CVE-2026-88022

CVE-2026-88022 affects the MongoDB integration for Laravel , where improper neutralization of special elements in data query logic allows an array supplied to an explicit equality filter to be interpreted as a query condition rather than a literal value. The vulnerability impacts the three-argume...

CVE-2026-88051

Tesseract (open-source OCR engine) versions 5.5.3 and earlier contain a heap out-of-bounds write in the callback form of GenericVector::read (src/ccutil/genericvector.h). The function reads independent reserved and size_used_ int32 fields from a .traineddata model without a cap or invariant check...

CVE-2026-15419

The silabser.sys driver for Silicon Labs CP210x devices (v11.5.0 and earlier) is vulnerable to kernel pool memory corruption caused by malformed packets from a malicious device. A local unprivileged user with physical access can trigger the flaw to achieve arbitrary code execution with escalated ...

CVE-2026-15418

CVE-2026-15418 affects the silabser.sys driver for CP210x devices in versions 11.5.0 and earlier . A local unprivileged user with physical access can connect a malicious device and use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory . The vulnerability is limited to ...

CVE-2026-15417

CVE-2026-15417 affects the silabser.sys Windows 8 driver for Silicon Labs CP210x USB-to-serial devices. A local unprivileged user can trigger a kernel crash (denial of service) by applying incorrect driver settings, with no user interaction required and low attack complexity. The CVSS 4.0 score i...

CVE-2026-12666

IBM MQ Appliance is affected by an XML external entity injection (XXE) vulnerability in MQRFH2 header processing , tracked under CVE-2026-12666 (CWE-611). An authenticated attacker can obtain sensitive information or cause a denial of service. The CVSS 3.1 base score is 8.1 (AV:N/AC:L/PR:L/UI:N/S...

CVE-2026-10751

IBM MQ Appliance is affected by a deserialization filter bypass in exception handling within the IBM MQ Java and JMS client libraries (CWE-502). An authenticated attacker with low privileges can exploit this over the network to execute arbitrary code on client applications, with high impact on co...

CVE-2026-10853

IBM MQ Appliance is affected by an improper validation vulnerability (CWE-470) in cluster command message length handling. An authenticated attacker with cluster access can cause a denial of service or potentially execute arbitrary code , rated CVSS 7.5 (High). Affected versions include 9.4 LTS (...

CVE-2026-10858

IBM MQ Appliance is affected by a heap buffer underflow (CWE-122) triggered when processing multi-segment messages , allowing an authenticated attacker to cause denial of service or potentially execute arbitrary code. The vulnerability carries a CVSS 9.9 score (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H...

CVE-2026-85228

An integer overflow in the tensor buffer validation component of Amazon Deep Java Library (DJL) versions 0.13.0 through 0.36.0 (all platforms) allows a remote unauthenticated actor to read information from adjacent process memory or trigger a denial of service by submitting a crafted tensor paylo...

CVE-2026-10030

IBM MQ Appliance (versions 9.4 LTS 9.4.0.0–9.4.0.25, 9.4 CD 9.4.1.0–9.4.5.2, and 10.0.0.0–10.0.0.1) is affected by an improper authorization vulnerability (CWE-285) in IBM MQ Console . Authenticated non-administrative users can create and start queue managers due to insufficient authorization che...

CVE-2026-11725

IBM MQ Appliance is affected by an integer overflow (CWE-190) in MQINQ request processing , allowing an authenticated attacker to cause a denial of service or potentially execute arbitrary code . The vulnerability is rated CVSS 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) by IBM. Affected v...

CVE-2026-11716

IBM MQ Appliance is affected by an improper validation vulnerability (CWE-122: Heap-based Buffer Overflow) in cluster migration data processing during queue manager startup. An authenticated attacker could cause a denial of service or potentially execute arbitrary code . The vulnerability carries...

CVE-2026-11381

IBM MQ Appliance is affected by a heap buffer overflow (CWE-122) caused by improper validation of message distribution list structures. An authenticated network attacker can trigger a denial of service or potentially execute arbitrary code , rated CVSS 9.9 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). A...

CVE-2026-78804

CVE-2026-78804 is an authenticated time-based blind SQL injection in Dolibarr ERP, affecting the product stock management functionality. The seuil_stock_alerte parameter in /product/stock/product.php is inserted into an SQL statement via direct string concatenation in an unquoted numeric context ...

CVE-2026-10744

IBM MQ Appliance is affected by an integer overflow in MQINQ request validation (CWE-122: Heap-based Buffer Overflow), allowing an authenticated attacker to cause a denial of service or potentially escalate privileges . The CVSS 3.1 base score is 7.5 (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Affecte...

CVE-2026-12150

IBM MQ Appliance is affected by an improper validation vulnerability in its TLS certificate processing (CWE-121: Stack-based Buffer Overflow). A remote attacker holding a trusted TLS client certificate can cause a denial of service and potentially affect memory contents by supplying deeply nested...

CVE-2026-11378

IBM MQ Appliance is affected by an integer overflow in distribution list processing (CWE-190). An authenticated attacker could exploit this to cause a denial of service or potentially execute arbitrary code . IBM rates the CVSS base score at 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Affected ver...

CVE-2026-11726

IBM MQ Appliance is affected by an improper validation vulnerability in message header offset processing (CWE-125: Out-of-bounds Read). An authenticated attacker could exploit this to obtain sensitive information or cause a denial of service. The vulnerability carries a CVSS 3.1 base score of 8.1...

CVE-2026-11375

IBM MQ Appliance is vulnerable to a stack buffer overflow in XA transaction identifier processing , which could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code . The IBM-assigned CVSS 3.1 base score is 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). A...

CVE-2026-10027

IBM MQ Appliance is affected by a buffer overflow (CWE-787) in compressed data channel processing . A remote, unauthenticated attacker can send malformed compressed data on channels with compression enabled, potentially causing a denial of service or arbitrary code execution . The CVSS 3.1 base s...

CVE-2026-10747

IBM MQ Appliance is affected by a heap buffer overflow (CWE-122) in protocol message processing that can be exploited remotely and prior to authentication, potentially leading to denial of service or arbitrary code execution . The CVSS 3.1 base score is 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)....

CVE-2026-73699

FileRun before 2026.3.0 is affected by a PHP object injection vulnerability in the Perms::getPerms() method. The root cause is an incorrect option passed to unserialize() : a positional array is used instead of the required named-key array, failing to disable class instantiation. Authenticated at...

CVE-2026-73698

FileRun versions prior to 2026.3.0 contain an authenticated SQL injection vulnerability in the Groups Add action. A delegated or simple administrator can submit the description parameter as an array, causing the getValuesString() method in DB/DP.php to interpolate raw array values into an INSERT ...

CVE-2026-73694

FileRun versions before 2026.3.0 contain an OS command injection vulnerability rooted in a no-op redefinition of escapeshellcmd() in CLI.php , which strips shell-metacharacter escaping and allows attacker-controlled input to reach an exec() sink unsanitized. Two exploitation paths are identified:...

CVE-2026-73693

FileRun before 2026.3.0 is vulnerable to OS command injection in the PhotoProofSheet handler. The root cause is a missing escapeshellarg() call when constructing the ImageMagick montage command, allowing authenticated users with upload permission to execute arbitrary commands by uploading files w...

CVE-2026-68487

CVE-2026-68487 is a path traversal vulnerability in Plesk's Backup Manager caused by an unsigned backup header , allowing an authenticated customer to perform an arbitrary file write as root . The vulnerability is scored CVSS 9.9 (Critical) with a changed scope, reflecting high impact on confiden...

CVE-2026-65639

ConfigServer Security & Firewall (CSF) is vulnerable to OS command injection in its advanced-rule parser . An attacker who controls a configured allow/deny feed can inject commands that execute with root privileges , due to insufficient validation of feed-supplied rule data. The vulnerability aff...

CVE-2026-65638

ConfigServer Security & Firewall (CSF) is vulnerable to shell command injection due to improper escaping of a request URL. An unauthenticated remote attacker can exploit this to execute arbitrary commands as the CSF service account. The CVSS 4.0 score is 9.2 (Critical) with a network attack vecto...

CVE-2026-68488

CVE-2026-68488 is a TOCTOU race condition in Plesk's Backup Manager that leads to insecure symlink following during restore operations. An attacker with low privileges can exploit this to take over ownership of arbitrary files or directories, resulting in local privilege escalation to root . The ...

CVE-2026-88050

Tesseract (open-source OCR engine) versions 5.5.3 and earlier contain an out-of-bounds write in the UnicharCompress component. The root cause is that RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length_ but accepts negative code_ values from a crafted .traineddata recoder ...

CVE-2026-88049

Tesseract (open-source OCR engine) versions 5.5.3 and earlier are affected by a heap out-of-bounds write in LSTM::Forward (src/lstm/lstm.cpp). Prior hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize but left NetworkIO::WriteTimeStepPart and NetworkIO::AddTim...

CVE-2026-88048

Tesseract OCR (open source) is affected through version 5.5.3 and earlier. The flaw resides in FullyConnected::DeSerialize (src/lstm/fullyconnected.cpp), which fails to validate deserialized layer scalars ni_ and no_ against weight-matrix dimensions. During FullyConnected::Forward, MatrixDotVecto...

CVE-2026-88047

Tesseract (open-source OCR engine), versions 5.5.3 and earlier , is affected by a stack buffer overflow in Classify::ReadNormProtos (src/classify/normmatch.cpp). The function parses the NORMPROTO component of a .traineddata file using std::istream::operator>>(char*) into a fixed 61-byte sta...

CVE-2026-88046

rclone prior to 1.75.1 does not reject parent-directory (..) segments in source Object.Remote() values before they are passed to destination backends via fs/list, fs/walk, fs/sync, or fs/operations. A flat-keyspace source store populated with non-rclone tooling can carry a raw .. key segment, and...

CVE-2026-88045

rclone (a CLI for syncing files across cloud storage) is affected by a memory exhaustion vulnerability in its S3 multipart streaming path (cmd/serve/s3/multipart.go). From v1.75.0 through v1.75.1 , an attacker-controlled Content-Length is passed to multipart.NewRW().Reserve before the request bod...

CVE-2026-88044

rclone versions 1.70.0 through 1.75.1 are affected by an authentication proxy bypass in the serve/start RC interface. The FTP and S3 constructors in cmd/serve/ftp/ftp.go and cmd/serve/s3/server.go incorrectly check the process-global proxy.Opt.AuthProxy value instead of the per-server request-loc...

CVE-2026-79987

CVE-2026-79987 is a low-privilege remote code execution vulnerability in Craft CMS , exploitable by a remote, authenticated, non-admin Control Panel user holding only the accessCp permission. The root cause involves element-search eager loading , allowing the attacker to execute operating system ...

CVE-2026-88018

rclone (a command-line tool for syncing files to cloud storage) contains a SigV4 signature bypass in its serve s3 mode. When configured with --auth-proxy but without --auth-key, the authPairMiddleware registers any client-chosen accessKeyID with an empty secret. The embedded gofakes3 component th...

CVE-2026-88017

rclone versions 1.64.0 through 1.75.1 contain a cross-session authentication confusion in the FTP auth-proxy driver (cmd/serve/ftp/ftp.go). The server stores one obscured password per username in a global userPass map rather than binding it to the authenticated session. When a second login with t...

CVE-2026-88016

rclone prior to 1.75.1 is vulnerable to a symlink-escape issue in the backend/local --links mode. A source .rclonelink object can plant a symlink in the destination, and subsequent directory metadata operations (MkdirMetadata, writeMetadataToFile, setTimes) — which run when Directory.translatedLi...

CVE-2026-88015

rclone prior to 1.75.1 is affected when its local backend is configured with --links (or links=true), which exposes symlink targets as .rclonelink objects. A crafted HTTP Range request with a positive start value larger than the target string length triggers an unchecked slice in openTranslatedLi...

CVE-2026-88014

rclone versions 1.72.0 through 1.75.1 are affected by a Zip Slip vulnerability in the archive ZIP backend ((*Fs).readZip in backend/archive/zip/zip.go). The method accepts archive/zip.File.Name values from an untrusted central directory and exposes cleaned entry names without verifying they remai...

CVE-2026-81046

Dell ThinOS 10 versions prior to 2605_10.2616 are affected by a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote network access can potentially exploit this flaw to achieve Arbitrary Code Execution within the application context. The CNA-assigned CVSS 3.1 score ...

CVE-2026-88959

Anchor CMS through 0.12.7 contains a privilege escalation vulnerability caused by missing role-based access control (RBAC) on admin user-management endpoints. Any authenticated user with editor or user roles can send POST requests directly to the admin/users/add or admin/users/edit endpoints to c...

CVE-2026-87913

The AWS Security Agent MCP server prior to version 0.2.0 is vulnerable to a missing S3 bucket ownership verification , allowing remote attackers to obtain the private source archive of a scanned workspace — including credentials and infrastructure state — by registering a storage bucket whose nam...

CVE-2026-81468

Dell ThinOS 10 , versions prior to 2605_10.2616 , is affected by an OS Command Injection vulnerability (Improper Neutralization of Special Elements used in an OS Command). A high-privileged attacker with remote access could potentially exploit this flaw to achieve command execution on the device....

CVE-2026-87912

CVE-2026-87912 affects the AWS Security Agent plugin in Amazon aws-agents-for-devsecops prior to version 1.1.0. A missing S3 bucket ownership verification allows a remote attacker to obtain the private source archive of a scanned workspace—potentially exposing credentials and infrastructure state...

CVE-2026-81467

Dell ThinOS 10 (versions prior to 2605_10.2616 ) is affected by an OS Command Injection vulnerability. An unauthenticated attacker with remote network access can exploit this flaw to achieve arbitrary command execution on the device. Dell assigned a CVSS v3.1 score of 9.8 (Critical) , reflecting ...

CVE-2026-88013

rclone (a command-line tool for syncing files to/from cloud storage) is affected in versions 1.49.0 through 1.75.1 due to its HTTP backend attaching custom headers (set via --http-headers or headers=) to outgoing requests while following redirects without a backend-specific http.Client.CheckRedir...