CVE-2026-123128: Unknown GemBooking: The GemBooking WordPress plugin before 1.7.1 does not serialise concurrent booking requests per team member, allowing…

The GemBooking WordPress plugin before 1.7.1 does not serialise concurrent booking requests per team member, allowing unauthenticated users to create overlapping confirmed bookings for the same team member across different bookable items by sending simultaneous requests...

CVE-2026-114032: Illumio Core Ven: The OpenSSL library bundled with the Illumio VEN for Windows is affected by an uncontrolled search path vulnerability

The OpenSSL library bundled with the Illumio VEN for Windows is affected by an uncontrolled search path vulnerability. A low-privileged, authenticated local attacker could potentially leverage this vulnerability to execute arbitrary code with SYSTEM privileges...

CVE-2026-125239: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ff_dxva2_hevc_fill_picture_parameters() that…

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffdxva2hevcfillpictureparameters that allows attackers to corrupt memory via unbounded non-uniform tile counts. Attackers can supply crafted HEVC bitstreams with many non-uniformly spaced tiles to write controlled 16-bit values...

CVE-2026-125243: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ff_jpegls_decode_picture() in…

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ffjpeglsdecodepicture in libavcodec/jpeglsdec.c, which decodes 16-bit line-interleaved JPEG-LS scans as 8-bit samples. Attackers can supply a crafted single-component JPEG-LS image with the ILV byte set to 1, causin...

CVE-2026-125255: FFmpeg: FFmpeg through 9.0.2 contains a use after free vulnerability in libavcodec/mjpegdec.c that allows attackers to trigger…

FFmpeg through 9.0.2 contains a use after free vulnerability in libavcodec/mjpegdec.c that allows attackers to trigger freed buffer reads by sending a SOF marker without a preceding SOI. Attackers can supply crafted MJPEG streams causing ffmjpegdecodesof to pass a stale rawimagebuffer pointer to...

CVE-2026-113363: NEC Corporation WebSAM WinShare: Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through…

Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary commands with SYSTEM privileges via a crafted network packet...

CVE-2026-124507: conductor-oss conductor: A vulnerability was found in conductor-oss conductor up to 3.32.4/3.33.0/3.34.0-rc3/4.0.0-alpha.1

A vulnerability was found in conductor-oss conductor up to 3.32.4/3.33.0/3.34.0-rc3/4.0.0-alpha.1. This issue affects the function WorkflowSystemTask.start of the file PlannerContextFetchTask.java of the component PLANNERCONTEXTFETCH Task Handler. The manipulation of the argument url results in...

CVE-2026-121825: OpenAM consortium OpenAM (OpenAM Consortium Edition): OpenAM (OpenAM Consortium Edition) 14.0.5 and earlier contains an open redirect vulnerability (CWE-601) in the Liberty…

OpenAM OpenAM Consortium Edition 14.0.5 and earlier contains an open redirect vulnerability CWE-601 in the Liberty ID-FF service provider single sign-on flow. The goto parameter of the /preLogin endpoint is stored as the RelayState of the Liberty ID-FF authentication request without validation, a...

CVE-2026-124565: fushengqian fuint: A security vulnerability has been detected in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f

A security vulnerability has been detected in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f. This affects the function confirm of the file MerchantOrderController.java of the component Order Verification. Such manipulation leads to improper access controls. The attack can be...

CVE-2026-125175: FFmpeg: FFmpeg through 9.0.2 contains an information disclosure vulnerability in flashsv_decode_block() in libavcodec/flashsv.c…

FFmpeg through 9.0.2 contains an information disclosure vulnerability in flashsvdecodeblock in libavcodec/flashsv.c that copies uninitialized heap memory into decoded frames when inflate output is short. Attackers can supply a crafted FLV with an FSV1 stream whose zlib block data decompresses...

CVE-2026-121685: FrodoBots FrodoBots EarthRover Mini+ firmware: FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains multiple sets of hard-coded credentials

FrodoBots EarthRover Mini+ firmware version 6.2.46.2.50.614.0 contains multiple sets of hard-coded credentials. These include fleet‑wide credentials, including BasicAuth credentials for an Agora token service, AWS IAM access keys, AWS IoT MQTT credentials, and a Slack incoming webhook URL. These...

CVE-2026-123820: wagtail: Wagtail is an open source content management system built on Django

Wagtail is an open source content management system built on Django. Prior to 7.0.9, 7.3.4, 7.4.3, and 8.0rc2, the Wagtail Documents and Images API V2 excludes directly restricted collections but fails to exclude their descendant collections, even though descendants inherit ancestor view...

CVE-2026-118791: CompuGroup Medical Wingesfar: The application implements software update functionality without adequate authenticity and integrity validation,…

The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages to be accepted without sufficient cryptographic verification...

CVE-2026-123799: supertokens supertokens-core: SuperTokens Core is an open source authentication server

SuperTokens Core is an open source authentication server. From 11.0.0 until 11.0.9, 11.1.4, 11.2.4, 11.3.8, 11.4.8, 12.0.11, and 12.1.2, Dashboard.isValidUserSession treats any stored session row as valid without comparing DashboardSessionInfo.expiry to the current time...

CVE-2026-123798: supertokens supertokens-core: SuperTokens Core is an open source authentication server

SuperTokens Core is an open source authentication server. From 11.3.0 until 11.3.7, 11.4.7, and 12.0.10, SAML.verifySamlResponseSignature calls OpenSAML SignatureValidator.validate without first applying SAMLSignatureProfileValidator. The Core can therefore accept a cryptographically valid...

CVE-2026-124850: flowintel: A SQL injection vulnerability exists in a database migration script in flowintel

A SQL injection vulnerability exists in a database migration script in flowintel. The migration process reads stored connector identifier values from the database and interpolates them directly into SQL statements without parameterization. An attacker who has previously written a malicious...

CVE-2026-123801: supertokens supertokens-core: SuperTokens Core is an open source authentication server

SuperTokens Core is an open source authentication server. From 11.3.0 until 11.3.8, 11.4.8, 12.0.11, 12.1.2, 12.2.1, and 12.3.1, SAML.handleCallback does not consume RelayState, record assertion identifiers, or enforce Response.InResponseTo. In the SP-initiated flow, an attacker who obtains a...

CVE-2026-114594: Sandisk Sandisk Dashboard: A time-of-check to time-of-use (TOCTOU) race condition in the Sandisk Dashboard installer allows a local, authenticated…

A time-of-check to time-of-use TOCTOU race condition in the Sandisk Dashboard installer allows a local, authenticated standard user to replace an installer-staged binary in a user-writable temporary directory between validation and execution. The elevated installer then executes the...

CVE-2026-124580: Chengdu Feiyuxing Technology: A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775

A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This impacts the function handlewechatcnwifi of the file var/html/webserver of the component Weixin Auth Endpoint. The manipulation of the argument extend results in os command injection. The...

CVE-2026-123064: Unknown: The WP BASE Booking of Appointments, Services and Events WordPress plugin before 6.5.1 does not properly restrict…

The WP BASE Booking of Appointments, Services and Events WordPress plugin before 6.5.1 does not properly restrict access to one of its user-creation actions, allowing authenticated users with Subscriber-level access and above to create a new administrator account and thereby escalate their...

CVE-2026-120838: Plugins360 Labs All-in-One Video Gallery: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugins360 Labs…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Plugins360 Labs All-in-One Video Gallery all-in-one-video-gallery allows Stored XSS.This issue affects All-in-One Video Gallery: from n/a through 5.0.0...

CVE-2026-125270: FFmpeg: FFmpeg through 9.0.2 contains a heap out-of-bounds read vulnerability in v4l2_buffer_swframe_to_buf() in…

FFmpeg through 9.0.2 contains a heap out-of-bounds read vulnerability in v4l2bufferswframetobuf in libavcodec/v4l2buffers.c that mishandles frames with negative linesize. Attackers can supply bottom-up AVI or PNM/PFM files that are transcoded to a V4L2 M2M encoder, crashing the application or...

CVE-2026-125269: FFmpeg: FFmpeg through 9.0.2 contains a double free vulnerability in libavcodec/cbs_sei.c where cbs_sei_delete_message() leaves…

FFmpeg through 9.0.2 contains a double free vulnerability in libavcodec/cbssei.c where cbsseideletemessage leaves a stale extensiondata reference that ffcbsseiaddmessage reuses. Attackers can supply a crafted H.264 stream with a display orientation SEI message followed by payload extension data,...

CVE-2026-124573: n/a logseq: A vulnerability was found in logseq 2.0.1/2.0.2

A vulnerability was found in logseq 2.0.1/2.0.2. This affects the function validate-auth-token of the file src/electron/electron/server.cljs of the component Local HTTP API. The manipulation results in missing authentication. The attack may be performed from remote. The exploit has been made publ...

CVE-2026-123999: nasa-jpl ION-DTN: NASA JPL ION-DTN 3.6.2 through 4.2.0 contains a heap-based buffer overflow in the Network Management daemon (nm_mgr)…

NASA JPL ION-DTN 3.6.2 through 4.2.0 contains a heap-based buffer overflow in the Network Management daemon nmmgr string-formatting logic that allows a malicious or misconfigured agent to trigger an out-of-bounds write by sending deeply nested AMP payloads that exceed fixed-size buffer allocation...

CVE-2026-125194: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in pcm_dvd_encode_frame() in libavcodec/pcm-dvdenc.c…

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in pcmdvdencodeframe in libavcodec/pcm-dvdenc.c when a 24-bit final frame holds fewer samples than one block. Attackers can supply 24-bit 48 or 96 kHz audio whose length leaves a short final frame, causing the loop counter to wrap...

CVE-2026-124572: DataLinkDC dinky: A vulnerability has been found in DataLinkDC dinky up to 1.2.5

A vulnerability has been found in DataLinkDC dinky up to 1.2.5. Affected by this issue is the function CatalogueController.upload of the file dinky-admin/src/main/java/org/dinky/controller/CatalogueController.java of the component Catalogue Upload API. The manipulation leads to path traversal. Th...

CVE-2026-119759: trailbaseio trailbase: TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated…

TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during insert and update operations. Attackers can reference another...

CVE-2026-118468: CompuGroup Medical: XML parsers process attacker-influenced update manifests or network responses with external entity resolution enabled,…

XML parsers process attacker-influenced update manifests or network responses with external entity resolution enabled, potentially allowing XML External Entity XXE attacks...

CVE-2026-123807: SignalK, @signalk: Signal K Server is a server application that runs on a central hub in a boat

Signal K Server is a server application that runs on a central hub in a boat. From 2.0.0 until 2.34.0 for Signal K Server and from 1.0.0 until 1.5.3 for @signalk/resources-provider, the v2 REST route GET /signalk/v2/api/resources/:resourceType/:resourceId accepts an unsafe resourceId that can...

CVE-2026-125193: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in bitpacked_decode_uyvy422() in…

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in bitpackeddecodeuyvy422 in libavcodec/bitpackeddec.c because it never verifies packets hold width height 2 bytes. Attackers can supply truncated bitpacked UYVY422 packets via crafted SDP/RFC 4175 RTP sessions or raw input to cras...

CVE-2026-125067: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in vble_decode_frame() in libavcodec/vble.c…

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in vbledecodeframe in libavcodec/vble.c because it ignores initgetbits failure on oversized packets. Attackers can supply a crafted AVI file with a 268435452-byte VBLE frame, causing reads from a NULL bit reader buffer that...

CVE-2026-125209: FFmpeg: FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap buffer overflow vulnerability in the DVD subtitle encoder that…

FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap buffer overflow vulnerability in the DVD subtitle encoder that underestimates RLE output size for odd-width rectangles. Attackers can supply files with crafted bitmap subtitles that, when transcoded to the dvdsub encoder, write past the...

CVE-2026-125215: FFmpeg: FFmpeg 7.1 through 9.0.2 contains a NULL pointer dereference vulnerability in ff_dovi_rpu_generate() in…

FFmpeg 7.1 through 9.0.2 contains a NULL pointer dereference vulnerability in ffdovirpugenerate in libavcodec/dovirpuenc.c that allows attackers to crash applications via crafted Dolby Vision RPU metadata. Attackers can supply streams with default or alternating omitted DM blocks to the dovirpu...

CVE-2026-125212: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/videotoolboxenc.c that copies frames…

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/videotoolboxenc.c that copies frames larger than encoder dimensions into undersized CVPixelBuffers. Attackers can supply crafted input whose resolution grows mid-stream, transcoded with VideoToolbox encoders without...

CVE-2026-125204: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow in ff_libwebp_get_frame() in libwebpenc_common.c that lets…

FFmpeg through 9.0.2 contains a heap buffer overflow in fflibwebpgetframe in libwebpenccommon.c that lets attackers corrupt memory when crthreshold is set. Attackers can supply crafted media that increases resolution mid-stream, causing memcpy to write pixel data past the stale reference frame an...

CVE-2026-125117: Automattic mongoose: Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment

Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.12, 7.8.13, 8.24.7, and 9.11.4, Mongoose can descend into inherited properties while loading database documents in init, setting dotted paths in $set, and merging update documents in...

CVE-2026-125241: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/flicvideo.c that allows attackers to…

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/flicvideo.c that allows attackers to write out of bounds because checkpixelptr checks only one bound with negative-stride frames. Attackers can supply a crafted FLIC file whose RLE and delta chunks write pixel data...

CVE-2026-125238: FFmpeg: FFmpeg through 9.0.2 contains a reachable assertion vulnerability in libxevd_receive_frame() in libavcodec/libxevd.c…

FFmpeg through 9.0.2 contains a reachable assertion vulnerability in libxevdreceiveframe in libavcodec/libxevd.c that returns success when an access unit produces no frame. Attackers can supply a crafted EVC file with truncated or picture-less access units to trigger the avassert0 on...

CVE-2026-123475: PT Norther Lights Production MapSVG: Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows…

Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSVG: from n/a through 8.16.3...

CVE-2026-123460: Nickboss WordPress File Upload: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.2...

CVE-2026-120854: iubenda: Allocation of Resources Without Limits or Throttling vulnerability in iubenda iubenda iubenda-cookie-law-solution…

Allocation of Resources Without Limits or Throttling vulnerability in iubenda iubenda iubenda-cookie-law-solution allows HTTP DoS.This issue affects iubenda: from n/a through 3.13.6...

CVE-2026-121573: Melapress WP Activity Log: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log wp-security-audit-log allows Stored XSS.This issue affects WP Activity Log: from n/a through 5.6.7...

CVE-2026-121688: FrodoBots FrodoBots EarthRover Mini+ firmware: FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains an insecure STM32 firmware update mechanism

FrodoBots EarthRover Mini+ firmware version 6.2.46.2.50.614.0 contains an insecure STM32 firmware update mechanism. The STM32 motor‑controller firmware is fetched over unencrypted HTTP. Integrity is validated only via MD5, with the hash provided in the same unprotected response. No code‑signing...

CVE-2026-122673: Wpmet ShopEngine: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet ShopEngine…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ShopEngine shopengine allows Stored XSS.This issue affects ShopEngine: from n/a through 4.9.8...

CVE-2026-121690: FrodoBots FrodoBots EarthRover Mini+ firmware: FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) executes code with unnecessary privileges

FrodoBots EarthRover Mini+ firmware version 6.2.46.2.50.614.0 executes code with unnecessary privileges. All processes run as root and the system lacks privilege separation. The compromise of any single service results in full administrative control of the device...

CVE-2026-121769: axew3.com WP w3all phpBB: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axew3.com WP…

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows SQL Injection.This issue affects WP w3all phpBB: from n/a through 3.1.9...

CVE-2026-123809: dynatrace-oss dynatrace-mcp: Dynatrace MCP Server is an MCP server for Dynatrace Observability

Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, the createworkflowfornotification tool inserts the caller-controlled teamName, problemType, and channel values into a Dynatrace workflow without neutralizing Jinja2 expressions. A caller can place template...

CVE-2026-115934: craftcms cms: An unauthenticated SQL injection can occur on the front end of any site that uses craft.search to perform a search,…

An unauthenticated SQL injection can occur on the front end of any site that uses craft.search to perform a search, allowing stacked query execution and enabling escalation to an administrator. Note that this only affects MySQL/MariaDB. Impact SQL injection — The attribute parameter is concatenat...

CVE-2026-125113: xrootd: The XRootD project provides a high-performance, fault-tolerant, and secure solution for handling large amounts of data…

The XRootD project provides a high-performance, fault-tolerant, and secure solution for handling large amounts of data distributed across multiple storage resources. Prior to version 5.9.2, XRootD's rpCheck function in src/XrdXrootd/XrdXrootdXeq.cc rejects a parent-directory component only when t...