL software products of Apache ActiveMQ is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service failures...