CVE-2026-86512

CVE-2026-86512 affects java-json-tools json-patch versions up to 1.13 , specifically the CopyOperation.apply and MoveOperation.apply functions in the file src/main/java/com/github/fge/jsonpatch/CopyOperation.java (Copy Move Operations component). The root cause is improper access controls , enabl...

CVE-2026-19397

CVE-2026-19397 is a missing authentication vulnerability in ASUS Control Center Express Agent . When the host has an active login session, an unauthenticated user on the adjacent network can directly connect to the agent and control the host. The flaw affects a critical function within the agent ...

CVE-2026-12962

ASUS Armoury Crate is affected by a permissive cross-domain security policy that allows untrusted domains to interact with the application's local service endpoint. A remote attacker can obtain a local user's NTLM hash by convincing the user to visit a crafted web page that sends a request contai...

CVE-2026-18023

ASUS Armoury Crate driver is affected by a sensitive information disclosure vulnerability (CWE: resource not removed before reuse). A local user can send a crafted IOCTL request that bypasses the driver's security verification mechanism, disclosing data from uninitialized memory . The CVSS 4.0 sc...

CVE-2026-16003

CVE-2026-16003 affects the ASUS Armoury Crate driver , which exposes an IOCTL interface with insufficient access control . A local user with low privileges can craft an IOCTL request to bypass the driver's verification and add an arbitrary process identifier to the driver's whitelist . The CVSS 4...

CVE-2026-16004

Armoury Crate driver (ASUS) contains an exposed IOCTL with insufficient access control that allows a local user with low privileges to read and write arbitrary PCI/PCIe configuration space by crafting IOCTL requests that bypass the driver's verification. The CVSS 4.0 base score is 5.8 (MEDIUM) , ...

CVE-2026-16005

ASUS Armoury Crate driver is affected by a Release of Invalid Pointer or Reference vulnerability. A local user can free arbitrary memory by sending a crafted IOCTL request that bypasses the driver's verification logic, corrupting internal data structures and causing a system crash (BSOD) . The CV...

CVE-2026-16006

CVE-2026-16006 is an exposure of sensitive system information vulnerability in the ASUS Armoury Crate driver . A local user with low privileges can send a crafted IOCTL request that bypasses the driver's verification mechanism, allowing them to obtain kernel virtual addresses and gain insight int...

CVE-2026-75808

ASUS Armoury Crate is affected by an allocation of resources without limits or throttling flaw. A local user with low privileges can bypass driver authentication and allocate an unrestricted amount of system memory, leading to a denial-of-service condition through memory exhaustion. The attack ve...

CVE-2026-75809

ASUS Armoury Crate is affected by an insufficient access control vulnerability in its exposed IOCTL interface. A local user with low privileges can bypass driver authentication to read from and write to PCIe configuration space , enabling information disclosure and the disabling of device functio...

CVE-2026-75810

ASUS Armoury Crate contains an exposed dangerous method or function that allows a local user to bypass driver authentication and send requests to trigger system management interrupts (SMIs) . A single trigger causes a brief system stall; repeatedly triggering SMIs can escalate to a denial-of-serv...

CVE-2026-86511

A resource consumption vulnerability exists in the java-json-tools jackson-coreutils 2.0 library, specifically in the BigDecimal.toPlainString function within the file JacksonUtils.java . A remote attacker with no authentication and low complexity can trigger this flaw to degrade availability. A ...

CVE-2026-75811

ASUS Armoury Crate is affected by an improper restriction of software interfaces to hardware features , allowing a local user with low privileges to bypass driver authentication and access critical model-specific registers . This can lead to modification of hardware configuration settings and pot...

CVE-2026-86510

CVE-2026-86510 affects D-Link DIR-822A (firmware A_101) in the L2TP Control Message Parser component, specifically the tunnel_set_params function, where manipulation leads to an out-of-bounds write . The vulnerability is remotely exploitable with low privileges required and no user interaction, r...

CVE-2026-86509

A stack-based buffer overflow exists in the udhcpcd component (specifically the sendOffer/sendACK functions in serverpacket.c) of the D-Link DIR-895L (A1, firmware 102b07). An attacker on the same local network can trigger the flaw without authentication, achieving complete impact to confidential...

CVE-2026-82710

usage_rules (ash-project, Elixir Mix task) is vulnerable to terminal escape sequence injection via the Mix.Tasks.UsageRules.SearchDocs formatter. Publisher-controlled fields from Hex documentation are interpolated verbatim without neutralizing terminal control characters, allowing a malicious pac...

CVE-2026-76977

SAP UI5 is affected by a clickjacking vulnerability in its Frame Options Allowlist mechanism. The framework does not sufficiently validate the parent frame's origin against the configured allowlist, allowing an unauthenticated attacker to host a malicious page that bypasses framing restrictions. ...

CVE-2026-76971

SAP Manufacturing Integration and Intelligence contains a Server-Side Request Forgery (SSRF) vulnerability that allows an attacker to cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execut...

CVE-2026-76969

The @sap/cds-mtxs NPM library used in SAP Cloud Application Programming Model (CAP) multitenant applications with extensibility enabled does not perform sufficient checks on certain functionality, allowing an unauthenticated attacker to send specially crafted requests to obtain sensitive credenti...

CVE-2026-76968

SAP Web Dispatcher, Internet Communication Manager, and SAP Content Server are affected by an information disclosure vulnerability (CVSS 6.5, MEDIUM). An authenticated low-privileged attacker can access certain administrative functionality or interfaces to obtain sensitive information about the s...

CVE-2026-76967

SAP NetWeaver Business Client is affected by an insecure deserialization vulnerability (CVE-2026-76967). The application fails to sufficiently validate certain locally stored data processed at startup. A low-privilege local attacker can replace this data with specially crafted content, which, upo...

CVE-2026-76963

SAP NetWeaver and ABAP Platform (Application Server ABAP) is affected by a missing authorization check that allows an authenticated attacker with low privileges to gain unauthorized access to sensitive system configuration information. Successful exploitation could expose security-relevant settin...

CVE-2026-76962

SAP S/4HANA (Manage Bank Chains app) has insufficient authorization checks that allow an attacker with low privileges to send specially crafted requests to delete entries they should not be able to access. The impact is limited to availability (low severity), with no stated impact on confidential...

CVE-2026-76961

SAP S/4HANA Finance (Advanced Payment Management) is affected by a Cross-Site Request Forgery (CSRF) vulnerability caused by insufficient CSRF protection on certain requests. An attacker with low privileges can craft a malicious link or page that, when interacted with by an authenticated victim, ...

CVE-2026-76960

SAP S/4HANA Finance (Advanced Payment Management) is affected by a Cross-Site Request Forgery (CSRF) vulnerability caused by insufficient CSRF protection on certain requests. An attacker with low privileges can craft a malicious link or page; when an authenticated victim interacts with it, uninte...

CVE-2026-76959

A Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA Finance (Advanced Payment Management) stems from insufficient CSRF protection on certain requests. An attacker with low privileges can craft a malicious link or page that, when interacted with by an authenticated victim, triggers un...

CVE-2026-76958

SAP Integration Suite contains an XML External Entity (XXE) vulnerability in certain internal components that do not sufficiently validate XML documents accepted from untrusted sources. An attacker with low privileges can submit crafted XML payloads containing malicious external entity declaratio...

CVE-2026-66768

SAP GUI for Java (part of SAP NetWeaver) contains an Improper Access Control flaw where the trust level policy is not correctly enforced for certain functions invoked from a connected backend system. A low-privileged attacker can manipulate a connected backend to trigger affected functionality, e...

CVE-2026-66767

CVE-2026-66767 is a memory corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform that allows an unauthenticated user to send a specially crafted packet triggering reprocessing of a previously buffered user request , potentially hijacking another user's session un...

CVE-2026-58240

SAP NetWeaver Message Server fails to sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the service can register an unauthorized component and potentially perform unauthorized actions within the...

CVE-2026-58234

SAP Process Integration (SOAP Adapter) is affected by a Denial of Service vulnerability where a privileged user can send specially crafted requests containing deeply nested entity definitions , temporarily increasing processor load and degrading system responsiveness under certain conditions. The...

CVE-2026-44766

CVE-2026-44766 is a SQL injection vulnerability in SAP S/4HANA , specifically in the Intercompany Matching and Reconciliation component. A low-privileged authenticated user can inject malicious input into certain functions that are processed by the database without proper validation, potentially ...

CVE-2026-44756

CVE-2026-44756 is a memory safety vulnerability in the SAP Extended Passport Protocol (EPP) processing library . A malformed EPP header in a crafted network request can trigger undefined behavior and abnormal program termination. The vulnerability is rated CVSS 10.0 (Critical) with a changed scop...

CVE-2026-48173

CVE-2026-48173 is a high-risk vulnerability affecting Exynos processor models and connectivity modems in Samsung Galaxy smartphones, tablets, and smartwatches. It is part of Samsung's September 2026 security update , which bundles 90 fixes across the Android OS, One UI, and proprietary hardware c...

CVE-2026-79378

CVE-2026-79378 affects the btm_acl_handle() function in the Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware version 3.x and earlier . An unauthenticated, remote attacker can trigger a Denial of Service by sending a crafted L2CAP packet, with no user interaction required (CVSS 3.1: 7.5 HI...

CVE-2026-79588

U-speed WIFI4 N300 T1 Pro v1.0.0 , a USB Wi-Fi 4 N300 T1 Pro adapter, is vulnerable to cleartext transmission of administration credentials over HTTP . An attacker on the adjacent network can intercept unencrypted admin credentials without requiring prior privileges or user interaction, resulting...

CVE-2026-78837

AppNitro MachForm v30 contains a remote SQL injection vulnerability in the filter[filters][0][field] parameter of grid_datasource.php. An unauthenticated attacker can inject a crafted SQL statement to enumerate valid column names in the ap_form_{id} table, gaining access to sensitive database inf...

CVE-2026-79572

CVE-2026-79572 is an XXE (XML External Entity) vulnerability in the level-rule module of Distribution Management v1.0.0 . By supplying a crafted XML payload, an unauthenticated network attacker can read sensitive files , scan internal networks , or launch server-side attacks (e.g., SSRF). The CNA...

CVE-2026-78971

CVE-2026-78971 affects Halo (a content management system) up to version 2.25.4 . The plugin management feature does not adequately restrict plugin installation or updates, allowing a user to install or update a malicious plugin . This grants an attacker the ability to execute arbitrary commands w...

CVE-2026-79573

L-ONE v1.0.0 is affected by multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component, exploitable through the busid, id, and taskid parameters. An attacker can craft a malicious SQL statement to access sensitive database information. No specific patch version or r...

CVE-2026-79575

CVE-2026-79575 affects yfexam-exam v2.0 , where the JWT signing secret is derived from the username and the current month rather than a random server-side key. This weak derivation makes the secret easily recoverable via a bruteforce attack , allowing an unauthenticated network attacker to forge ...

CVE-2026-52307

An authenticated stored XSS vulnerability exists in the Column Management component of ClassCMS 1CMS v5.6 . An attacker with valid credentials can inject a crafted payload into the title field , resulting in the execution of arbitrary web scripts or HTML in other users' browsers. The vulnerabilit...

CVE-2026-79377

A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware (v3.x and earlier) allows a remote attacker to trigger a Denial of Service by sending a crafted L2CAP packet . The CVSS 3.1 score is 7.5 (High) , reflecting a network-based attack req...

CVE-2026-19780

CVE-2026-19780 affects Koha library management software. The flaw resides in the web service (listening on TCP port 8081 by default), where a user-supplied string is passed to the eval function without proper validation. An authenticated remote attacker can leverage this to execute arbitrary code...

CVE-2026-79379

CVE-2026-79379 is a buffer overflow in the SBC_DecodeFrames() function of the Bestechnic BES2300 Bluetooth Audio SoC firmware, affecting versions v3.x and earlier . An attacker can trigger a Denial of Service (DoS) by sending a crafted frame to the device. The issue is fixed in firmware v5.0 . No...

CVE-2026-45517

CVE-2026-45517 is an escalation of privilege vulnerability in the Media Provider subcomponent of Android, specifically in resource processing loops. It affects Android 14, 15, and 16 . The flaw allows local privilege escalation; no additional execution privileges or user interaction are indicated...

CVE-2026-43603

AMD-SB-6034 identifies a NULL pointer dereference (CWE-476) in the Linux GPU driver , which could potentially lead to a kernel crash and result in denial of service . The vulnerability is rated CVSS 6.9 (CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H), indicating a local attack vector with high...

CVE-2026-79577

CVE-2026-79577 affects the /cas/login component of sso-master v1.0.0 , a single-sign-on application. The vulnerability allows an attacker to authenticate into the application without a password by sending a crafted POST request to the login endpoint, effectively bypassing normal credential checks...

CVE-2026-79571

CVE-2026-79571 is a critical incorrect access control vulnerability in the SellerAuthorizeAspect component of springboot-project v1.0.0 . Unauthenticated attackers can bypass authorization to access all seller management interfaces, including listing products and orders, putting products on/off s...

CVE-2026-79570

mfish-nocode-pro v1.0.0 is affected by a SQL injection vulnerability in the tableName parameter at the /sys/dbConnect/data endpoint. An unauthenticated, remote attacker can craft a malicious SQL statement to access sensitive database information, with high impact to confidentiality, integrity, an...