CVE-2026-125709: Red Hat: A flaw was found in libstdc++

A flaw was found in libstdc++. When a byte-by-byte write operation fails during file stream processing, the library may still append data into the internal memory buffer. An attacker capable of inducing repeated write failures in an affected service can trigger a buffer overflow, potentially...

CVE-2026-125742: 7-Zip: 7-Zip before 26.06 contains a heap out-of-bounds write vulnerability in the LZX decoder that lets attackers corrupt…

7-Zip before 26.06 contains a heap out-of-bounds write vulnerability in the LZX decoder that lets attackers corrupt memory when a continuation CAB volume declares a smaller window. Attackers can entice victims to extract crafted multi-volume CAB archives, where a stale pos value bypasses bounds...

CVE-2026-100962: NVIDIA Nemo Deploy: NVIDIA NeMo Export-Deploy for all platforms contains a vulnerability in multimodal deployment where an attacker could…

NVIDIA NeMo Export-Deploy for all platforms contains a vulnerability in multimodal deployment where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might cause information disclosure...

CVE-2026-124852: Mozilla Firefox: Incorrect boundary conditions in the Graphics: CanvasWebGL component

Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160...

CVE-2026-124854: Mozilla Firefox: Privilege escalation in the DOM: Navigation component

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-124860: Mozilla Firefox: Use-after-free in the Audio/Video component

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-124872: Mozilla Firefox: Use-after-free in the Cycle Collector component

Use-after-free in the Cycle Collector component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-124880: Mozilla Firefox: Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-124917: Mozilla Firefox: Sandbox escape due to use-after-free in the Widget: Gtk component

Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-124924: Mozilla Firefox: Incorrect boundary conditions in the Graphics: WebRender component

Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-124925: Mozilla Firefox: Information disclosure in the Layout component

Information disclosure in the Layout component. This vulnerability was fixed in Firefox 160...

CVE-2026-61547: alanxz rabbitmq-c: rabbitmq-c is a C-language AMQP client library for RabbitMQ

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to version 0.17.0, a heap buffer overflow exists in rabbitmq-c when the public amqpsendframe API is used to serialize an oversized AMQPFRAMEBODY. The issue occurs because amqpframetobytes copies frame.payload.bodyfragment.len byte...

CVE-2026-112137: Siemens: A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro…

A vulnerability has been identified in Mendix Studio Pro 11 All versions = V11.15.0 = V11.12.6 V11.12.7. The affected products MCP Server does not properly validate Content-Type and Origin headers on incoming HTTP requests, leaving it vulnerable to Cross-Site Request Forgery CSRF. This could allo...

CVE-2026-124914: Mozilla Firefox: Site isolation issue in the DOM: Navigation component

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-124896: Mozilla Firefox: Invalid pointer in the Layout: Text and Fonts component

Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-124859: Mozilla Firefox: Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component

Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-125753: abpframework abp: ABP Framework 2.9.0 before 10.6.2 and 10.7.0 pre-releases before 10.7.0 contain a path traversal vulnerability in…

ABP Framework 2.9.0 before 10.6.2 and 10.7.0 pre-releases before 10.7.0 contain a path traversal vulnerability in DefaultBlobFilePathCalculator that allows unauthenticated attackers to access files outside the blob container. Attackers can send %5C-encoded backslashes through the Blogging...

CVE-2026-121653: ivanti Endpoint Manager: SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker…

SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code execution...

CVE-2026-66335: AMI AptioV: AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Heap-based Buffer Overflow” by local…

AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Heap-based Buffer Overflow” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed update if the out-of-bounds wri...

CVE-2026-109795: SAP_SE S4CRM: SAP NetWeaver does not perform necessary authorization checks and lacks sufficient input validation in certain…

SAP NetWeaver does not perform necessary authorization checks and lacks sufficient input validation in certain remote-enabled functionality. An attacker with low privileges could send specially crafted input through a remote interface to inject and execute arbitrary code within the affected syste...

CVE-2026-86811: Apache Software Foundation Apache TomEE: The stateful session bean passivation mechanism derives the on-disk file name from a client-supplied identifier without…

The stateful session bean passivation mechanism derives the on-disk file name from a client-supplied identifier without validating it. A remote attacker with access to the remote EJB service can cause session state to be read from or written to files outside the passivation directory. Users are...

CVE-2026-123180: NETGEAR RAX30: A missing authentication vulnerability in the listed NETGEAR RAX models allows an network adjacent attacker who has…

A missing authentication vulnerability in the listed NETGEAR RAX models allows an network adjacent attacker who has authenticated to wifi network to obtain sensitive information and tamper with device configuration, including administrator credentials, without authenticating to the device. This...

CVE-2026-126042: vnotex VNote: VNote 3.11.0 before 4.12.0 contains an OS command injection vulnerability in its Tasks feature: magic variables such as…

VNote 3.11.0 before 4.12.0 contains an OS command injection vulnerability in its Tasks feature: magic variables such as $bufferName and $selectedText are substituted into a shell command string without escaping. Attackers can share a notebook containing a note whose filename or text includes shel...

CVE-2026-57907: WatchGuard Endpoint Security: A privilege escalation vulnerability in WatchGuard Endpoint Protection's inter-process communication between the…

A privilege escalation vulnerability in WatchGuard Endpoint Protection's inter-process communication between the console and the protection service allows a local, low-privileged authenticated user to execute arbitrary code with SYSTEM privileges by injecting code into the trusted console process...

CVE-2026-63653: Intermesh groupoffice: Group-Office is an enterprise customer relationship management and groupware tool

Group-Office is an enterprise customer relationship management and groupware tool. Prior to version 26.0.37, go/modules/community/bookmarks/controller/Bookmark.php's description action takes a fully attacker-controlled url parameter and passes it, unvalidated, to \GO\Base\Util\HttpClient::request...

CVE-2026-123181: Ivanti Sentry: A path traversal vulnerability in Ivanti Sentry before versions 10.7.4 and 10.8.3 allows a remote authenticated…

A path traversal vulnerability in Ivanti Sentry before versions 10.7.4 and 10.8.3 allows a remote authenticated attacker with administrative privileges to create arbitrary directories and files with root privileges...

CVE-2026-124888: Mozilla Firefox: Incorrect boundary conditions in the Layout: Text and Fonts component

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-125757: mailcow mailcow: dockerized: mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain…

mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in the shared rspamd container by storing a malicious domain-wide footer. Attackers can embed a Jinja macro with an os.execute default value, rendered b...

CVE-2026-83528: Ivanti Endpoint Manager Mobile: Exposure of PII in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker…

Exposure of PII in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to leak GDPR protected user information...

CVE-2026-111245: Apache Software Foundation Apache TomEE: After a successful WS-Security UsernameToken authentication, the caller identity stays associated with the worker…

After a successful WS-Security UsernameToken authentication, the caller identity stays associated with the worker thread once the request completes when web services are served by the standalone OpenEJB HTTP server. A remote unauthenticated attacker whose request is later processed on the same...

CVE-2026-124251: XplodedThemes WPIDE – File Manager & Code Editor: Cross-Site Request Forgery (CSRF) vulnerability in XplodedThemes WPIDE – File Manager & Code Editor wpide allows Cross…

Cross-Site Request Forgery CSRF vulnerability in XplodedThemes WPIDE – File Manager & Code Editor wpide allows Cross Site Request Forgery.This issue affects WPIDE – File Manager & Code Editor: from n/a through 3.6.4...

CVE-2026-89131: SAP_SE SAP NetWeaver Enterprise Portal: SAP NetWeaver Enterprise Portal does not sufficiently protect certain server-side actions against cross-site request…

SAP NetWeaver Enterprise Portal does not sufficiently protect certain server-side actions against cross-site request forgery. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated user, triggers an unintended action on the server. Successful exploitation...

CVE-2026-125366: asciimoo omnom: Omnom through 0.9.0 contains a server-side request forgery vulnerability that allows authenticated users to make server…

Omnom through 0.9.0 contains a server-side request forgery vulnerability that allows authenticated users to make server requests to arbitrary hosts by submitting feed URLs to /addfeed. Attackers can supply internal addresses that getFeedInfo, gofeed ParseURL, and fetchImageAsInlineURL fetch witho...

CVE-2026-92863: Hitachi Hitachi Dynamic Link Manager for AIX: Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market)

Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX for the Japanese market. This issue affects Hitachi Dynamic Link Manager for AIX: before 9.0.4-01...

CVE-2026-58114: Siemens: A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All…

A vulnerability has been identified in SIMATIC BATCH V9.1 All versions, SIMATIC Information Server 2020 All versions, SIMATIC Information Server 2022 All versions, SIMATIC PCS 7 V9.1 All versions, SIMATIC Process Historian 2020 All versions, SIMATIC Process Historian 2022 All versions, SIMATIC...

CVE-2026-97867: Apache Software Foundation Apache TomEE: The EJBd remote protocol returns datasource connection details, including database credentials, to remote clients that…

The EJBd remote protocol returns datasource connection details, including database credentials, to remote clients that look up a datasource. A remote client able to reach the EJBd endpoint can obtain the database credentials and connect to the database directly. Users are recommended to upgrade t...

CVE-2026-104619: PackageKit: Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing…

Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation...

CVE-2026-60038: MB connect line, Helmholz: A high privileged remote attacker can perform an OpenSSL code injection in the backends ImportPKCS12 function leading…

A high privileged remote attacker can perform an OpenSSL code injection in the backends ImportPKCS12 function leading to code execution. This can result in a total loss of confidentiality, integrity and availability...

CVE-2026-89129: SAP_SE SAP NetWeaver AS Java (Web Services): Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS Java (Web Services), an unauthenticated…

Due to a Server-Side Request Forgery SSRF vulnerability in SAP NetWeaver AS Java Web Services, an unauthenticated attacker could craft a SOAP request that causes the server to return a SOAP fault to a URL under the attacker�s control. Successful exploitation could allow the attacker to disclose...

CVE-2026-40426: n/a Intel(R) NPU Driver software: Integer underflow (wrap or wraparound) for the Intel(R) NPU Driver software before version 1.33.0 within Ring 3: User…

Integer underflow wrap or wraparound for the IntelR NPU Driver software before version 1.33.0 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

CVE-2026-42966: n/a Intel(R) Neural Compressor software: Uncaught exception for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may…

Uncaught exception for some IntelR Neural Compressor software before version 3.8 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result...

CVE-2026-28702: n/a Intel(R) VTune(TM) Profiler software: Incorrect default permissions for the Intel(R) VTune(TM) Profiler software within Ring 3: User Applications may allow…

Incorrect default permissions for the IntelR VTuneTM Profiler software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2026-32667: n/a Intel(R) VTune(TM) Profiler software: Out-of-bounds write for the Intel(R) VTune(TM) Profiler software within Ring 1: Device Drivers may allow an escalation…

Out-of-bounds write for the IntelR VTuneTM Profiler software within Ring 1: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur v...

CVE-2026-33571: n/a Intel(R) VTune(TM) Profiler software: Out-of-bounds read for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers…

Out-of-bounds read for the IntelR VTuneTM Profiler software before version 2026.0.0 within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potential...

CVE-2026-39456: n/a Media Transcode Accelerator: Improper input validation for some Media Transcode Accelerator before version 1.0.0-00128 within Ring 3: User…

Improper input validation for some Media Transcode Accelerator before version 1.0.0-00128 within Ring 3: User Applications may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potential...

CVE-2026-40427: n/a Intel(R) QuickAssist Technology Driver for Windows: Use after free for some Intel(R) QuickAssist Technology Driver for Windows within Ring 3: User Applications may allow a…

Use after free for some IntelR QuickAssist Technology Driver for Windows within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur...

CVE-2026-26052: n/a Intel(R) Graphics Driver software installers: Insecure inherited permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications…

Insecure inherited permissions for some IntelR Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This resu...

CVE-2026-32670: n/a Intel(R) VTune(TM) Profiler software: Time-of-check time-of-use race condition for the Intel(R) VTune(TM) Profiler software within Ring 1: Device Drivers may…

Time-of-check time-of-use race condition for the IntelR VTuneTM Profiler software within Ring 1: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result ma...

CVE-2026-33270: n/a Intel(R) Graphics Software: Improper input validation for some Intel(R) Graphics Software within Ring 3: User Applications may allow a denial of…

Improper input validation for some IntelR Graphics Software within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local...

CVE-2026-33563: n/a Intel(R) Platform Monitoring Technology (Intel(R) PMT) software: Exposure of sensitive information to an unauthorized actor for some Intel(R) Platform Monitoring Technology (Intel(R)…

Exposure of sensitive information to an unauthorized actor for some IntelR Platform Monitoring Technology IntelR PMT software before version 3.2.0.22 within Ring 3: User Applications may allow an information disclosure. System software adversary with an authenticated user combined with a low...