CVE-2026-57494

The CVE describes a cross‑agent task authorization bypass in AgenticMail. In @agenticmail/api versions before 0.9.64, a low‑privileged authenticated agent can enumerate another agent’s pending/claimed tasks via GET /api/agenticmail/tasks/pending?assignee=, receiving task IDs and payloads. Those I...

CVE-2026-47255

The CVE-2026-47255 entry concerns AgenticMail API/core vulnerabilities in versions prior to 0.9.32 and 0.9.10, respectively. The connected documents specify multiple hardening and validation weaknesses across storage and outbound relay handling, including: (1) validation and binding of inactive-a...

CVE-2026-64625

CVE-2026-64625 affects AVideo before 29.0. The issue stems from an incomplete fix for CVE-2026-45578: execAsync() re-wraps escaped commands in double-quoted sh -c, enabling command substitution via $() and backticks. Attackers can inject arbitrary OS commands through the Live plugin on_publish.ph...

CVE-2026-64626

The CVE affects AVideo encoder download-by-URL flow from commit 0dbadbca to latest master, where an unpinned retry fallback bypasses DNS pinning validation, enabling an authenticated attacker to supply a downloadURL that redirects to an internal address and have the unpinned retry follow the redi...

CVE-2026-64624

CVE-2026-64624 affects FreeRDP prior to 3.28.0. The issue arises because lines starting with a forward slash in RDP files are treated as raw command-line options, exposing the CLI parser surface to untrusted files. This enables attackers to craft malicious RDP files leveraging options such as /rd...

CVE-2026-47144

Shamefile (a linter for undocumented linter warnings) has a path traversal vulnerability in the shame next command, exploitable via a crafted shamefile.yaml to disclose files outside the repository. Affected version before 0.1.7 is vulnerable; fix is available in 0.1.7 and later. Workarounds incl...

CVE-2026-47128

The CVE concerns the nono sandbox tool (pre-0.55.0) where Landlock/seccomp policies allowed access to local Unix domain sockets (concrete and abstract). This enabled sandbox escape by contacting the per-user systemd DBus socket, with the root cause being incomplete mediation of local IPC. Impact ...

CVE-2026-16324

CVE-2026-16324 affects Metasoft MetaCRM up to version 6.4.0 Beta06. The vulnerable component is an unknown function in the file /business/qnaire/upload.jsp, where manipulation of the argument File enables unrestricted file upload. Attacks may be launched remotely, and the exploit is publicly avai...

CVE-2026-12900

CVE-2026-12900 affects the WordPress plugin set Spectra Gutenberg Blocks (Website Builder for the Block Editor). The vulnerability is a Stored Cross-Site Scripting via the uagb/image block in all versions up to and including 2.19.28, caused by insufficient input sanitization and output escaping. ...

CVE-2026-47134

Summary (technical): ClearanceKit stores the ECDSA signing key for its on-disk policy database in the macOS System Keychain. Before 5.0.10, for legacy kSecClassKey items, the key’s ACL set via SecItemAdd was ignored, so the persisted key inherited no ACL restriction, unlike kSecClassGenericPasswo...

CVE-2026-47133

ClearanceKit on macOS stores per-record policy data in /Library/Application Support/clearancekit/store.db with ECDSA signatures in data_signatures. Prior to 5.0.10, the signed payload lacks a monotonic counter or freshness binding, allowing an attacker who can modify store.db and the matching dat...

CVE-2026-44510

CVE-2026-44510 is a duplicate of CVE-2026-43620 and is not a separately exploitable entry. Connected sources describe the underlying issue as a pre-3.4.3 rsync vulnerability: receiver-side out-of-bounds array read in rsync’s recv_files() during a normal recursive pull can crash an rsync client wh...

CVE-2026-55550

NextCRM is affected by an RBAC bypass in the MCP product tools. In version 0.12.1, write operations for the product catalog were exposed via /api/mcp/mcp using user-generated Bearer tokens without proper role checks, allowing any authenticated low-privileged user to create, modify, archive, or so...

CVE-2026-55544

NextCRM (open-source) vulnerability CVE-2026-55544 affects version 0.12.1, where MCP campaign tools expose read/write operations over the network via user-generated Bearer tokens (nxtc__...). Despite an authorization model restricting normal users to their own campaigns, multiple MCP handlers ign...

CVE-2026-47130

NextCRM contains a BOLA/IDOR in the PATCH /api/crm/contacts/[id] endpoint. Versions prior to 0.12.0 do not verify resource ownership, allowing any authenticated user (even with member role) to modify contacts/targets belonging to other users or organizations (cross-tenant data tampering). The iss...

CVE-2026-47129

Summary of CVE-2026-47129 (NextCRM) : NextCRM versions prior to 0.12.0 contain a Broken Access Control flaw in the Next.js Server Actions activateUser/deactivateUser. The application does not verify that the requester has the admin role, allowing any authenticated user (even with member/viewer ro...

CVE-2026-44508

CVE-2026-44508 is rejected; this candidate is a duplicate of CVE-2026-43618 and should not be used.

CVE-2026-44507

CVE-2026-44507 corresponds to a vulnerability in rsync prior to 3.4.3 where a daemon with chroot performs reverse DNS lookups after entering the chroot; if /etc/resolv.conf, /etc/nsswitch.conf, /etc/hosts or NSS modules are missing, the hostname may resolve to UNKNOWN, bypassing hostname-based de...

CVE-2026-56623

The CVE-2026-56623 issue affects deployments using Apache MINA SSHD’s sshd-git to implement a git server on Windows. The vulnerability arises from Windows-specific path validation that is partly ineffective, potentially allowing an authenticated remote user to access git repositories outside the ...

CVE-2026-56624

The vulnerability CVE-2026-56624 affects Apache MINA SSHD (server-side) where OpenSSH user certificates with unsupported options, specifically force-command and verify-required, were not validated during authentication. The issue allows a user with such a certificate to potentially run commands b...

CVE-2026-64650

The CVE concerns the @ai-sdk/harness-opencode tool (HarnessV1 adapter backed by @openai/codex-sdk) that drives the codex CLI. Prior to version 1.0.29, it relayed requests from any process whose command line contained an allowed helper script path (Codex CLI shim), allowing untrusted sandbox code ...

CVE-2026-58624

The CVE affects SSH servers implemented with Apache MINA SSHD that use the GitPgmCommandFactory. The root cause is improper input validation in the sshd-git GitPgmCommandFactory, which allowed an authenticated SSH user to run any JGit command, including commands that could write files on the serv...

CVE-2026-44509

Rsync vulnerability CVE-2026-44509 (connected to CVE-2026-43619) concerns the rsync daemon when use chroot is set to no. Prior to 3.4.3, fixes for symlink race issues in open() did not cover races in other path-based calls such as chmod() and chown(), enabling a local attacker with filesystem acc...

CVE-2026-56452

CVE-2026-56452 describes a path traversal in the sshd-scp function of Apache MINA SSHD. The root cause is failure to validate filenames in SCP commands “C”/“D”, allowing a malicious sender to craft filenames that can write to attacker-controlled paths. Affected products are Apache MINA SSHD when ...

CVE-2026-64651

The CVE-2026-64651 entry concerns the @ai-sdk/harness-opencode tool that connects HarnessAgent to OpenCode via a sandboxed bridge. Before version 1.0.28, the tool would relay requests from any process whose command line included an allowed helper script path (host-tool-mcp.mjs), enabling untruste...

CVE-2026-55219

CVE-2026-55219 – Paymenter race condition (version

CVE-2026-47198

Paymenter prior to 1.5.1 is vulnerable to URL parameter injection in the Checkout component. The Checkout Livewire property $checkoutConfig is exposed via URL query parameters, and validation rules are generated only for keys defined by an extension’s getCheckoutConfig(). Undefined keys bypass va...

CVE-2026-53596

CVE-2026-53596 affects FreeScout (Laravel-based help desk). Before version 1.8.224, the file upload endpoint lacks rate limiting, allowing unauthenticated users to flood uploads, risking database overload and DoS for all users. The cited fix is in FreeScout v1.8.224. No exploitation details are p...

CVE-2026-53595

FreeScout prior to v1.8.224 is vulnerable to anonymous account takeover via POST /user-setup/{hash}/{invite_sent_at}. The endpoint authenticates solely by invite_hash; an attacker can overwrite the target account’s email and password and log in without authentication. After activation, invite_has...

CVE-2026-13381

VSee Clinic 7.1.26 and API 1.3.0 expose an Insecure Direct Object Reference (IDOR) in the /v1.3.0/api/files endpoint. An authenticated attacker can modify the remark parameter to enumerate, access, and delete files owned by other users, impacting confidentiality, integrity, and availability. Root...

CVE-2026-53594

Summary: CVE-2026-53594 affects FreeScout (PHP/Laravel) where the App Logs viewer can read arbitrary server files due to a flawed path resolution in the rap2hpoutre/laravel-log-viewer override. Before v1.8.224, the code accepts any existing absolute path prior to applying the storage/logs restric...

CVE-2026-13380

VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 expose cleartext SFTP credentials in HTTP responses of three unauthenticated endpoints when SFTP is configured. An unauthenticated observer can retrieve these credentials and use them to access the corresponding SFTP server. Affected component: SFTP co...

CVE-2026-44585

CVE-2026-44585 affects Paymenter prior to v1.5.0. The ticket creation endpoint validates ownership of a user-supplied service identifier is not enforced, enabling an authenticated user to create tickets that reference another user’s service. Impact stated: no direct access to service contents or ...

CVE-2026-44583

Paymenter before v1.5.0 is vulnerable to blind SSRF via the PayPal webhook endpoint /extensions/paypal/webhook. The PAYPAL-CERT-URL HTTP header is read without validation and directly fed into a server-side HTTP request (file_get_contents), allowing an unauthenticated attacker to direct requests ...

CVE-2026-44584

Paymenter documents describe a vulnerability where the email update flow does not reset or revalidate the existing email verification status. In versions prior to 1.5.0, a user can change their email while remaining marked as verified, potentially misrepresenting email ownership and bypassing ver...

CVE-2026-53593

FreeScout prior to 1.8.224 is vulnerable to authenticated remote code execution due to an incomplete denylist for dangerous upload extensions. The upload endpoint POST /uploads/upload stores files with their original extension in storage/app/public/uploads/ and serves them at /storage/uploads/. O...

CVE-2026-53592

CVE-2026-53592 affects FreeScout (Laravel-based). A prototype pollution flaw in the frontend JavaScript function getQueryParam (/public/js/main.js) allows attacker-controlled URL query strings to write into Object.prototype. Initial fix in 1.8.139 blocked top-level proto keys but did not sanitize...

CVE-2026-53591

FreeScout (Laravel-based) prior to v1.8.223 is vulnerable: an unauthenticated attacker can inject messages into existing conversations by sending an email to the public address with a crafted In-Reply-To header. The injected message appears as a legitimate customer reply, reopens the conversation...

CVE-2026-1538

Technical details are not publicly available in the provided documents; no affected products, roots, or impacts are stated. Monitor for updates.

CVE-2026-44230

RT (Request Tracker) contains a reflected Cross‑Site Scripting (XSS) vulnerability in search results/chart rendering. Versions 5.0.4 up to but not including 5.0.10, and 6.0.0 up to but not including 6.0.3 are affected if an authenticated user is induced to visit a crafted URL, enabling arbitrary ...

CVE-2026-44231

CVE-2026-44231 affects RT REST 2.0: a privileged (non-administrative) user can obtain authentication credentials belonging to other users (including admins) and use them to read data via RT’s feed endpoints. The same request that exposes credentials also rotates them, invalidating existing feed U...

CVE-2026-44229

CVE-2026-44229 (RT) affects the Request Tracker project: versions 5.0.0 and 6.0.0 and above, up to but not including 5.0.10 and 6.0.3, contain an XSS vulnerability where uploaded content is served inline instead of as an attachment. An authenticated user who can upload content can inject JavaScri...

CVE-2026-63766

GPT-SoVITS up to 20250606v2pro is vulnerable to OS command injection in webui.py. The ASR, slice, denoise and uvr5 functions interpolate unsanitized Gradio textbox values directly into shell commands executed with shell=True, allowing attackers to inject shell metacharacters via path parameters t...

CVE-2026-16337

dotCMS AC vulnerability CVE-2026-16337 affects all platforms of dotCMS 21.02–26.06.22-03. It relies on improper authorization in ToolGroupResource and RoleAjax REST/DWR endpoints, allowing a low-privileged authenticated backend user to self-assign the administrative layout and grant the CMS Admin...

CVE-2026-63767

CVE-2026-63767 affects ktransformers up to version 0.6.3. It describes an unauthenticated pickle deserialization vulnerability that allows an attacker to execute arbitrary commands by sending crafted pickle payloads to the SchedulerServer ZMQ ROUTER socket exposed on all interfaces. The exploit h...

CVE-2026-15788

The CVE describes a vulnerability in BuildKit’s Windows WCOW workflow: the cache mount source= selector on WCOW workers fails to detect NTFS directory junctions inside the cache root. This allows a build authored by an untrusted user on a WCOW-configured BuildKit daemon to read arbitrary host fil...

CVE-2026-63768

CVE-2026-63768 affects cal.diy up to version 6.2.0. The issue is an open redirect in the conferencing OAuth callback endpoint triggered by crafting malicious state parameters, exploiting an unsigned state parameter and the onErrorReturnTo field to silently redirect users from the trusted domain t...

CVE-2026-63769

Huginn (up to version 2022.08.18) is affected by a server-side request forgery in the fetch_url method of ScenarioImport. The vulnerability allows authenticated users to submit crafted URLs that cause arbitrary HTTP requests, enabling probing of internal networks, port enumeration via error signa...

CVE-2026-63770

The CVE concerns Glance 0.8.5, where the authentication handler is vulnerable to IP address spoofing via the X-Forwarded-For header when the server proxied option is enabled. Attackers can alter the leftmost IP in the header to skew per-IP login counters, bypassing brute-force lockout protections...

CVE-2026-63771

CVE-2026-63771 affects Adminer prior to 5.4.3. The issue is a cookie injection vulnerability where an unsanitized X-Forwarded-Prefix header can be reflected into Set-Cookie path attributes, allowing an attacker to manipulate cookie attributes. With a misconfigured reverse proxy, this can downgrad...