CVE-2026-80775

CVE-2026-80775 is a race condition in the Linux kernel futex subsystem, specifically in the initial allocation of mm->futex.phash.ref. The root cause is a concurrent execution scenario introduced by nested vfork : when a vfork child calls vfork again and is killed with SIGKILL, the parent and ...

CVE-2026-80774

CVE-2026-80774 affects the Linux kernel in the HID asus driver. The root cause is that to_usb_interface() is called without first verifying the device is genuinely USB via hid_is_usb(). Because the uhid subsystem can create devices that report BUS_USB but lack an actual USB parent, this unchecked...

CVE-2026-80773

This Linux kernel vulnerability affects the HID Huawei driver, where to_usb_interface() is called without first verifying via hid_is_usb() that the device's parent is genuinely a USB device. The uhid subsystem can create devices that report a BUS_USB type but lack an actual USB parent, causing an...

CVE-2026-80772

CVE-2026-80772 is an out-of-bounds read in the Linux kernel 's HID Nintendo driver, specifically in joycon_ctlr_read_handler(). The function guards a cast of incoming HID input reports to a 49-byte struct joycon_input_report with only a 12-byte length check. A 12-byte report with data[0] == JC_IN...

CVE-2026-80771

CVE-2026-80771 affects the Linux kernel 's HID Nintendo (Joy-Con) driver. In joycon_input_create(), input_register_device() was called before joycon_config_rumble() configured the FF_RUMBLE capability and the memless force-feedback device. This allowed a concurrent EVIOCSFF ioctl to dereference a...

CVE-2026-80770

CVE-2026-80770 affects the Linux kernel Nintendo HID driver (Joy-Con). In nintendo_hid_probe(), when joycon_init() or joycon_leds_create() fails after hid_device_io_start(), the error path calls hid_hw_close()/hid_hw_stop() without first calling hid_device_io_stop(). Since hid_hw_stop() does not ...

CVE-2026-80769

CVE-2026-80769 affects the Linux kernel 's hid-rapoo driver. The root cause is a missing hid_is_usb() check before calling to_usb_interface(). The uhid subsystem can create devices that report BUS_USB but do not actually have a USB parent, causing to_usb_interface() to dereference an invalid poin...

CVE-2026-80768

CVE-2026-80768 is a stack-use-after-return write in the Linux kernel's HID ft260 driver . The race occurs between ft260_i2c_read(), which points dev->read_buf at a caller-supplied (often on-stack) buffer and waits up to five seconds for an I2C response, and ft260_raw_event(), an input/IRQ-path...

CVE-2026-80767

CVE-2026-80767 is a use-after-free vulnerability in the Linux kernel's HID sensor custom driver. The enable_sensor sysfs attribute can be accessed before the underlying power_state and report_state field attributes are initialized, or after they are freed during device removal, allowing a concurr...

CVE-2026-80766

CVE-2026-80766 affects the Linux kernel HID uclogic driver , where a use-after-free occurs during device removal. The root cause is a race condition: timer_delete_sync() cancels the pen in-range timer, but a pen report arriving before hid_hw_stop() completes transport teardown can re-arm the time...

CVE-2026-80765

CVE-2026-80765 affects the Linux kernel 's Hyper-V synthetic HID driver. The function mousevsc_on_receive_device_info() trusts the bLength and wDescriptorLength fields in SYNTH_HID_INITIAL_DEVICE_INFO messages without verifying that the received VMBus packet actually contains both the HID descrip...

CVE-2026-80764

CVE-2026-80764 affects the Linux kernel Bluetooth subsystem. The vulnerability is a use-after-free (UAF) in the HCI event handler: hci_cc_reset() clears the LE accept and resolving lists without acquiring hdev->lock , while debugfs readers (e.g., white_list_show) hold that lock while traversin...

CVE-2026-80763

CVE-2026-80763 is an out-of-bounds read in the Linux kernel Bluetooth HCI subsystem. In hci_cc_le_set_cig_params(), the handler trusts the num_handles field of the LE Set CIG Parameters Command Complete response and reads the trailing handle array without verifying that the remaining skb data act...

CVE-2026-80762

CVE-2026-80762 is a use-after-free in the Linux kernel Bluetooth HCI subsystem (hci_sync). The function hci_update_event_filter_sync() walks the device's accept list while issuing synchronous HCI commands per remote-wakeup device. The suspend path holds hdev->req_lock, but accept-list mutation...

CVE-2026-80761

CVE-2026-80761 is a kernel information disclosure in the Linux kernel's Bluetooth ISO (Isochronous) socket subsystem. The function iso_sock_getname() populates a struct sockaddr_iso without first clearing it, causing uninitialized kernel stack bytes to be copied to user space via getsockname(2) o...

CVE-2026-80760

CVE-2026-80760 affects the Linux kernel Bluetooth MGMT subsystem. The function mgmt_hci_cmd_sync() validates that the message length matches params_len but fails to enforce an upper bound. Since params_len is a 16-bit value while the HCI command header plen field is 8-bit (max 255), a value of 25...

CVE-2026-80759

CVE-2026-80759 affects the Linux kernel's Bluetooth HCI AML driver . The function aml_download_firmware() reads two lengths from the firmware header and uses them to build pointers before verifying that the header and segment data are actually present. A truncated or inconsistent firmware image c...

CVE-2026-80758

CVE-2026-80758 is a use-after-free vulnerability in the Linux kernel's futex subsystem. The flaw is in futex_private_hash_put(), which drops its reference to the private hash (fph) before evaluating fph->mm for wake_up_var(). Because futex_ref_put() re-enables preemption before returning, a ta...

CVE-2026-78543

IBM App Connect Enterprise (13.0.1.0–13.0.8.1, 12.0.1.0–12.0.12.28) and IBM Integration Bus for z/OS (10.1.0.0–10.1.0.7) are vulnerable to a denial of service caused by an infinite loop (CWE-835 ). A remote, unauthenticated attacker can trigger the condition with no user interaction. IBM assigns ...

CVE-2026-78658

IBM UrbanCode Deploy (UCD) and IBM DevOps Deploy contain an information disclosure vulnerability (CWE-212) in the redaction engine. When a deployment's secure property begins with certain non-ASCII characters , subsequent ASCII secure values embedded inside unsecure properties may fail to be mask...

CVE-2026-81832

IBM App Connect Enterprise (versions 13.0.1.0–13.0.8.1 and 12.0.1.0–12.0.12.28) and IBM Integration Bus for z/OS (10.1.0.0–10.1.0.7) are affected through the SAP Adapter , which is vulnerable to an XML External Entity (XXE) attack. The CVSS 3.1 score is 7.7 (HIGH) with a scope-changing, network-a...

CVE-2026-6958

Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability Scanning Engine (wvsc.exe) . The root cause is a missing hardcoded directory path for OpenSSL-related files; a low-privileged local attacker can create that directory, place a malicio...

CVE-2026-81859

IBM Enterprise Records (part of Cloud Pak for Business Automation ) is vulnerable to information disclosure due to the use of a broken or risky cryptographic algorithm . A local attacker with no privileges required can obtain sensitive information, resulting in high confidentiality impact (CVSS 3...

CVE-2026-85700

Onyx 4.6.6 fails to properly restrict access to custom tool credentials stored in custom_headers , allowing any authenticated user with basic permissions to call GET /tool/{tool_id} or GET /tool endpoints and retrieve plaintext authorization headers and third-party API keys defined by administrat...

CVE-2026-85698

Turso through 0.8.0-pre.8 contains an out-of-bounds read vulnerability in the table-leaf page reader . The root cause is an attacker-controlled cell-count field that is read without bounds validation. A crafted malicious database file with a modified cell count value can trigger an index-out-of-b...

CVE-2026-85699

jina-ai reader is affected by a server-side request forgery (SSRF) vulnerability. URL validation is applied only to the initial request but is not re-applied to subsequent redirect hops . An attacker can craft a public URL that redirects to internal network addresses or cloud metadata endpoints, ...

CVE-2026-85697

Documenso 2.17.0 contains an access control flaw in its PDF-serving endpoint . The route fails to validate document visibility settings, specifically missing ownership validation on document data identifiers , allowing attackers with low privileges to read restricted documents within their team o...

CVE-2026-85696

SadTalker (OpenTalker), a talking-head video generation tool, contains an OS command injection vulnerability in its video muxing process . In version v0.0.2 , uploaded audio filenames are interpolated into ffmpeg commands without proper escaping (see src/utils/videoio.py). An attacker can upload ...

CVE-2026-85695

FastChat (lm-sys/FastChat) has an authentication bypass in the /register_worker endpoint that allows unauthenticated attackers to register arbitrary worker addresses. This enables server-side request forgery (SSRF) and model spoofing : attackers can register malicious workers under victim model n...

CVE-2026-85694

LaVague 0.2.35 is vulnerable to remote code execution via its PythonFromMarkdownExtractor.extract_as_object function, which uses eval on untrusted language model output derived from web page content. An attacker can perform indirect prompt injection through a web page to inject malicious Python c...

CVE-2026-85692

Nightingale (n9e) contains an SSRF guard bypass in the isPublicIP function within aiagent/tools/http.go, the SSRF protection for the http_fetch AI-agent tool. The function only unwraps standard IPv4-mapped (::ffff:a.b.c.d) IPv6 addresses before checking them against a forbidden-range list, failin...

CVE-2026-85693

Chatbot UI (open-source chat application) contains an authorization bypass in its retrieval endpoint (/api/retrieval/retrieve). The root cause is a service-role Supabase client that bypasses row-level security and fails to validate file ownership, allowing any authenticated user to retrieve index...

CVE-2026-85691

MegaParse 0.0.55 contains an unauthenticated server-side request forgery (SSRF) in the POST /v1/url endpoint, which fetches caller-supplied URLs server-side without requiring authentication. Attackers can supply internal service URLs or cloud metadata endpoints and read their responses directly f...

CVE-2026-85690

Plandex 2.2.1 is vulnerable to a path traversal in the ApplyFiles function, which allows files to be written outside the project directory. Attackers can influence model output through poisoned repository files or attacker-controlled context to write to sensitive locations such as shell rc or cro...

CVE-2026-85689

llmware 0.4.6 contains an SQL injection vulnerability in its collection-database layer (llmware/resources.py). Filter and lookup values are directly string-interpolated into SQL WHERE clauses without parameterization or escaping, affecting both the SQLite and PostgreSQL backends. The filter valid...

CVE-2026-85688

TEN Framework 0.11.71 is vulnerable to unauthenticated arbitrary file read and write via the TMAN Designer file-content API endpoints (/api/designer/v1/file-content). Attackers can send POST and PUT requests to read arbitrary files or write malicious content to system paths, enabling code executi...

CVE-2026-85687

CVE-2026-85687 affects the surya 0.22.1 screenshot server, where the /info, /page, and /process routes accept raw file_path parameters without validation. The unsanitized paths are passed directly to Image.open or pypdfium2.PdfDocument , allowing an unauthenticated attacker to read any image or P...

CVE-2026-85685

AgentScope through 2.0.7.post1 is affected by a path traversal vulnerability in LocalWorkspace.add_skill . The skill_path request parameter is not confined, allowing an unauthenticated attacker over the network to supply an arbitrary directory path and copy files from any server location into the...

CVE-2026-85686

ms-swift 4.5.2 (ModelScope) contains an unauthenticated SSRF in the swift deploy OpenAI-compatible API. The vulnerable component is vision_utils.py, which fetches multimodal media URLs (image_url , audio_url , video_url ) without URL validation or redirect filtering. An attacker can supply arbitr...

CVE-2026-85684

marker through version 2.0.0 contains a path traversal vulnerability in its FastAPI /marker/upload handler. The root cause is a failure to sanitize the file.filename parameter, allowing unauthenticated attackers to supply filenames containing directory traversal sequences. This permits writing ar...

CVE-2026-85676

Dub , a link-shortening service, contains an open redirect vulnerability in its redir_url query parameter. The parameter is accepted on every short link without validation or domain-allowlist enforcement, allowing attackers to append an arbitrary external URL and redirect visitors through the tru...

CVE-2026-85675

OWL 's DocumentProcessingToolkit contains a server-side request forgery (SSRF) vulnerability in the extract_document_content tool. The tool fetches caller-supplied URLs without scheme, host, or IP filtering , allowing attackers to inject malicious URLs via prompt injection and cause the server to...

CVE-2026-85674

aider (aider-chat) is a CLI-based AI coding assistant that automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd (executed at startup) or lint-cmd (executed on the first file edit), both of which are e...

CVE-2026-85673

LLaMA-Factory contains a server-side request forgery (SSRF) vulnerability in its OpenAI-compatible API multimodal media URL handler . The root cause is that the check_ssrf_url guard validates a URL only once, while requests.get subsequently follows HTTP redirects and re-resolves DNS without re-va...

CVE-2026-85671

QAnything 2.0.0 contains an authentication bypass in the /api/local_doc_qa/get_file_base64 and /api/local_doc_qa/get_doc endpoints. Unauthenticated attackers can enumerate file identifiers and retrieve base64-encoded files or parsed document chunks without ownership verification, enabling cross-t...

CVE-2026-85672

zerox 1.1.20 (getomni-ai) is affected by an OS command injection in its file download mechanism. The temporary file extension derived from document URLs is interpolated unsanitized into shell commands executed by poppler utilities. An attacker can craft a document URL with a malicious file extens...

CVE-2026-85670

CVE-2026-85670 affects Hugging Face tokenizers (observed in version 0.23.1 ). The vulnerability is an out-of-bounds buffer access in BpeBuilder::build (tokenizers/src/models/bpe/model.rs). When loading a tokenizer.json via Tokenizer::from_file/from_str, the builder sizes a scratch buffer to the l...

CVE-2026-85669

potpie through 2.0.0 fails to verify user ownership on the POST /conversations/{conversation_id}/code-changes/sync endpoint. Authenticated attackers can write arbitrary file changes into other users' conversations by supplying conversation IDs, resulting in unauthorized modification of pending co...

CVE-2026-85667

xiaobei through 5.5.2 fails to implement authentication or signature validation on its webhook endpoints, specifically the /webhook_worktool handler. This allows unauthenticated network attackers to inject arbitrary messages into the agent pipeline and exploit unvalidated media URL fetching to pe...

CVE-2026-85668

Xinference (v3.x, affected commit 4a94832, specifically v3.3.0) contains an unauthenticated arbitrary-path file read vulnerability in the POST /v1/models/llm/auto-register endpoint. The endpoint accepts a caller-supplied model_path parameter without authentication or path confinement, reads and p...