CVE-2026-51293

CVE-2026-51293 is a use-after-free in SQLite 3.41. The vulnerability occurs in the jsonBlobAppendNode() function when it is invoked after sqlite3DbFree() has been called on the aBlob member of the Parse structure. Documents do not provide exploit details, affected version ranges beyond 3.41, or r...

CVE-2025-69938

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the membershipType parameter. CVSS 3.1 base score 9.8 (CRITICAL) with network access, low attack complexity, no privileges, and user interaction not required. Impact is high for confidentiality, integrity, ...

CVE-2026-51290

CVE-2026-51290 entry is rejected/not used and does not represent an active vulnerability.

CVE-2026-62343

CVE-2026-62343 – ImageMagick heap buffer over-write during morphology with a user-supplied invalid kernel. Affected products/versions: ImageMagick before 6.9.13-51 and 7.0.1-0, and before 7.1.2-26. The flaw is triggered during morphology operations using a crafted kernel, leading to a heap buffer...

CVE-2026-64685

ImageMagick vulnerability CVE-2026-64685 affects the BGR decoder. In versions prior to 7.1.2-27, the BGR decoder does not check for an end-of-file in every location, which could lead to a heap buffer over-read when processing a crafted image. The issue has been fixed in version 7.1.2-27. The CVSS...

CVE-2026-53547

Technical details for CVE-2026-53547 are not publicly available in the provided documents. Monitor for updates on affected products, impact, and remediation.

CVE-2026-67595

CVE-2026-67595 affects VaahCMS versions 2.0.0–2.3.4. The vulnerability is a malicious obfuscated JavaScript payload embedded in the Blade template used to render security OTP emails, which can execute in any browser with JavaScript enabled. The payload opens a WebSocket connection to a hardcoded ...

CVE-2026-15157

undici is vulnerable to CRLF injection via a duck-typed blob-like request body’s type property when used as the Content-Type header on HTTP/1.1 dispatchers. Affected ranges: undici before 6.28.0; 7.0.0–before 7.29.0; and 8.0.0–before 8.9.0. An attacker supplying a hand-rolled blob-like body deriv...

CVE-2026-14643

undici vulnerability CVE-2026-14643 affects the cache interceptor in shared-cache mode. In undici versions 7.0.0–7.28.x and 8.0.0–8.8.x, the Cache-Control directive parser mishandles whitespace around the equals sign, causing the directive to be dropped or stored with literal quotes. This can cau...

CVE-2026-16728

Undici contains a defect in its retry interceptor: after a retry or resume of a partial response, it can assemble a body whose length differs from the Content-Length observed by the application. In affected ranges (before 6.28.0, 7.0.0–7.28.x, and 8.0.0–7.29.0 to 8.8.x), a faulty upstream may ret...

CVE-2026-67439

CVE-2026-67439 affects OliveTin prior to 3000.17.0. The StartActionAndWait and StartActionByGetAndWait endpoints in service/internal/api/api.go return full LogEntry output after execution without enforcing the logs permission, enabling a user with exec permission but logs:false to read action out...

CVE-2026-67438

OliveTin versions 3000.2.0 through 3000.17.0 expose a vulnerability where the checkShellArgumentSafety function does not treat regex: custom argument types as unsafe for Shell mode actions. This allows values that pass typeSafetyCheckRegex to be interpolated by wrapCommandInShell into an sh -c co...

CVE-2026-67437

OliveTin: The CVE-2026-67437 issue is in the OAuth2 login path (service/internal/auth/otoauth2/restapi_auth_oauth2.go) where per-login state is stored in an unbounded registeredStates map on every /oauth/login request. This can allow an unauthenticated attacker to exhaust memory and cause a denia...

CVE-2026-54249

CVE-2026-54249 affects Pydantic AI (Python agent framework) when using a Pydantic AI UI adapter (e.g., Vercel AI adapter). Versions 1.65.0–1.105.0 and 2.0.0b1–2.0.0b5 allow an attacker to reference arbitrary files in the application’s model-provider or cloud-storage account via UploadedFile refer...

CVE-2026-46678

Pydantic AI CVE-2026-46678 affects versions 1.56.0–1.98.0 where force_download='allow-local' on a URL influenced by untrusted input can bypass the cloud-metadata blocklist using IPv6 transition forms (IPv4-mapped IPv6, 6to4, NAT64, NAT64/isatap variants). The issue is mitigated by upgrading to 1....

CVE-2026-13308

CVE-2026-13308 affects Autel MaxiCharger AC Elite Home EV chargers. The flaw lies in the handling of WebSocket messages for the OCPP service, caused by insufficient validation of user-supplied data that can trigger an integer underflow before buffer allocation. This can allow an attacker to execu...

CVE-2026-13307

CVE-2026-13307 affects Autel MaxiCharger AC Elite Home EV chargers. The vulnerability is a heap-based buffer overflow in the handling of custom USB packets, caused by insufficient validation of the length of user-supplied data before copying to a fixed-length heap buffer. This can enable a physic...

CVE-2026-13309

Affected product : Autel MaxiCharger AC Elite Home NFC interface. Vulnerability : stack-based buffer overflow in NFC card response handling that can lead to arbitrary code execution . Impact : attacker with physical access can execute code on the device, with full control in its context; benefits...

CVE-2026-13306

Autel MaxiCharger AC Elite Home EV chargers are affected by CVE-2026-13306: a flaw in the exposed USB interface allows physically present attackers to bypass authentication without prior authentication. The issue stems from lack of authentication before accessing functionality, enabling bypass on...

CVE-2026-13305

Autel MaxiCharger AC Elite Home EV chargers are affected by CVE-2026-13305 due to improper verification of cryptographic signatures during software updates. The flaw in update image validation allows a physically present attacker to execute arbitrary code on the device with no authentication. Imp...

CVE-2026-65975

CVE-2026-65975 affects Pydantic AI AG-UI Adapter (AG-UI via Agent.to_ag_ui()/AGUIAdapter and Vercel AI via VercelAIAdapter) in Pydantic AI versions 1.88.0–1.107.0 and 2.0.0b1–2.4.x. The bug arises because sanitize_messages uses a stripping index computed before sanitization, so when a trailing cl...

CVE-2026-67436

CVE-2026-67436 affects Linuxfabrik monitoring-plugins (6.0.0 and earlier), specifically the redfish-* plugins. The root cause is that these plugins build request URLs by concatenating an operator-supplied base URL with response-supplied @odata.id links, enabling a malicious or compromised BMC to ...

CVE-2026-67435

The issue in linuxfabrik-lib affects the Python module lib.url.fetch() in versions before 6.0.0. It may follow cross-origin redirects while forwarding caller-supplied credential headers other than Authorization and Cookie, enabling a malicious redirect-capable server to receive headers such as X-...

CVE-2026-67433

CVE-2026-67433 affects Linuxfabrik monitoring-plugins (Python plugins for Icinga/Nagios). In version 6.0.0, the logfile check legacy database migration used a predictable path under /tmp via os.rename(), enabling a local user with plugin-account access to place a symlink that is followed by sqlit...

CVE-2026-67432

CVE-2026-67432 affects the MCP Ruby SDK before version 0.23.0. The vulnerability exists in MCP::Server::Transports::StreamableHTTPTransport of the mcp gem, which reads and parses an entire JSON-RPC POST body without a size limit, allowing an unauthenticated remote attacker to exhaust memory on th...

CVE-2026-67431

The CVE affects the MCP Ruby SDK (Model Context Protocol) prior to version 0.23.0. In MCP::Server::Transports::StreamableHTTPTransport, the session ID is not bound to a session owner, allowing a stolen session ID to cause requests (tools/call) to execute in the victim’s session. This is fixed in ...

CVE-2026-63119

The CVE affects the MCP Ruby SDK (mcp gem), specifically MCP::Server::Transports::StdioTransport and MCP::Client::Stdio. The vulnerability arises from using IO#gets without a byte limit, allowing an attacker to send data without a newline and trigger unbounded line buffering, causing memory exhau...

CVE-2026-5057

ATEN Unizon RpcProviderMissing Authentication Denial-of-Service Vulnerability (CVE-2026-5057) affects the RpcProvider component. The flaw is due to missing authentication prior to granting access to RpcProvider functionality, enabling remote attackers to cause a denial-of-service condition. The i...

CVE-2026-67430

CVE-2026-67430 affects the MCP Ruby SDK (mcp gem) prior to 0.23.0. The vulnerability is in MCP::Server::Transports::StreamableHTTPTransport, which does not expire sessions by default, allowing repeated initialize requests to retain unbounded ServerSession objects and cause memory exhaustion. The ...

CVE-2026-5056

GStreamer qtdemux CVE-2026-5056 is a stack-based buffer overflow affecting the qtdemux component. The flaw occurs while parsing UncompressedFrameConfigBox structures due to insufficient validation of user-supplied data length before copying into a fixed-size stack buffer, enabling arbitrary code ...

CVE-2026-5492

The DriveLock vulnerability CVE-2026-5492 affects the web service listening on TCP 4568. It stems from insufficient validation of a user-supplied path, enabling a directory traversal that can disclose information in the context of the service account. Exploitation requires authentication and is d...

CVE-2026-5491

DriveLock exposes a directory-traversal information disclosure via its web service (default port 6067). The flaw is insufficient validation of user-supplied paths used in file operations, allowing remote, unauthenticated access to sensitive information in the service account’s context. Concrete r...

CVE-2026-5490

CVE-2026-5490 involves DriveLock where the web service (listening on TCP 4568 by default) constructs SQL queries from unvalidated user input, leading to a SQL Injection that can escalate privileges. The vulnerability is network-accessible and requires authentication to exploit, with impact descri...

CVE-2026-5489

CVE-2026-5489 concerns the DriveLock web service, which listens on TCP port 4568 by default. The flaw stems from insufficient validation of a user-supplied path used in file operations, allowing a remote attacker to disclose sensitive information in the context of the service account. The impact ...

CVE-2026-5487

The CVE describes a directory traversal in DriveLock’s web service (default port 4568). The vulnerability arises from improper validation of a user-supplied path before file operations, allowing an attacker to disclose sensitive information in the service account context without authentication. T...

CVE-2026-6102

The CVE-2026-6102 entry concerns MSI Center NTIOLib_X64 with a local privilege-escalation flaw in the NTIOLib_X64.sys driver due to insufficient validation of the origin of commands. A local attacker who can run low-privileged code can escalate to SYSTEM and execute arbitrary code. The issue is i...

CVE-2026-13268

The CVE concerns G DATA Total Security, specifically the Backup Service. A flaw allows local attackers to escalate privileges by abusing the service via creating a symbolic link to delete a file, enabling arbitrary code execution in the context of SYSTEM. This aligns with the ZDI advisory referen...

CVE-2026-63118

The MCP Ruby SDK (mcp gem) contains a DNS rebind vulnerability in MCP::Server::Transports::StreamableHTTPTransport where HTTP Host/Origin are not validated. This allows a malicious page to bind a victim’s locally running MCP server to a loopback/ LAN address and post JSON‑RPC requests to exposed ...

CVE-2026-18266

CVE-2026-18266 affects Dify AI Workflow via the OAuth flow in the AppInitializer component, enabling an Open Redirect vulnerability. An attacker can coerce a user to visit a malicious page or file, resulting in a redirection to a site of the attacker’s choosing and potential information disclosur...

CVE-2026-12357

The CVE-2026-12357 entry concerns Heimdall Data Database Proxy. The connected PT-2026-64200 source describes a CRLF injection in the generateFileContent() function, leading to remote code execution with root privileges. The vulnerability allows remote authenticated attackers to execute arbitrary ...

CVE-2025-14562

CVE-2025-14562 affects GitLab CE/EE; versions 10.6–19.0.4, 19.1.x before 19.1.3, and 19.2.x before 19.2.1 are impacted. An authenticated user with developer permissions could commit changes to a project after removal due to improper authorization checks on merge request collaboration settings. Gi...

CVE-2026-3093

GitLab CE/EE contains a Cross-site Scripting (XSS) flaw (CVE-2026-3093) caused by improper sanitization of user-controlled input during web page generation. Affected versions are 14.0 up to 19.0.4, 19.1 up to 19.1.2, and 19.2 up to 19.2.0. Under certain conditions, an attacker could trigger arbit...

CVE-2026-4672

GitLab CVE-2026-4672 affects GitLab CE/EE: 18.4.x before 19.0.5, 19.1.x before 19.1.3, and 19.2.x before 19.2.1. An authenticated user with guest permissions could access test report contents they were not authorized to view due to improper access control enforcement. The issue has been remediate...

CVE-2026-6267

CVE-2026-6267 affects GitLab CE/EE. Affected versions: all 10.1.0 up to but not including 19.0.5, 19.1 up to but not including 19.1.3, and 19.2 up to but not including 19.2.1. Under certain conditions, an authenticated user with the Developer role could access unauthorized information due to insu...

CVE-2026-6336

CVE-2026-6336 affects GitLab CE/EE: versions 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1. Root cause: a missing authorization check could allow an unauthorized user to view project import source information. Impact: exposure of import-related data to unauthorized users. Remedia...

CVE-2026-12436

GitLab CE/EE is affected by CVE-2026-12436 in versions 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1. The issue arises from improper validation of user-supplied attributes when processing pipeline schedule inputs, potentially allowing an authenticated user to modify another user’...

CVE-2026-13113

GitLab EE contained a TOCTOU race condition in approval rule processing that could allow an authenticated user to merge into a protected branch without the required approvals. Affected versions: 17.0–before 19.0.5, 19.1–before 19.1.3, and 19.2–before 19.2.1. Remediation: patches released (e.g., 1...

CVE-2026-14341

The vulnerability CVE-2026-14341 affects GitLab CE/EE, with affected versions listed as all 12.8 up to before 19.0.5, 19.1 up to before 19.1.3, and 19.2 up to before 19.2.1. The issue stems from improper authorization in a projects API endpoint, allowing an authenticated user with Maintainer role...

CVE-2026-14351

The CVE covers GitLab CE/EE with an exposure affecting all 8.8-era releases up to 19.0.5, 19.1 up to 19.1.3, and 19.2 up to 19.2.1. Under certain conditions, an unauthenticated user could view the title of a confidential issue via a publicly accessible merge request due to improper authorization ...

CVE-2026-15077

GitLab EE is affected in CVE-2026-15077 by improper neutralization of untrusted content processed during AI-assisted code review. The issue could allow an authenticated user to access information from unauthorized projects under certain conditions. Affected versions are all 19.1 prior to 19.1.3 a...