CVE-2026-19552: Python Software Foundation CPython: When ca_certs parameter was supplied to ssl.get_server_certificate() function, the identity of the certificate is not…

When cacerts parameter was supplied to ssl.getservercertificate function, the identity of the certificate is not checked...

CVE-2026-125249: FFmpeg: FFmpeg 7.1 through 9.0.2 contains an integer overflow in ff_vk_decode_add_slice() in libavcodec/vulkan_decode.c that…

FFmpeg 7.1 through 9.0.2 contains an integer overflow in ffvkdecodeaddslice in libavcodec/vulkandecode.c that miscalculates the Vulkan hwaccel bitstream buffer size. Attackers can supply a crafted stream with over 2 GiB of slice data per frame, causing memcpy to write past a smaller pooled...

CVE-2026-119274: Infoblox NIOS: Infoblox NIOS version upto 9.1.0 contain a vulnerability related to improper input validation that allows a stored XSS

Infoblox NIOS version upto 9.1.0 contain a vulnerability related to improper input validation that allows a stored XSS...

CVE-2026-112169: GALENO SISTEMI MAGISTRA: Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a…

Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a privileged user account without credential verification...

CVE-2026-113968: Apple: A logic issue was addressed with improved state management

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An...

CVE-2026-124635: kevquirk PureBlog: A vulnerability was identified in kevquirk PureBlog up to 3.7.2

A vulnerability was identified in kevquirk PureBlog up to 3.7.2. Impacted is an unknown function of the file admin/upload-image.php of the component Admin Image Upload Endpoint. Such manipulation leads to unrestricted upload. The attack may be launched remotely. Upgrading to version 3.7.3 is...

CVE-2026-125112: djust-org djust: djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to versions 1.0.10 and 1.1.2, djust keys context output-safety grants by variable name and fails to revoke a grant when a template bind replaces the value associated with that name...

CVE-2026-124571: SourceCodester Simple CRUD using PHP and FPDF: A flaw has been found in SourceCodester Simple CRUD using PHP and FPDF 1.0

A flaw has been found in SourceCodester Simple CRUD using PHP and FPDF 1.0. Affected by this vulnerability is an unknown functionality of the file app/register.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack can be executed remotely. The exploit has...

CVE-2026-124566: fushengqian fuint: A vulnerability was detected in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f

A vulnerability was detected in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f. This vulnerability affects the function aliPayCallback of the file ClientPayController.java of the component Alipay Callback Handler. Performing a manipulation results in enforcement of behavioral...

CVE-2026-16283: Osbil Technology Ltd.Osbil Technology Ltd. oPanel: Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Osbil…

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Osbil Technology Ltd.Osbil Technology Ltd. OPanel allows OS Command Injection. This issue affects oPanel: before 1.20.66...

CVE-2026-119506: DynamiApps Frontend Admin by DynamiApps: Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element…

Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1...

CVE-2026-112320: Red Hat: The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication…

The GSS-RPC transport layer in MIT Kerberos 5 aka krb5 1.4 and later does not release the previous authentication context when a client switches from an RPCSECGSS or AUTHGSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service memory...

CVE-2026-121841: Mozilla Firefox for iOS: Other issue in Firefox for iOS

Other issue in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0...

CVE-2026-112321: Red Hat: The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on…

The AUTHGSSAPI handler in lib/rpc/svcauthgssapi.c in MIT Kerberos 5 aka krb5 does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service memory exhaustion in kadmind via crafted AUTHGSSAPIINIT requests that trigger authentication failures...

CVE-2026-112315: Red Hat: The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free…

The RPCSECGSS authentication routines in lib/rpc/authgssprot.c in MIT Kerberos 5 aka krb5 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service memory leak in kadmind via crafted RPCSECGSS messages...

CVE-2026-112318: Red Hat: The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL…

The policy RPC stubs in kadmin/server/serverstubs.c in MIT Kerberos 5 aka krb5 1.5.3 and later do not reject a NULL policy name decoded by xdrnullstring, which allows remote authenticated users to cause a denial of service kadmind crash via NULL pointer dereference by sending a policy request wit...

CVE-2026-111455: Apache Software Foundation Apache Airflow: Apache Airflow's asynchronous connection test checked permissions when the test was queued — only create permission…

Apache Airflow's asynchronous connection test checked permissions when the test was queued — only create permission when the connection ID did not exist yet — but, when the test completed with commitonsuccess, wrote the tested connection under that ID. A user allowed to create but not edit...

CVE-2026-113965: Apple: This issue was addressed with improved checks

This issue was addressed with improved checks. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. A malicious...

CVE-2026-125205: FFmpeg: FFmpeg through 9.0.2 contains an unbounded memory allocation vulnerability in the av1_frame_merge bitstream filter that…

FFmpeg through 9.0.2 contains an unbounded memory allocation vulnerability in the av1framemerge bitstream filter that allows attackers to exhaust memory by never sending a temporal delimiter OBU. Attackers can supply a crafted .obu file opened by the AV1 OBU or Annex B demuxers, forcing unlimited...

CVE-2026-119079: Red Hat: decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded…

decodesequenceof in lib/krb5/asn.1/asn1encode.c in MIT Kerberos 5 aka krb5 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service CPU consumption in the KDC by sending an unauthenticated AS-REQ or TGS-REQ with a large number ...

CVE-2026-124591: n/a Bahleel: A vulnerability was detected in Bahleel 0.1.0/0.1.1

A vulnerability was detected in Bahleel 0.1.0/0.1.1. Affected is the function fputcsv of the file app/Exporters/CsvExporter.php. The manipulation results in csv injection. The attack may be launched remotely. The project was informed of the problem early through an issue report but has not...

CVE-2026-125262: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/lcevcdec.c because LCEVC output…

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/lcevcdec.c because LCEVC output picture dimensions are not validated against the allocated frame. Attackers can embed crafted LCEVC enhancement data with differing global configurations in H.264 or HEVC streams to...

CVE-2026-101031: Apache Software Foundation Apache Airflow: The `example_dag_decorator` example Dag shipped with Apache Airflow validated an IP address fetched over HTTP with…

The exampledagdecorator example Dag shipped with Apache Airflow validated an IP address fetched over HTTP with Python's ipaddress module and then placed it into a shell command. ipaddress accepts IPv6 zone identifiers containing arbitrary characters, so when example Dags are loaded loadexamples...

CVE-2026-125120: Automattic mongoose: Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment

Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.11, 7.8.12, 8.24.3, and 9.9.2, Mongoose countDocuments does not apply the configured sanitizeFilter query selector injection defense. An application that enables sanitizeFilter and passes...

CVE-2026-125108: rack: Rack is a modular Ruby web server interface

Rack is a modular Ruby web server interface. Prior to 2.2.25, 3.1.23, and 3.2.8, Rack::Multipart::Parser.parseboundary can skip a leading empty or quoted boundary parameter in a multipart Content-Type header and accept a later parameter. Rack can therefore parse a request body with a boundary tha...

CVE-2026-124684: Samsung Open Source Escargot: Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation

Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. This issue affects Escargot: before 8bc35b7b88f0f96c66a42aa965a1a710308b61d5...

CVE-2026-63644: xddxdd bird-lg-go: bird-lg-go is a BIRD looking glass in Go

bird-lg-go is a BIRD looking glass in Go. Prior to version 1.4.7, unsanitized input path enables arbitrary local file read, allowing an unauthenticated remote attacker to read sensitive files such as /etc/shadow and /root/.bashhistory. This issue has been patched in version 1.4.7...

CVE-2026-123373: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment

compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From 0.2.0 until 0.25.0, compose-lint follows a project-controlled symbolic link used as the Compose file outside the project. The same issue affects compose.override.yml and a...

CVE-2026-124579: aaPanel BillionMail: A vulnerability was determined in aaPanel BillionMail up to 4.9

A vulnerability was determined in aaPanel BillionMail up to 4.9. Affected by this issue is some unknown functionality of the file core/api/relay/v1/relay.go of the component Relay Configuration API. Executing a manipulation of the argument heloname can lead to injection. The attack may be perform...

CVE-2026-125100: FFmpeg: FFmpeg through 9.0.2 contains an integer overflow vulnerability in the OpenEXR decoder's decode_frame() in…

FFmpeg through 9.0.2 contains an integer overflow vulnerability in the OpenEXR decoder's decodeframe in libavcodec/exr.c that miscalculates the tiled block count. Attackers can supply a crafted tiled OpenEXR image with large dimensions and small tiles to skip decoding and disclose uninitialized...

CVE-2026-125072: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in mp_decode_frame() in…

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in mpdecodeframe in libavcodec/mpegaudiodectemplate.c because initgetbits failure is ignored after a signed integer overflow. Attackers can pass an oversized packet to the mp3adu decoder through the libavcodec API, causing rea...

CVE-2026-82436: Apache Software Foundation Apache Storm Client: Description `DefaultStateSerializer`, used to persist and restore stateful bolt checkpoints, configured Kryo with class…

Description DefaultStateSerializer, used to persist and restore stateful bolt checkpoints, configured Kryo with class registration disabled and an instantiation strategy that constructs objects without invoking their constructors, then deserialized whatever bytes the state store returned. A party...

CVE-2026-125199: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1_decode_frame() in libavcodec/vc1dec.c that leaks slice…

FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications...

CVE-2026-115336: Progress Software WS_FTP Server: Incorrect quota accounting in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an…

Incorrect quota accounting in Progress Software WSFTP Server releases prior to 2025.0.5 on Windows could allow an authenticated user with upload and delete permissions to exceed storage quotas, potentially causing denial of service...

CVE-2026-123802: supertokens supertokens-core: SuperTokens Core is an open source authentication server

SuperTokens Core is an open source authentication server. From 11.3.0 until 11.3.8, 11.4.8, 12.0.11, 12.1.2, 12.2.1, and 12.3.1, a licensed deployment with a configured SAML client can authenticate an identity from an assertion that did not satisfy the audience check. When the identity provider...

CVE-2026-120832: Apache Software Foundation Apache Axis2/Java: Server-Side Request Forgery (SSRF) vulnerability in Apache Axis2/Java

Server-Side Request Forgery SSRF vulnerability in Apache Axis2/Java. When Axis2 built a service description from a WSDL, through ServiceClient, AxisService.createClientSideAxisService or WSDLToAxisServiceBuilder, it fetched the absolute URLs in wsdl:import locations and in xsd:import and...

CVE-2026-125247: FFmpeg: FFmpeg through 9.0.2 contains an integer overflow vulnerability in dng_decode_tiles() that allows attackers to leak…

FFmpeg through 9.0.2 contains an integer overflow vulnerability in dngdecodetiles that allows attackers to leak uninitialized memory via crafted DNG tile dimensions. Attackers can set TileWidth or TileLength near INTMAX so the tile loop never runs, outputting a frame exposing uninitialized or sta...

CVE-2026-125220: FFmpeg: FFmpeg through 9.0.2 contains a deadlock vulnerability in mimic_decode_frame() in libavcodec/mimic.c that fails to…

FFmpeg through 9.0.2 contains a deadlock vulnerability in mimicdecodeframe in libavcodec/mimic.c that fails to report frame progress when initgetbits8 fails. Attackers can supply a crafted file with an oversized Mimic intra frame followed by inter frames to hang frame-threaded decoding indefinite...

CVE-2026-63634: tempoxyz pympp: pympp is a Python SDK for the Machine Payments Protocol

pympp is a Python SDK for the Machine Payments Protocol. Prior to version 0.9.1, when the server acts as the feepayer, pympp validates calldata using ethabi decoding, which is lenient about trailing bytes. The FeePayerPolicy caps gaslimit ≤ 2 M and maxfeepergas ≤ 100 Gwei but does not check...

CVE-2026-125229: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encode_frame() function of…

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encodeframe function of libavcodec/huffyuvenc.c, because encodeinit never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall fram...

CVE-2026-123064: Unknown: The WP BASE Booking of Appointments, Services and Events WordPress plugin before 6.5.1 does not properly restrict…

The WP BASE Booking of Appointments, Services and Events WordPress plugin before 6.5.1 does not properly restrict access to one of its user-creation actions, allowing authenticated users with Subscriber-level access and above to create a new administrator account and thereby escalate their...

CVE-2026-125117: Automattic mongoose: Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment

Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.12, 7.8.13, 8.24.7, and 9.11.4, Mongoose can descend into inherited properties while loading database documents in init, setting dotted paths in $set, and merging update documents in...

CVE-2026-125118: Automattic mongoose: Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment

Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.12, 7.8.13, 8.24.7, and 9.11.4, Schema.prototype.virtual builds nested virtual paths without applying the special-property validation already used by Schema.path and Schema.add. An attacker w...

CVE-2026-112205: Fundacja Widzialni WidzialniCMS: WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality

WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed by omitting the logincount and logintimeout cookies, allowing an unauthenticated attacker to perform an unlimited number of login attempts. This issue has been fixed in...

CVE-2026-121629: Red Hat: A flaw was found in GStreamer's adaptive streaming demuxers (HLS, DASH, MSS)

A flaw was found in GStreamer's adaptive streaming demuxers HLS, DASH, MSS. When processing a media playlist or manifest, URIs referenced in the manifest content are fetched without restricting which URI schemes are permitted. An attacker who controls a manifest URL, or who can inject content int...

CVE-2026-125064: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in g726_decode_frame() in libavcodec/g726.c…

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in g726decodeframe in libavcodec/g726.c because it ignores initgetbits failure on oversized packets. Attackers can supply a crafted AVI file with a 268435392-byte G.726 audio chunk to make the decoder read from a NULL buffer,...

CVE-2026-113971: Apple iOS and iPadOS: This issue was addressed by restricting options offered on a locked device

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to pair a device with an AirPlay receiver from the lock screen...

CVE-2026-123806: theupdateframework python-tuf: python-tuf is a Python reference implementation of The Update Framework (TUF)

python-tuf is a Python reference implementation of The Update Framework TUF. Prior to 7.0.0, DelegatedRole.istargetinpathpattern in tuf/api/payload.py uses fnmatch.fnmatch, which applies os.path.normcase before matching and makes delegation path authorization case-insensitive on Windows. When a T...

CVE-2026-123370: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment

compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From 0.9.0 until 0.18.0, compose-lint's YAML parser recognizes lone carriage returns and Unicode line separators U+0085, U+2028, and U+2029 as line breaks while fix position conversion...

CVE-2026-125239: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ff_dxva2_hevc_fill_picture_parameters() that…

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffdxva2hevcfillpictureparameters that allows attackers to corrupt memory via unbounded non-uniform tile counts. Attackers can supply crafted HEVC bitstreams with many non-uniformly spaced tiles to write controlled 16-bit values...