CVE-2026-86416

ILIAS is an e-learning platform affected by an authorization bypass in the ilObjGroupGUI component prior to versions 9.23, 10.11, and 11.4 . The methods saveMapSettingsObject() and updateGroupTypeObject() perform state-changing operations without verifying write permissions, allowing any authenti...

CVE-2026-86418

MISP (≤2.5.45) exposes organisation metadata (ID, UUID, name) through the dashboard organisation picker endpoint without applying the same visibility restrictions enforced by the normal organisation index. When Security.hide_organisation_index_from_users was enabled, normal enumeration was restri...

CVE-2026-61409

Dell Secure Connect Gateway (SCG) 5.0 Application, in versions prior to 5.36.00.00 , is affected by an OS Command Injection vulnerability (Improper Neutralization of Special Elements). An unauthenticated attacker with remote network access could potentially exploit this flaw to achieve remote cod...

CVE-2026-86417

MISP (the open-source threat-intelligence sharing platform) contained an inconsistent email-visibility enforcement in DashboardsController::listTemplates() . The query always fetched User.email , but redaction was applied only in the non-REST (HTML) rendering branch. An authenticated user who saw...

CVE-2026-86303

CVE-2026-86303 affects the 92181 markdown C library (GitHub repo 92181/markdown). The vulnerability is an out-of-bounds read in the function lds within md.c. The flaw can be triggered remotely with no authentication or user interaction required, carrying a CVSS 3.1 score of 7.3 (HIGH) with low im...

CVE-2026-86408

MISP versions ≤2.5.45 are affected by a missing authorization flaw in CryptographicKeysController::view(). The handler queried the CryptographicKey model directly by key ID and exposed sensitive fields (type, key_data, fingerprint) without first verifying the caller's access to the associated par...

CVE-2026-79678

A flaw in FreeIPA 's idp-add command allows insufficiently validated --organization/--base-url input to reach a constrained eval() call before the corresponding LDAP access control check is enforced. Any authenticated IPA principal, regardless of privilege level, can enumerate and read environmen...

CVE-2026-76578

FreeIPA is affected by a critical flaw (CVSS 9.8 ) in its self-managed OTP token ACI , which does not require authentication and fails to restrict which attributes may be added alongside a token entry. Combined with a related flaw in the underlying directory server's ACI evaluation (tracked separ...

CVE-2026-86302

CVE-2026-86302 affects code-projects Hospital Information System 1.0 , specifically the /HIS/his.sql file handled by the SQL Database Backup File Handler component. The vulnerability allows information disclosure through a remotely accessible SQL database backup file, requiring no authentication ...

CVE-2026-78325

CVE-2026-78325 is a cross-site scripting (XSS) vulnerability in the Evernote and Google Keep note importers of Standard Notes for Android through version 3.201.24 . An attacker can craft a malicious .enex or Google Keep HTML file that, when imported by a victim, executes arbitrary JavaScript in t...

CVE-2026-86301

CVE-2026-86301 is a reflected Cross-Site Scripting (XSS) vulnerability in code-projects Hospital Information System 1.0 , specifically in the Patient Management component at the file /HIS/src/patients/editPatient.php. The vulnerability is triggered by manipulation of the ID argument, allowing a r...

CVE-2026-86404

Red Hat EAP 's Artemis messaging component permits deserialization by default due to a misconfiguration in its security filtering. Specifically, ObjectMessage.getObject() uses ObjectInputStreamWithClassLoader, which applies allow-list/block-list filtering via checkSecurity()/isTrustedType(). Howe...

CVE-2026-86300

An improper authentication flaw in the R7WebsSecurityHandler function of the Web Management component of Tenda AC9 firmware 15.03.05.14 allows a remote, unauthenticated attacker to bypass authentication with low complexity. The CVSS 3.1 base score is 7.3 (HIGH) with impacts of low confidentiality...

CVE-2026-2390

The Powerkit WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) via its Lazy Load module's image processing in all versions up to and including 3.0.4 . The root cause is the content_process_images function, which relies on a flawed regex-based HTML attribute parser, allowing auth...

CVE-2026-86299

Linksys RE7000 (version 2.0.15) is affected by an OS command injection in the PingTest Handler component. The vulnerable function is platform_event_pingTest in /cgi-bin/json.cgi?PingTest, where manipulation of the pingTestIp, pingTestPktSize, or pingTestTimes arguments allows an attacker to injec...

CVE-2026-82325

CVE-2026-82325 is a use-after-free vulnerability in the OpenVPN ovpn-dco-win driver, affecting versions 2.5.0 through 2.8.6 . A local authenticated user can trigger a system crash by sending crafted control messages to the driver. The CVSS 4.0 score is 6.8 (MEDIUM) , with a local attack vector, l...

CVE-2026-86298

CVE-2026-86298 affects SourceCodester Class and Exam Timetabling System 1.0 , where an unauthenticated remote attacker can exploit a SQL injection vulnerability in the /delete_subject.php file by manipulating the ID parameter. The flaw is rated CVSS 3.1: 7.3 (HIGH) with low impact on confidential...

CVE-2026-77697

ManageEngine Endpoint Central (by Zohocorp) versions below 11.4.2540.23 are affected by a Privilege Escalation vulnerability during JAR extraction. The flaw allows a locally authenticated user with low privileges to escalate their permissions, with changed scope impacting the confidentiality, int...

CVE-2026-86297

A remote off-by-one vulnerability exists in the L2TP Control Message Parser of the D-Link DIR-605 (firmware B1v202WWB03), specifically in the tunnel_set_params function of progs.gpl/pppd.alpha/l2tp/tunnel.c. Manipulation of the peer_hostname argument triggers the out-of-bounds condition. No authe...

CVE-2026-85640

Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are affected by a Privilege Escalation Due to Outdated Component vulnerability. The CVSS 3.1 score is 6.3 (MEDIUM) with a local attack vector, low complexity, and low privileges required, resulting in low impact on confidentiality...

CVE-2025-52657

HCL MyXalytics is affected by a potential Denial of Service (DoS) vulnerability. The root cause is that the application allows users to input data without any restriction on the number of characters, which can impact system performance or availability . The CVSS 3.1 base score is 3.5 (LOW) , with...

CVE-2025-52652

HCL MyXalytics is affected by a Content Spoofing Vulnerability that may allow an attacker to manipulate displayed content so it appears to originate from a trusted source, potentially leading to phishing or data theft. The vulnerability requires low privileges and user interaction , with a CVSS 3...

CVE-2025-52651

HCL MyXalytics is affected by an Improper Input Validation vulnerability that allows malicious or unexpected data to cause unintended system behaviour or security issues. The CNA-assigned CVSS 3.1 score is 3.5 (LOW) , with a network vector, low attack complexity, low privileges required, and user...

CVE-2026-77699

ManageEngine Endpoint Central (Zohocorp) versions below 11.5.2605.01 are susceptible to a local privilege escalation caused by loading a DLL from an untrusted path . An attacker with low-level local access and the ability to prompt a user for interaction could exploit this to gain elevated privil...

CVE-2026-86296

D-Link DIR-822A (firmware A_101) is affected by a stack-based buffer overflow in the udhcpcd component, specifically in the strcpy call within serverpacket.c. The overflow is triggered during parsing of TR-111 Option 125 in DHCPv6 messages. The vulnerability is exploitable remotely without authen...

CVE-2026-38291

CVE-2026-38291 is currently a reserved candidate with no public technical details. The only known sighting is a Bluesky post by the CVE database account. Monitor for updates as the assigning organization publishes full details.

CVE-2026-19204

Eclipse Jetty is vulnerable in its WebSocket component when auto-fragmentation is enabled. A remote, unauthenticated client can send a WebSocket frame with an unknown opcode and a very large declared payload length. Because unknown opcodes bypass the normal maximum frame size handling and payload...

CVE-2026-86295

A command injection vulnerability in D-Link DIR-895L (firmware A1_102b07) affects the sendACK function in the udhcpcd/serverpacket.c component. Manipulation of the Hostname argument allows remote, unauthenticated attackers to inject commands, with a CVSS 3.1 base score of 8.3 (HIGH) . A proof-of-...

CVE-2026-85201

In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-delimited protobuf message received through the Control Interface FIFO . A workload with Control Interface access can specify an excessive message length, triggering an unbounde...

CVE-2026-86294

SourceCodester Simple Traffic Offense System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Settings Update Endpoint (file save-settings.php). The root cause is improper handling of the site_name/site_desc arguments, which can be manipulated by a remote, unauthenticated atta...

CVE-2026-86351

MISP (versions ≤2.5.45 ) is affected by an authenticated open redirect in the user-configurable homepage feature. The validation only checked whether the supplied value begins with /, which is insufficient because protocol-relative URLs such as //attacker.example also start with / but resolve to ...

CVE-2026-77698

ManageEngine Endpoint Central by Zohocorp, in versions prior to 11.5.2605.01 , is affected by a local privilege escalation vulnerability triggered through the Agent upgrade process. An attacker with low local privileges and user interaction can escalate their access, resulting in low impact to co...

CVE-2026-86293

A missing authentication flaw exists in the Deletion Endpoint (file delete-user.php) of SourceCodester Simple Traffic Offense System 1.0 . By manipulating the ID argument remotely without authentication, an attacker can perform unauthorized deletion operations, resulting in low integrity and low ...

CVE-2026-84173

Eclipse Ankaios versions v0.5.1 through v1.0.1 contain an authorization flaw in the agent-side Control Interface authorizer . When a multi-segment allow rule begins with a wildcard (e.g., *.workloads.some_workload), an authenticated workload can submit a CompleteStateRequest or UpdateStateRequest...

CVE-2026-86347

MISP is affected by a missing authorization flaw in the TemplatesController::uploadFile() action. The ACL entry for templates/uploadFile used the wildcard * instead of the intended perm_add role restriction, allowing any authenticated user—including low-privileged or read-only users—to repeatedly...

CVE-2026-86292

SourceCodester Simple Traffic Offense System 1.0 is vulnerable to missing authentication in the User Creation component, specifically the file saveuser.php . Manipulating the position argument allows an unauthenticated remote attacker to bypass access controls, leading to low impacts on confident...

CVE-2026-86291

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection in the file /pages/us_edit1.php via manipulation of the ID parameter. The vulnerability is exploitable remotely and requires low privileges with no user interaction. A proof-of-concept exploit has been disclosed publicly, ...

CVE-2026-86342

MISP versions ≤ 2.5.45 contain improper authorization checks in the freetext feed preview functionality. Correlation lookups queried attributes from events without applying the requesting user's ACL, exposing restricted event correlations and associated information to users lacking access. The sa...

CVE-2026-86290

SourceCodester Online Voting System 1.0 is vulnerable to a SQL injection in the file /voting/ajax.php?action=save_category, triggered by manipulating the Category argument. The attack can be initiated remotely with no privileges or user interaction required. A proof-of-concept exploit has been ma...

CVE-2026-86289

Ollama up to 0.31.1 contains an integer overflow in the function readGGUFV1String within the file fs/ggml/gguf.go, part of the GGUF Decoder component. The vulnerability is remotely exploitable with user interaction required and no authentication needed, leading to a low availability impact (CVSS ...

CVE-2026-84186

This vulnerability affects PrestaShop and resides in the Tools::getRemoteAddr() function. When the application runs behind a reverse proxy, load balancer, or CDN, it incorrectly trusts the client-supplied X-Forwarded-For header instead of the IP provided by the trusted infrastructure, allowing an...

CVE-2026-86332

A flaw in the odh-dashboard component of Red Hat OpenShift AI allows any authenticated dashboard user to read Kubernetes Secrets without an authorization check. The backend-for-frontend route GET /api/nim-serving/:nimResource uses the dashboard service account to retrieve and return the full Secr...

CVE-2026-86288

ModelCloud GPTQModel versions up to 7.2.0 contain an out-of-bounds read vulnerability in the Triton dequantization kernel (gptqmodel/nn_modules/qlinear/tritonv2.py). The root cause is improper handling of the g_idx argument, which can be manipulated by an unauthenticated remote attacker (with use...

CVE-2026-84732

OpenVPN 2.x (through 2.6.22 and 2.7.6 ) is vulnerable to a denial of service in the control channel reliability layer, caused by a timeout integer overflow triggered by crafted ACK packet ID retransmissions. Attackers can either drive the reliable TLS retransmission timeout to grow without bound ...

CVE-2026-86285

BookStack versions up to 26.05.2 are affected by an improper access control vulnerability in the Attachment Edit Endpoint , specifically the AttachmentController::getUpdateForm function in app/Uploads/Controllers/AttachmentController.php. The ID argument can be manipulated to bypass permission ch...

CVE-2026-18796

CVE-2026-18796 affects the nRF5340 (Nordic Semiconductor) when using external QSPI flash for encrypted XIP (eXecute In Place). The weakness lies in the on-the-fly decryption scheme , not in any specific nRF Connect SDK version, making it a side-channel leakage vulnerability. An attacker with phys...

CVE-2026-14297

CVE-2026-14297 is a buffer overflow in the Bluetooth Continuous Glucose Monitoring Service (CGMS) Record Access Control Point (RACP) write handler of Nordic Semiconductor Struct SA . The vulnerable code memcpys the entire attacker-supplied ATT write value into a fixed 20-byte static BSS buffer , ...

CVE-2026-86284

CVE-2026-86284 affects jaychouchannel Tourism-Management-System (a Java-based project hosted on GitHub). The vulnerable component is the getOption function in CommonController.java , where unsanitized tableName/columnName arguments enable remote, unauthenticated information disclosure (CVSS 3.1: ...

CVE-2026-14296

CVE-2026-14296 affects MCUBoot in its bare (upstream) configuration on the nRF54H20 SoC. When using the Direct XIP update strategy, the main application image can start other cores (e.g., the radio core) by providing an address from an unauthenticated slot, because MCUboot may select different sl...

CVE-2026-84256

An argument parsing issue in OpenVPN versions 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject. The CVSS 4.0 base score is 7.7 (HIGH) , with network attack vector, low complexity, pres...