CVE-2026-61835

Product : Directus (real-time API and app dashboard for SQL databases). Vulnerability : SSRF protection bypass in the file-import-from-URL feature prior to 12.0.0. The denial logic treats 0.0.0.0 as local, but does not block the literal address, allowing an authenticated user with file-upload rig...

CVE-2026-61740

LightRAG vulnerability CVE-2026-61740 affects LightRAG prior to v1.5.4. When LIGHTRAG_API_KEY is set but AUTH_ACCOUNTS is unset, authentication protection can be bypassed: lightrag/api/auth.py falls back to a hardcoded DEFAULT_TOKEN_SECRET, /auth-status and /login can mint guest JWTs, and combine...

CVE-2026-61736

LightRAG vulnerability CVE-2026-61736 stems from a CORS misconfiguration prior to version 1.5.4: CORS_ORIGINS is set to '*' and allow_credentials=True in lightrag/api/lightrag_server.py, causing Starlette CORSMiddleware to effectively whitelist all origins for credentialed cross-origin requests. ...

CVE-2026-43637

Cornac before 2.6.0 is affected by a path traversal (Tar Slip) in the _extract_archive() function (cornac/utils/download.py). The vulnerability allows an attacker to write arbitrary files outside the intended cache directory by supplying crafted TAR archives with ../ sequences, absolute paths, or...

CVE-2026-59838

CVE-2026-59838 is an XSS-type vulnerability described as improper neutralization of script-related HTML tags in Fortinet FortiSIEM. Affected versions span FortiSIEM 7.4.0; 7.3.0–7.3.4; 7.2.0–7.2.6; 7.1.x; 7.0.x; and all 6.x versions (6.4–6.7). The issue could allow an attacker to execute unauthor...

CVE-2026-46459

ICU Scandinavia Boomerang is affected by a missing authentication vulnerability in its device receiver endpoints. An unauthenticated remote attacker can read full facility configurations and write unauthorized data to the sensor database. The issue is mitigated by upgrading to version 2.4.18.029....

CVE-2026-46458

CVE-2026-46458 affects ICU Scandinavia Boomerang. An information-disclosure flaw allows an unauthenticated attacker to retrieve plaintext credentials by requesting specific XML files from the webroot over static HTTP. The root cause is exposure of sensitive credential files via static HTTP paths....

CVE-2026-58559

CVE-2026-58559 describes a DoS vulnerability in the vibration service. According to the sources, the vulnerability impacts availability and has a CVSS v3.1 vector of AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H (base score 6.5, MEDIUM). The attack is described as NETWORK-based with LOW complexity and requ...

CVE-2026-58558

Technical details on CVE-2026-58558 are not publicly provided in the supplied documents. Monitoring for updates is advised.

CVE-2026-58556

Technical details (affected product/version/root cause/remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-15779

Summary: CVE-2026-15779 concerns Samba’s pam_winbind when mkhomedir is enabled. pam_winbind chowns the target account’s home directory without validating that the path is not a critical system directory like “/”. On systems where / is a user home (a common default for system accounts), this can b...

CVE-2026-15809

The CVE-2026-15809 entry applies to CRI-O. It describes a bypass of the fix for CVE-2022-4318: an attacker who can set container environment variables can inject a newline into HOME, enabling addition of arbitrary lines to /etc/passwd via a crafted environment variable. Affected component is CRI-...

CVE-2026-58557

Technical details about CVE-2026-58557 are not publicly provided in the supplied documents; monitor for updates from Huawei bulletins and NVD.

CVE-2026-58554

CVE-2026-58554 is a permission control vulnerability in the Settings module. The root cause is permission control weaknesses that can lead to confidentiality impact. CVSS-3.1 measures: Local attack vector, Low attack complexity, No privileges required, User interaction required, Confidentiality i...

CVE-2026-58555

Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2026-58555.

CVE-2026-58553

CVE-2026-58553 is described as an out-of-bounds read in the image codec module with potential impact to service confidentiality. Metrics show CVSSv3.1: Local attack vector, Low attack complexity, No privileges required, No user interaction, Confidentiality impact None, Integrity impact None, Avai...

CVE-2026-58552

CVE-2026-58552 describes an out-of-bounds read in the image codec module. The CVSS v3.1 base score is 5.1 (MEDIUM); attack vector: LOCAL , no privileges required, no user interaction. Impacts: confidentiality and availability may be affected; integrity: NONE . The connected documents provide no c...

CVE-2026-58551

CVE-2026-58551 is an out-of-bounds read vulnerability in the image codec module. The CVSS 3.1 vector indicates LOCAL attack, low complexity, no privileges required, no user interaction, with Confidentiality and Availability impacts listed as LOW; Integrity impact is NONE. Base score 5.1 (MEDIUM)....

CVE-2026-58550

Technical details (affected product, component, versions, root cause, exploitation) are not publicly available in the provided documents. Monitor Huawei bulletins for updates; the available info only notes an out-of-bounds read with local access and limited impact.

CVE-2026-58549

CVE-2026-58549 is an out-of-bounds read vulnerability in the image codec module. The impact is described as potentially affecting service confidentiality. The CVSS 3.1 vector indicates a Local attack with Low attack complexity and no privileges required, no user interaction, and an unchanged scop...

CVE-2026-61873

Grav before 9.1.8 is affected by an arbitrary file write in the Form plugin via the process.save.filename parameter. The parameter is path-traversal validated before Twig processing but not re-validated after rendering, enabling an attacker to submit form data that writes arbitrary files (includi...

CVE-2026-61872

ImageMagick contains a memory leak in the TIFF encoder when an invalid tiff:tile-geometry is specified in versions before 7.1.2-26 and 6.9.13-51. Supplying malformed tile geometry parameters leads to allocated memory not being released, increasing memory consumption. The public documents do not s...

CVE-2026-61869

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the MIFF encoder that occurs when a memory allocation fails during MIFF image processing, which can lead to denial of service. Affected component: MIFF encoder in ImageMagick. Root cause: memory allocation failure path causes a l...

CVE-2026-61871

CVE-2026-61871 affects ImageMagick before 7.1.2-26 and 6.9.13-51. A memory leak occurs in the ICON decoder when a memory allocation fails; processing a crafted ICON file can leak memory and may lead to a denial of service. The provided documents do not include exploitation details or remediation ...

CVE-2026-61868

CVE-2026-61868 affects ImageMagick before 7.1.2-26 and 6.9.x before 6.9.13-51. A memory leak in the YUV decoder occurs when opening of the blob fails, and repeated triggering can cause resource exhaustion leading to a denial of service. The vulnerability details consistently describe the impact a...

CVE-2026-61867

ImageMagick before 7.1.2-26 contains a memory leak in the TIFF encoder when memory allocation fails. Attackers can trigger allocation failures during TIFF image processing to cause memory exhaustion and a denial of service; CVSS 3.1/4.0 vectors indicate a local, high-impedance condition with no u...

CVE-2026-61866

CVE-2026-61866 affects ImageMagick before 7.1.2-26. A memory leak occurs in the JNG encoder when a blob cannot be opened, and attackers can trigger it by providing malformed JNG files that fail blob operations, causing resource exhaustion. No remediation details are provided in the supplied docum...

CVE-2026-61865

ImageMagick prior to 7.1.2-26 and 6.9.13-51 contains a memory leak in the hough lines operation triggered when a specific operation fails. The available sources (NVD/NVD mirror and CVE listing) confirm the affected versions and the leak, but do not provide any fix or remediation details within th...

CVE-2026-61864

ImageMagick before 7.1.2-26 and 6.9.13-51 has a memory leak in color transformation to the log colorspace; when operations fail, a small amount of memory is not released. Affected components: ImageMagick color transformation to log colorspace. Root cause: memory not released on failure. Impact st...

CVE-2026-61863

ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) has a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, potentially affecting availability by gradual memory growth. Red Hat’s advisory confirms the issue and recommends upgrading to ImageMagick 7.1.2-26 or ...

CVE-2026-61862

CVE-2026-61862 affects ImageMagick prior to 7.1.2-26 and 6.9.13-51. The issue arises when a profile is displayed via identify and the profile value is not printable; a non-printable value can cause a single byte at the end of the profile to be printed, reading past the profile boundary, in debug ...

CVE-2026-61860

CVE-2026-61860 affects ImageMagick up to 7.1.2-26 and 6.9.13-51. The use-after-free occurs when freetype initialization fails, where the code path does not exit and continues to use freed memory during image processing, potentially enabling a denial of service. This is a component-level vulnerabi...

CVE-2026-61859

CVE-2026-61859 concerns ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51. The vulnerability is a policy bypass in the -script operation caused by missing security policy checks, which can allow reading files from paths that are normally disallowed by the configured security policy. The i...

CVE-2026-61464

ImageMagick is affected by a heap-based buffer over-write in the X11 import path when processing a crafted window title. Affected versions are ImageMagick before 7.1.2-26 and 6.9.13-51. The issue can lead to heap memory corruption and denial of service. Root cause is a heap-based overwrite during...

CVE-2026-61457

CVE-2026-61457 : The Grav API plugin (getgrav/grav-plugin-api) before 1.0.3 is vulnerable to a file upload extension bypass in the API media controller. The validation in HandlesMediaUploads::validateFileExtension() only checks the final extension via pathinfo($filename, PATHINFO_EXTENSION); a us...

CVE-2026-61453

Grav v2.0.0 contains a cross-site scripting vulnerability in the Twig content path. The XSS blueprint validator (Security::detectXss()) runs on raw page content before Twig processing; when twig_content.process_enabled is true, an attacker with page-write API permission can use Twig string concat...

CVE-2026-61452

The Grav API plugin (getgrav/grav-plugin-api) up to version 2.0.3 has an improper session invalidation flaw: JWT access tokens are issued without a jti (JWT ID) claim and cannot be revoked server-side. Access tokens remain valid for their full lifetime (default 1 hour) regardless of logout, passw...

CVE-2026-61451

CVE-2026-61451 affects Grav API plugin (grav-plugin-api)

CVE-2026-61446

CVE-2026-61446 affects PraisonAI before 1.6.78. The plugin manager loads and executes arbitrary Python files from plugin directories using importlib and exec_module without code signing or sandboxing, enabling a local attacker who can write a malicious .py file to achieve arbitrary code execution...

CVE-2026-61449

Summary of CVE-2026-61449 (Grav): Grav 2.0.1 contains a decompression-bomb size-cap bypass in ZipArchiver and GPM Installer. The new per-entry size bound (ZipArchive::statIndex()['size']) is summed against system.gpm.archive.max_uncompressed_size and blocks extraction before it, but the declared ...

CVE-2026-61443

PraisonAI prior to 1.6.78 contains a remote code execution vulnerability in SkillTools.run_skill_script() due to lack of path containment validation. This allows attackers to supply absolute file paths and execute arbitrary scripts from any filesystem location, including outside the intended work...

CVE-2026-61440

CVE-2026-61440 affects the PraisonAI Platform prior to 0.1.9. The issue is an authorization flaw in label and issue-label mutations that lets workspace members with basic privileges rename and recolor shared labels and add/remove labels on owner-created issues. The root cause is improper authoriz...

CVE-2026-61438

PraisonAI before 4.6.78 has a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_python() due to insufficient AST validation of workflow script steps. Attackers can craft malicious YAML workflow files with import os and subsequent os.system() calls to bypass sandbox checks an...

CVE-2026-61436

PraisonAI before 4.6.78 is affected by a signature verification flaw in Svix webhook handling (AgentMail mode). The product fails to verify webhook signatures, enabling unauthenticated attackers to forge message.received events. Attackers can submit crafted JSON payloads to the webhook endpoint t...

CVE-2026-61435

PraisionAI before 4.6.78 contains an authentication bypass in the Call API agent invocation endpoints (src/praisonai/praisonai/api/agent_invoke.py) when PRAISONAI_CALL_AUTH=disabled is configured. The localhost-only restriction is derived from request.url.hostname via the client-controlled Host h...

CVE-2026-61430

PraisonAI before 1.6.78 contains a server-side request forgery (SSRF) vulnerability in the web_crawl tool. The issue arises because hostnames are validated at check time but re-resolved at connect time without IP pinning, enabling DNS rebinding to bypass SSRF protections and read internal HTTP re...

CVE-2026-61433

PraisonAI before 4.6.78 is affected: it fails to safely encode deployment configuration values when generating Python source code for API servers. This allows injection of arbitrary Python expressions via the deploy.api.host and agents_file parameters, which can execute when the generated server ...

CVE-2026-61427

PraisonAI before 4.6.78 has an authentication bypass in the MCP HTTP-stream transport: running with --transport http-stream and no API key allows unauthenticated clients to initialize sessions, enumerate tools (tools/list), and invoke tools (tools/call). The dispatcher forwards tool-call argument...

CVE-2026-60087

PRAISONAI v1.6.78 and earlier are affected: PraisonAI caches tool approvals by tool name, enabling reuse of initial approvals for subsequent calls with arbitrary arguments. This can allow an attacker to obtain approval for a benign operation and then execute dangerous file write operations within...

CVE-2026-60085

PraisonAI before 4.6.78 contains an unenforced security policy in the default Subprocess Sandbox backend, causing blocked_commands, blocked_paths, blocked_imports, allow_subprocess, and allow_file_write to be ignored. This enables attackers to run arbitrary subprocess commands, read sensitive fil...