CVE-2026-104871

The Angular SSR tool is vulnerable to a path traversal issue in its CommonEngine.retrieveSSGPage logic when running on Windows . The vulnerability exists in @angular/ssr/node and @angular/ssr (versions 17 through 18) because the application accepts relative request URLs containing backslash paren...

CVE-2026-104988

A vulnerability exists in Dogtag PKI (pki-core) within the CMCAuthForEST authentication plugin. The system fails open when an EST fullcmc enrollment request is submitted using BasicAuth without an end-user TLS client certificate. Because the SSL_CLIENT_CERT session attribute retains the EST subsy...

CVE-2026-104991

Phproject versions prior to 1.8.7 are affected by a missing object-level authorization vulnerability within the REST API issue endpoints, specifically single_get, single_comments, and single_comments_post. The root cause is the failure to invoke the allowAccess() authorization routine, allowing a...

CVE-2026-12392

An information exposure vulnerability exists in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 . An unauthenticated attacker can retrieve the RPC secret in plaintext via the vendor data metadata endpoint . This is specifically possible if a target machine was deployed wi...

CVE-2026-39718

The Webriti Wallstreet WordPress theme is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. This issue affects versions from the initial release through 2.8.6 . The vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user. No specific expl...

CVE-2026-103958

Loom for AWS versions before 1.7.0 are vulnerable to a Server-side request forgery (SSRF) in the tool server and remote agent connection handling. An authenticated remote user can exploit this by supplying a crafted connection address during the registration, updating, or testing of a tool server...

CVE-2026-103957

A Server-side request forgery (SSRF) vulnerability exists in the OAuth2 discovery handling of Loom for AWS versions prior to 1.7.0 . An authenticated remote user can exploit this by supplying a crafted discovery document address when registering a tool server or remote agent configured for delega...

CVE-2026-96940

A weak authorization vulnerability in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network. The vulnerability is confirmed and is addressed in several security updates, including KB5129955 (Subscription Edition RTM), KB5129956 (2019 CU15), KB5129957 (201...

CVE-2026-103956

Loom for AWS versions before 1.6.1 are vulnerable to a critical flaw due to missing authentication for a critical function within the authentication dependency. In deployments where no identity provider is configured, remote actors can exploit this via any request to the application API to obtain...

CVE-2026-103978

The OPNMGR software (an OPNsense fleet manager) is vulnerable to an unauthenticated path traversal in the snyk_scan_progress.php file. The application takes a scan_id parameter from the query string and concatenates it into a file path used by file_get_contents() without performing any authentica...

CVE-2020-37278

The Weaver e-Bridge platform is vulnerable to an unauthenticated arbitrary file read vulnerability. This flaw exists in the saveYZJFile endpoint, where a remote attacker can supply a file: URL to the downloadUrl parameter to access arbitrary files on the host system. Successful exploitation allow...

CVE-2014-125130

The CodeArt Google MP3 Audio Player plugin for WordPress (versions through 1.0.11 ) is vulnerable to an unauthenticated arbitrary file read vulnerability. This flaw exists due to a path-traversal vulnerability in the file parameter of the direct_download.php file. Remote attackers can exploit thi...

CVE-2023-54405

The H3C CVM (Cloud Virtualization Management) component of the H3C CAS cloud platform is vulnerable to an unauthenticated arbitrary file upload flaw in the /cas/fileUpload/upload endpoint. The root cause is the lack of restrictions on file types and the failure to sanitize the caller-supplied tok...

CVE-2026-61586

The Copernik XML Factory library (version 0.1.1 and below) is vulnerable to improper restriction of XInclude resource resolution when using the stock JDK provider. If an application enables XInclude on a factory obtained via XmlFactories.newDocumentBuilderFactory(), XmlFactories.newSAXParserFacto...

CVE-2026-19856

The All in One SEO WordPress plugin versions prior to 5.0.2.1 contains a vulnerability where it fails to correctly identify which shortcodes are present in content derived from user input before stripping them. This flaw allows unauthenticated users to execute arbitrary shortcodes registered on t...

CVE-2026-103931

Technical details for CVE-2026-103931 are not publicly available in the provided documents. While a GitHub repository and a proof-of-concept mention exist, they do not provide specifics on the affected product, root cause, or impact. Monitor for updates.

CVE-2026-104861

The probe-image-size library (versions <= 7.3.0) is vulnerable to a quadratic-time Denial of Service (DoS) attack due to inefficient regular expression handling in its SVG parser. Specifically, the regex /]*>/ causes the engine to repeatedly scan to the end of the input whenever it encounte...

CVE-2026-104859

The Nx monorepo solution for TypeScript and polyglot codebases is vulnerable to OS command injection in the @nx/docker release pipeline. In versions 21.4.0 until 22.7.8 and 23.0.0 until 23.1.1 , the release.docker.repositoryName and registryUrl configuration values are interpolated into shell com...

CVE-2026-102795

Apache Traffic Server is affected by an Improper Access Control vulnerability due to the SNI to Host header matching policy not being properly enforced. This issue impacts versions 9.0.0 through 9.2.14 and 10.0.0 through 10.1.3 . To remediate this vulnerability, users are recommended to upgrade t...

CVE-2026-104855

The Wasmtime runtime (versions 46.0.0 to 46.0.2 and 47.0.3 ) is vulnerable to a flaw where fuel and epoch preemption checks during bulk operations (such as memory.copy, table.grow, and array.copy) can expose invalid intermediate states . If an embedder mutates a Store during a Store::epoch_deadli...

CVE-2026-59265

Apache OpenOffice v4.1.16 and earlier are vulnerable to a code execution issue within the Java integration . A specially crafted untrusted document can trigger the execution of arbitrary code, including remote code, when opened by a user. To mitigate this risk, users should disable Java runtime i...

CVE-2026-102626

LimeSurvey Community Edition 7.4.0 is vulnerable to a Stored XSS flaw. An authenticated user with the global Surveys: create permission can inject a JavaScript-breaking value into the date_min attribute of a Date/Time question. Because the application fails to perform JavaScript-context encoding ...

CVE-2026-104826

The DropzoneFileExplorer application (version v1.1 ) is vulnerable to a path traversal flaw in its resumable upload handler, leading to Remote Code Execution (RCE) . The uploadInit function fails to sanitize the fileName parameter, allowing an attacker to provide a path like ../../app/shell.php. ...

CVE-2026-67269

Dell Container Storage Modules (CSM) are affected by an improper privilege management vulnerability in the ContainerStorageModule Custom Resource reconciler . A low-privilege remote attacker could exploit this flaw to escalate privileges and gain root-level access on Kubernetes cluster nodes thro...

CVE-2026-54472

Dell Container Storage Modules (CSM) versions prior to 1.17.0 are vulnerable to CVE-2026-54472 , a use of hard-coded credentials vulnerability in the CSM Authorization module . A remote unauthenticated attacker can exploit this flaw to forge cryptographically valid administrative tokens, granting...

CVE-2026-61421

The Dell Container Storage Modules (CSM) are vulnerable to a use of hard-coded cryptographic key in the JWT authentication component of karavi-authorization. A remote unauthenticated attacker with knowledge of the publicly available signing secret can forge authentication tokens to gain administr...

CVE-2026-67273

Dell Container Storage Modules (CSM) versions prior to 1.17.0 are vulnerable to CVE-2026-67273 , an improper neutralization of special elements used in a template engine. A low-privilege attacker with remote access can exploit this flaw to escalate privileges, access sensitive information, and pe...

CVE-2026-104854

The Nx monorepo solution for TypeScript and polyglot codebases (versions 14.6.0 through 22.7.8 and 23.0.0 through 23.1.1) is vulnerable to local privilege escalation and information disclosure. The software creates Unix domain sockets for its daemon and isolated plugin workers in shared temporary...

CVE-2026-104853

The monorepo solution Nx is vulnerable to a path traversal vulnerability in versions 13.10.0 through 22.7.10 and 23.2.1 . During migration planning, the software reads the nx-migrations.migrations value from a target package manifest without validating that it is a contained relative path. A host...

CVE-2026-104851

The fsspec Python implementation framework (versions 0.9.0 through 2026.6.0 ) is vulnerable to Remote Code Execution (RCE) due to unrestricted jinja2 template evaluation. The flaw exists in fsspec.implementations.reference.ReferenceFileSystem when processing Kerchunk reference JSON documents via ...

CVE-2026-97674

Langflow OSS versions 1.0.0-1.12.2 are vulnerable to a Code Injection vulnerability (CVE-2026-97674 ) where a remote authenticated attacker can execute arbitrary OS commands. This is caused by the improper neutralization of special elements used in an OS command, also described as improper contro...

CVE-2026-97680

The Langflow OSS software (versions 1.0.0-1.12.2 ) is affected by CVE-2026-97680 , where a remote authenticated attacker could obtain sensitive information or inject malicious data . This vulnerability is caused by improper access control within the vertex result caching subsystem (CWE-284). The ...

CVE-2026-88962

The Langflow OSS software (versions 1.0.0-1.12.2 ) is vulnerable to CVE-2026-88962 , where a remote authenticated attacker could execute arbitrary code due to improper control of code generation (CWE-94 ). The impact of this vulnerability includes the ability for an attacker to execute arbitrary ...

CVE-2026-97679

Langflow OSS versions 1.0.0-1.12.2 are affected by CVE-2026-97679 , which allows a remote authenticated attacker to execute arbitrary code. The root cause is the improper neutralization of special elements used in an OS command, leading to Code Injection due to improper input validation. The vuln...

CVE-2026-97676

Langflow OSS versions 1.0.0-1.12.2 are affected by CVE-2026-97676 , which allows a remote authenticated attacker to execute arbitrary code. This vulnerability stems from the improper neutralization of special elements used in code , which can lead to a sandbox escape . The impact includes high se...

CVE-2026-97677

In Langflow OSS (versions 1.0.0-1.12.2), an authenticated flow author can bypass local file access isolation safeguards to write attacker-controlled file content into any directory writable by the service account. Additionally, via a crafted on-disk index, an attacker could read arbitrary files a...

CVE-2026-97678

The Langflow OSS software (versions 1.0.0-1.12.2 ) is vulnerable to a flaw where a remote authenticated attacker could execute arbitrary code due to improper input validation . This vulnerability is associated with CWE-693: Protection Mechanism Failure and has a CVSS Base score of 8.8 . To remedi...

CVE-2026-97655

The Langflow OSS software (versions 1.0.0-1.12.2 ) is affected by CVE-2026-97655 , which allows a remote attacker to execute arbitrary code . The root cause is an incomplete blocklist within the code security scanner , categorized under CWE-94: Improper Control of Generation of Code ('Code Inject...

CVE-2026-97673

Langflow OSS versions 1.0.0-1.12.2 are vulnerable to several security issues, including CVE-2026-97673 . This specific vulnerability allows a remote authenticated attacker to execute arbitrary code due to improper input validation (CWE-693). The impact is significant, with a CVSS base score of 8....

CVE-2026-101331

Langflow OSS (versions 1.0.0-1.12.2) is affected by CVE-2026-101331 , where a remote authenticated attacker could obtain sensitive information due to insufficiently protected credentials . The vulnerability is associated with CWE-522 . IBM recommends upgrading to version 1.12.3 to remediate this ...

CVE-2026-104334

The Langflow OSS project (versions 1.0.0-1.12.2 ) is affected by CVE-2026-104334 , which allows a remote attacker to execute arbitrary code due to improper control of code generation (CWE-94). This vulnerability could lead to unauthorized code execution on the target system. To remediate this iss...

CVE-2026-103360

Langflow OSS versions 1.0.0-1.12.2 are vulnerable to a path traversal vulnerability (CWE-22 ). This flaw allows a remote authenticated attacker to obtain sensitive information due to the improper limitation of a pathname to a restricted directory. The impact includes unauthorized access to sensit...

CVE-2026-101329

Langflow OSS versions 1.0.0-1.12.2 are vulnerable to CVE-2026-101329 , where a remote authenticated attacker could obtain sensitive information due to improper access control (CWE-284). The impact includes unauthorized disclosure of sensitive data, with a CVSS base score of 6.5. To remediate this...

CVE-2026-104849

The Tinypool Node.js worker thread pool implementation (prior to version 2.1.2 ) is vulnerable to a prototype pollution gadget. The issue arises because pool.run(task, options) reads the filename property from a caller-supplied options object without requiring an own property . If an attacker pol...

CVE-2026-104848

The Tinypool minimal Node.js worker thread pool implementation is vulnerable to a Prototype Pollution gadget in versions prior to 2.1.1 . The root cause is located in dist/index.js, where the software constructs ThreadPool.options from a normal options object and reads execArgv and env worker opt...

CVE-2026-104914

MISP versions prior to v2.5.48 are vulnerable to an improper access control vulnerability in its attribute search and paginated attribute view endpoints. The root cause is a lack of visibility restrictions in these specific code paths; while the event detail view correctly restricts soft-deleted ...

CVE-2026-103631

Google Chrome versions prior to 154.0.8037.97 are vulnerable to a heap-based buffer overflow in WebRTC . A remote attacker can exploit this vulnerability by serving a crafted HTML page to execute arbitrary code inside the browser sandbox. This issue was reported by Xinyang Ge and is addressed in ...

CVE-2026-103623

A use-after-free vulnerability exists in the MediaStream component of Google Chrome prior to version 154.0.8037.97 . This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by enticing a user to visit a specially crafted HTML page . The vulnerability occurs when ...

CVE-2026-103627

Google Chrome versions prior to 154.0.8037.97 are vulnerable to an information leak within the SVG component. A remote attacker can exploit this vulnerability to obtain sensitive information by interacting with a crafted HTML page . The issue has been addressed in the 154.0.8037.97 release for Wi...

CVE-2026-103624

A use-after-free vulnerability exists in the Contextual Tasks component of Google Chrome on Windows versions prior to 154.0.8037.97 . A remote attacker who has already compromised the renderer process can exploit this flaw by convincing a user to visit a crafted HTML page . Successful exploitatio...