CVE-2026-71519

PrestaShop versions before 8.2.9 and 9.2.1 are vulnerable to a broken access control vulnerability in a multi-shop installation. An authenticated Webservice API key holder can bypass record-level shop ownership checks within the shopHasRight() and saveEntityFromXml() functions. This allows the at...

CVE-2026-71531

PrestaShop versions before 8.2.9 and 9.2.1 contain an authorization flaw in the Webservice API (specifically via classes/webservice/WebserviceRequest.php). An attacker possessing a key restricted to a single shop can bypass shop restrictions by submitting requests with id_shop=all or id_shop_grou...

CVE-2026-129180

The projectworlds Visitor Management System 1.0 is vulnerable to a SQL injection flaw located in the mysqli_query function of the actionpage.php file. This vulnerability is caused by the improper manipulation of the argument purpose, which allows an attacker to initiate the attack remotely . The ...

CVE-2026-128134

The NLTK (Natural Language Toolkit) Python suite versions prior to 3.10.4 are vulnerable to local code execution via an untrusted search path. The nltk.parse.dependencygraph.dot2img function resolves the Graphviz dot executable through the PATH but fails to route the resulting absolute executable...

CVE-2026-129173

A security flaw exists in Stirling-Tools Stirling-PDF up to version 3.3.0 . The vulnerability resides in the Participant Details Endpoint within the WorkflowParticipantController.getParticipantDetails function (file: app/proprietary/src/main/java/stirling/software/proprietary/workflow/controller/...

CVE-2026-82102

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to a server-side request forgery (SSRF) vulnerability (CWE-918). This flaw exists because open source packages used for overall processing in the product do not sufficiently restrict outgoing requests, potentially allowing a remote...

CVE-2026-91868

IBM Security QRadar EDR software versions 3.12 through 3.12.26 are vulnerable to improper access control (CWE-284). This flaw could allow a remote authenticated attacker to obtain sensitive information . IBM has addressed this vulnerability in version 3.12.27 . To remediate, customers are encoura...

CVE-2026-91869

IBM Security QRadar EDR versions 3.12 through 3.12.26 are vulnerable to a security restriction bypass. The root cause is improper rate limiting on TOTP verification (CWE-307), which could allow a remote authenticated attacker to bypass security controls. This vulnerability has a CVSS base score o...

CVE-2026-109158

The IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands are vulnerable to the insertion of sensitive information into log files (CWE-532 ). The underlying cause allows the AI Agent to log sensitive details regarding the deployed environment within error messages....

CVE-2026-115788

The IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands are vulnerable to Log Forging (CWE-117). This vulnerability occurs when a request is made to create a resource , potentially allowing an attacker to inject forged entries into the application logs. The base ...

CVE-2025-43874

A vulnerability exists in several Johnson Controls products, including iSTAR Ultra , iSTAR Ultra SE , iSTAR Ultra G2 , iSTAR Ultra G2 SE , and iSTAR Edge G2 , due to Improper Neutralization of Special Elements used in an OS Command . This flaw allows for OS Command Injection . The issue specifica...

CVE-2026-114468

IBM App Connect Operator and App Connect Enterprise Certified Containers Operands are affected by a vulnerability involving the Use of Hard-coded Credentials (CWE-798). An attacker capable of executing HTTP calls within a running container can perform administrative calls to a running Integration...

CVE-2025-53700

A CWE-922 Insecure Storage of Sensitive Information vulnerability exists in several Johnson Controls products, including iSTAR Ultra , iSTAR Ultra SE , iSTAR Ultra G2 , iSTAR Ultra G2 SE , and iSTAR Edge G2 . The flaw allows for CAPEC-15 File Manipulation . This vulnerability affects devices runn...

CVE-2026-5514

The IBM Bob IDE (version 2.0.3 ) is vulnerable to an information disclosure flaw (CWE-200) where the authentication provider API exposes session tokens. Specifically, during account enumeration, the token is leaked in the account identifier field without requiring explicit user consent. This allo...

CVE-2025-53699

Several Johnson Controls products, including iSTAR Ultra , iSTAR Ultra SE , iSTAR Ultra G2 , iSTAR Ultra G2 SE , and iSTAR Edge G2 , are susceptible to a Functionality Bypass (CAPEC-554) due to a missing protection mechanism for an alternate hardware interface. This vulnerability affects versions...

CVE-2026-123628

IBM webMethods Integration Server versions 10.15 (prior to IS_10.15_Core_Fix27) and 11.1 (prior to IS_11.1_Core_Fix12) are vulnerable to sensitive information disclosure. The root cause is the exposure of sensitive server-side environment variables and Java runtime details via an admin/server/env...

CVE-2025-53698

The Johnson Controls iSTAR Ultra and Johnson Controls iSTAR Ultra SE systems are vulnerable to a Functionality Bypass due to a missing protection mechanism for an alternate hardware interface. This issue affects versions of iSTAR Ultra and iSTAR Ultra SE prior to 6.9.2.CU02 . Exploitation details...

CVE-2026-115501

IBM i versions 7.3, 7.4, 7.5, and 7.6 (program 5770-SS1) are vulnerable to a stack buffer overflow (CWE-121) due to improper bounds checking in the QFileSvr.400 file system. A local authenticated attacker can trigger this vulnerability by sending a specific command, potentially leading to undefin...

CVE-2026-110194

IBM ContextForge MCP Gateway versions v1.0.0 through v1.0.11 are vulnerable to a Server-Side Request Forgery (SSRF) (CWE-918). The flaw exists because the gateway fails to validate endpoints retrieved from an authorization server's metadata document during OAuth Dynamic Client Registration (RFC 7...

CVE-2026-110178

IBM ContextForge MCP Gateway (v1.0.0 through v1.0.11) is vulnerable to improper access control (CWE-284) within the bulk import path. A remote authenticated attacker with team-scoped admin.import permissions can exploit this by sending a crafted POST request to /v1/import using conflict_strategy=...

CVE-2026-110199

IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 are vulnerable to DOM-based cross-site scripting (XSS) via a mutation XSS (mXSS) sanitizer bypass. The vulnerability exists because the admin dashboard displays status and error notifications using values from the page URL, relying on a c...

CVE-2026-110279

The IBM ContextForge MCP Gateway versions v1.0.0 through v1.1.0 are vulnerable to improper credential handling (CWE-287). The root cause is that the X-Upstream-Authorization request header is automatically renamed to Authorization for upstream requests, allowing an authenticated user to override ...

CVE-2026-94407

IBM ContextForge MCP Gateway versions v1.0.0 through v1.0.11 are vulnerable to a Regular Expression Denial of Service (ReDoS) (CWE-1333). The issue arises because the gateway validates tool arguments and results against JSON Schemas that may contain regular expression keywords like pattern or pat...

CVE-2026-110189

The IBM ContextForge MCP Gateway versions v1.0.8 through v1.0.11 and v1.1.0 are vulnerable to a Denial of Service (DoS) attack due to an incomplete denylist in the jq filter guard module (CWE-184). An authenticated remote attacker can provide a crafted jsonpath_filter value containing built-ins s...

CVE-2026-110195

IBM ContextForge MCP Gateway versions v1.0.0 through v1.0.11 are affected by an authorization bypass vulnerability (CVE-2026-110195 ). The root cause is an insufficiently specific cache key in the RFC 8693 token exchange cache, which fails to bind entries to specific inbound JWTs. This allows a u...

CVE-2026-124021

Control Web Panel (CWP) versions prior to webpanel_version 1.30.6 are vulnerable to an authorization bypass in the validate() function of api/v1/index.php. An attacker possessing a password-recovery token and a predictable legacy signature can obtain valid remote-API authorization without a prope...

CVE-2026-110278

IBM ContextForge MCP Gateway versions v1.0.0 through v1.1.0 are vulnerable to an information exposure vulnerability (CVE-2026-110278 ). The root cause is that the per-server identity propagation setting is ignored during tool invocation and resource reading, combined with static signature payload...

CVE-2026-124020

Control Web Panel (CWP) versions before webpanel_version 1.30.6 are vulnerable to a host header injection flaw. The vulnerability exists in the /v1/lostpass/ route's token generation process, where an unauthenticated attacker can inject the HTTP Host header to manipulate the password-recovery res...

CVE-2026-128886

A flaw in dbus when configured with the nonce-tcp transport allows an unauthenticated attacker to cause a Denial of Service (DoS) . By connecting to an exposed listener and withholding the required authentication token, an attacker can stall the server's accept process because the system fails to...

CVE-2026-9661

Postecert FIRMAOK! 1.6.29 on Windows contains a local privilege escalation vulnerability due to an uncontrolled OpenSSL search path . The launcher.exe and dependent executables, including updater.exe and tslupdater.exe, load OpenSSL configuration and library files from a hardcoded, user-writable ...

CVE-2025-53697

The Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, and iSTAR Edge G2 systems are susceptible to a use of default credentials vulnerability (CAPEC-560 ). This issue affects iSTAR Ultra versions before 2.9.2.CU02 and iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 S...

CVE-2026-97683

IBM Cyber Fraud versions 1.0.0 through 1.1.0 are affected by a vulnerability where a missing or misconfigured security context allows a local attacker to bypass security restrictions . This issue is associated with CWE-693 (Protection Mechanism Failure) . The CVSS 3.1 score is 2.5 (Low) , indicat...

CVE-2026-9870

IBM Cyber Fraud versions 1.0.0 through 1.1.0 are vulnerable to cross-site scripting (XSS) . This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code into the Web UI, which can alter the intended functionality and potentially lead to the disclosure of credentials wi...

CVE-2026-108290

The IBM Cyber Fraud software (versions 1.0.0 through 1.1.0 ) is vulnerable to a flaw where unrestrictive network policies could allow an attacker with local access to a container to extract sensitive information. The vulnerability is associated with CWE-923 (Improper Restriction of Communication ...

CVE-2026-9821

IBM Cyber Fraud versions 1.0.0 through 1.1.0 are vulnerable to a log injection flaw. The root cause is the improper neutralization of special elements when writing to log files, which could allow an unauthorized user to inject data into log messages . Exploitation details and specific remediation...

CVE-2026-110330

The abrt-server component in abrt is vulnerable to a flaw where it trusts a client-supplied PID when creating problem dumps over abrt.socket . Because abrtd runs as root , it copies the /proc data (including environment variables ) of the specified process into a dump directory owned by the unpri...

CVE-2026-110331

A flaw exists in abrt where the completeness check intended to mitigate CVE-2026-54228 and CVE-2026-54229 is insufficient. The check only verifies the presence of a "count" element , which an unprivileged user can create. This allows a local attacker to bypass the guard and poison elements or sei...

CVE-2026-129137

Devolutions PowerShell Universal version 2026.3.4 and earlier is affected by a vulnerability caused by incorrect default permissions in the agent configuration folder. This flaw allows a local unprivileged user to achieve arbitrary code execution as SYSTEM by providing a crafted agent configurati...

CVE-2026-19194

The HashiCorp cap JWT validation library versions prior to 0.14.0 are vulnerable to a claims validation bypass caused by the use of non-canonical claim names . This flaw allows attackers to provide attacker-controlled claims in a JWT signed by a trusted key, potentially causing downstream applica...

CVE-2026-102632

An incorrect privilege assignment vulnerability exists in the app token management component of Devolutions PowerShell Universal version 2026.3.4 and earlier . An authenticated user with permissions to create or update tokens can use crafted app token requests to set an arbitrary role or revocati...

CVE-2026-128987

A flaw in dbus allows a local attacker to cause a denial of service (DoS) by triggering an infinite CPU-spin loop. The vulnerability occurs when an attacker connects to an affected service, requests a response, and stops socket reads while maintaining the connection. The socket transport incorrec...

CVE-2026-128885

A flaw exists in D-Bus where the daemon fails to verify if file descriptor numbers exceed allocated limits when falling back to the Unix select() mechanism for event monitoring. A local attacker can exploit this by opening a large number of concurrent connections, triggering an out-of-bounds writ...

CVE-2026-127217

The Post to Google My Business plugin for WordPress (versions before 3.5.7 ) is vulnerable to a blind server-side request forgery (SSRF) . An authenticated user with Contributor-level privileges or higher can force the server to send requests to arbitrary hosts by providing an unvalidated mbp_pos...

CVE-2026-82504

The VITEC EZ TV Platform Server (versions prior to 8.5.0) is vulnerable to an unrestricted file upload in the upload handler. The root cause is a lack of authentication and file type validation, allowing unauthenticated remote attackers to upload arbitrary files by supplying a target filename in ...

CVE-2026-128132

The AIOHTTP asynchronous HTTP client/server framework for Python and asyncio is vulnerable to uncontrolled resource consumption in versions prior to 3.14.4 . The root cause is that the WebSocket reader continues parsing frames after the receive queue pauses the transport, while empty messages are...

CVE-2026-127216

The Injection Guard plugin for WordPress (versions before 1.4.0 ) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The root cause is that the ig_settings admin page in templates/dashboard.php processes GET parameters without performing nonce verification . This allows an unauth...

CVE-2026-128131

The aiohttp asynchronous HTTP client/server framework for asyncio and Python (versions prior to 3.14.4 ) is vulnerable to a quadratic CPU use issue. When processing payloads with concatenated gzip, deflate, or zstd streams, the software passes the entire remaining input to a new decompressor for ...

CVE-2026-128130

The AIOHTTP asynchronous HTTP framework is vulnerable to a request replay and buffer growth issue in versions prior to 3.14.4 . When the pipelined request queue is full, the pure-Python parser stores the unparsed remainder internally while also returning it to the caller. If a handler declines an...

CVE-2026-128129

The AIOHTTP asynchronous HTTP client/server framework for Python is vulnerable to unbounded memory consumption in versions prior to 3.14.4 . The root cause is that the framework buffers additional connection data during an upgrade request (such as a WebSocket handshake) without implementing a siz...

CVE-2026-128128

The AIOHTTP asynchronous HTTP framework is vulnerable to an integer overflow in its C WebSocket reader prior to version 3.14.4 . The vulnerability occurs because the reader uses signed 64-bit arithmetic to add a declared frame length to a buffered partial message. A length near $2^{63}$ can cause...