CVE-2026-104849

The Tinypool Node.js worker thread pool implementation (prior to version 2.1.2 ) is vulnerable to a prototype pollution gadget. The issue arises because pool.run(task, options) reads the filename property from a caller-supplied options object without requiring an own property . If an attacker pol...

CVE-2026-104848

The Tinypool minimal Node.js worker thread pool implementation is vulnerable to a Prototype Pollution gadget in versions prior to 2.1.1 . The root cause is located in dist/index.js, where the software constructs ThreadPool.options from a normal options object and reads execArgv and env worker opt...

CVE-2026-104914

MISP versions prior to v2.5.48 are vulnerable to an improper access control vulnerability in its attribute search and paginated attribute view endpoints. The root cause is a lack of visibility restrictions in these specific code paths; while the event detail view correctly restricts soft-deleted ...

CVE-2026-103631

A buffer overflow vulnerability in the WebRTC component of Google Chrome (prior to version 154.0.8037.97 ) allows a remote attacker to execute arbitrary code inside the browser's sandbox. The attack is initiated by enticing a user to visit a specially crafted HTML page . While the execution is re...

CVE-2026-103623

A use-after-free vulnerability exists in the MediaStream component of Google Chrome prior to version 154.0.8037.97 . This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by enticing a user to visit a specially crafted HTML page . The vulnerability occurs when ...

CVE-2026-103627

A flaw in the Scalable Vector Graphics (SVG) implementation within the Chromium browser (and Google Chrome ) allows for an information leak . A remote attacker can exploit this vulnerability by enticing a user to view a specially crafted HTML page , potentially leading to unauthorized access to s...

CVE-2026-103624

A use-after-free vulnerability exists in the Contextual Tasks component of Google Chrome on Windows versions prior to 154.0.8037.97 . A remote attacker who has already compromised the renderer process can exploit this flaw by convincing a user to visit a crafted HTML page . Successful exploitatio...

CVE-2026-103622

A Use after free vulnerability in SVG affects Google Chrome versions prior to 154.0.8037.97 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox through a crafted HTML page. Remediation is available in version 154.0.8037.97 for Windows and Mac, and 154.0.8037.97 for L...

CVE-2026-103625

A type confusion vulnerability exists in the V8 JavaScript engine of Google Chrome prior to version 154.0.8037.97 . A remote attacker can exploit this flaw by enticing a user to visit a specially crafted HTML page to achieve arbitrary code execution within the browser's restricted sandbox environ...

CVE-2026-103629

Google Chrome versions prior to 154.0.8037.97 are vulnerable to an integer overflow in the Skia component. A remote attacker can exploit this by using a crafted HTML page to leak cross-origin data . This issue is rated as High severity by Chromium. The vulnerability is addressed in the 154.0.8037...

CVE-2026-103630

A use-after-free memory issue exists within the Federated Credential Management (FedCM) component in Google Chrome (affected versions prior to 154.0.8037.97 ). A remote attacker can exploit this flaw by enticing a user to visit a crafted HTML page to execute arbitrary code outside the browser sec...

CVE-2026-103621

Google Chrome versions prior to 154.0.8037.97 are vulnerable to an integer overflow in the Compositing component. A remote attacker can exploit this vulnerability by directing a user to a crafted HTML page to leak cross-origin data . Remediation is available in the 154.0.8037.97 stable channel up...

CVE-2026-103626

Google Chrome on Windows versions prior to 154.0.8037.97 is vulnerable to a High severity flaw in the FileSystem component. Due to an incorrect authorization issue, a remote attacker can leverage social engineering to trick a user into interacting with a crafted HTML page . This interaction could...

CVE-2026-103628

A critical out-of-bounds write vulnerability exists in the WebGL component of Google Chrome (prior to version 154.0.8037.97 ). This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a specially crafted HTML page. Successful exploi...

CVE-2026-103648

The image-downloader (npm) package, specifically version 4.3.0 , is vulnerable to a path traversal (CWE-22) vulnerability. An attacker capable of controlling the download URL can manipulate the application into writing downloaded response data outside of the configured destination directory. This...

CVE-2026-104912

The MISP platform contains an authorization flaw in its correlation handling during attribute searches, affecting versions prior to v2.5.48 . The root cause is that the system uses a stale distribution snapshot stored on the correlation row—which is a point-in-time copy lacking a published flag—i...

CVE-2026-96613

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw (CWE-862) that allows authenticated users to access the complete device shadow of any device by specifying its device ID . The service fails to verify a relationship between the requester and the target device, le...

CVE-2026-104847

The prosemirror-view component in ProseMirror (prior to version 1.42.3 ) is vulnerable to a Cross-Site Scripting (XSS) flaw. The issue arises because the paste handling mechanism accepts attacker-provided HTML where clipboard slice context attributes bypass schema attribute validation . An attack...

CVE-2026-104910

The MISP platform contains an authorization bypass within the related events listing functionality. The vulnerability occurs because the system retrieves related event metadata directly from the correlation table without re-validating the caller's access rights for each specific event. Since the ...

CVE-2026-104846

The Seroval library (versions 0.12.0 through 1.6.2 ) is vulnerable to an unexpected code execution flaw during the fromJSON deserialization process. The root cause involves the deserialization of a fulfilled Promise control node, which can pass a plugin-produced callable-bearing thenable to a nat...

CVE-2026-101104

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate configurations of devices they do not own. By exploiting this flaw, an attacker can alter device settings, trigger unintended behaviors, or access sensitive informatio...

CVE-2026-104908

MISP versions prior to 2.5.48 are vulnerable to an improper input validation vulnerability in the decaying model import functionality. The application fails to adequately sanitize nested model keys during the import process, as it only strips top-level id and uuid fields while pinning org_id and ...

CVE-2026-104845

The Seroval library is vulnerable to a Denial of Service (DoS) condition in versions prior to 1.6.3 . The deserializeTypedArray function within fromJSON and fromCrossJSON fails to bound the serialized element count when trusting a deserialized source value as an ArrayBuffer. An attacker can provi...

CVE-2026-104907

MISP is vulnerable to a cross-site scripting (XSS) flaw in the remote event preview page. The issue arises because tag identifiers are rendered within an inline JavaScript onclick attribute; while these values are HTML-escaped, they are not properly sanitized for a JavaScript string context. A ma...

CVE-2026-104906

The MISP platform contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer (versions

CVE-2026-104844

The PostCSS Selector Parser (prior to version 7.1.6 ) is vulnerable to a Denial of Service (DoS) attack due to quadratic complexity in flat selector parsing. The root cause lies in src/parser.js, where splitWord() accepts selectors with numerous class or ID indexes because period and hash charact...

CVE-2026-104843

The Python package and project manager uv (written in Rust) is vulnerable to a path traversal flaw during wheel extraction on Windows systems. Affected versions range from 0.12.7 until 0.12.18 . An attacker can trick a user into installing a specially crafted Python wheel package that, during ext...

CVE-2026-94484

The Next.js React framework is vulnerable to cache poisoning in versions 15.0.0 through 15.5.27 and 16.3.8 . The root cause is an insufficiently scoped shared response cache key used by applications with a root-level catch-all page and statically generated or Incremental Static Regeneration (ISR)...

CVE-2026-94485

The Next.js framework (versions 16.0.0 through 16.3.8 ) contains a vulnerability in the next dev development server. The server exposes a Model Context Protocol (MCP) endpoint that lacks reliable restrictions on cross-site requests . If a developer visits a malicious website while the development...

CVE-2026-104901

MISP is vulnerable to a cross-site scripting (XSS) flaw in its ID Translator feature. When an authenticated user views the ID Translator page, the application queries linked remote MISP servers for event identifiers. The software fails to perform proper output encoding on these returned IDs, allo...

CVE-2026-94483

The Next.js React framework (versions 16.0.0 through 16.3.8 ) contains a Server-Side Request Forgery (SSRF) vulnerability within the Image Optimization component. The root cause is that the framework can follow attacker-controlled DNS resolution for remote URLs that match images.remotePatterns. T...

CVE-2026-94543

The Next.js framework (versions 15.0.0 through 15.5.27 and 16.3.8 ) is vulnerable to cache poisoning in self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration (ISR) pages. The root cause is that response cache entries are not sufficiently boun...

CVE-2026-104900

MISP is affected by a stored cross-site scripting (XSS) vulnerability in the remote event preview index table rendering. The issue stems from the count field template failing to apply HTML encoding to the field value, even though it escapes the associated link URL. An attacker capable of creating...

CVE-2026-94544

The Next.js React framework (versions 16.3.0 through 16.3.8 ) contains a flaw where pending use cache fills for the same key do not properly separate Draft Mode requests from regular requests. Under concurrent request conditions, this lack of separation allows an unauthenticated user to receive u...

CVE-2026-94486

The Next.js React framework contains a vulnerability in the next dev development server, specifically affecting versions 16.0.0 through 16.3.8 . The server exposes a Model Context Protocol (MCP) endpoint that fails to reliably restrict cross-site requests. This flaw allows an attacker to issue un...

CVE-2026-104638

A security vulnerability exists in the onetwothreeneth HospitalManagementSystem (up to commit 9ef91ed6007314b6473110ed699dff76d158f61d) within an unknown function in the php/sessions.php file. The root cause is the manipulation of the ID argument , which leads to improper authentication . This fl...

CVE-2026-14435

The IBM Turbonomic kubeturbo agent (versions 8.16.0 - 8.20.3 ) is vulnerable to CVE-2026-14435 due to improper TLS certificate validation (CWE-295). This flaw could allow an attacker to perform man-in-the-middle techniques to obtain sensitive information. IBM recommends upgrading to version 8.20....

CVE-2026-39717

The ThimPress LearnPress WordPress plugin (versions up to and including 4.4.9.1 ) is susceptible to a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , which can lead to unauthorized access to restricted functions...

CVE-2026-39601

The WPdevelop Booking Calendar plugin (versions up to and including 11.8.4 ) is susceptible to a Race Condition vulnerability (CWE-362). This flaw arises from improper synchronization during concurrent execution when accessing shared resources, which could allow an attacker to leverage the race c...

CVE-2026-39600

The Mehul Gohil Aculect AI Companion WordPress plugin (versions

CVE-2026-39444

The PublishPress Series WordPress plugin (versions 3.1.3 and below ) is vulnerable to an Authorization Bypass Through User-Controlled Key vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , specifically identified as an Insecure Direct O...

CVE-2026-104637

A weakness exists in the onetwothreeneth HospitalManagementSystem (up to commit 9ef91ed6007314b6473110ed699dff76d158f61d ) within the php/controller.php file. Specifically, several functions—including add_patient , add_physician , add_account , update_account , update_subaccount , edit_physician ...

CVE-2026-39439

The WebSamurai WordPress plugin (versions up to and including 1.0.7 ) is affected by a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , leading to broken access control. The impact may include unauthorized modifi...

CVE-2026-32585

The airano Airano MCP Bridge WordPress plugin (versions

CVE-2026-32584

The Smart One Click Setup – Complete Demo Import & Export WordPress plugin (versions up to and including 1.4.3 ) is vulnerable to an Insertion of Sensitive Information Into Sent Data vulnerability (CWE-201). This flaw allows an attacker to retrieve embedded sensitive data from the plugin. No spec...

CVE-2026-90970

GitLab has remediated a critical vulnerability in the GitLab AI Gateway component (CWE-1336) affecting versions 18.1.6 before 19.2.4 , 19.3 before 19.3.2 , and 19.4 before 19.4.1 . An authenticated user with Duo Agent Platform access could exploit a template engine weakness to escape the prompt t...

CVE-2026-104625

A security flaw exists in CodeAstro Simple Loan Management System 1.0 within an unknown function of the /admin/index.php file. An attacker can perform a remote SQL injection by manipulating the g_name argument. Public exploits are available and may be used to conduct attacks. No specific remediat...

CVE-2026-5782

A Reflected Cross-Site Scripting (XSS) vulnerability exists in Loglama.net TurkHotspot due to the improper neutralization of input during web page generation. This vulnerability allows an attacker to execute scripts in a victim's browser. The issue affects versions of TurkHotspot through 2026-10-...

CVE-2026-104026

In Sapling SCM versions prior to v0.2.20260929-102736 , the software allows control characters to be embedded in Git subtree URLs . An attacker can exploit this by providing a maliciously constructed repository; if a target clones this repository, it can trigger code execution during otherwise re...

CVE-2026-104614

A SQL injection vulnerability exists in CodeAstro Simple Pharmacy Management System 1.0 . The flaw is located in the /SimplePharmacy-PHP/product/delete.php file, where improper processing of the ID argument allows for remote exploitation. An exploit is currently publicly available and may be used...