415602 matches found
CVE-2026-110208
Wukong AICRM through 20260610 contains a missing authorization vulnerability in the /systemConfig controller that allows any authenticated user to read the stored AI provider API key. Attackers can request GET /systemConfig/byType/ai for the cleartext key, or send a chosen apiUrl to...
CVE-2026-110205
Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine that discards command substitutions placed next to or ? glob characters. Attackers using indirect prompt injection can craft commands like echo $... that match allowlisted prefixes, executing denied...
CVE-2026-110210
Phase Console through 2.77.3 contains a missing authorization vulnerability that allows organisation members without Secrets read permission to read secret history via the secretHistory GraphQL query. Attackers holding an environment key can supply a known secret identifier to retrieve encrypted...
CVE-2026-110112
Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate th...
CVE-2026-110130
Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path ending in a static-asset extension such as .js, including /api/ routes, and the user-mutation handlers fail open for unauthenticated callers. Unauthenticated remote attackers c...
CVE-2026-110203
Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied shell commands by abusing quote-masking regex in parseCommandLine. Attackers can use indirect prompt injection with escaped or single-quoted double quotes to hide command separato...
CVE-2026-110202
Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision that allows attackers to auto-approve denied shell commands by prefixing them with a bare & redirect. Attackers using indirect prompt injection can make the allowlist match a redirect target like echo...
CVE-2026-110204
Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine treats $ command; substitutions as parameter expansions. Attackers using indirect prompt injection can embed denied commands inside an allowlisted...
CVE-2026-110111
Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the unprotected vm.importFromEsxi and vm.importMultipleFromEsxi methods. Attackers can point xo-server at a malicious ESXi host serving a craft...
CVE-2026-110036
A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service DoS by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application...
CVE-2026-109429
Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command substitution inside a single-quoted variable value that tree-sitter-bash static parsing cannot detect. Attackers can craft input such as...
CVE-2026-109428
Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and bash in handling backslash-newline line continuations in the extractcommands function of bash.py...
CVE-2026-109453
Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-108471
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-108468
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-108465
Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally...
CVE-2026-108466
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network...
CVE-2026-108467
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network...
CVE-2026-108462
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...
CVE-2026-108464
Use after free in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...
CVE-2026-108463
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-108400
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...
CVE-2026-108399
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2026-108460
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-108461
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-108457
Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...
CVE-2026-108458
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-108398
Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally...
CVE-2026-108136
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-108396
Time-of-check time-of-use toctou race condition in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-108134
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...
CVE-2026-108133
Release of invalid pointer or reference in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-108130
Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-108131
No cwe for this issue in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-108132
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-108135
Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-107607
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication...
CVE-2026-108128
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-108129
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-108127
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-107606
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication...
CVE-2026-105731
Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally...
CVE-2026-105729
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
CVE-2026-106625
Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-105733
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally...
CVE-2026-107605
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication...
CVE-2026-105732
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...
CVE-2026-105728
Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network...