CVE-2026-87726

Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software...

CVE-2026-102488

In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to obtain deployment permissions beyond those actually granted to them...

CVE-2026-82627 Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included <= 7.6.1.1 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion

The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input. This makes it possible for authenticated...

CVE-2026-87683

Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads such as device configuration attributes or port mapping requests the REST API service fails to properly validate...

CVE-2026-87682

Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during remote management connection validation and session verification for directory-based user accounts allow...

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1 . The flaw occurs because the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks while processing specific mana...

CVE-2026-87680

A command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions prior to 10.0.1 . This flaw allows an authenticated user to execute arbitrary system commands by providing crafted input parameters . The vulnerability is addressed in FOS 10.0.1 .

CVE-2026-87679

Brocade Fabric OS versions before 10.0.1 are vulnerable to a heap-based buffer overflow (CWE-122) during trunk configuration operations. The application fails to enforce boundary checks when parsing user-supplied list strings into dynamically allocated heap arrays. An authenticated administrator ...

CVE-2024-8122

The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor authentication (MFA). Because unused OTPs remain valid indefinitely, malicious actors can conduct brute force attacks by repeatedly guessing the code over an unlimited timeframe....

CVE-2026-17538

The LatePoint - Appointment Booking & Reservation plugin for WordPress (versions

CVE-2026-94154

The Aurora Heatmap plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.7.2 . The root cause is insufficient input sanitization and output escaping of the 'url' parameter . This allows unauthenticated attackers to inject arbitrary web scrip...

CVE-2026-107315

The pgjdbc (PostgreSQL JDBC Driver) versions 42.7.4 through 42.7.13 are vulnerable to an information disclosure issue where values shorter than their declared length are padded with leftover bytes from the send buffer instead of zeros. This buffer contains fragments of previous messages, includin...

CVE-2026-107314

The pgjdbc PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 , contains a vulnerability where the requireAuth connection property fails to enforce restrictions if all six known authentication methods are excluded (e.g., requireAuth=!password,!md5,!gss,!sspi,!scram-sha-256,!none). In these ...

CVE-2026-89322

Vault and Vault Enterprise are vulnerable to a flaw where ACL policies are not consistently evaluated against the canonical form of resource and policy names. This CWE-178 (Improper Handling of Case Sensitivity) issue allows an authenticated user with delegated permissions to bypass explicit deny...

CVE-2026-105820

The Vault ACL policy cache is vulnerable to a path traversal flaw (CWE-22) when policy names contain specific traversal constructs. This allows a token with a specially crafted policy name to bypass namespace boundaries and utilize the capabilities of policies defined in other namespaces, includi...

CVE-2026-105816

Vault and Vault Enterprise are vulnerable to arbitrary code execution on the host because the software does not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. If Vault utilizes Shamir seals and an external plugin directory , a pri...

CVE-2026-107285

The AsyncHttpClient (AHC) library, used by Java applications, contains a vulnerability in versions prior to 3.0.12 and 2.16.1 . The root cause lies in how NettyRequestFactory.newNettyRequest and requestUri determine whether to attach proxy authentication; because ws is not marked as secure, tunne...

CVE-2026-107284

The AsyncHttpClient (AHC) library for Java applications contains a vulnerability where WebSocketHandler.upgrade fails to properly terminate a handshake when the Sec-WebSocket-Accept value is missing or invalid. While the handshake is technically aborted, the library continues into pipeline instal...

CVE-2026-107283

The AsyncHttpClient (AHC) library for Java applications is vulnerable to reduced authentication security due to the use of a non-cryptographic random source. In versions prior to 3.0.12 and 2.16.1 , the Realm.Builder component generates the HTTP Digest client nonce using ThreadLocalRandom instead...

CVE-2026-107282

The AsyncHttpClient (AHC) library, used in Java applications, contains a cross-host request replay vulnerability in versions prior to 3.0.13 and 2.16.1 . The root cause is that request replays update the current request but retain the target request and proxy context of the original origin. This ...

CVE-2026-105818

The Vault PKI secrets engine ACME server is vulnerable to an issue where it fails to restrict certificate identities that ACME challenges do not validate when using the default directory policy . This flaw allows an ACME client to obtain a certificate containing unverified identity claims , poten...

CVE-2026-107281

The AsyncHttpClient (AHC) library, used by Java applications for asynchronous HTTP requests, is vulnerable to an identity mismatch issue in versions prior to 3.0.13 and 2.16.1 . The root cause is that the HTTP/1.1 connection-pool key omits the authenticated principal for NTLM and Negotiate authen...

CVE-2026-107280

The AsyncHttpClient (AHC) library for Java applications is vulnerable to a cookie injection or overwriting issue in versions prior to 3.0.13 and 2.16.1 . The root cause is that the ThreadSafeCookieStore component validates Domain attributes using domain matching but fails to reject public suffixe...

CVE-2026-107279

The AsyncHttpClient (AHC) library, used by Java applications for asynchronous HTTP requests, is vulnerable in version 3.0.12 . The root cause is that a peer offering only Digest qop=auth-int causes mutual-authentication verification to be skipped. Specifically, AuthenticatorUtils.computeExpectedR...

CVE-2026-107232

The AsyncHttpClient (AHC) library for Java applications is vulnerable to cleartext credential transmission in versions prior to 3.0.12 (3.x) and 2.16.1 (2.x) . The root cause is that the client incorrectly infers an active HTTP proxy tunnel based on the last request method rather than the CONNECT...

CVE-2026-107231

The AsyncHttpClient (AHC) library for Java applications is vulnerable to an authentication downgrade attack in versions prior to 3.0.13 and 2.16.1 . The Realm.Builder component incorrectly treats a Digest challenge that lacks a usable nonce as a Basic challenge . An attacker controlling a proxy o...

CVE-2026-107230

The AsyncHttpClient (AHC) Java library, from version 2.0.0 until 3.0.14 , contains a vulnerability where connection-pool partitioning fails to omit identity-defining fields for Kerberos, SPNEGO, NTLM , and authenticated proxy connections. This flaw allows logins lacking configured principals, pro...

CVE-2026-107229

The AsyncHttpClient (AHC) library for Java applications contains a vulnerability in the ThreadSafeCookieStore component. From version 2.16.0 until 3.0.14 , the library incompletely validates cookie Domain attributes due to missing private-section and public-suffix rules, lack of A-label normaliza...

CVE-2026-107228

The AsyncHttpClient (AHC) library versions 2.1.0 through 3.0.14 contains a vulnerability where the default cookie store silently overrides explicit Cookie headers provided via setHeader or addHeader. In shared client environments, this allows cookies from one user's session to replace another use...

CVE-2026-107227

The AsyncHttpClient (AHC) library is vulnerable to a denial of service (DoS) attack via a decompression bomb when WebSocket permessage-deflate decompression is enabled. In versions 2.2.0 until 3.0.14 , the inbound pipeline aggregates compressed frames before inflation, meaning webSocketMaxFrameSi...

CVE-2026-76286

The Splunk MCP Server is vulnerable to a Server-Side Request Forgery (SSRF) in versions below 1.2.1 . A user with the mcp_tool_execute capability can be induced to run a custom API tool configured by another user. This flaw allows the server to send the executing user's Splunk platform authentica...

CVE-2026-76285

Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 . These vulnerabilities are categorized under CWE-710 (Improper Adherence to Coding Standards) and are grouped by Common Weakness Enumeration. Specific technical detai...

CVE-2026-76284

Splunk addressed multiple internally identified Improper Neutralization vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 . These vulnerabilities are grouped by CWE-707 . No specific root cause, impact, or exploit details are provided in the documents, and no explo...

CVE-2026-76283

Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 . These issues are categorized as Protection Mechanism Failures (CWE-693). The vulnerabilities are grouped by CWE, with CVE-2026-76283 assigned to one specific group. ...

CVE-2026-76282

Splunk addressed an Improper Control of a Resource Through its Lifetime vulnerability in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 . The issue is categorized under CWE-664 . The provided documents do not specify the exact component, root cause, or practical consequences beyon...

CVE-2026-76280

Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72 are vulnerable to an incorrect permission assignment in App Key Value Store (KV Store) collections. An authenticated user without "admin" or "sc_admin" roles ...

CVE-2026-76281

Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are affected by an improper access control vulnerability (CWE-284). Splunk internally identified these issues and addressed them in the mentioned versions. Specific technical details regarding the root cause or component are not provi...

CVE-2026-76279

Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to an improper input validation flaw in the collect Search Processing Language (SPL) command. The root cause is that the system fails to normalize whitespace in index names before enforcing role-based index-access...

CVE-2026-76278

Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10 are vulnerable to an authorization bypass in the SPL2 module permissions. A user with the edit_spl2_module_permissions capability can use the affected REST API to access permission grants for SPL2 modules they are not authorized to view...

CVE-2026-76276

Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10 are vulnerable to an information disclosure flaw in the Discover Splunk Observability Cloud app via Splunk Web. A low-privileged user lacking "admin" or "power" roles can retrieve the app's original source code because production JavaSc...

CVE-2026-76277

Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to improper input validation when creating native Splunk usernames via the REST API . A user with the edit_user capability can create a username ending in a trailing period because the system fails to reject it be...

CVE-2026-76275

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 , an improper authorization vulnerability exists in the REST API . Users lacking "admin" or "power" roles can access search query text and job metadata—including job identifiers, dispatch parameters, result counts, and execut...

CVE-2026-76274

Splunk Enterprise versions below 10.4.3 , 10.2.7 , and 10.0.10 are vulnerable to a Server-Side Request Forgery (SSRF) within the Splunk App for Splunk Observability Cloud . An attacker with a role possessing the read_o11y_content capability can exploit the REST API to redirect outbound requests t...

CVE-2026-76273

Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to improper input validation via the collect Search Processing Language (SPL) command. An attacker with the run_collect capability can exploit the fact that the command fails to validate the index name before proc...

CVE-2026-76272

Splunk Enterprise and Splunk Secure Gateway are vulnerable to an access control flaw via the REST API. In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 , users without "admin" or "power" roles can trigger the gateway to sign attacker-controlled payloads because the system f...

CVE-2026-76270

Splunk Enterprise and Splunk Cloud Platform versions below 10.4.3 (excluding 10.2.x, 10.0.x, and 9.4.x) are vulnerable to an SQL Injection in the SPL2 module filtering functionality. A user with the list_spl2_modules capability can exploit the lack of parameterized user-supplied values in databas...

CVE-2026-76271

The Discover Splunk Observability Cloud app for Splunk Enterprise is vulnerable to a Denial of Service (DoS) condition in versions below 10.4.3 , 10.2.7 , and 10.0.10 (note: 9.4.x is not affected). A low-privileged user without "admin" or "power" roles can exploit the issue by submitting input to...

CVE-2026-76268

In Splunk Enterprise versions below 10.4.3 and 10.2.7 , a missing authentication flaw in the Patroni REST API allows an unauthenticated network attacker to execute arbitrary operating-system commands on a search head cluster member. The root cause is the lack of authentication requirements for cr...

CVE-2026-76269

Splunk Enterprise versions prior to 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to an improper access control flaw in its REST API . The vulnerability occurs because the API fails to fully validate job ownership when processing a user-controlled job identifier. Consequently, a user without...

CVE-2026-76267

In Splunk Enterprise versions below 10.4.3 , 10.2.7 , and 10.0.10 , a log injection vulnerability exists within the Splunk App for Splunk O11y Cloud . An attacker with the read_o11y_content capability can inject forged entries into the application log via the REST API . This occurs because the ap...