CVE-2026-93492

CVE-2026-93492 affects the HpackEncoder in Netty's netty-codec-http2 module. A remote, unauthenticated attacker can trigger a Denial of Service by sending HTTP/2 SETTINGS frames containing a very large MAX_HEADER_TABLE_SIZE , causing the encoder to store an excessive number of unique headers and ...

CVE-2026-93491

Netty 's HttpServerCodec (io.netty/netty-codec-http) is vulnerable to a denial-of-service via unbounded memory consumption. A remote, unauthenticated attacker can pipelining HTTP/1.1 requests on a single connection and withholding reads, causing the methodOverflowQueue to grow without limit and e...

CVE-2026-93488

CVE-2026-93488 affects Netty's SpdySessionHandler in the io.netty/netty-codec-http component. The handler's localConcurrentStreams field defaults to Integer.MAX_VALUE with no public API to modify it, allowing a remote peer to open a SPDY connection and send a large number of SYN_STREAM frames wit...

CVE-2026-28199

CVE-2026-28199 affects NetBackup Flex OS , where an authenticated user with access to the management shell can supply a specially crafted path argument to a diagnostic command, enabling relative path traversal to read arbitrary files from the underlying operating system. Successful exploitation m...

CVE-2026-21806

HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. The application permits multiple simultaneous authenticated sessions for the same administrative account, which could allow an attacker to predict or hijack valid session identifiers . Successful exp...

CVE-2026-28198

CVE-2026-28198 affects NetBackup Flex OS (Cohesity), specifically its management shell. An authenticated, low-privileged user can bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation yields ...

CVE-2026-28197

CVE-2026-28197 is a privilege escalation vulnerability in NetBackup Flex OS (Cohesity), where an authenticated, low-privileged user with access to the management shell can supply a specially crafted input to a privileged administrative command, achieving arbitrary code execution with root-level p...

CVE-2026-93563

CVE-2026-93563 affects Netty's netty-codec-smtp component, specifically the SmtpResponseDecoder class. The root cause is unbounded multi-line response accumulation , which allows a remote attacker to trigger a memory-exhaustion denial of service over the network without authentication or user int...

CVE-2026-81627

A flaw in QEMU 's VAPIC setup hypercall (hw/i386/vapic.c) fails to validate that the writable RAM alias stays within the option ROM window. A privileged guest on a Q35/KVM machine can position this alias over locked SMRAM , bypassing chipset D_LCK protection and injecting code into System Managem...

CVE-2026-93578

CVE-2026-93578 affects the Netty library, specifically the netty-handler-ssl-ocsp module. The vulnerability stems from a missing Extended Key Usage (EKU) check in the OCSP client, which allows an attacker to perform a certificate revocation bypass . An OCSP response signed with a certificate lack...

CVE-2026-93572

CVE-2026-93572 affects RedisArrayAggregator in io.netty/netty-codec-redis . The component checks maxElements and maxNestedArrayDepth limits independently, but the allocator remains eager: every nested RESP array header creates new ArrayList(length) before any child element exists. With the defaul...

CVE-2026-93575

CVE-2026-93575 is an incomplete fix for CVE-2026-44248 in Netty's MQTT codec (io.netty.handler.codec.mqtt.MqttDecoder). The decoder validates the packet's Remaining Length against maxBytesInMessage but fails to validate the Properties Length against it. An unauthenticated remote attacker can send...

CVE-2026-93561

This vulnerability affects the netty-codec-memcache component of the Netty project. A signed/unsigned type mismatch in the Memcache binary codec can cause frame desynchronization , potentially enabling response smuggling . Red Hat rates it CVSS 6.5 (Medium) — network-exploitable with low complexi...

CVE-2026-92976

A stored XSS vulnerability affects the profile management functionality of T-Systems' TAO 2.0 suite. An authenticated user can inject malicious HTML or JavaScript into personal data fields, which are stored and rendered without proper sanitisation when viewed by another user, including administra...

CVE-2026-87743

CVE-2026-87743 is an authorization bypass in Quarkus HTTP security (quarkus-vertx-http). The root cause is a path normalization discrepancy between the security matcher and HTTP request dispatchers: an unauthenticated attacker can craft a URL that the security matcher treats as public, but which ...

CVE-2026-15579

Moxa Ethernet switches are affected by an out-of-bounds write vulnerability caused by improper validation of the username field length during Web login processing. A remote, unauthenticated attacker can submit a specially crafted overly long input , triggering a buffer overflow that crashes the a...

CVE-2026-15797

The Popup Maker WordPress plugin (versions up to and including 1.24.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the post_title field, caused by insufficient input sanitization and output escaping. An attacker with contributor-level access or higher can create a post containing an H...

CVE-2026-87915

The Popup Maker WordPress plugin is vulnerable to unauthenticated stored cross-site scripting (XSS) via the values[Name] parameter in all versions up to and including 1.24.0 . The root cause is insufficient input sanitization and output escaping : although wp_kses is applied on output, HTML entit...

CVE-2026-18405

Jeg Kit for Elementor (WordPress plugin) versions up to and including 3.2.16 are vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) via Comment Content, caused by insufficient input sanitization and output escaping. An attacker can inject arbitrary scripts into comment fields; execut...

CVE-2026-90884

The WP Recipe Maker WordPress plugin (versions ≤ 10.8.1 ) is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the 'notes' parameter , accessed via the REST Preview Endpoint . The root cause is insufficient input sanitization and output escaping. An authenticated attacker with Cont...

CVE-2026-21822

HCL AppScan 360° is affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized file modif...

CVE-2026-40539

CVE-2026-40539 is an improper certificate validation vulnerability in the Email API component of Synology DiskStation Manager (DSM) , affecting versions before 7.2.1-69057-10 , 7.2.2-72806-7 , and 7.3.2-86009-2 . An attacker positioned as a man-in-the-middle can read or write arbitrary files and ...

CVE-2026-40538

Synology DiskStation Manager (DSM) is affected by an improper restriction of excessive authentication attempts in the Auto block feature. Versions prior to 7.2.1-69057-10 , 7.2.2-72806-7 , and 7.3.2-86009-2 allow remote attackers to read limited files via brute-force attacks. The CVSS 3.1 score i...

CVE-2026-40535

CVE-2026-40535 is a path traversal vulnerability in the Desktop API component of Synology DiskStation Manager (DSM) , affecting versions before 7.2.1-69057-10 , 7.2.2-72806-7 , and 7.3.2-86009-2 . The improper limitation of a pathname to a restricted directory allows remote attackers (no privileg...

CVE-2026-40533

CVE-2026-40533 is an exposure of sensitive information through data queries in the Desktop API of Synology DiskStation Manager (DSM) . Versions before 7.2.1-69057-10 , 7.2.2-72806-7 , and 7.3.2-86009-2 are affected, allowing remote attackers to obtain information via crafted data queries. The CVS...

CVE-2026-85410

The Master Addons for Elementor WordPress plugin is vulnerable to an authorization bypass in versions up to and including 3.2.2 . The plugin fails to properly verify user permissions, and the jltma_popup custom post type is registered with capability_type='post', making its admin edit screen acce...

CVE-2026-83561

The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress (versions up to and including 7.5.4 ) is vulnerable to unauthenticated Stored Cross-Site Scripting via the Elementor Cookie Blocker Regex, caused by insufficient input sanitization and output escaping. An attacker can inject arbit...

CVE-2025-13533

The CSS & JavaScript Toolbox WordPress plugin (all versions up to and including 12.0.6 ) is vulnerable to Stored Cross-Site Scripting via the Assignment Engine fields. The root cause is insufficient input sanitization and output escaping on assignment data fields including Expressions , URLs , an...

CVE-2026-40537

A server-side request forgery (SSRF) vulnerability exists in the PersonMail API component of Synology DiskStation Manager (DSM) prior to versions 7.2.1-69057-10 , 7.2.2-72806-7 , and 7.3.2-86009-2 . A remote authenticated user can leverage this flaw to obtain non-sensitive information . The vulne...

CVE-2026-40536

CVE-2026-40536 is a path traversal vulnerability in the Audio API of Synology DiskStation Manager (DSM) . Remote authenticated users can access files outside the restricted directory, obtaining non-sensitive information. The flaw is an improper limitation of a pathname to a restricted directory. ...

CVE-2026-40534

CVE-2026-40534 is a cross-site scripting (XSS) vulnerability in the Video API component of Synology DiskStation Manager (DSM) , caused by improper neutralization of input during web page generation. Remote authenticated users can read or write limited files when the media player is launched. Affe...

CVE-2026-40532

Synology DiskStation Manager (DSM) is affected by a forced browsing vulnerability in the Wallpaper Path component, allowing remote authenticated users to obtain sensitive information. The vulnerability affects DSM versions before 7.2.1-69057-10 , 7.2.2-72806-7 , and 7.3.2-86009-2 . The CVSS 3.1 s...

CVE-2026-40531

An integer overflow or wraparound vulnerability in the File Operation component of Synology DiskStation Manager (DSM) allows remote authenticated users to trigger a limited denial-of-service . Affected versions are before 7.2.1-69057-10 , 7.2.2-72806-7 , and 7.3.2-86057-2 (note: documents list 7....

CVE-2026-4036

CVE-2026-4036 is an SQL injection vulnerability in the Sharing API of Synology DiskStation Manager (DSM), affecting versions before 7.2.1-69057-10 , 7.2.2-72806-7 , and 7.3.2-86009-2 . A remote authenticated user can exploit it to obtain arbitrary sharing files . The CVSS 3.1 score is 6.5 (MEDIUM...

CVE-2026-40530

CVE-2026-40530 is a CRLF injection vulnerability in the User API of Synology DiskStation Manager (DSM) versions before 7.2.1-69057-10, 7.2.2-72806-7, and 7.3.2-86009-2. It allows remote authenticated users to read or write arbitrary files and trigger denial-of-service after a system reboot. The C...

CVE-2026-56595

HCL BigFix Service Management is affected by a CORS misconfiguration caused by improperly validated origin headers. An attacker can craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and restricted APIs on behalf of a vic...

CVE-2026-56597

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability that allows an unauthenticated attacker to extract internal IP addresses from the application's responses. This enables the attacker to map the underlying network topology and identify potential internal ta...

CVE-2026-56592

HCL BigFix Service Management is affected by an Improper Authentication vulnerability caused by inadequate account lockout mechanisms. An unauthenticated attacker can execute sustained brute-force attacks against the login interface, potentially achieving unauthorized system access . The CVSS v3....

CVE-2026-13683

CVE-2026-13683 is a SQL Injection vulnerability in the EventScheduler API of Synology DiskStation Manager (DSM) , affecting versions before 7.2.1-69057-12 , 7.2.2-72806-9 , 7.3.2-86009-4 , and 7.4-90075 . The flaw arises from improper neutralization of special elements in SQL commands. Exploitati...

CVE-2026-13623

CVE-2026-13623 is a cross-site scripting (XSS) vulnerability in the Theme API of Synology DiskStation Manager (DSM) affecting versions before 7.2.1-69057-12 , 7.2.2-72806-9 , 7.3.2-86009-4 , and 7.4-90075 . The improper neutralization of input during web page generation allows remote authenticate...

CVE-2026-13666

CVE-2026-13666 is a CRLF Injection vulnerability in the Sharing API of Synology DiskStation Manager (DSM) . A remote authenticated user can write limited files when a victim clicks a crafted sharing URL. The CVSS 3.1 score is 3.5 (Low) with the vector requiring network access, low complexity, low...

CVE-2026-56590

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability caused by improper file validation controls. An unauthenticated attacker can upload and execute malicious payloads, potentially leading to complete server compromise . The CNA-assigned CVSS 3.1 score is 6.4 (ME...

CVE-2026-6205

CVE-2026-6205 is an external control of file name or path vulnerability in the Upload API of Synology DiskStation Manager (DSM) prior to versions 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4, and 7.4-90075. It allows remote authenticated users to write arbitrary files and conduct denial-of-servic...

CVE-2026-13673

CVE-2026-13673 is an incorrect permission assignment for a critical resource in the LDAP API of Synology DiskStation Manager (DSM) , affecting versions before 7.2.1-69057-12 , 7.2.2-72806-9 , 7.3.2-86009-4 , and 7.4-90075 . The flaw allows remote authenticated users to read or write arbitrary fil...

CVE-2026-13635

Synology DiskStation Manager (DSM) contains an improper encoding or escaping of output vulnerability in the Auth API . Remote attackers without authentication can exploit this flaw to obtain non-sensitive information from affected versions prior to 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4, an...

CVE-2026-13639

Synology DiskStation Manager (DSM) before versions 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4, and 7.4-90075 is affected by an insufficient entropy vulnerability in its login logic . A remote, unauthenticated attacker can leverage this flaw to read or write arbitrary files and conduct denial-of...

CVE-2026-21848

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability stemming from improper access controls. An authenticated attacker with low privileges can exploit this to view restricted data elements across tenant boundaries , indicating a cross-tenant information disclosur...

CVE-2026-13684

CVE-2026-13684 is an improper encoding or escaping of output vulnerability in the SCGI component of Synology DiskStation Manager (DSM) prior to versions 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4, and 7.4-90075 . The flaw allows remote, unauthenticated attackers to read or write arbitrary files...

CVE-2026-11757

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the KA Informatics Technologies Ltd. Co. Bar Association Website , caused by improper neutralization of input during web page generation. The affected version range extends through 18/09/2026 . The CVSS 3.1 score is 6.1 (MEDIUM) , wit...

CVE-2026-93493

CVE-2026-93493 affects Netty's netty-handler-ssl-ocsp component. The flaw is in OCSP certificate validation: when a remote attacker supplies an OCSP response that omits the optional nextUpdate field, the validation is silently skipped , causing the application to proceed with an unvalidated certi...