CVE-2026-48332

CVE-2026-48332 describes a Server-Side Request Forgery (SSRF) in ColdFusion that can bypass security features and grant unauthorized read access. The vulnerability is exploitable by a low-privileged attacker over the network without user interaction; the attack scope is reported as CHANGED. The e...

CVE-2026-48327

Technical details about CVE-2026-48327 are not publicly available in the provided documents. Monitor for updates from Adobe/NVD for affected versions, impact, and remediation.

CVE-2026-48338

CVE-2026-48338 affects Adobe ColdFusion. The issue is an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) that could enable an arbitrary file system read outside the intended scope. Exploitation does not require user interaction, with an Attack Vector of adjacent acces...

CVE-2026-48319

CVE-2026-48319: ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation does not require user interaction; the impact is high (confidentiality...

CVE-2026-48329

Technical details about CVE-2026-48329 are not publicly available in the provided documents. Monitor for updates from Adobe/NVD for affected products and remediation information.

CVE-2026-48321

Technical details are not publicly available in the provided documents; no affected products, versions, or remediation are specified. Monitor for updates.

CVE-2026-48322

Technical details (affected product/version, root cause specifics, impact, mitigations) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-48284

Technical details on CVE-2026-48284 are not publicly available in the provided documents. Monitor for updates from Adobe/NVD/CVE sources for affected products, scope, and remediation.

CVE-2026-48328

The CVE-2026-48328 entry concerns Adobe ColdFusion and describes an Improper Input Validation vulnerability (CWE-20) that can bypass security features and allow an unauthorized read-access with low privileges. The issue can be exploited without user interaction over the network, and the attack ve...

CVE-2026-48325

Affected product: ColdFusion. Vulnerability: Missing Authentication for Critical Function that could allow arbitrary code execution in the context of the current user without user interaction. Impact stated as CRITICAL (CVSS 3.1: AV Adjacent, AC Low, PR None, UI None; Scope Changed; CHANGED). Lik...

CVE-2026-15749

The CVE affects mastergo-design/mastergo-magic-mcp (mcp__C2d) up to v0.2.0, specifically the function execute in src/tools/get-c2d.ts. The vulnerability arises from manipulating the filePath argument, causing path traversal. This is a local attack, with exploit publicly released (CVSS 4.x metrics...

CVE-2026-48125

UAParser.js (versions 2.0.1–2.0.9) is affected by a Regular Expression Denial of Service (ReDoS) when using the Client Hints API. A crafted Sec-CH-UA-Model header passed to UAParser(headers).withClientHints() can cause catastrophic backtracking in the device regex, leading to excessive CPU usage ...

CVE-2026-49476

Soup Sieve (the CSS selector engine used by Beautiful Soup 4) is vulnerable prior to version 2.8.4 due to an unbounded memory allocation when compiling large comma‑separated selector lists. An attacker can supply a crafted selector string to soupsieve.compile() or to BeautifulSoup’s .select()/.se...

CVE-2026-49477

Soup Sieve (CSS selector engine used by Beautiful Soup 4) Before 2.8.4 contains a regular-expression backtracking bug in soupsieve/css_parser.py (VALUE pattern) that enables catastrophic backtracking on unterminated quoted attribute values, causing CPU exhaustion and potential DoS when compiling ...

CVE-2026-46644

CVE-2026-46644 affects symfony/polyfill-intl-idn (1.17.1–1.38.1). The Idn::process() routine does not enforce UTS #46 rev 33 after Punycode decoding, allowing xn-- labels with empty or ASCII-only payloads to be treated as equal to their decoded form. This can enable blacklist bypass, inconsistent...

CVE-2026-54446

CVE-2026-54446 / GHSA-X9VC-9FFQ-P3GJ – NetLicensing-MCP (HTTP mode): Unauthenticated requests to the MCP HTTP transport bypass API-key enforcement in ApiKeyMiddleware, causing downstream use of the operator’s NETLICENSING_API_KEY to authenticate all MCP tool calls upstream. This enables an attack...

CVE-2026-49855

Tornado (Python) prior to 6.5.6 allows a malicious server accessed via SimpleAsyncHTTPClient or an HTTPServer with decompress_request=True to accumulate decompressed data without an overall size limit, potentially causing memory exhaustion. Affected is gzip decompression routines that previously ...

CVE-2026-49854

Summary: Tornado’s optional native extension tornado.speedups mishandles the websocket_mask length, reading beyond a four-byte buffer when invoked through the XSRF token decoder with the extension active. This out-of-bounds access affects Tornado up to version 6.5.5 and is fixed in 6.5.6. Impact:...

CVE-2026-49853

Tornado before 6.5.6 exposed an Authorization header across cross-origin redirects in SimpleAsyncHTTPClient: when following 3xx redirects, the client shallow-copies the request and rewrites the URL without clearing Authorization (and related) headers if the origin changes. The issue is fixed in T...

CVE-2026-48816

CVE-2026-48816 affects sigstore-js, where prior to version 3.1.1 the verification logic in @sigstore/verify derives a transparency-log timestamp from tlogEntries[].integratedTime for bundle v0.2 inclusionProof-only entries, even though the inclusion proof path does not cryptographically bind inte...

CVE-2026-48758

CVE-2026-48758 affects sigstore-js with a flaw in the preAuthEncoding function in @sigstore/core: it uses Node.js ASCII encoding when converting PAE strings to bytes, allowing payloadType to be mutated after signing without invalidating the DSSE signature. The issue is fixed in @sigstore/core ver...

CVE-2026-48343

Bridge is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The CVSSv3.1 vector is LI/LO/PRN/UI:R/S:U/C:H/I:H/A:H with a base score...

CVE-2026-48340

CVE-2026-48340 affects Adobe Bridge via an Untrusted Pointer Dereference in the Bridge component. The underlying issue enables arbitrary code execution in the context of the current user due to dereferencing an untrusted pointer. Exploitation requires user interaction: a victim must open a malici...

CVE-2026-48339

CVE-2026-48339 describes a heap-based buffer overflow in Bridge that could lead to arbitrary code execution in the context of the current user. The vulnerability requires user interaction: a victim must open a malicious file. The available connected documents reiterate this condition and identify...

CVE-2026-48311

CVE-2026-48311 affects Adobe Bridge. The vulnerability is an out-of-bounds write (CWE-787) in Bridge that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The provided documents do not specify a...

CVE-2026-48341

Bridge is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). The documents do not specify affected versions or a patch version. An Adobe ...

CVE-2026-48342

CVE-2026-48342 affects Bridge. It is an Integer Overflow or Wraparound vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The available documents provide the vulnerable componen...

CVE-2026-50013

CVE-2026-50013 concerns Hoverfly in Diff mode. The OSV entry documents a vulnerability in Hoverfly 1.12.x where AddDiff() writes to an unsynchronized shared map (responsesDiff) without a mutex, allowing concurrent writes during multiple parallel requests. When Diff mode processes requests concurr...

CVE-2026-50018

CVE-2026-50018 (Hoverfly) is documented in multiple sources as a Denial of Service via a goroutine leak caused by remote post-serve actions using http.DefaultClient without timeouts. A non-responsive remote endpoint can cause unbounded goroutine creation and memory exhaustion, leading to process ...

CVE-2026-50125

Summary of CVE-2026-50125 (MKP DoS) : The connected OSV entry documents an unauthenticated remote denial-of-service in MKP where an attacker can specify unbounded limitBytes and tailLines for Kubernetes pod logs. The implementation parses these parameters without upper bounds and then reads the e...

CVE-2026-50006

CVE-2026-50006 is detailed in OSV as Anyquery: Arbitrary File Write (AFW) leading to potential RCE when running in Server Mode. The server blindly proxies SQL to SQLite; an unauthenticated attacker connected to the MySQL-compatible port can attach arbitrary SQLite databases to sensitive paths (e....

CVE-2026-50158

CVE-2026-50158 maps to a reported Arbitrary File Write vulnerability in the yutu project (MCP tool path: caption-download). The OSV entry for GHSA-2C7F-FXWW-6W6C describes that the caption-download MCP tool passes the attacker-controlled file path directly to os.Create() without validating or con...

CVE-2026-61549

Woodpecker CI’s Kubernetes backend is affected by CVE-2026-61549 due to an unrestricted serviceAccountName in the pipeline backend. The vulnerability allows any user with Push permission on a connected repository to run pipeline pods under an arbitrary ServiceAccount in the pipeline namespace, po...

CVE-2026-61699

CVE-2026-61699 is a reserved candidate; connected documents provide concrete details about a real issue in nebula-mesh: the per-CA blocklist revocation is implemented server-side but is ignored by agents and not emitted in configs. Root cause: server computes the per-CA blocklist and ships it via...

CVE-2026-48815

Summary of CVE-2026-48815 : In sigstore-js, the documented certificateOIDs option in sigstore.verify() is accepted by the public API before verification but discarded during verification, causing certificate extension OIDs to not be checked. This allows applications to accept unauthorized certifi...

CVE-2026-55513

The connected data describe a vulnerability in nebula-mesh where the Web UI host creation path ignores the configured enrollment-token TTL and mints 24-hour bearer enrollment tokens, bypassing per-network or server-default TTLs that API paths enforce via tokenTTLFor. This discrepancy allows an au...

CVE-2026-48272

CVE-2026-48272 affects Creative Cloud Desktop and involves an Uncontrolled Search Path Element (CWE-427) that could lead to arbitrary code execution in the context of the current user. Exploitation is local, does not require user interaction, and the attack surface is constrained by the patch/sco...

CVE-2026-48344

CVE-2026-48344 involves Creative Cloud Desktop and a TOCTOU race condition (CWE-367) that could lead to arbitrary code execution in the context of the current user . The issue is described as exploitable under conditions beyond the attacker’s control, with no user interaction required . Per the c...

CVE-2026-55512

CVE-2026-55512 (and GHSA-M3CX-MWPG-32JG) documents a vulnerability in nebula-mesh where OIDC login (GET /ui/oidc/login) creates a new in-memory state entry per unauthenticated request with a 10-minute TTL, without rate limiting or a cap on live states. The route is registered outside the Web UI r...

CVE-2026-15738

The CVE-2026-15738 issue affects the AWS Load Balancer Controller prior to version 3.4.2, where incorrect behavior order in Gateway API listener-rule generation can let an authenticated remote user intercept, spoof, or deny another namespace’s gRPC traffic on a shared Gateway via a crafted HTTPRo...

CVE-2026-54629

CVE-2026-54629 relates to Anyquery: in Server Mode, the built‑in SQLite virtual table modules (csv_reader, log_reader, etc.) are exposed without input sanitization or access controls. An unauthenticated attacker who connects to the MySQL‑compatible server port can create virtual tables pointing t...

CVE-2026-61520

The CVE-2026-61520 entry documents a server-side request forgery in Simple Machines Forum (SMF) image proxy. Affected versions are SMF 2.1 prior to commit 4bf35cf and SMF 3.0 prior to commit b4d23df. The vulnerability allows authenticated attackers to trigger internal HTTP requests by embedding a...

CVE-2026-53603

The connected advisory shows a concrete vulnerability in nebula-mesh where Operator session tokens were stored in plaintext in the operator_sessions table (token column as PRIMARY KEY). The 32‑byte random hex tokens are sent in cookies and valid for 24 hours, meaning any reader of the database (o...

CVE-2026-24272

NVIDIA TensorRT is affected by CVE-2026-24272, a heap-based buffer overflow that can lead to code execution. The vulnerability affects TensorRT components and is described with a local attack vector, low attack complexity, and no privileges required, with user interaction needed. NVIDIA’s securit...

CVE-2026-24268

Summary: CVE-2026-24268 affects NVIDIA TensorRT. The vulnerability is a heap-based buffer overflow in TensorRT that can lead to code execution if exploited. Public descriptions in connected records confirm the issue and its impact, including a CVSS v3.1 base score of 7.8 (High) with local attack ...

CVE-2026-24238

NVIDIA TensorRT is affected by CVE-2026-24238, which involves improper validation of an array index in a TensorRT component. The vulnerability could allow code execution and is characterized by a local attack vector with user interaction required, and high impact on confidentiality, integrity, an...

CVE-2026-24227

CVE-2026-24227 affects NVIDIA TensorRT. The vulnerability arises from deserializing untrusted data, potentially enabling code execution. Impact is high (CVSS v3.1 base score 9.8). NVIDIA’s security bulletin recommends updating to TensorRT v11.0 (and Polygraphy 0.50.0) to mitigate; affected Tensor...

CVE-2026-15778

CVE-2026-15778 affects Google Chrome navigation logic prior to version 150.0.7871.125, due to insufficient validation of untrusted input in Navigation. An attacker who compromises the renderer could bypass navigation restrictions via a crafted HTML page. The issue is addressed in Chrome 150.0.787...

CVE-2026-15777

CVE-2026-15777 – Use-after-free in the Chrome UI on Linux prior to 150.0.7871.125 can allow a remote attacker to induce heap corruption by tricking a user into performing specific UI gestures on a crafted HTML page. Affected product: Google Chrome (Linux UI subsystem). Root cause: use-after-free ...

CVE-2026-15776

CVE-2026-15776 affects Google Chrome/V8: an inappropriate implementation in V8 allowed remote code execution inside the sandbox via a crafted HTML page before Chrome 150.0.7871.125. The issue is addressed in the Chrome Stable Channel Update, which upgrades to 150.0.7871.125 (Windows/Mac) and 150....