CVE-2026-85475

The Ansible Automation Platform automation controller is vulnerable to an injection flaw in its external logging (rsyslog ) configuration. The system generates configuration files by interpolating user-controlled settings—specifically LOG_AGGREGATOR_HOST , LOG_AGGREGATOR_MAX_DISK_USAGE_PATH , and...

CVE-2026-84719

A flaw exists in the Ansible Automation Platform automation-controller where the WorkflowJobTemplate deep-copy permission sanitizer fails to validate instance_groups , execution_environment , and labels during a copy operation. This oversight allows a user with organization workflow-admin permiss...

CVE-2026-84714

A flaw in the automation-controller input-validation guard sanitize_jinja() allows for Jinja template injection . The underlying cause is that the regular expressions used to reject user-supplied Jinja stop at the first interior } or % character, allowing expressions with inner braces (like empty...

CVE-2026-84706

A flaw exists in Ansible Automation Platform 's automation-controller where the custom Credential Type environment-variable injector fails to include certain process-hijacking loader variables—such as BASH_ENV , ENV , LD_PRELOAD , LD_LIBRARY_PATH , PYTHONSTARTUP , and GIT_SSH_COMMAND —in its deny...

CVE-2026-75884

A flaw in AWX allows an AAP platform administrator to escalate privileges to OpenShift namespace-level access and exfiltrate namespace secrets . The vulnerability exists because the pod_spec_override field in the container group uses an incomplete blocklist that only restricts automountServiceAcc...

CVE-2026-96550

A vulnerability exists in sfturing hosp_order (up to commit 627f426331da8086ce8fff2017d65b1ddef384f8 ) involving the getProperties function in ssm_pro/src/main/java/cn/sfturing/utils/MailUtil.java. This flaw allows for the cleartext transmission of sensitive information via remote manipulation. A...

CVE-2026-96826

The W4 Post List WordPress plugin, developed by Shazzad Hossain Khan, is vulnerable to Blind SQL Injection in versions up to and including 3.0.6 . The root cause is the improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker to executeblind SQL qu...

CVE-2026-82405

The Klever-Go blockchain protocol implementation (prior to version 1.7.20 ) contains a critical vulnerability in the KleverUpdateAccountPermission built-in function. The flaw arises because the authorization check incorrectly uses the attacker-controlled vmInput.RecipientAddr instead of the authe...

CVE-2026-82409

Prior to version 1.7.20 , the Klever-Go blockchain implementation is vulnerable to Elasticsearch bulk / painless injection due to improper escaping of the acc.Name value in indexer/common.go. Because the SetAccountName transaction accepts raw UTF-8 characters including quotes, backslashes, and ne...

CVE-2026-82407

The Klever-Go blockchain implementation (prior to version 1.7.20 ) contains a vulnerability where the Register function and runtime validator update path in core/kapp/validators/validators.go accept BLSPublicKey values without performing curve, prime-order subgroup, or nonzero validation. Because...

CVE-2026-86065

Klever-Go , the Go implementation of the Klever blockchain protocol, is vulnerable to remote denial-of-service (DoS) via the unauthenticated GET /subscribe endpoint prior to version 1.7.20 . The vulnerability stems from three compounding gaps: permissive origin handling (allowing any web origin),...

CVE-2026-84711

A flaw in the Red Hat Ansible Automation Platform automation-controller allows an authenticated user with project creation or editing permissions to perform an arbitrary file read on the synchronization host. The vulnerability occurs because the Project SCM branch and SCM refspec fields do not re...

CVE-2026-86064

The Klever-Go blockchain protocol implementation is vulnerable to an unauthenticated management-plane flaw where a remote client can access and manipulate global logging configurations. Specifically, the GET /log WebSocket route—exposed by default in config/node/api.yaml and registered in network...

CVE-2026-82406

The Klever-Go blockchain protocol implementation contains a high-severity vulnerability in the native marketplace function located at core/kapp/market/market.go. The Buy() function fails to verify the IsClaimed status before accepting a bid, while other functions like Claim and CancelOrder do enf...

CVE-2026-84707

A flaw in the Red Hat Ansible Automation Platform automation-controller allows for cross-tenant information disclosure . The host_filter query parameter on the hosts list API is parsed into a raw Django ORM filter that lacks authorization checks on traversed database relations. Because job event ...

CVE-2026-84709

A flaw in the Red Hat Ansible Automation Platform automation-controller allows for a Denial of Service (DoS) . When an authenticated superuser creates or updates a custom credential type, the system validates the injector configuration by rendering attacker-supplied Jinja2 templates synchronously...

CVE-2026-84703

A flaw in the automation-controller of Red Hat Ansible Automation Platform allows for cross-tenant credential disclosure . When creating or editing an execution environment, the controller fails to verify if the requesting user has use permissions on the referenced container registry credential, ...

CVE-2026-84691

A format-string injection vulnerability exists in the automation-controller component of Red Hat Ansible Automation Platform . The flaw arises because a setting for formatting API 4XX error log messages uses an administrator-controlled Python format-string template rendered with a live user objec...

CVE-2026-84708

A critical vulnerability exists in the automation-controller component of Red Hat Ansible Automation Platform (versions 2.5 and 2.6). A user with the delegated Instance Group Admin role can provide a free-form pod specification override that is deep-merged without filtering into all job pods in a...

CVE-2026-84683

A vulnerability exists in Red Hat Ansible Automation Platform's automation-controller where the HTML view of job, ad hoc command, project update, and inventory update standard outputs fails to remove ANSI terminal escape sequences before HTML conversion. Specifically, an ANSI OSC 8 hyperlink sequ...

CVE-2026-94183

Arc Search for Android versions prior to 1.12.10 are vulnerable to a UI spoofing risk. The application fails to display a fullscreen notification when a webpage enters fullscreen mode while the app is running in the background. A remote attacker can exploit this by using a specially crafted websi...

CVE-2026-96549

A vulnerability exists in sfturing hosp_order (up to commit 627f426331da8086ce8fff2017d65b1ddef384f8 ) affecting the file ssm_pro/src/main/java/cn/sfturing/service/impl/CommonUserServiceImpl.java . The issue allows for the cleartext storage of sensitive information through code manipulation. This...

CVE-2026-93421

The Mesop Python-based UI framework is vulnerable to an unauthenticated ANSI escape sequence injection in the /__csp__ endpoint. The csp_report handler in mesop/server/static_file_serving.py processes attacker-controlled JSON fields (such as blocked-uri and document-uri) and prints them directly ...

CVE-2026-84680

A flaw in Red Hat Ansible Automation Platform 's automation-controller allows for cross-tenant credential use . When attaching a Galaxy or Automation Hub credential via the galaxy_credentials relationship endpoint, the controller incorrectly verifies only that the user has read permission rather ...

CVE-2026-96770

The s2s-proxy software is vulnerable in all published versions through 0.2.2 (specifically versions 0.1.16 through 0.2.2 ). The root cause is that TLS server listeners use Go's RequireAnyClientCert mode while skipCAVerification is set to false. This configuration validates that the client possess...

CVE-2026-84692

A flaw in the Red Hat Ansible Automation Platform 's automation-controller allows for cross-organization privilege escalation . The issue exists because the execute-permission check on a workflow job template node's unified job template is skipped if the currently stored template is empty. An aut...

CVE-2026-77602

OpenC3 COSMOS versions 5.1.0 through 7.3.0 are vulnerable to authenticated remote code execution (RCE) . The root cause is that the system processes a user-writable configuration overlay (targets_modified/) before the read-only targets/ tree. Authenticated non-administrator users can use features...

CVE-2026-94181

Affected versions of the Arc browser are susceptible to an address bar spoofing issue. An attacker can spoof the browser address bar by utilizing a element that triggers requestFullscreen without displaying the standard fullscreen notification. Exploitation details are not provided in the docume...

CVE-2026-77394

OpenC3 COSMOS versions 5.0.6 through 7.3.0 are vulnerable to a stored, cross-user XSS via the Telemetry screen BUTTON widget. An authenticated actor with system_set permissions can store a screen via POST /openc3-api/screen containing a button action. The application fails to sanitize this input,...

CVE-2026-84689

A flaw exists in the Red Hat Ansible Automation Platform automation-controller where the bulk job launch endpoint improperly handles the node's job reference. Because the serializer leaves this field writable and omits it from permission validation, an authenticated user with permission to execut...

CVE-2026-84686

A flaw in the Red Hat Ansible Automation Platform 's automation-controller allows an attacker to recover sensitive credentials. Because notification template password fields are encrypted using a key that excludes the subfield name, a user with administrative access to a single notification templ...

CVE-2026-84684

A vulnerability exists in the automation-controller component of Red Hat Ansible Automation Platform (versions 2.4, 2.5, and 2.6). The flaw occurs because the controller only verifies that a requesting user has read permission on a source inventory when attaching it to a constructed inventory via...

CVE-2026-84679

A critical flaw in Red Hat Ansible Automation Platform's automation-controller allows a user with the system administrator role to exploit the AWX_TASK_ENV setting. This setting accepts arbitrary environment variable keys without restriction and applies them directly to the running web and task p...

CVE-2026-84678

A flaw in the automation-controller component of Red Hat Ansible Automation Platform allows a system administrator to achieve code execution within the project synchronization execution environment on the control plane. The root cause is that the GALAXY_TASK_ENV setting fails to validate and excl...

CVE-2026-77601

OpenC3 COSMOS versions 5.12.0 through 7.3.0 are vulnerable to authenticated OS command injection via the pypi_url setting. An attacker can use the set_setting API method (POST /openc3-api/api) to write a malicious URL containing shell metacharacters. When a plugin with Python dependencies is inst...

CVE-2026-96872

The WikiLambda Extension for MediaWiki (versions prior to 1.47.0 ) is vulnerable to an improper handling of insufficient permissions. Specifically, public function execution can bypass unsaved-code permissions through nested Z825 compositions , allowing access to functionality that is not properl...

CVE-2026-84643

A flaw in the Red Hat Ansible Automation Platform automation-controller allows an authenticated user with the organization project administrator role to perform a cross-tenant authorization boundary violation and information disclosure . The vulnerability stems from a missing use_role authorizati...

CVE-2026-84499

A flaw in Red Hat Ansible Automation Platform's automation-controller allows a user with the JobTemplate Admin role to recover encrypted passwords in plaintext. When a schedule or workflow job template node is revalidated against a tightened survey specification, the controller decrypts the store...

CVE-2026-84502

A vulnerability exists in the Red Hat Ansible Automation Platform automation-controller where the Project scm_url field lacks validation against values starting with a dash. Because the module passes this URL as a positional argument to the git ls-remote command without a "--" separator, an attac...

CVE-2026-84644

A flaw in the Red Hat Ansible Automation Platform 's automation-controller allows for server-side request forgery (SSRF) via the Thycotic Secret Server external credential plugin test endpoint. The plugin fails to validate the scheme, host, or IP range of a user-supplied server URL, which is then...

CVE-2026-84638

A flaw exists in the Red Hat Ansible Automation Platform automation-controller where attaching an instance group to a schedule or a workflow job template node via the dedicated API relationship endpoint only verifies if the user can read the group. This allows authenticated users with read-only v...

CVE-2026-61695

The Wire Swift runtime (wire-runtime-swift) is vulnerable to a Denial of Service attack because ProtoReader.skipGroup() fails to reject negative lengths for LENGTH_DELIMITED fields within unknown START_GROUP fields. A crafted 10-byte protobuf payload can cause ReadBuffer.readData(count:) to pass ...

CVE-2026-90903

The Joomla Extension - joomshaper.com 's Easy Store extension (versions 1.0.0-3.0.0 ) contains a vulnerability where the ApiController fails to verify CSRF tokens across most administrator AJAX API endpoints. While the products() action was protected, other endpoints—including orders, coupons, me...

CVE-2026-90901

The Easy Store extension (versions 1.0.0-3.0.0 ) for Joomla by joomshaper.com is vulnerable to an SQL Injection due to the lack of authentication, session validation, or ownership checks on the checkout.searchGuestUser endpoint. An unauthenticated attacker can provide an email address to query th...

CVE-2026-90905

The Easy Store Joomla extension (versions 1.0.0-3.0.0 ) by joomshaper.com is vulnerable to a Cross-Site Request Forgery (CSRF) and a lack of Access Control on the administrator/index.php?option=com_easystore&task=appconfig.updateConfiguration endpoint. The root cause is the failure to verify anti...

CVE-2026-84474

A flaw in Red Hat Ansible Automation Platform 's automation-controller allows for privilege escalation and remote code execution on managed hosts. The vulnerability stems from the exposure of the provisioning-callback secret (host_config_key) to users with only view_jobtemplate permissions. Furth...

CVE-2026-59990

The open-source JSON parser Jawn is vulnerable to a denial of service attack due to uncontrolled nesting depth in JSON arrays and objects. An attacker can submit untrusted JSON to grow parser contexts until the JVM heap is exhausted , triggering a java.lang.OutOfMemoryError that is not handled by...

CVE-2026-82368

Brocade SANnav versions before 3.0.1a are susceptible to insecure access controls on internal service ports. This vulnerability allows local, non-administrative host users to communicate directly with backend management services. A local attacker can exploit this exposed access to transmit comman...

CVE-2026-90902

The Joomla Extension - joomshaper.com - Easy Store (versions 1.0.0-3.0.0 ) is vulnerable to an Authenticated, Privileged SQL Injection within the coupon bulk update task. The flaw exists because input IDs in ProductCoupon.php and CouponsModel.php are directly concatenated into raw SQL IN (...) cl...

CVE-2026-61814

The Jawn open-source JSON parser is vulnerable to a denial of service (DoS) attack via CPU exhaustion in its AsyncParser component. The root cause is that AsyncParser can perform quadratic work (O(n^2)) when a single JSON token is delivered across many small chunks, as each absorb call rescans th...