CVE-2026-123787 nexmoe VidBee Local HTTP Service local-api.ts information disclosure

A weakness has been identified in nexmoe VidBee up to 1.3.13/2.0.2. The affected element is an unknown function of the file apps/desktop/src/main/local-api.ts of the component Local HTTP Service. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. The...

CVE-2026-71863 SecureDrop: Onion Service client auth credentials copied to Monitor Server

SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from, and communicate with anonymous sources. From 2.13.0 until 2.16.1, running the securedrop-admin install Ansible playbook with journalist alerts disabled leaves the...

CVE-2026-102610 fast-agent: `fast-agent serve` binds HTTP to 0.0.0.0 with no authentication by default; with --shell this is unauthenticated remote command execution

fast-agent is a framework for building, running, and evaluating AI agents with Model Context Protocol support. Prior to 0.7.21, fast-agent serve uses HTTP transport bound to 0.0.0.0 on port 8000 without authentication, allowing any network client that can reach the /mcp endpoint to invoke the...

CVE-2026-124078 plist.js before 5.0.1 Uncontrolled Resource Consumption via Binary Parser

plist.js npm package 'plist' before 5.0.1 contains an uncontrolled resource consumption vulnerability in the binary property-list parser parseBinary that allows unauthenticated attackers to crash a Node.js process by exploiting unmemoized recursive resolution of shared object references for array...

CVE-2026-102657 esm.sh: web.NewHandler allows arbitrary file read via encoded dot-segment path traversal

esm.sh is a no-build content delivery network CDN for web development. Prior to server version 1377, the documented web.NewHandler static file server in web/handler.go joins the URL-decoded r.URL.Path with Config.AppDir without verifying that the result remains inside the configured application...

CVE-2026-102344 Lavish: DNS rebinding allows any website to read arbitrary local files and inject prompts into the AI agent via the unauthenticated local server

Lavish is the new editor for your HTML artifacts. Prior to 0.1.43, the lavish-axi loopback HTTP server did not authenticate requests or validate Host and Origin values on session, artifact, prompt, and polling routes. A website visited while the server is running can use DNS rebinding to send...

CVE-2026-102530 JupyterLab Desktop: Cross-Site Scripting (XSS) leading to Remote Code Execution on Connect URL

JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, remote-server URLs were inserted into the server-selection dialog and Welcome view without safe encoding. An attacker who convinces a user to submit a crafted URL can execute JavaScript in the Welcome...

CVE-2025-55002 JupyterLab Desktop: TCC Bypass via Misconfigured Node Fuses

JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop for macOS shipped with Electron's RunAsNode fuse enabled, allowing ELECTRONRUNASNODE to execute arbitrary Node.js code in the application process. An attacker who can already execute...

CVE-2026-86044 JupyterLab Desktop: One-Click Jupyter Server Token Leak leading to Remote Code Execution

JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop exposed getServerInfo to the renderer without confirming that the current page still had the local Jupyter server origin. In a local managed session using JupyterLab before 4.4.8, an...

CVE-2025-54991 JupyterLab Desktop: TCC Bypass via Insecure Entitlements (macOS)

JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop for macOS declared the com.apple.security.cs.allow-dyld-environment-variables entitlement, allowing the dynamic linker to honor DYLDINSERTLIBRARIES despite the hardened runtime. An...

CVE-2026-85737 Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin

Velociraptor is a tool for collecting host-based state information using Velociraptor Query Language VQL queries. Prior to 0.77.2, SQLPlugin.Call in vql/parsers/sql/sql.go does not enforce plugin-level FILESYSTEMREAD or NETWORK checks before the mysql and postgres branches pass a caller-controlle...

CVE-2026-63439 2FAuth: Reverse Proxy Guard Trusts Client-Supplied Headers Without Proxy Verification

2FAuth is a web app to manage Two-Factor Authentication 2FA accounts and generate their security codes. Prior to 8.0.0, when AUTHENTICATIONGUARD=reverse-proxy-guard is enabled, ReverseProxyGuard::user reads the default REMOTEUSER identity header, or a custom identity header selected by the...

CVE-2026-63438 2FAuth: Reverse Proxy Guard Auto-Creates Users With Admin Promotion From Unauthenticated Header Value

2FAuth is a web app to manage Two-Factor Authentication 2FA accounts and generate their security codes. Prior to 8.0.0, when AUTHENTICATIONGUARD=reverse-proxy-guard accepts authentication headers from a client that did not pass through a trusted proxy, RemoteUserProvider::retrieveById creates an...

CVE-2026-63440 2FAuth: Authenticated SSRF via DNS rebinding in the otpauth image= icon fetch (validate-then-fetch TOCTOU)

2FAuth is a web app to manage Two-Factor Authentication 2FA accounts and generate their security codes. Prior to 8.0.0, the otpauth image-fetch path validates a hostname through ValidatesUrls::isExternalHost and then lets IconService::storeRemoteImage resolve the same hostname again for the HTTP...

CVE-2026-63441 2FAuth: SSRF guard misses IPv6 NAT64 prefixes, allowing image fetch to reach internal/metadata targets

2FAuth is a web app to manage Two-Factor Authentication 2FA accounts and generate their security codes. From 6.1.0 until 8.0.0, App\Services\Traits\ValidatesUrls::isPublicIp does not recognize the 64:ff9b::/96 and 64:ff9b:1::/48 NAT64 prefixes, so an otpauth URI image parameter can pass an IPv6...

CVE-2026-63437 2FAuth: Missing Authorization on Share Recipients Endpoint Allows Cross-User Account Enumeration

2FAuth is a web app to manage Two-Factor Authentication 2FA accounts and generate their security codes. Prior to 8.0.0, the recipients method in app/Api/v1/Controllers/TwoFAccountShareController.php receives a caller-selected TwoFAccount through Laravel model binding but does not call the...

CVE-2026-59171 JSON-java: JSONTokener Unbounded Numeric String Resource-Exhaustion DoS

JSON-java is a reference implementation of a JSON package in Java. From version 20150729 through 20260522, JSONTokener.nextSimpleValue can accumulate unbounded numeric tokens before JSONObject.stringToNumber passes them to BigInteger or BigDecimal conversion without a length limit. An application...

CVE-2026-65960 Tetragon: Unauthenticated Tetragon gRPC admin API accessible from hostNetwork pods

Tetragon is an eBPF-based security observability and runtime enforcement project. Versions before 1.7.0 can use a Helm default that exposes the privileged Tetragon gRPC API through an unauthenticated TCP listener on localhost:54321. An attacker who can run or compromise same-node hostNetwork pods...

CVE-2026-58490 Tracecat: Unsigned SAML response accepted in Docker Compose SAML deployments due to empty signing defaults

Tracecat is an open-source security automation platform for teams and AI agents. From version 0.37.0 until 1.0.0-beta.49, Docker Compose deployments with SAML enabled can render SAMLSIGNEDASSERTIONS and SAMLSIGNEDRESPONSES as empty values, overriding secure application defaults and disabling both...

CVE-2026-63663 CloudBeaver: Path Traversal in updateResultsDataBatch Allows Unauthorized Server File Stream Access

CloudBeaver is a cloud database manager. From version 23.2.3 until 26.1.2, a path traversal vulnerability in its SQL result-editing functionality allows an authenticated user with SQL result-editing privileges to cause the server to open files outside the intended temporary upload directory. In...

CVE-2026-63664 CloudBeaver: Authorization Bypass (BFLA) - Data Export Restriction Bypass

CloudBeaver is a cloud database manager. In versions up to and including 26.1.1, some server-side export operations do not consistently enforce the global data export restriction. An authenticated non-administrative user with access to a shared database connection can initiate certain server-side...

CVE-2026-55449 CloudBeaver: Path Traversal in Resource Manager getProjectPath allows directory enumeration outside shared-projects sandbox

CloudBeaver is a cloud database manager. Prior to 26.1.2, its resource-management project resolution accepts project identifiers without validating that they are safe path components. An authenticated user with resource-management privileges can supply a crafted project identifier that causes pat...

CVE-2026-73860 CRIU: Parasite hijack triggered by snapshot of malicious software

CRIU is a checkpoint and restore tool for Linux. Prior to 4.2.1, CRIU injects a syscall;int3 sequence at the start of the first executable virtual memory area and resumes the target process to execute parasite code. Malicious code in the target process can keep an rseq critical section armed over...

CVE-2026-55649 GeoNode has Stored XSS in Documents metadata abstract field

GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.0.3, document abstract metadata is stored without sanitization, allowing a low-privileged remote user to persist arbitrary HTML and JavaScript that executes in another...

CVE-2026-46429 GeoNode: Unrestricted File Upload

GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.0.3, specially crafted requests can circumvent GeoNode upload service validation, allowing a low-privileged remote user to store and serve malicious files. This issue is...

CVE-2026-33050 GeoNode: OS command injection via uploaded file layer name

GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.1.0, a crafted vector file layer name supplied during upload allows a low-privileged remote user to inject shell syntax and execute arbitrary operating-system commands o...

CVE-2026-124040 CivetWeb through 1.16 HTTP/2 Use-After-Free via Stale Pseudo-Header State

CivetWeb through 1.16, when built with USEHTTP2 and enablehttp2 on, contains a use-after-free vulnerability in handlehttp2 that retains freed :method and :path pointers. Unauthenticated remote attackers can send a later HEADERS frame omitting these pseudo-headers to influence request method or pa...

CVE-2026-124039 Gitleaks through 8.30.1 World-Readable Report Files via --report-path

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can...

CVE-2026-124031 GPAC through 26.07.0 Type Confusion via drawable_get_aspect_2d_mpeg4

GPAC through 26.07.0 contains a type confusion vulnerability in drawablegetaspect2dmpeg4 and TraverseShape that casts a Shape's appearance node to MAppearance without checking its node tag. Attackers can supply a crafted XMT file placing another node type, such as Conditional, in the appearance...

CVE-2026-124030 GPAC through 26.07.0 Type Confusion via gf_sg_command_apply XMT Field-Replace

GPAC through 26.07.0 contains a type confusion vulnerability in gfsgcommandapply in src/scenegraph/commands.c that fails to verify BIFS field-replace command types match target node fields. Attackers can supply a crafted XMT file opened with MP4Box, such as via chapter import, causing...

CVE-2026-124029 Kopia through 0.23.1 Path Traversal in Snapshot Restore via Directory Entry Names

Kopia through 0.23.1 contains a path traversal vulnerability in copyDirectoryContent that allows users with repository write access to escape the restore directory via crafted entry names. Attackers can create snapshots whose directory manifest entries are named '..', so victims restoring with...

CVE-2026-124028 mistral.rs before 0.9.5 Tool Call Injection via mistralrs-core Output Parsers

mistral.rs before 0.9.5 contains a delimiter injection vulnerability in mistralrs-core that allows attackers to inject tool calls by placing delimiter strings in text the model quotes. Attackers controlling documents, web pages or tool outputs can embed tags like to make qwen-xml, gemma4 or...

CVE-2026-124026 Bar Assistant 6.0.0-rc1 before 6.11.0 Incorrect Authorization via Cocktail Copy

Bar Assistant 6.0.0-rc1 before 6.11.0 contains an incorrect authorization vulnerability in CocktailController::copy that allows registered users to bypass source cocktail membership checks. Attackers owning a bar can POST to /api/cocktails/id/copy with other bars' cocktail ids to copy private...

CVE-2026-124027 ChatWiki before 2.10.0 Unauthenticated Document Disclosure via getLibRawFileOnePage

ChatWiki before 2.10.0 contains a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage route that allows unauthenticated attackers to read other tenants' documents. Attackers can enumerate sequential adminuserid and file id query parameters, bypassing the ownership check, ...

CVE-2026-124025 Faveo Helpdesk through 2.0.3 Cross-Department Ticket Disclosure via /ticket/print

Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability in TicketController::ticketprint and the pdfThread endpoint that fails to verify ticket department or assignment. Authenticated agents can request arbitrary ticket ids via GET /ticket/print/id to render PDFs of other...

CVE-2026-119924 Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser

An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote authenticated users to read adjacent process memory or cause a denial of...

CVE-2026-123357 GROBID is vulnerable to OS command injection through crafted PDF filenames

GROBID is machine learning software for extracting information from scholarly documents. Prior to 0.9.1, the Linux non-server PDF conversion path in grobid-core/src/main/java/org/grobid/core/document/DocumentSource.java passes an attacker-influenced PDF filename through DocumentSource.pdfalto,...

CVE-2026-119923 Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser

A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote attackers to execute arbitrary OS commands as the database process user via a...

CVE-2026-123356 GROBID: Unauthenticated `/api/modelTraining` Endpoint Allows Unbounded Thread Pool Creation (DoS)

GROBID is machine learning software for extracting information from scholarly documents. Prior to 0.9.1, the unauthenticated /api/modelTraining endpoint calls GrobidRestProcessTraining.trainModel in GrobidRestProcessTraining.java, where each request creates Executors.newFixedThreadPool1, submits ...

CVE-2026-108262 DDEV incomplete tar symlink traversal fix allows host file overwrite - Incomplete fix of CVE-2026-32885

DDEV is an open-source tool for running local web development environments for PHP and Node.js. From 1.25.2 until 1.25.4, Untar in pkg/archive/archive.go validates an absolute tar symlink target after rebasing it beneath dest, but creates the symlink with the raw absolute Linkname. A crafted...

CVE-2026-100081 xen-netback: defer xenvif_mcast_addr_list_free()

In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvifmcastaddrlistfree In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvifstartxmit, while adds/removes happ...

CVE-2026-100082 xen-blkback: Avoid UAF when reading I/O statistics

In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading of the statistics data is not...

CVE-2026-100080 xen-netback: Fix UAF when reading statistics data

In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix UAF when reading statistics data The network statistic data in the driver is protected by RCU. Unfortunately when tearing down the queues after an error during connecting to the frontend e.g. due to illegal...

CVE-2026-71495 Wanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network Access

Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.20.0, when PUBLICPRIVATEINSTANCE is not set to true, the unauthenticated POST /api/v1/trail/download handler passes the attacker-controlled JSON url field directly to event.fetch and returns the fetched respons...

CVE-2026-62346 Wanderer: Stored XSS via waypoint.name and waypoint.icon in Elevation Profile innerHTML

Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated local user can submit crafted waypoint.name and waypoint.icon values that the trail elevation graph interpolates into an innerHTML template in...

CVE-2026-62345 Stored XSS via Unsanitized waypoint.icon in Map Marker (insertAdjacentHTML)

Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated user can store a crafted waypoint.icon value that createMarkerFromWaypoint passes into FontawesomeMarker, where insertAdjacentHTML inserts the unvalidated value into map marker markup...

CVE-2026-123976 EDFbrowser before 2.16 Out-of-Bounds Write via check_edf_file() Annotation Signals

EDFbrowser before 2.16 contains an out-of-bounds write vulnerability in checkedffile that allows attackers to overflow the 256-element annotch array by supplying excessive annotation signals. Attackers can craft an EDF+ or BDF+ file with more than 256 annotation signals to overwrite edfhdrblock...

CVE-2026-62344 Wanderer: Unauthenticated Access to Private Trails and Comments via ActivityPub Endpoints

Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, the unauthenticated GET /activitypub/trail/id and GET /activitypub/comment/id endpoints call ActivitypubTrail and ActivitypubComment to return full trail and comment records without applying the PocketBas...

CVE-2026-75598 Gradle Shadow: Zip Slip path traversal in ShadowCopyAction — no independent entry-name sanitization

The Gradle Shadow plugin creates fat or uber JARs and supports file transformation and package relocation. Prior to version 9.6.0, Shadow does not independently validate ZIP entry names before writing them to its output archive. A malicious dependency can cause traversal entry names to be preserv...

CVE-2026-119758 ERPNext OCR 1.1.1 Path Traversal and SSRF via read_document

ERPNext OCR app for Frappe/ERPNext through 1.1.1 contains a missing authorization and path traversal vulnerability that allows any authenticated user to read arbitrary server files by passing a fully client-controlled path argument to the whitelisted readdocument method. Attackers can supply loca...