CVE-2026-56160

Technical details (affected products, components, versions, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendors.

CVE-2026-56165

CVE-2026-56165: Heap-based buffer overflow in Microsoft Account enables remote code execution over a network. Affected: Microsoft Account service. Root cause: heap-based overflow (details not provided). Impact: high (confidentiality, integrity, availability). CVSS v3.1 base score 9.8 (CRITICAL); ...

CVE-2026-54120

Technical details for CVE-2026-54120 are not publicly available in the provided documents. The materials only reiterate the description of improper input validation in Microsoft Surface. Monitor for updates from vendors for affected products and patches.

CVE-2026-56167

Technical details about CVE-2026-56167 are not publicly provided in the connected documents. Monitor for updates from Microsoft/MSRC and CVE databases for affected products, vulnerable components, versions, and remediation.

CVE-2026-65971

CVE-2026-65971: SQL injection in PowerGrid’s Livewire integration (power-components/livewire-powergrid). Triggered when sortDirection is attacker-controlled and sortField is an empty string, bypassing Laravel validation in the Sorting pipeline and reaching an orderByRaw sink that embeds the value...

CVE-2026-16767

The CVE-2026-16767 entry concerns Ne-Lexa php-zip, affecting ZipFile::extractTo in src/ZipFile.php of the ZIP Handler up to version 4.0.2. The root cause is manipulation of the argument entryName, enabling path traversal. This can be exploited remotely and the exploit is public. The documents do ...

CVE-2026-28698

CVE-2026-28698 affects Pronetiqs IntraVUE prior to or equal to version 3.2.1a14. The vulnerability exposes sensitive system information to an unauthorized control sphere, potentially exposing the underlying host/share filesystem. The CVSS data indicates high to critical impact (CVSS 3.1: HIGH, CV...

CVE-2026-50044

Pronetiqs IntraVUE, version 3.2.1a14 and earlier , has an inadequate encryption strength vulnerability that could allow an attacker to steal admin credentials via a weak hash or a pass-the-hash attack. The issue affects network-exposed components and is described with high impact on confidentiali...

CVE-2026-44955

CVE-2026-44955 affects Pronetiqs IntraVUE, version 3.2.1a14 and earlier. The issue is an exposure of sensitive system information to an unauthorized control sphere, enabling asset discovery by unauthenticated users. Documented impact is limited to information disclosure with no indicated changes ...

CVE-2026-42933

The CVE-2026-42933 affects Pronetiqs IntraVUE up to version 3.2.1a14, where an unintended proxy/intermediary could let an attacker act as an active proxy, bypassing OT segmentation. According to the connected records, this is a network‑level vulnerability with high/critical impact (CVE-2026-42933...

CVE-2026-40430

Pronetiqs IntraVUE is affected. Versions 3.2.1a14 and earlier store passwords in plaintext, exposure of cleartext credentials via the API. Root cause is plaintext credential storage; impact is potential credential disclosure through API access. No exploitation details are provided in the document...

CVE-2026-16765

CodeAstro Online Classroom 1.0 contains a vulnerability in the file /OnlineClassroom/loginlinkadmin.php where manipulating the argument aid can trigger an SQL injection. The issue can be exploited remotely without authentication, and public exploit guidance exists. Affected component: loginlinkad...

CVE-2026-16805

CVE-2026-16805 is a use-after-free in Blink affecting Google Chrome prior to 150.0.7871.186, allowing a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The Chrome Stable Channel update mirrors this fix, upgrading to 150.0.7871.186 (Windows/Mac) or 150.0.7871....

CVE-2026-16804

Google Chrome prior to 150.0.7871.186 is affected by a use-after-free in Input that, if the renderer process is compromised, could permit a sandbox escape via a crafted HTML page (high severity; CVSSv3.1: 8.3). The issue is addressed in the Stable Channel update to 150.0.7871.186/187, with four r...

CVE-2026-16806

CVE-2026-16806 affects Google Chrome WebMCP. A use-after-free in WebMCP can be triggered by visiting a crafted HTML page, allowing a remote attacker to execute arbitrary code inside the sandbox. The public sources confirm this vulnerability and tie it to the Chrome stable release update LP to 150...

CVE-2026-16807

Summary (concrete): CVE-2026-16807 is an out-of-bounds write in Chrome’s Codecs before version 150.0.7871.186 that could permit a remote attacker to escape the browser sandbox via a crafted HTML page. Affected software: Google Chrome (Desktop); vulnerable component: Codecs. Root cause: out-of-bou...

CVE-2026-16764

The CVE pertains to OWASP DefectDojo 2.59.0, where the UserSerializer in dojo/api_v2/serializers.py mishandles the is_staff argument, enabling improper privilege management. This issue can be exploited remotely; an exploit exists publicly. Remediation is to upgrade to DefectDojo 2.58.3 or 3.0.0, ...

CVE-2026-65694

Microweber CMS up to version 2.0.20 is affected by a path traversal in the static file controller. The vulnerability allows unauthenticated remote attackers to read arbitrary files by supplying directory traversal sequences in the path query parameter, exploiting normalize_path() failure to strip...

CVE-2026-65604

Skipper has an incomplete fix for CVE-2026-50197. Oversized request bodies can bypass Open Policy Agent (OPA) deny-on-presence Rego policies because, when body size exceeds maxBodyBytes, Skipper forwards the full payload while OPA evaluates an empty parsed_body. This means policies that deny requ...

CVE-2026-63732

9router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default password (123456) that authenticates fresh installs; a bypass of the LOCAL_ONLY network gate via a spoofed Host header; and unvalidated arguments passed to child_process.spawn() when registering MCP plugins....

CVE-2026-63313

9Router before 0.4.72 is affected by a server-side request forgery (SSRF) in the /v1/web/fetch endpoint. The endpoint accepts a user-supplied url and passes it to an external scraping provider (Firecrawl, Jina Reader, Tavily, or Exa). Validation only checks syntactic correctness via new URL(), wi...

CVE-2025-71389

Cal.com (calcom/cal.diy) versions before 5.9.9 are vulnerable to unauthenticated remote code execution via Next.js React Server Components (RSC) request handling that deserializes attacker-controlled input. A remote attacker can send a crafted RSC request to the server to execute arbitrary code d...

CVE-2024-58355

Cal.com (calcom/cal.diy) versions up to 4.7.15 are affected by a stored XSS in the booking flow. The vulnerability occurs in the single booking view where booking-question labels are rendered via React’s dangerouslySetInnerHTML without sanitization, allowing an attacker who can create an event ty...

CVE-2024-58354

Cal.com (cal.com/cal.diy) is affected by a repository takeover via its GitHub Actions workflow. The pr.yml workflow uses pull_request_target and passes repo default write permissions to check-types.yml, which then dangerous-checks out the attacker PR and executes it (yarn install, package.json sc...

CVE-2024-58353

Cal.com (repository calcom/cal.diy) prior to 4.7.16 is affected by XSS in the publicly accessible single booking view (/booking/). The booking form labels are rendered via React dangerouslySetInnerHTML without input sanitization or CSP, enabling an attacker who can create an event type with a mal...

CVE-2026-16763

CVE-2026-16763 affects localstack serverless-localstack up to version 1.4.0. The vulnerability targets an unknown function in src/index.js of the Configuration Handler, where manipulating the argument custom.localstack.docker.compose_file enables local OS command injection. The CVE describes loca...

CVE-2026-6924

CVE-2026-6924 describes a weak entropy initialization in SiWx917 TinyCrypt used by Silicon Labs Matter, causing the DRBG to seed from a predictable source. As a result, all random numbers in the Matter code may derive from the same stream, reducing unpredictability. The CVSS vector in the documen...

CVE-2026-16002

The CVE-2026-16002 entry concerns an Out-of-bounds read in MZ Automation lib60870. The vulnerability affects the library’s parsing path, which may crash parsing and lead to a denial of service. No exploitation details, affected versions, or remediation steps are provided in the supplied documents...

CVE-2026-50032

CVE-2026-50032: A NULL pointer dereference in the MMS Write Named Variable List handler of libIEC61850 (MMS write service) can crash the server when an empty listOfData is sent. Affected in libIEC61850 up to v1.6.1; fix status: patched in v1.6.2 (bd338f23). The issue is a DoS condition exploitabl...

CVE-2026-50103

CVE-2026-50103 affects the GOOSE/R-GOOSE parser in libIEC61850 (MZ Automation) and describes a NULL dereference when parsing malformed TLV values, enabling a network-adjacent DoS by crashing the subscriber. The related PoCs and analysis in the connected documents confirm the issue and indicate fi...

CVE-2026-49035

CVE-2026-49035 affects libIEC61850’s MMS file service across version 1.0.0 through 1.6.1. The root cause is a heap-based buffer overflow triggered by an underflow of maxPduSize in the MMS Initiate processing (mms_file_service.c:834), allowing unauthenticated remote interaction. In experiments, re...

CVE-2026-15981

The CVE describes an unauthenticated authentication bypass in the WordPress SAML SSO Login plugin up to version 5.4.4. The root cause is mo_saml_validate_signature() evaluating the OpenSSL verify result (-1) as truthy due to a loose boolean check on the value returned by PHP openssl_verify(). Thi...

CVE-2026-50039

CVE-2026-50039 affects libIEC61850 MMS value cache (v1.0.0 through v1.6.1). The vulnerability is a stack-based overflow via an unbounded copy, leading to DoS. The issue is pre-auth in the MMS value cache path and can be triggered by a network request that causes an overflow in the affected compon...

CVE-2026-34496

CVE-2026-34496 describes a CWE-269 privilege escalation in Johnson Controls victor Web on Windows, affected before version 7.1. The vulnerability allows an attacker to achieve higher privileges via a network attack with high complexity, requiring existing high privileges and no user interaction. ...

CVE-2026-47724

Nebula-Mesh (pre-0.3.4) suffers an authorization gap: the /api/v1/* surface largely trusts bearer tokens and enforces ownership only for the Web layer, leaving host, network, firewall, mobile-bundle, and most operator endpoints vulnerable to cross-tenant access. This enables privilege escalation ...

CVE-2026-21653

Johnson Controls CCure 9000 and Victor Application Server are affected by a SSRF vulnerability (CVE-2026-21653) impacting versions 2.9 through 3.0. The issue enables Server-Side Request Forgery due to an insecure handling of external requests within the Victor application server. CVSS 4.0 base sc...

CVE-2026-47723

Nebula-mesh is affected by missing security headers in internal/web/ and internal/api/ paths prior to v0.3.1 (up to v0.3.0). The root cause is absence of standard headers such as CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Strict-Transport-Security in responses, enabling cl...

CVE-2026-21655

CVE-2026-21655 describes a deserialization of untrusted data vulnerability in Johnson Controls Victor on Windows, affecting Victor versions 2.9 prior to 3.0. The issue arises from deserializing untrusted data in the Victor application server, leading to high impact on confidentiality, integrity, ...

CVE-2026-16796

The vulnerability CVE-2026-16796 affects the AWS Bedrock AgentCore Python SDK install_packages() function; due to improper neutralization of argument delimiters, a remote authenticated user could execute arbitrary commands within the Code Interpreter sandbox when using SDK versions before 1.18.1....

CVE-2026-15968

CVE-2026-15968 is a stored XSS vulnerability in Progress MOVEit Transfer prior to 2025.1.5 and in 2026.0.0 before 2026.0.3. The issue stems from improper neutralization of input during web page generation, enabling cross-site scripting. Affected software is MOVEit Transfer; the vulnerability impa...

CVE-2026-15967

Issue: Insufficient session expiration in Progress MOVEit Transfer. Affected versions: MOVEit Transfer before 2025.1.5, and 2026.0.0 before 2026.0.3 (i.e., 2026.0.0–2026.0.2). Root cause: Sessions do not expire sufficiently, potentially allowing continued access to active sessions. Impact: High i...

CVE-2026-15966

Mov​​eit Transfer contains a permissive cross-domain security policy that allows interaction with untrusted domains. Affected versions: MOVEit Transfer before 2025.1.5, and 2026.0.0 before 2026.0.3. Root cause is misconfigured CORS/policy allowing cross-origin requests. Impact is high (confidenti...

CVE-2026-15630

Technical details about CVE-2026-15630 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-10697

The CVE-2026-10697 issue affects Progress MOVEit Transfer (pre-2025.1.5 and 2026.0.0–2026.0.2). The vulnerability is described as an Improper Authentication that may allow bypassing authentication, with confirmed impact on confidentiality, integrity, and availability (all HIGH). Core details from...

CVE-2026-15212

CVE-2026-15212 affects the WPO365 | Login plugin for WordPress (up to version 43.2). The root cause is that Ajax_Service::verify_ajax_request() gates wp_verify_nonce() behind the boolean option enable_nonce_check, which is missing from the default wpo365_options. This causes wp_ajax_wpo365_update...

CVE-2026-47722

Nebula-mesh (self-hosted control plane for Slack Nebula) prior to v0.3.2 is affected by YAML injection in host advanced overrides. The root cause is that ListenHost and TunDevice are interpolated directly into a text/template used to generate the agent config.yml, and the web/advanced input has o...

CVE-2026-60122

gpsd (up to release 3.27.5) contains a code-injection vulnerability in the gpsprof utility via the SKY.satellites[].used field. The value is unsanitized before being inserted into a gnuplot heredoc, allowing an attacker who controls GPS input data to terminate the heredoc with EOD and inject gnup...

CVE-2026-48012

Summary: CVE-2026-48012 is an open redirect in Shopware’s public SSO endpoint (/api/oauth/sso/auth) affecting Shopware versions 6.7.3.0–6.7.10.0. When an SSO session state is missing, the code falls back to the Referer header to build the redirect destination without enforcing same-origin, relati...

CVE-2026-48013

CVE-2026-48013 (Shopware) is an SSRF in the media external-link flow. Authenticated admins can cause server-side HEAD requests from the endpoint /api/_action/media/external-link to arbitrary internal IPs, bypassing the existing depth of IP checks used by the parallel uploadFromURL flow. The vulne...

CVE-2026-47669

CVE-2026-47669 (DbGate Zip Slip) : The unzipDirectory function in DbGate’s API path traversal allows writing files outside the target directory via ZIP entries with “..” (Zip Slip), enabling arbitrary file writes and potential RCE, especially in default Docker deployments running as root. Impact ...