CVE-2026-94183

Arc Search for Android versions prior to 1.12.10 are vulnerable to a UI spoofing risk. The application fails to display a fullscreen notification when a webpage enters fullscreen mode while the app is running in the background. A remote attacker can exploit this by using a specially crafted websi...

CVE-2026-96549

A vulnerability exists in sfturing hosp_order (up to commit 627f426331da8086ce8fff2017d65b1ddef384f8 ) affecting the file ssm_pro/src/main/java/cn/sfturing/service/impl/CommonUserServiceImpl.java . The issue allows for the cleartext storage of sensitive information through code manipulation. This...

CVE-2026-93421

The Mesop Python-based UI framework is vulnerable to an unauthenticated ANSI escape sequence injection in the /__csp__ endpoint. The csp_report handler in mesop/server/static_file_serving.py processes attacker-controlled JSON fields (such as blocked-uri and document-uri) and prints them directly ...

CVE-2026-84680

A flaw in Red Hat Ansible Automation Platform 's automation-controller allows for cross-tenant credential use . When attaching a Galaxy or Automation Hub credential via the galaxy_credentials relationship endpoint, the controller incorrectly verifies only that the user has read permission rather ...

CVE-2026-96770

The s2s-proxy software is vulnerable in all published versions through 0.2.2 (specifically versions 0.1.16 through 0.2.2 ). The root cause is that TLS server listeners use Go's RequireAnyClientCert mode while skipCAVerification is set to false. This configuration validates that the client possess...

CVE-2026-84692

A flaw in the Red Hat Ansible Automation Platform 's automation-controller allows for cross-organization privilege escalation . The issue exists because the execute-permission check on a workflow job template node's unified job template is skipped if the currently stored template is empty. An aut...

CVE-2026-77602

OpenC3 COSMOS versions 5.1.0 through 7.3.0 are vulnerable to authenticated remote code execution (RCE) . The root cause is that the system processes a user-writable configuration overlay (targets_modified/) before the read-only targets/ tree. Authenticated non-administrator users can use features...

CVE-2026-94181

Affected versions of the Arc browser are susceptible to an address bar spoofing issue. An attacker can spoof the browser address bar by utilizing a element that triggers requestFullscreen without displaying the standard fullscreen notification. Exploitation details are not provided in the docume...

CVE-2026-77394

OpenC3 COSMOS versions 5.0.6 through 7.3.0 are vulnerable to a stored, cross-user XSS via the Telemetry screen BUTTON widget. An authenticated actor with system_set permissions can store a screen via POST /openc3-api/screen containing a button action. The application fails to sanitize this input,...

CVE-2026-84689

A flaw exists in the Red Hat Ansible Automation Platform automation-controller where the bulk job launch endpoint improperly handles the node's job reference. Because the serializer leaves this field writable and omits it from permission validation, an authenticated user with permission to execut...

CVE-2026-84686

A flaw in the Red Hat Ansible Automation Platform 's automation-controller allows an attacker to recover sensitive credentials. Because notification template password fields are encrypted using a key that excludes the subfield name, a user with administrative access to a single notification templ...

CVE-2026-84684

A vulnerability exists in the automation-controller component of Red Hat Ansible Automation Platform (versions 2.4, 2.5, and 2.6). The flaw occurs because the controller only verifies that a requesting user has read permission on a source inventory when attaching it to a constructed inventory via...

CVE-2026-84679

A critical flaw in Red Hat Ansible Automation Platform's automation-controller allows a user with the system administrator role to exploit the AWX_TASK_ENV setting. This setting accepts arbitrary environment variable keys without restriction and applies them directly to the running web and task p...

CVE-2026-84678

A flaw in the automation-controller component of Red Hat Ansible Automation Platform allows a system administrator to achieve code execution within the project synchronization execution environment on the control plane. The root cause is that the GALAXY_TASK_ENV setting fails to validate and excl...

CVE-2026-77601

OpenC3 COSMOS versions 5.12.0 through 7.3.0 are vulnerable to authenticated OS command injection via the pypi_url setting. An attacker can use the set_setting API method (POST /openc3-api/api) to write a malicious URL containing shell metacharacters. When a plugin with Python dependencies is inst...

CVE-2026-96872

The WikiLambda Extension for MediaWiki (versions prior to 1.47.0 ) is vulnerable to an improper handling of insufficient permissions. Specifically, public function execution can bypass unsaved-code permissions through nested Z825 compositions , allowing access to functionality that is not properl...

CVE-2026-84643

A flaw in the Red Hat Ansible Automation Platform automation-controller allows an authenticated user with the organization project administrator role to perform a cross-tenant authorization boundary violation and information disclosure . The vulnerability stems from a missing use_role authorizati...

CVE-2026-84499

A flaw in Red Hat Ansible Automation Platform's automation-controller allows a user with the JobTemplate Admin role to recover encrypted passwords in plaintext. When a schedule or workflow job template node is revalidated against a tightened survey specification, the controller decrypts the store...

CVE-2026-84502

A vulnerability exists in the Red Hat Ansible Automation Platform automation-controller where the Project scm_url field lacks validation against values starting with a dash. Because the module passes this URL as a positional argument to the git ls-remote command without a "--" separator, an attac...

CVE-2026-84644

A flaw in the Red Hat Ansible Automation Platform 's automation-controller allows for server-side request forgery (SSRF) via the Thycotic Secret Server external credential plugin test endpoint. The plugin fails to validate the scheme, host, or IP range of a user-supplied server URL, which is then...

CVE-2026-84638

A flaw exists in the Red Hat Ansible Automation Platform automation-controller where attaching an instance group to a schedule or a workflow job template node via the dedicated API relationship endpoint only verifies if the user can read the group. This allows authenticated users with read-only v...

CVE-2026-61695

The Wire Swift runtime (wire-runtime-swift) is vulnerable to a Denial of Service attack because ProtoReader.skipGroup() fails to reject negative lengths for LENGTH_DELIMITED fields within unknown START_GROUP fields. A crafted 10-byte protobuf payload can cause ReadBuffer.readData(count:) to pass ...

CVE-2026-90903

The Joomla Extension - joomshaper.com 's Easy Store extension (versions 1.0.0-3.0.0 ) contains a vulnerability where the ApiController fails to verify CSRF tokens across most administrator AJAX API endpoints. While the products() action was protected, other endpoints—including orders, coupons, me...

CVE-2026-90901

The Easy Store extension (versions 1.0.0-3.0.0 ) for Joomla by joomshaper.com is vulnerable to an SQL Injection due to the lack of authentication, session validation, or ownership checks on the checkout.searchGuestUser endpoint. An unauthenticated attacker can provide an email address to query th...

CVE-2026-90905

The Easy Store Joomla extension (versions 1.0.0-3.0.0 ) by joomshaper.com is vulnerable to a Cross-Site Request Forgery (CSRF) and a lack of Access Control on the administrator/index.php?option=com_easystore&task=appconfig.updateConfiguration endpoint. The root cause is the failure to verify anti...

CVE-2026-84474

A flaw in Red Hat Ansible Automation Platform 's automation-controller allows for privilege escalation and remote code execution on managed hosts. The vulnerability stems from the exposure of the provisioning-callback secret (host_config_key) to users with only view_jobtemplate permissions. Furth...

CVE-2026-59990

The open-source JSON parser Jawn is vulnerable to a denial of service attack due to uncontrolled nesting depth in JSON arrays and objects. An attacker can submit untrusted JSON to grow parser contexts until the JVM heap is exhausted , triggering a java.lang.OutOfMemoryError that is not handled by...

CVE-2026-82368

Brocade SANnav versions before 3.0.1a are susceptible to insecure access controls on internal service ports. This vulnerability allows local, non-administrative host users to communicate directly with backend management services. A local attacker can exploit this exposed access to transmit comman...

CVE-2026-90902

The Joomla Extension - joomshaper.com - Easy Store (versions 1.0.0-3.0.0 ) is vulnerable to an Authenticated, Privileged SQL Injection within the coupon bulk update task. The flaw exists because input IDs in ProductCoupon.php and CouponsModel.php are directly concatenated into raw SQL IN (...) cl...

CVE-2026-61814

The Jawn open-source JSON parser is vulnerable to a denial of service (DoS) attack via CPU exhaustion in its AsyncParser component. The root cause is that AsyncParser can perform quadratic work (O(n^2)) when a single JSON token is delivered across many small chunks, as each absorb call rescans th...

CVE-2026-90904

The Easy Store extension (versions 1.0.0-3.0.0 ) by joomshaper.com contains a Broken Access Control vulnerability. The allowEdit() method in ApiController.php hardcodes a return true; statement, which bypasses Joomla's component-level and asset-level ACL permission checks . This allows any authen...

CVE-2026-90899

The Easy Store extension (versions 1.0.0-3.0.0 ) for Joomla by joomshaper.com contains an Insecure Direct Object Reference (IDOR) vulnerability. The checkout.searchGuestUser endpoint allows unauthenticated attackers to query guest checkout records using only an email address. Because the server l...

CVE-2026-84486

A flaw in Red Hat Ansible Automation Platform's automation-controller allows unauthenticated remote attackers to trigger internal task, dependency, and workflow schedulers. Because four debug views are incorrectly routed in production builds without a debug setting gate, an attacker can repeatedl...

CVE-2026-76087

The Formie Craft CMS plugin (prior to versions 2.2.23 and 3.1.31 ) contains an authorization bypass in the anonymous formie/submissions/submit action (SubmissionsController::actionSubmit). The component fails to perform session binding, ownership validation, or submissionEditToken verification wh...

CVE-2026-84475

The automation-controller component is affected by a vulnerability in InventorySource.source_vars due to a missing prevent_search parameter. This oversight enables zero-privilege cross-tenant extraction of inline inventory-plugin credentials. The vulnerability is triggered via the credential_type...

CVE-2026-90900

The Easy Store extension (versions 1.0.0-3.0.0 ) by joomshaper.com for Joomla is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a missing CSRF token verification on the product review submission endpoint (index.php?option=com_easystore&task=product.addReview), where t...

CVE-2026-76086

The Formie Craft CMS plugin (versions prior to 2.2.23 and 3.1.31 ) contains a vulnerability where the formie/integrations/form-settings control panel action lacks proper permission checks. An authenticated attacker, including low-privileged or front-end users, can reach the IntegrationsController...

CVE-2026-96548

A flaw in sfturing hosp_order (up to commit 627f426331da8086ce8fff2017d65b1ddef384f8) involves an issue within the ssm_pro/src/main/resources/jdbc.properties file. This manipulation results in hard-coded credentials that can be accessed via a remote attack vector. While the attack complexity is r...

CVE-2026-96546

A one-byte out-of-bounds heap read flaw exists in the GIMP uncompressed DDS image loader . When a user opens an uncompressed DDS image, the file-dds plug-in performs an unconditional one-byte look-ahead after processing the final pixel. This vulnerability may cause the plug-in to crash if the byt...

CVE-2026-71465

The automation-controller component within the Red Hat Ansible Automation Platform is vulnerable to command-line argument injection via the ad-hoc command limit field. The root cause is that RunAdHocCommand.build_args() appends the limit as a bare positional argument instead of using args.extend(...

CVE-2026-71464

The Red Hat Ansible Automation Platform (specifically the automation-controller ) contains a vulnerability in the LaunchConfigurationBaseSerializer.scm_branch component. The root cause is a missing validate_scm_branch() leading-dash check, which allows Schedule and WFJT Node to accept malicious i...

CVE-2026-71463

The Red Hat Ansible Automation Platform (specifically the automation-controller component) is vulnerable to stack trace disclosure due to a Jinja AST whitelist bypass . The whitelist only inspects static Getattr nodes, allowing dynamic subscripts (e.g., job['job'+'_env']) and conditional gating (...

CVE-2026-96545

An out-of-bounds heap read flaw exists in GIMP's TIM image loader . The issue occurs when a user opens a crafted 4bpp TIM image that triggers promotion to an RGBA layer ; the file-tim plug-in allocates an undersized row buffer but processes it using the larger RGBA row size. This can result in co...

CVE-2026-76089

The Formie Craft CMS plugin (versions prior to 2.2.23 and 3.1.31 ) contains a missing authorization vulnerability in the SentNotificationsController::actionGetResendModalContent control panel action. The application fails to perform object-level authorization checks when loading a SentNotificatio...

CVE-2026-82356

Imprivata Enterprise Access Management (EAM) versions 26.2.6 and below lack a supported mechanism to rotate the RSA key pair used to generate the appliance's X.509 certificate . Because the key pair remains static indefinitely, a compromise of the private key—via backup exfiltration, hypervisor s...

CVE-2026-71462

The automation-controller component in Red Hat Ansible Automation Platform (versions 2.5, 2.6, and 2.7) is vulnerable to a filesystem path-existence oracle. The root cause is that StringListPathField.to_internal_value() calls os.path.exists() on unbounded user-supplied paths via the CUSTOM_VENV_P...

CVE-2026-71461

The Red Hat Ansible Automation Platform 2.7 Container Release is affected by CVE-2026-71461, which involves a verbose internal exception disclosure in the HostList.list() function. The component catches a bare Exception and returns the error string verbatim. An authenticated user can trigger a Dj...

CVE-2026-71460

The Red Hat Ansible Automation Platform (specifically the automation-controller component) is vulnerable to unrestricted subscription and license information disclosure. The /api/v2/config/ endpoint is insufficiently protected by only requiring IsAuthenticated status. Consequently, any authentica...

CVE-2026-76648

The Red Hat Ansible Automation Platform 2.7 (and its automation-controller) is vulnerable to a missing authorization check in the CopyAPIView component (located at awx/awx/api/generics.py:873). While the get() handler performs explicit read permission checks, the post() handler (lines 1001–1010) ...

CVE-2026-92692

The Sulu PHP content management system (affected versions 2.6 and 3.0 prior to 2.6.25 and 3.0.8 ) is vulnerable to an unauthenticated JCR-SQL2 injection . The flaw exists in the Smart Content QueryBuilder at src/Sulu/Component/Content/SmartContent/QueryBuilder.php because category identifiers fro...