CVE-2026-55708

NLnet Labs Unbound v1.6.0–1.25.1 is affected. The vulnerability stems from the view_local_data and view_local_datas commands in unbound-control, which can create a bare local zones tree for an already configured named view when the view starts without local data. The created tree omits default-pr...

CVE-2026-54478

CVE-2026-54478 affects NLnet Labs Unbound 1.18.0–1.25.1 when listening on a proxy-protocol-port with answer-cookie enabled. The RFC 9018 server-cookie (SipHash) is computed over the proxy’s wire address rather than the PROXYv2-declared client, causing a server cookie to validate for every PROXYv2...

CVE-2026-52863

The CVE concerns NLnet Labs Unbound 1.25.0–1.25.1. A fix that enables coexistence of the respip and dns64 modules creates a shallow copy of the view name, which, under pressure when a configured access-control-view is active and subqueries (respip CNAME redirection, dns64, subnetcache) are attach...

CVE-2026-50252

In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, the UDP source port is used as a secrecy element to increase DNS transaction entropy. When SO_REUSEPORT is enabled (default) and load balancing depends on the source port and IP address, this secrecy can be undermined. On startup Unbound pa...

CVE-2026-50251

This entry describes a vulnerability in NLnet Labs Unbound (≤ 1.25.1) where enabling unwanted-reply-threshold (>0) allows a malicious delegation returning in-bailiwick glue 0.0.0.0/::0 to cause repeated, seemingly unwanted replies. The mismatch between 0.0.0.0/::0 and the local 127.0.0.1 persp...

CVE-2026-50248

CVE-2026-50248 affects NLnet Labs Unbound 1.7.0 through 1.25.1. When an auth/rpz zone has a configured primary hostname that resolves to a bogus A/AAAA, it can still be treated as a possible XFR endpoint. A malicious actor who can spoof the hostname’s A/AAAA (no valid RRSIG required) may become t...

CVE-2026-50243

CVE-2026-50243 affects NLnet Labs Unbound 1.6.2 up to 1.25.1. When the respip module is placed in front of the validator and used with a response-ip redirect or RPZ-IP trigger, the rewriting handler does not check the upstream answer’s security status and can rewrite a BOGUS A/AAAA reply to an op...

CVE-2026-50046

NLnet Labs Unbound 1.15.0–1.25.1 contains a heap use-after-free in the DoT path. The TLS server name for DoT forwarded queries is tied to a serviced_query object that is also referenced by waiting_tcp. If the owning struct is jostled out of the mesh while DoT TCP handshake is in progress, freeing...

CVE-2026-50045

CVE-2026-50045 affects NLnet Labs Unbound, versions 1.22.0 through 1.25.1. A single client query for a deeply nested name under a DNSSEC-signed parent can cause Unbound to exceed the configured ‘max-global-quota’, effectively bypassing the upstream-traffic amplification limiter. The vulnerability...

CVE-2026-46582

Affected software/versions: NLnet Labs Unbound 1.6.0 up to and including 1.25.1. Issue: a replay of a wildcard RRset as another piece of data can be momentarily treated as DNSSEC secure based on RRSIG validation and cached, then misvalidated on the serve-expired path due to later NSEC validation,...

CVE-2026-44690

The CVE-2026-44690 entry concerns NLnet Labs Unbound versions 1.7.0 through 1.25.1 where insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198 aggressive NSEC processing enables cache poisoning. A malicious actor controlling a single delegated zone...

CVE-2026-44687

CVE-2026-44687 affects NLnet Labs Unbound releases 1.13.2 through 1.25.1. A bug in the default tallied logic for hardened-below-nxdomain can cause a stub or forward zone to be shadowed by a DNSSEC-secure NXDOMAIN answer at the parent when the query name is an intermediate label below a signed zon...

CVE-2026-44621

The CVE describes a vulnerability in NLnet Labs Unbound up to version 1.25.1 where applications using libunbound and configuring the unwanted-reply-threshold (non-zero) can trigger a fatal exit of libunbound when threshold is exceeded and libworker_alloc_cleanup is not on the function-call allow ...

CVE-2026-42955

NLnet Labs Unbound versions 1.16.2–1.25.1 are affected by CVE-2026-42955, a variant of CVE-2026-40622. An adversary controlling a ghost zone and able to query Unbound can cause the cache to overwrite expired parent-side glue A/AAAA records, extending the ghost domain window by up to one cached TT...

CVE-2026-41637

CVE-2026-41637 affects NLnet Labs Unbound (versions 1.22.0 to 1.25.1). The vulnerability arises when client-terminated DNS-over-QUIC (DoQ) queries are not counted properly, allowing a low-cost inflation of the waiting queue for in-flight queries and causing degradation of resolution service for n...

CVE-2026-40691

In Unbound, versions 1.9.0 through 1.25.1 are affected when handling DNSCrypt queries over TCP. The routine that encrypts the reply in place does not bound the reply length to the destination buffer, because the UDP path’s size clamp is not applied on the TCP path. As a result, a reply larger tha...

CVE-2026-32665

Unbound 1.22.0–1.25.1 with downstream DNS-over-QUIC enabled is vulnerable. The first two QUIC streams on a new connection (streams 0 and 4) bypass the per-stream quic-size gate, causing large input buffers to be allocated after only the 2-byte length prefix. A remote attacker can force Unbound to...

CVE-2026-14586

CVE-2026-14586 affects NLnet Labs Unbound 1.22.0–1.25.1 in DNS-over-QUIC (DoQ) environments under high concurrency. The root cause is an assertion in libngtcp2 related to monotonic timestamps; Unbound used realtime, which can trigger an assertion in libngtcp2 for the QUIC timestamp, potentially t...

CVE-2026-16560

Technical details (affected product versions, root cause specifics, exploit information, or fixes) are not publicly available in the provided documents. Monitor for updates from Red Hat and the CVE feed.

CVE-2026-16270

Open Mercato is affected by a ReDoS vulnerability where an attacker with privileges to create a regex rule can insert an unsafe regex into a field. The flawed validation allows crafted input to cause Denial of Service when processed by the system. The issue is fixed in version 0.6.4. If you are r...

CVE-2026-8152

CVE-2026-8152 affects Unblu Spark. The issue is an open redirect that can be escalated to a DOM-based XSS when deployed with com.unblu.identifier.siteEmbeddedSetup=true, causing injected JavaScript to run in the host app’s origin and gain access to cookies, DOM, and same-origin APIs. This expands...

CVE-2026-44191

The CVE-2026-44191 entry concerns the Visual Studio Code Ansible Lightspeed extension. It describes a command injection (CWE-78) caused by improper handling of ansible.executionEnvironment.containerOptions and ansible.executionEnvironment.volumeMounts, enabling an attacker to inject shell separat...

CVE-2026-4773

The CVE-2026-4773 entry covers Magarsus Consulting Ltd. Co. IDM-MFA and describes an improper validation of input type that enables authentication bypass. Affected versions are IDM-MFA from 2025.11.27 up to (but not including) 2026.03.10. The NVD entry lists a CVSS v3.1 base score of 8.1 (High) w...

CVE-2026-44187

The CVE-2026-44187 vulnerability affects the Ansible Lightspeed extension for Visual Studio Code. It allows a local attacker or malware operating with the user’s privileges to read the Google Gemini API key because the extension stores the credential in plaintext in the user’s configuration file ...

CVE-2026-44192

CVE-2026-44192 affects the Ansible Lightspeed Model Context Protocol (MCP) server. The vulnerability is a path traversal flaw that can be triggered to manipulate an AI agent via indirect prompt injection, allowing writing of files to unauthorized locations on the user’s system, which may expose s...

CVE-2026-44190

The CVE concerns the Ansible Lightspeed Visual Studio Code extension. A Command Injection (CWE-78) arises from the ansible.python.activationScript setting, which is meant for a virtual environment activation script but does not properly validate the input as a file path. Triggering this via a spe...

CVE-2026-44189

The CVE concerns Visual Studio Code Ansible Lightspeed extension (AnsiblePlaybookRunProvider). The vulnerability stems from unsanitized special characters in a playbook filename, enabling command injection and arbitrary code execution with the user’s privileges when the playbook is run. Impact in...

CVE-2025-13146

The CVE-2025-13146 entry affects the WordPress plugin “Contact Form 7 – Dynamic Text Extension.” The vulnerability allows unauthenticated attackers to execute arbitrary shortcodes by exploiting improper validation before do_shortcode, impacting all versions up to 5.0.6. A partial fix was introduc...

CVE-2026-16551

CVE-2026-16551 affects Thinkst OpenCanary, MongoDB module, specifically OpenCanary version 0.9.8. The issue is a Denial-of-Service caused by excessive allocation, as described in the CVE records. The metric shows a CVSS v4.0 base score of 8.2 (HIGH) with network attack vector, low attack complexi...

CVE-2026-65602

Traefik 3.x prior to 3.6.23 / 3.7.7 is vulnerable to a crossProviderNamespaces allowlist bypass in IngressRouteTCP serversTransport references. A low-privilege Kubernetes user in an unlisted namespace can set serversTransport: foo@file, causing Traefik to accept a forbidden cross-provider referen...

CVE-2026-65603

Summary: Grav Login Plugin for Grav (grav-plugin-login)

CVE-2026-65601

CVE-2026-65601 affects Traefik versions 3.7.0–3.7.6, where the Kubernetes Gateway API provider mishandles HTTPRoute.spec.rules[].backendRefs[].filters[].extensionRef by using the backend Service namespace instead of the HTTPRoute namespace. This namespace confusion enables a low-privileged route ...

CVE-2026-65599

n8n is affected by a credential exposure in versions before 1.123.64, 2.29.8, and 2.30.1. When configured with a Google Service Account key, the full PEM private key was incorrectly placed in the JWT header’s kid field (intended as a key identifier). JWT headers are Base64-encoded, not encrypted,...

CVE-2026-65600

Traefik contains an authentication bypass in the ReplacePathRegex middleware for certain versions. Vulnerable were Traefik builds with ReplacePathRegex configured to capture user-controlled path segments without a mandatory path separator, allowing un-normalized paths (e.g., /api../admin) to bypa...

CVE-2026-65598

CVE-2026-65598 affects n8n versions before 1.123.64 (also 2.29.8 and 2.30.1). A TOCTOU race in the Git node’s clone operation allows an authenticated user to bypass path restrictions by swapping a directory for a symlink after path validation but before the clone runs. An attacker can plant a cra...

CVE-2026-65597

Summary: The CVE affects n8n prior to 1.123.64 and 2.x prior to 2.29.8, and before 2.30.1. Vulnerability: DOM-based XSS in the HTML preview that renders output into an iframe srcdoc without the sandbox attribute, enabling a sanitizer bypass and same-origin script execution as the editor. Impact: ...

CVE-2026-65596

The CVE-2026-65596 issue affects n8n GraphQL node: it fails to enforce the Allowed HTTP Request Domains restriction on credentials used by GraphQL-based HTTP credentials (Header/Auth, Basic, Query, OAuth). Affected releases are n8n before 1.123.64, 2.29.8, and 2.30.1. An authenticated user who ca...

CVE-2026-65595

Technical details beyond the description are not provided in the supplied documents. No explicit affected components, versions, exploitation status, or remediation steps are included. Monitor for updates.

CVE-2026-65594

n8n (versions affected: before 2.29.8 and 2.30.x before 2.30.1; affected since 2.27.0) has an OAuth 2.1 flow where authentication does not verify that the user has access to the referenced workflow used as the OAuth resource. On systems with an active MCP Server Trigger workflow configured for n8...

CVE-2026-65593

CVE-2026-65593 affects n8n versions before 1.123.64. A SSRF vulnerability exists in the dynamic-node-parameters endpoints that lack authorization scopes, allowing authenticated attackers to supply absolute URLs in routing configuration to bypass baseURL restrictions and cause the n8n server to is...

CVE-2026-65592

n8n is affected by a stored DOM XSS in the Resource Locator component for versions before 1.123.64, 2.29.8, and 2.30.1. The vulnerability arises because the workflow-persisted cachedResultUrl is passed to window.open() without scheme validation. An attacker with workflow creation/editing privileg...

CVE-2026-65590

Summary: CVE-2026-65590 affects n8n before 2.29.8 and 2.30.x before 2.30.1 due to missing shell sandbox enforcement in the @n8n/computer-use package on Linux/Windows (macOS sandbox exists). It allows shell commands to run with unrestricted filesystem and network access from the computer-use agent...

CVE-2026-65591

n8n before 1.123.64 is affected by a sanitizer bypass in the legacy expression evaluator’s computed-member handler. An authenticated user with workflow create/modify permissions can craft a malicious expression to bypass the sanitizer and achieve host-level code execution in the n8n process. The ...

CVE-2026-65589

CVE-2026-65589 affects n8n versions before 1.123.64. The vulnerability arises because custom HTTP header credentials used by the LLM sub-node execution data are not masked, causing plaintext API keys and secrets to be written to workflow execution records. Authenticated users with access to execu...

CVE-2026-65016

CVE-2026-65016 affects n8n versions before 1.123.64, 2.29.8, and 2.30.1. The issue lies in Enterprise SSO instance-role provisioning: the IdP-asserted role claim is mapped to an n8n global role without preventing assignment of the global:owner role. Consequently, an SSO-authenticated user whose i...

CVE-2026-65015

CVE-2026-65015 affects n8n and is exploitable in versions before 2.30.1 through the AI Agents feature. The issue arises because the node-execution tool does not perform proper authorization checks, enabling a Project Viewer user to escalate privileges by chatting with an agent that has node tools...

CVE-2026-65014

n8n prior to 2.28.0 (and 2.27.x before 2.27.4) exposes DELETE /${restEndpoint}/test-webhook/:id before authentication, enabling an unauthenticated network caller who knows a workflow ID to cancel the active test webhook registration. The impact is limited to disrupting in-progress test sessions; ...

CVE-2026-16544

AWX security issue: the websocket event consumer omits RBAC checks for inventory_update_events, project_update_events, and system_job_events, allowing any authenticated user to subscribe to these unmapped groups and view real-time stdout from jobs in other organizations. Affected component is the...

CVE-2026-61392

Technical details about CVE-2026-61392 are not publicly available in the provided documents; monitor for updates.

CVE-2026-61391

A vulnerability (CVE-2026-61391) affects some Hikvision cameras. It is a stack-based buffer overflow that may allow an authenticated attacker to cause device malfunction by sending specially crafted packets. CVSS 3.1 metrics assign a base score of 7.2 (HIGH) with NETWORK attack vector, LOW attack...