379696 matches found
CVE-2026-71958 D-Link DWR-M961 Buffer Overflow via quicksetup.cgi
D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username fields and execute arbitrary commands by crafting a...
CVE-2026-71957 D-Link DWR-M961 Buffer Overflow via app.cgi
D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist.name field and execute arbitrary commands by crafting a specific...
CVE-2026-71956 D-Link DWR-M961 Command Injection via app.cgi
D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands into the netDig.ping.dst field, resulting in command execution with root privileg...
CVE-2026-71955
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formWsc interface. A remote attacker can inject arbitrary malicious commands into the localPin field, resulting in command execution with root...
CVE-2026-71954
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands into the tunnelid and sessionid fields, resulting in...
CVE-2026-71953
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formNtp interface. A remote attacker can inject arbitrary malicious commands into the ntpServerIp1 field, resulting in command execution with...
CVE-2026-71952
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formPinManageSetup interface. A remote attacker can inject arbitrary malicious commands into the oldPIn field, resulting in command execution...
CVE-2026-71951
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formIMEISetup interface. A remote attacker can inject arbitrary malicious commands into the IMEIvalue field, resulting in command execution wit...
CVE-2026-71950
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formSmsManage interface. A remote attacker can inject arbitrary malicious commands into the actionvalue field, resulting in command execution...
CVE-2026-71949
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formUSSDSetup interface. A remote attacker can inject arbitrary malicious commands into the ussdValue and selectMenuValue fields, resulting in...
CVE-2026-71948
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formDebugDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host field, resulting in command execution...
CVE-2026-71947
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formTracerouteDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host and ipVer fields, resulting in...
CVE-2026-71946
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formPingDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host field, resulting in command execution...
CVE-2026-71945
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeFibocom interface. A remote attacker can inject arbitrary malicious commands into the fotaurl field, resulting in command...
CVE-2026-71944
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeQuectel interface. A remote attacker can inject arbitrary malicious commands into the fotaurl field, resulting in command...
CVE-2026-67620
CVE-2026-67620 affects Flowise up to version 3.1.4, where the SSRF guard in httpSecurity.ts uses a faulty DEFAULT_DENY_LIST. The list blocks the AWS/GCP/Azure/DO metadata IPs 169.254.169.254 but omits OCI 192.0.0.192 and Alibaba Cloud 100.100.100.200 (and the 100.64.0.0/10 CGNAT range). An authen...
CVE-2026-42170
CVE-2026-42170 affects the GIMP DDS plug-in. The heap-based overflow occurs when a crafted DDS file declares a D3D9 pixel format but uses a lower bpp in the header, causing the loader to allocate an undersized heap buffer and then write pixel data at the real format’s stride, corrupting heap meta...
CVE-2026-19288
CVE-2026-19288 affects astralisone rive-mcp-server-core (up to the listed commit) with a vulnerability in the importRiveFile Flow, specifically in packages/mcp-server/src/tools/importRiveFile.ts. The root cause is manipulation of the libraryId argument leading to path traversal, exploitable via a...
CVE-2026-19338
Technical details for CVE-2026-19338 are not publicly available in the provided documents. The entry appears reserved with details to be announced later; monitor for updates and additional information from the referenced CVE page when released.
CVE-2026-19287
CVE-2026-19287 affects abrinsmead mindpilot-mcp 0.5.0, specifically the HistoryService component. The issue is triggered by manipulating the argument ID, enabling path traversal via a local attack. The description notes the attack must be launched locally and that the project was informed through...
CVE-2026-19285
CVE-2026-19285 affects aaronsb memory-graph (memoryTools.ts: JsonMemoryStorage.createDomain, JsonMemoryStorage.getMemories, JsonMemoryStorage.saveMemories). The root cause is path traversal in these functions; exploitation requires local access. No version details for affected/updated releases ar...
CVE-2026-19284
MauricioMilano coder-api up to version 1.1.0 is affected by a local, command-injection vulnerability in the Projects Endpoint. The issue resides in the function createProject (src/core/projects.ts) and is triggered by input manipulation within that path. The attack is described as requiring local...
CVE-2026-19282
The CVE describes a local command-injection risk in the andreahaku llm_memory_mcp project, affecting the auto.capture function in src/autolearn/GitHooksManager.ts. The root cause is a manipulation of the argument hash, enabling injection, with exploitation restricted to local access. No product v...
CVE-2026-19281
CVE-2026-19281 affects the project adolfosalasgomez3011 slidev-builder-mcp version 2.1.0. The vulnerability lies in the function generateChart within the file src/tools/generateAssets.ts of the generateAssets Tool . Manipulating the argument outputDir can trigger a command injection . Exploitatio...
CVE-2026-19279
Technical details about CVE-2026-19279 are not publicly available in the provided documents beyond the summary. Monitor for updates from the vendor and CVE record.
CVE-2026-68082
CVE-2026-68082: In the Linux kernel’s libceph code, decode_lockers() uses two unsafe bare decodes (ceph_decode_32(p) and ceph_decode_8(p)) that can read past the validated buffer, enabling a malicious OSD to influence the locker type and trigger slab-out-of-bounds reads. The fix replaces these wi...
CVE-2026-68081
The CVE concerns KVM nVMX in the Linux kernel. The root cause is an open coded path that neglects to put vmcs12 pages when a nested VM-Enter fails due to invalid guest state during VMLAUNCH/VMRESUME, causing leaks of pinned pages and/or mappings if L1 retries. The issue is resolved in the Linux k...
CVE-2026-19270
Hulupeep mcp-ui-probe up to 0.2.0 contains a local path-traversal vulnerability in Journey/Usage’s JourneyStorage.ts. The affected functions—get_journey, delete_journey, analyze_journey, and usage_stats—manipulate journeyId/filename to access unintended paths. The issue requires local access; no ...
CVE-2026-19268
Summary of CVE-2026-19268 (abdullah1854 MCPGateway) : The vulnerability affects the MCPGateway project up to commit 549f494a9e363f40530149de324b8097de424230, specifically the Claude Usage Range Endpoint. The issue is in the function getUsageByDateRange within src/services/claude-usage.ts, where a...
CVE-2026-19266
Technical details about CVE-2026-19266 are not publicly available in the provided documents. Monitor for updates on affected components, versions, and remediation.
CVE-2026-19263
INQUIRELAB mcp-bridge-api (up to b30a82aa1d1d1139e0de846c41c8aadee6e06114), specifically the Servers Endpoint component mcp-bridge.js, is affected by a command injection vulnerability triggered by manipulating the command/args argument. The issue allows remote initiation. The product uses a rolli...
CVE-2026-14526
The AI Copilot – Content Generator plugin for WordPress is affected by an authorization bypass vulnerability in all versions up to and including 1.5.6. The issue arises because the plugin does not properly verify a user’s authorization to perform certain actions, enabling unauthenticated attacker...
CVE-2026-16955
The CVE affects the AI Engine WordPress plugin, prior to version 3.6.6. The root cause is that the plugin does not confine a caller-supplied file path before reading it and forwarding the contents to an external service. This allows a subscriber-level user to read arbitrary files from the server ...
CVE-2026-16953
The CVE concerns the AI Engine WordPress plugin (before 3.6.4). The issue is that the plugin does not verify ownership of a guest’s uploaded chatbot files before deletion, authorising a delete action solely via a client-supplied session cookie. An unauthenticated attacker who obtains a victim’s s...
CVE-2026-16948
The CVE concerns the Solace Extra WordPress plugin prior to version 1.6.1. The issue stems from missing capability checks in several AJAX actions and exposure of the nonce protecting them on admin pages, which low-privilege users (down to the Subscriber role) can access. This allows modification ...
CVE-2026-16594
The CVE affects the WP Directory Kit WordPress plugin prior to version 1.5.5. The root cause is missing authorization and nonce checks on an authenticated AJAX action, which allows any authenticated user (e.g., a Subscriber) to disclose settings from the plugin’s before-1.5.5 state, including sen...
CVE-2026-16608
The CVE covers the Download Monitor WordPress plugin, prior to version 5.2.6, where an unauthenticated AJAX endpoint used for download-logging lacks authorization checks and leaks its nonce to unauthenticated visitors. This enables unauthenticated users to inject arbitrary download log entries, i...
CVE-2026-16590
WP Directory Kit prior to version 1.5.5 has an authorization/nonce check flaw in an authenticated AJAX action, enabling any authenticated user (e.g., Subscriber) to retrieve other users’ stored contact messages and related user data. Root cause: missing access control on the AJAX endpoint. Impact...
CVE-2026-16595
The WP Directory Kit WordPress plugin, before version 1.5.5, fails to perform authorization or nonce checks on one authenticated AJAX action. This allows any authenticated user (e.g., a Subscriber) to disclose other users’ data, including the site’s user list and unpublished listings. The entry s...
CVE-2026-16574
CVE-2026-16574 affects the Dokan WordPress plugin (AI Powered WooCommerce Multivendor Marketplace Solution) prior to version 5.0.11. The root cause is a missing verification that a downloadable product belongs to the requesting vendor before granting download permissions via an order REST endpoin...
CVE-2026-16559
The YMC Filter WordPress plugin (pre-3.12.9) fails to sanitize SVG uploads via its icon upload feature, allowing low-privilege users (Author role+) to upload SVGs containing JavaScript that executes in the site origin when viewed (Stored XSS). A fix is to update to version 3.12.9 or later; otherw...
CVE-2026-16535
The CVE-2026-16535 entry concerns the Link Library WordPress plugin (versions before 7.9.4). The vulnerability arises because a parameter is not sanitized/escaped before being reflected in a response, enabling unauthenticated attackers to perform Reflected Cross-Site Scripting against users who a...
CVE-2026-16558
The CVE concerns the YMC Filter WordPress plugin (versions before 3.12.8). The vulnerability arises because the plugin does not sanitize/escape a layout builder setting before rendering it on a public endpoint and does not verify object ownership when saving the setting. This allows users with th...
CVE-2026-16562
CVE-2026-16562 – WP Statistics (WordPress) plugin before 14.16.10: the dashboard analytics AJAX handlers fail to perform a proper capability check, relying only on a nonce that is possessed by any authenticated user. This allows users with Subscriber-level access and higher to disclose visitor an...
CVE-2026-16578
The CVE-2026-16578 entry concerns the WordPress plugin Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection (pre-1.4.0). The issue is a missing capability check on a REST API endpoint (2fa/app/users), allowing unauthenticated access to the full user list, including user...
CVE-2026-16267
The Newsletters WordPress plugin, prior to version 4.16, does not restrict the classes allowed during unserialisation of a value submitted via a public form. This allows unauthenticated attackers to inject arbitrary PHP objects. Affected: Newsletters plugin
CVE-2026-16269
The Newsletters WordPress plugin (
CVE-2026-16282
The CVE describes a vulnerability in the Appointment Hour Booking WordPress plugin prior to version 1.5.88 where a missing validation of a client-supplied booking price against the server-side service price allows unauthenticated users to submit arbitrary final prices (including zero or negative)...
CVE-2026-19259
The CVE concerns MZ Automation libiec61850 (up to 1.6.1). The vulnerability is in the MMS Protocol Workflow, specifically MmsMapping_varAccessSpecToObjectReference in src/iec61850/common/iec61850_common.c, where manipulation of GetNamedVariableListAttributesResponse.itemId causes a heap-based buf...