CVE-2026-100081 xen-netback: defer xenvif_mcast_addr_list_free()

In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvifmcastaddrlistfree In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvifstartxmit, while adds/removes happ...

CVE-2026-100082 xen-blkback: Avoid UAF when reading I/O statistics

In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading of the statistics data is not...

CVE-2026-100080 xen-netback: Fix UAF when reading statistics data

In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix UAF when reading statistics data The network statistic data in the driver is protected by RCU. Unfortunately when tearing down the queues after an error during connecting to the frontend e.g. due to illegal...

CVE-2026-71495 Wanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network Access

Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.20.0, when PUBLICPRIVATEINSTANCE is not set to true, the unauthenticated POST /api/v1/trail/download handler passes the attacker-controlled JSON url field directly to event.fetch and returns the fetched respons...

CVE-2026-62346 Wanderer: Stored XSS via waypoint.name and waypoint.icon in Elevation Profile innerHTML

Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated local user can submit crafted waypoint.name and waypoint.icon values that the trail elevation graph interpolates into an innerHTML template in...

CVE-2026-62345 Stored XSS via Unsanitized waypoint.icon in Map Marker (insertAdjacentHTML)

Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated user can store a crafted waypoint.icon value that createMarkerFromWaypoint passes into FontawesomeMarker, where insertAdjacentHTML inserts the unvalidated value into map marker markup...

CVE-2026-123976 EDFbrowser before 2.16 Out-of-Bounds Write via check_edf_file() Annotation Signals

EDFbrowser before 2.16 contains an out-of-bounds write vulnerability in checkedffile that allows attackers to overflow the 256-element annotch array by supplying excessive annotation signals. Attackers can craft an EDF+ or BDF+ file with more than 256 annotation signals to overwrite edfhdrblock...

CVE-2026-62344 Wanderer: Unauthenticated Access to Private Trails and Comments via ActivityPub Endpoints

Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, the unauthenticated GET /activitypub/trail/id and GET /activitypub/comment/id endpoints call ActivitypubTrail and ActivitypubComment to return full trail and comment records without applying the PocketBas...

CVE-2026-75598 Gradle Shadow: Zip Slip path traversal in ShadowCopyAction — no independent entry-name sanitization

The Gradle Shadow plugin creates fat or uber JARs and supports file transformation and package relocation. Prior to version 9.6.0, Shadow does not independently validate ZIP entry names before writing them to its output archive. A malicious dependency can cause traversal entry names to be preserv...

CVE-2026-119758 ERPNext OCR 1.1.1 Path Traversal and SSRF via read_document

ERPNext OCR app for Frappe/ERPNext through 1.1.1 contains a missing authorization and path traversal vulnerability that allows any authenticated user to read arbitrary server files by passing a fully client-controlled path argument to the whitelisted readdocument method. Attackers can supply loca...

CVE-2026-102650 Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API

Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components. From 3.0.0 until 3.15.2, the unauthenticated POST /nuxtcontent/:collection/query endpoint accepts an attacker-controlled sql field in src/runtime/api/query.post.ts and permits expensive SQLite...

CVE-2026-102356 Kroki Mermaid companion SSRF via flowchart image URLs

Kroki creates diagrams from textual descriptions. From 0.26.0 until 0.31.2, the optional Mermaid companion's mermaid/src/worker.js renders attacker-controlled flowchart image nodes in headless Chromium without a network request policy, even when KROKISAFEMODE is set to secure. An actor who can...

CVE-2026-102359 Kroki: TikZ Secure Mode Local File Read via LaTeX File I/O Primitives

Kroki creates diagrams from textual descriptions. Prior to 0.31.2, the TikZ backend's tikz/tikz2svg guard used when KROKISAFEMODE is enabled blocks only \verbatiminput while allowing native TeX file-read primitives including \openin, \read, \input, and \include. TeX Live's permissive openinany...

CVE-2026-118670 OHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of document

OHIF Viewers is a zero-footprint DICOM viewer with shared extension packages. From 3.5.0-beta.0 until 3.12.15, 3.13.7, and 3.14.0-beta.19, the dicom-pdf extension reads the attacker-controlled MIMETypeOfEncapsulatedDocument value in extensions/dicom-pdf/src/getSopClassHandlerModule.js and uses it...

CVE-2026-123824 Symfony: XXE (Local File Read) in Config XmlUtils::parse() via validateOnParse = true

The Symfony Config component XmlUtils::parse enables DTD validation before rejecting documents that carry a doctype, allowing XML external entity XXE injection in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to 7.4.23, and 8.x prior to 8.1.11. A remote attacker who can supply...

CVE-2026-85742 FreeScout: Conditional stored admin XSS via failed-job details

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.230, a pre-authenticated attacker can place HTML in a failed-login email value that is copied through monitored user activity into a queued SendAlert job. If alert delivery fails, the serialized payload is stored in failedjobs...

CVE-2026-123748 chenyme grok2api WebSocket Proxy voice_ws_handler.go proxyVoiceWebSocket resource consumption

A security flaw has been discovered in chenyme grok2api up to 3.1.6. Affected by this vulnerability is the function proxyVoiceWebSocket of the file backend/internal/transport/http/inference/voicewshandler.go of the component WebSocket Proxy. The manipulation results in resource consumption. The...

CVE-2026-103985 FreeScout: a restricted agent can lift their own admin-imposed "see only assigned conversations" restriction via profile save

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.231, the profile form exposes the onlyassignedtickets permission to its non-admin owner, and UsersController::profileSave adds or removes User::PERMONLYASSIGNEDTICKETS without checking that the editor is an administrator. A...

CVE-2026-103984 FreeScout: Incomplete fix for CVE-2026-40570: load_customer_info exposes cross-visibility customer PII

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.231, when limitusercustomervisibility is enabled, the loadcustomerinfo AJAX action performs a global lookup using an attacker-controlled customer email and checks only whether the agent can access a separately supplied mailbox....

CVE-2026-85743 FreeScout: Server-side request forgery via incomplete outbound host validation and unguarded download sinks

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.230, multiple outbound paths in Helper::downloadRemoteFile, Helper::checkPort, Helper::sanitizeRemoteUrl, MailboxesController.php, and ModulesController.php do not consistently enforce a sink-level restricted-host policy. An...

CVE-2026-85744 FreeScout: Conversation Merge Cross-Mailbox Authorization Bypass

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.227, the conversationmerge action records a failed authorization check for the target conversation in response'msg' and then clears that value inside the source-conversation loop. An authenticated agent can merge a conversation...

CVE-2026-62850 FreeScout: Administrative tools.php endpoint is accessible to low-privileged users, enabling filesystem enumeration and unthrottled brute-force of application secrets

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.225, the administrative tools.php maintenance endpoint is reachable without an appropriate authentication or access-control boundary. Response differences for attacker-controlled path values disclose whether arbitrary directori...

CVE-2026-62852 FreeScout: Missing Authorization and Exposure of Sensitive Information to an Unauthorized Actor and Authorization Bypass Through User-Controlled Key

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.226, RealtimeConvNewThread checks only general mailbox access and does not apply the conversation-level restriction for users configured to see only assigned conversations. A restricted authenticated user can subscribe to...

CVE-2026-62855 FreeScout: Path Traversal in App Logs Viewer Exposes Arbitrary Local Files

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.225, the administrator-only App Logs viewer accepts Laravel-encrypted folder and file parameters whose constructed path is checked only as a raw string. An administrator who also knows the APPKEY can supply traversal segments...

CVE-2026-62851 FreeScout: Cross-mailbox conversation existence / internal-id disclosure via the search-by-number (`#`) shortcut (missing mailbox authorization)

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.226, the search-by-number shortcut in ConversationsController::search resolves a user-controlled ticket number without applying the mailbox filter or view policy used by the normal search path. An authenticated non-admin agent...

CVE-2026-62856 FreeScout: Cross-User Notification Data Disclosure via LIKE Wildcard Injection in Polycast Channel Query

FreeScout is a self-hosted help desk and shared mailbox application. Prior to version 1.8.226, the polycast/receive endpoint fails to escape SQL LIKE wildcards in supplied channel names, while channel authorization applies only to names with specific prefixes. An unauthenticated attacker with a...

CVE-2026-62854 FreeScout: Stored XSS in mailbox signature via same-origin JS upload

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.225, a user who can edit a mailbox signature can combine a scriptable file uploaded through /uploads/upload with nested tag fragments that bypass Helper::stripDangerousTags. The resulting external script is served from the same...

CVE-2026-122053 Symfony: ObjectNormalizer Dotted-Key Property-Path Traversal Bypasses #[Ignore] on Nested Objects

The Symfony Serializer component ObjectNormalizer treats any attribute name containing . and, from Symfony 6.4, as a writable property path, allowing untrusted input to modify properties of nested objects and bypass their Ignore metadata attribute in Symfony versions 5.4.41 prior to 5.4.56, 6.4.9...

CVE-2026-118515 Symfony: The Serializer Builds UploadedFile Objects From Request Data, Letting a Client Point an Upload at Any Server File

The Symfony Serializer component DataUriNormalizer handles only the exact types SplFileInfo, SplFileObject, and File, so for a property typed with a subclass such as UploadedFile, ObjectNormalizer instantiates the object through its constructor from attacker-controlled data, including the file...

CVE-2026-123859 SQL Injection via unescaped DataFrame column names in Snowflake Connector for Python and Snowflake Connector for Python (Universal Core)

When identifier escaping is disabled through a non-default configuration, the writepandas data-loading functionality in the Snowflake Connector for Python and the Snowflake Connector for Python Universal Core did not escape DataFrame column names before including them in generated SQL, which coul...

CVE-2026-49951 RAGFlow < 0.27.0 SSRF via set_api_key base_url Parameter

RAGFlow before 0.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to force the server to issue requests to arbitrary internal or external endpoints by supplying an unvalidated baseurl to the POST /v1/llm/setapikey endpoint handled by setapikey in...

CVE-2026-121623 Symfony: DataUriNormalizer Opens Data URIs With a Non-Lowercase Scheme as Local Files, Letting a Client Read Any Server File

The Symfony Serializer component DataUriNormalizer::denormalize matches the data: scheme with a case-sensitive regular expression, allowing a value with an uppercase scheme, such as DATA:,/../../../etc/passwd, to bypass it, resulting in Arbitrary Local File Read through Path Traversal in Symfony...

CVE-2026-58141 Dify < 1.15.0 SSRF Protection Bypass via Remote-Files Endpoints

Dify before 1.15.0 contains a server-side request forgery vulnerability that allows any authenticated console user to bypass SSRF protections and issue arbitrary HTTP requests to internal services and cloud metadata endpoints due to the Squid proxy configuration only defining source ACLs without...

CVE-2026-123677 xxyopen/201206030 novel Book Chapter Read BookServiceImpl.java getBookChapter authorization

A vulnerability was found in xxyopen/201206030 novel up to 3.5.0. Affected is the function getBookChapter of the file src/main/java/io/github/xxyopen/novel/service/impl/BookServiceImpl.java of the component Book Chapter Read Handler. Performing a manipulation of the argument chapterId results in...

CVE-2026-90436 Apache Axis 1.x (EOL): unauthenticated remote class instantiation via SOAP fault exceptionName

UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a element, Axis loads the named class and, if a String element is also present, instantiates it through its String constructor before checki...

CVE-2026-123676 xxyopen/201206030 novel Book Content Service BookServiceImpl.java BookServiceImpl.getBookContentAbout improper authorization

A vulnerability has been found in xxyopen/201206030 novel up to 3.5.0. This impacts the function BookServiceImpl.getBookContentAbout of the file src/main/java/io/github/xxyopen/novel/service/impl/BookServiceImpl.java of the component Book Content Service. Such manipulation of the argument chapter...

CVE-2026-123792 Symfony: Exponential and Quadratic Parse Times in the YAML Parser Let a Single Document Hold a Process

The Symfony Yaml components Inline and Parser, parse some YAML documents inefficiently, so that a small crafted document can take disproportionately long to process, keeping a PHP process busy for seconds or minutes, potentially causing a denial of service in Symfony versions prior to 5.4.56, 6.x...

CVE-2026-123623 Grida through 0.0.24 Missing Authorization in Forms File-Preview API

Grida through 0.0.24 contains a missing authorization vulnerability in the Forms file-preview API routes that allows unauthenticated attackers to read other organizations' form response files. Attackers can use form and field IDs exposed in public form payloads with a chosen path parameter to...

CVE-2026-123675 OpenBMB Internet of Agents Code Executor Tool code_executor.py execute_code code injection

A flaw has been found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function executecode of the file imclient/agents/tools/codeexecutor.py of the component Code Executor Tool. This manipulation of the argument filename/lang causes code injection. T...

CVE-2026-123786 Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret Token

Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorization token to read provider secrets fr...

CVE-2026-123785 Fluxbox through 1.3.7 Infinite Loop via Menu::updateMenu() Style Geometry

Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu in src/FbTk/Menu.cc that allows attackers to hang the window manager via crafted style geometry values. Attackers can supply a style with an oversized unbounded menu.titleHeight so the column loop never terminates,...

CVE-2026-123784 Fluxbox through 1.3.7 OS Command Injection via Style Background Values

Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootTheme::reconfigTheme that allows attackers to execute commands via crafted style background values. Attackers can embed shell metacharacters in background pixmap paths, random directories, or gradient texture text, which...

CVE-2026-123782 ChatWiki before 2.10.0 Cross-Tenant IDOR via SaveFormField and UpdateFormRequired

ChatWiki before 2.10.0 contains an insecure direct object reference vulnerability in SaveFormField and UpdateFormRequired that allows authenticated users to modify other tenants' form fields. Attackers can pass their own formid to satisfy the ownership check alongside another tenant's sequential...

CVE-2026-123783 Skyvern through 1.0.56 Script Sandbox Bypass via types.CodeType Bytecode

Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode with types.CodeType. Attackers can deploy scripts that evade the issafescriptcode AST denylist and import blocked modules such as subprocess...

CVE-2026-123624 ChatWiki before 2.10.0 Cross-Tenant Fast Command Modification via saveFastCommand

ChatWiki before 2.10.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify other tenants' fast commands by supplying arbitrary sequential ids to POST /manage/saveFastCommand. Attackers can overwrite another tenant's command title, type, content and...

CVE-2026-123622 Usermin through 2.570 XSS via mailbox detach.cgi type Parameter

Usermin through 2.570 contains a cross-site scripting vulnerability in mailbox/detach.cgi that allows remote attackers to execute script by supplying an arbitrary type parameter that bypasses JavaScript filtering. Attackers can email an HTML attachment containing script and lure recipients to a...

CVE-2026-123621 Usermin through 2.570 Path Traversal File Write via detachall.cgi

Usermin through 2.570 contains a path traversal vulnerability in mailbox/detachall.cgi that allows remote unauthenticated attackers to write files outside the temporary directory via unsanitized attachment filenames. Attackers can email attachments with ../ sequences in filenames, and when the...

CVE-2026-123620 Usermin through 2.570 OS Command Injection via Read Mail IMAP Folder Deletion

Usermin through 2.570 contains an OS command injection vulnerability in the Read Mail module that allows authenticated users to execute commands through unsanitized IMAP folder names. Attackers can create a folder containing shell metacharacters via an external IMAP client, then delete it in...

CVE-2026-123619 Lektor through 3.3.14 and 3.4.0b15 Path Traversal via Admin API Drive-Letter Paths

Lektor through 3.3.14 and 3.4.0b15 contains an absolute path traversal vulnerability in the admin API on Windows that allows attackers to escape the project directory by supplying drive-letter paths that cleanuppath does not normalise. Attackers can use a malicious web page with cross-site reques...

CVE-2026-123618 ABP Framework before 10.7.1 Authentication Bypass via External Login Provider

ABP Framework before 10.7.1 contains an authentication bypass vulnerability that skips account state and two-factor checks when password login succeeds through a registered IExternalLoginProvider. Attackers holding the external directory password for deactivated, locked, or 2FA-protected accounts...