CVE-2026-86271

A missing authorization vulnerability in FluentCMS up to 0.0.5 affects the GetAccessible function in src/Backend/FluentCMS.Services/Permissions/PermissionManager.cs, allowing a remote attacker with existing authenticated access to bypass permission checks. The CVSS 3.1 base score is 4.7 (MEDIUM) ...

CVE-2026-86270

itsourcecode Sales and Inventory System 1.0 is affected by a remote SQL injection vulnerability in the file /pages/settings_edit.php, triggered by manipulating the ID argument. The flaw allows a remote, authenticated attacker (low privileges required) to inject SQL queries, potentially leading to...

CVE-2026-86315

Samsung Open Source Escargot (a JavaScript engine) on Linux x86-64 is affected by an out-of-bounds write caused by numeric truncation. A crafted class definition whose instance initialization entry count exceeds UINT16_MAX allows an attacker who can supply JavaScript for execution to corrupt nati...

CVE-2026-86269

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in an unknown function of the file /pages/emp_edit1.php. Manipulating the ID argument allows a remote attacker with low privileges to inject SQL commands, resulting in low impact on confidentiality,...

CVE-2026-86268

A SQL injection vulnerability exists in itsourcecode School Management System 1.0 , specifically in the file User_Login.php where manipulation of the email argument allows a remote attacker to inject SQL queries without authentication. The vulnerability is rated HIGH (CVSS 3.1: 7.3) with low impa...

CVE-2026-86267

itsourcecode Information System Society Membership System 1.0 is vulnerable to SQL injection through the student_id argument in /society/check_student.php . The vulnerability allows remote exploitation with low privileges required and no user interaction. CVSS 3.1 rates it 6.3 (MEDIUM) with low i...

CVE-2026-86265

itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/us_transac.php , triggered by manipulation of the Username argument. The attack can be launched remotely and requires low privileges (authentication), with no user interaction needed. Per the CVS...

CVE-2026-86264

sfturing ssm_pro (a Java-based hospital ordering system) contains a cross-site scripting (XSS) vulnerability in the Order Endpoint (OrderController.java). An attacker can manipulate the hospitalName, officesName, or doctorName arguments to inject script, which executes in a victim's browser upon ...

CVE-2026-86263

sfturing hosp_order is a Java-based hospital order management application. The vulnerability affects the Order Cancellation component, specifically the orderRecordsService.cancelOrder function in ssm_pro/src/main/java/cn/sfturing/web/OrderController.java. Manipulation of the ID argument enables a...

CVE-2026-86262

CVE-2026-86262 affects sfturing hosp_order (up to commit 627f426), an order-handling component in the file OrderController.java . The updateOrderdiseaseInfo function permits authorization bypass by manipulating the userID/id argument, allowing a remote, unauthenticated attacker to interfere with ...

CVE-2026-86314

Samsung Walrus (a WebAssembly runtime) is vulnerable to an integer overflow in the source-bounds check within Memory::init() (src/runtime/Memory.cpp). A crafted WebAssembly module can trigger a 32-bit unsigned addition that wraps around, bypassing the bounds check and causing an out-of-bounds hea...

CVE-2026-86261

An authorization bypass vulnerability exists in the Order Controller component of sfturing hosp_order (a rolling-release product), specifically in the file OrderController.java. Manipulating the userIdenf argument allows a remote, unauthenticated attacker to bypass authorization controls, resulti...

CVE-2026-86313

CVE-2026-86313 is an out-of-bounds write vulnerability in Samsung Opensource Walrus , affecting commit af80e665ea49d9003695a66502f841ed1d8397e7. The flaw allows buffer overflow, rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, no required privileges, and user interaction req...

CVE-2026-86260

CVE-2026-86260 affects the Password Recovery component of sfturing hosp_order (a Java/SSM-based hospital order management system). The flaw resides in the modifyPassWord function within ssm_pro/src/main/java/cn/sfturing/web/CommonUserController.java, where a password can be changed without proper...

CVE-2026-20518

geniezone (a MediaTek system component) contains a missing bounds check that can lead to local information disclosure . Exploitation requires the attacker to already hold the System privilege and, per the vendor advisory, user interaction is needed. The CVSS 3.1 score is 4.4 (Medium) with a vecto...

CVE-2026-20517

geniezone is susceptible to a use-after-free flaw that enables local privilege escalation . An attacker who already holds the System privilege can exploit this bug without any user interaction to gain full confidentiality, integrity, and availability impact, scoring CVSS 3.1: 6.7 (MEDIUM) with ve...

CVE-2026-20515

CVE-2026-20515 is a use-after-free vulnerability in the GPU component of MediaTek devices, which can cause a system crash leading to local information disclosure . Exploitation requires low user privileges and user interaction . The CVSS 3.1 score is 5.5 (Medium) with a local attack vector. CISA'...

CVE-2026-20514

CVE-2026-20514 affects MediaTek's Audio HAL , where a missing permission check can allow a local attacker with System privilege to disclose information without user interaction. The impact is limited to confidentiality (CVSS 3.1: 4.4, Medium). The vendor references Patch ID ALPS11087632 and Issue...

CVE-2026-20513

CVE-2026-20513 affects MediaTek's Audio HAL , where improper input validation can lead to a local information disclosure . An attacker must already hold the System privilege ; no user interaction is required. The vulnerability is rated CVSS 4.4 (MEDIUM) with high confidentiality impact but no int...

CVE-2026-20512

CVE-2026-20512 is a local privilege escalation vulnerability in MediaTek's Audio HAL component, caused by improper input validation . An attacker who already holds the System privilege can escalate further without user interaction, potentially gaining full control over confidentiality, integrity,...

CVE-2026-20511

CVE-2026-20511 is a use-after-free memory corruption in SurfaceFlinger that can lead to local privilege escalation if an attacker already holds the System privilege. No user interaction is required. Per the MediaTek September 2026 security bulletin, the fix is identified as Patch ID ALPS11123860 ...

CVE-2026-20510

CVE-2026-20510 is a double free vulnerability in MediaTek camera middleware that can lead to local escalation of privilege for an attacker who already holds the System privilege. No user interaction is required. The CVSS v3.1 score is 6.7 (Medium) with the vector AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A...

CVE-2026-20509

CVE-2026-20509 affects Power HAL in MediaTek devices, where a missing bounds check allows an out-of-bounds write , enabling a local attacker who already holds the System privilege to escalate further. No user interaction is required. The CVSS 3.1 score is 6.7 (Medium) with High impact to confiden...

CVE-2026-20508

CVE-2026-20508 affects the Power HAL component in MediaTek devices, where a type confusion flaw allows local privilege escalation. An attacker who already holds the System privilege can exploit this without user interaction to gain full confidentiality, integrity, and availability impact. The CVS...

CVE-2026-20507

CVE-2026-20507 is a use-after-free vulnerability in the Audio HAL of MediaTek devices. The flaw enables local privilege escalation from the System privilege level, with no user interaction required. The CVSS 3.1 base score is 6.7 (MEDIUM) , reflecting the high privileges already needed for exploi...

CVE-2026-20506

CVE-2026-20506 affects the Audio HAL component, where a use-after-free flaw can lead to local privilege escalation . An attacker must already hold the System privilege; no user interaction is required. The CNA-assigned CVSS 3.1 score is 6.7 (MEDIUM) , reflecting local attack vector, low complexit...

CVE-2026-20516

CVE-2026-20516 affects MediaTek's MiracastService , where a confused deputy flaw enables a privilege escalation that results in a local denial of service . Exploitation requires low (User) privileges and no user interaction. The CVSS 3.1 base score is 5.5 (Medium) with vector AV:L/AC:L/PR:L/UI:N/...

CVE-2026-20504

CVE-2026-20504 affects the MediaTek Modem component, where a missing bounds check can cause a system crash, leading to a remote denial of service . Exploitation requires a User Equipment (UE) to connect to a rogue base station controlled by the attacker, with no additional privileges or user inte...

CVE-2026-20503

CVE-2026-20503 affects the Modem component in MediaTek devices. A missing bounds check can cause a system crash, leading to remote denial of service when a user equipment (UE) connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are r...

CVE-2026-20502

CVE-2026-20502 affects the vdec (video decoder) component in MediaTek platforms. The root cause is an out-of-bounds write resulting from a missing bounds check , which can lead to local privilege escalation requiring no additional execution privileges and no user interaction. The vulnerability is...

CVE-2026-20501

MediaTek's vdec (video decoder) is affected by a heap buffer overflow that can cause an out-of-bounds write, enabling local escalation of privilege without requiring any prior execution privileges or user interaction. The vulnerability is rated CVSS 8.4 (HIGH) with impacts to confidentiality, int...

CVE-2026-20500

CVE-2026-20500 affects the Modem component in MediaTek devices. The vulnerability stems from improper input validation , which can cause a system crash resulting in a local denial of service . Exploitation requires User execution privileges and, per the vendor description, user interaction . The ...

CVE-2026-86245

itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/sup_transac.php, triggered by manipulating the companyname argument. The attack can be initiated remotely and requires low privileges (an authenticated user) but no user interaction. Impact is ra...

CVE-2026-86244

FastAdmin up to 1.2.0.20210401_beta contains a cross-site scripting (XSS) vulnerability in the register/login function of application/index/controller/User.php (User Controller). Manipulating the url argument enables a remote attacker to execute arbitrary script in the user's browser, with a CVSS...

CVE-2026-86241

liufee FeehiCMS (up to 2.1.1 ) is affected by a hard-coded cryptographic key vulnerability in the Cookie Validation component, specifically in the file environments/prod/backend/config/main-local.php. Manipulation of the cookieValidationKey argument leads to use of a fixed key, allowing remote at...

CVE-2026-86240

liufee FeehiCMS up to version 2.1.1 contains a server-side request forgery (SSRF) vulnerability in the catchImage function of the file backend/widgets/ueditor/Uploader.php (UEditor component). Manipulation of the source[] argument enables remote attackers to forge server-side requests. A proof-of...

CVE-2026-16876

NEC UNIVERGE IX-R/IX-V series routers are affected by an authentication bypass in the WebGUI component, classified as Missing Authentication for Critical Function (CWE-306) . A remote unauthenticated attacker can send a specially crafted message to the WebGUI over the internet to execute arbitrar...

CVE-2026-86239

liufee FeehiCMS (up to version 2.1.1 ) is affected by an unrestricted file upload vulnerability in the UEditor Widget component, specifically in the function UeditorAction::init within the file backend/widgets/ueditor/UeditorAction.php. The flaw allows remote, unauthenticated attackers to upload ...

CVE-2026-86238

CVE-2026-86238 affects projectworlds Online Examination System 1.0 , specifically the Feedback Form component in the file feedback.php . An attacker can remotely manipulate the Name/Subject argument to trigger a cross-site scripting (XSS) flaw. The CVSS 3.1 score is 4.3 (MEDIUM) , with low attack...

CVE-2026-86237

A server-side request forgery (SSRF) vulnerability affects the openagents-org/openagents Python SDK in versions up to 0.8.19 / 0.9.3.post20 . The vulnerable function is test_default_model in sdk/src/openagents/sdk/transports/http.py, where an unvalidated base_url argument allows a remote, unauthe...

CVE-2026-86236

itsourcecode Sales and Inventory System 1.0 is affected by a remote SQL injection in /pages/pro_transac.php?action=add, triggered by manipulation of the Name argument. The attack requires low privileges and no user interaction, with a CVSS 3.1 score of 6.3 (Medium) reflecting low impact on confid...

CVE-2026-84973

CVE-2026-84973 is a race condition in the commit approval mechanism of a GitHub Action used by JupyterLab . When a maintainer approved one commit, a same-second push allowed a different commit to inherit that approval, effectively bypassing the review gate. GitHub Security Lab verified the race c...

CVE-2026-86235

A SQL injection flaw in itsourcecode Sales and Inventory System 1.0 allows a remote, low-privilege attacker to manipulate the Customer argument in /pages/pos_transac.php?action=add . The vulnerability is classified as MEDIUM severity (CVSS 3.1: 6.3) with impacts to confidentiality, integrity, and...

CVE-2026-84384

CVE-2026-84384 has been reserved but no technical details (affected product, component, root cause, or impact) are publicly available in the provided documents. Action: monitor for updates once the candidate is publicized.

CVE-2026-84444

CVE-2026-84444 is currently a reserved CVE candidate with no publicly available technical details. The SUSE advisory also lists the description as unknown. Monitor for updates as the reserving organization announces the security issue.

CVE-2026-84446

CVE-2026-84446 is currently reserved with no public technical details available in the provided documents. The SUSE entry lists the description as "unknown" with no source. Action: monitor for updates when the candidate is publicized.

CVE-2026-84447

CVE-2026-84447 is a reserved candidate with no publicly available technical details. The SUSE entry lists the description as "unknown." Monitor for updates as the reserving organization has not yet announced the vulnerability.

CVE-2026-84448

CVE-2026-84448 is currently in a reserved state with no publicly available technical details. The SUSE tracking entry lists the description as unknown . Monitor for updates once the reserving organization publicizes the vulnerability.

CVE-2026-86234

CVE-2026-86234 affects itsourcecode Sales and Inventory System version 1.0. A SQL injection vulnerability exists in the file /pages/cust_transac.php (with the action=add parameter), triggered through manipulation of the firstname argument. The attack can be launched remotely and requires low priv...

CVE-2026-86233

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 within the file /pages/us_del.php?type=user , where manipulation of the ID parameter allows remote attackers to inject SQL. The attack requires low privileges (authenticated access) and no user interaction, with l...