CVE-2026-12573: Zohocorp DDI Central: Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Cisco IOS command injection via…

Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Cisco IOS command injection via DHCP pool name leading to arbitrary commands on managed Cisco routers...

CVE-2026-59082: Siemens: A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC…

A vulnerability has been identified in SIMATIC WinCC V7.5 All versions, SIMATIC WinCC V8.0 All versions, SIMATIC WinCC V8.1 All versions. Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device...

CVE-2026-124886: Mozilla Firefox: Invalid pointer in the Layout: Text and Fonts component

Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-124889: Mozilla Firefox: Use-after-free in the CSS Parsing and Computation component

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-124891: Mozilla Firefox: Incorrect boundary conditions in the DOM: Selection component

Incorrect boundary conditions in the DOM: Selection component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-125871: MISP misp-modules: The sourcecache expansion module in MISP Modules (misp-modules) contains a Server-Side Request Forgery (SSRF)…

The sourcecache expansion module in MISP Modules misp-modules contains a Server-Side Request Forgery SSRF vulnerability. When a user with permission to create or modify attributes of type 'link' or 'url' submits an attribute value, the module passes the URL directly to its internal archiving...

CVE-2026-124865: Mozilla Firefox: Use-after-free in the Audio/Video component

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-124876: Mozilla Firefox: Use-after-free in the CSS Parsing and Computation component

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-109830: Siemens meta-iot2050: A vulnerability has been identified in meta-iot2050 (All versions >= V01.03.01)

A vulnerability has been identified in meta-iot2050 All versions = V01.03.01. Affected devices take parts from a configuration file and execute them unchecked. This could allow an attacker which is able to manipulate the configuration file to make the user execute arbitrary code on the device...

CVE-2026-124897: Mozilla Firefox: Use-after-free in the JavaScript: GC component

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-124898: Mozilla Firefox: Use-after-free in the DOM: Editor component

Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-124900: Mozilla Firefox: Sandbox escape due to use-after-free in the DOM: Service Workers component

Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160...

CVE-2026-124907: Mozilla Firefox: Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component

Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-124909: Mozilla Firefox: Information disclosure in the Private Browsing component

Information disclosure in the Private Browsing component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-105427: Ivanti Endpoint Manager Mobile: Improper input validation in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated…

Improper input validation in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to permanently disable all Apache HTTPS services resulting in denial of service...

CVE-2026-120999: nerves-hub nerves_hub_web: Improper Authentication vulnerability in Google sign-in and email confirmation in nerves-hub nerves_hub_web allows an…

Improper Authentication vulnerability in Google sign-in and email confirmation in nerves-hub nerveshubweb allows an attacker who registers another person's email address to share that person's account once they sign in. NervesHub.Accounts.updateorcreateuserfromueberauth/1 signs a Google user in t...

CVE-2026-125758: aptabase: Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to…

Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge sign-in links by using the publicly known example AUTHSECRET. Attackers can enumerate registered e-mails via /api/auth/signin, forge HS256 JWTs redeemed by...

CVE-2026-125402: ettercap: Ettercap through 0.8.4.1 contains a heap out-of-bounds read vulnerability in sslw_get_clienthello_sni() in…

Ettercap through 0.8.4.1 contains a heap out-of-bounds read vulnerability in sslwgetclienthellosni in src/ecsslwrap.c that trusts the unchecked 16-bit SNI length field. Network-adjacent attackers can send crafted TLS ClientHello messages during SSL interception to leak up to 64 KB of heap memory...

CVE-2026-120017: SAP_SE SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider): SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions…

SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain configurations. An unauthenticated attacker could submit specially crafted data to bypass authentication and impersonate arbitrary users, including privileged...

CVE-2026-125400: ettercap: Ettercap through 0.8.4.1 contains a use-after-free vulnerability in func_pcre() in src/ec_filter.c that reads the PCRE2…

Ettercap through 0.8.4.1 contains a use-after-free vulnerability in funcpcre in src/ecfilter.c that reads the PCRE2 ovector after freeing match data. Network-adjacent attackers can send packets matching a loaded pcreregex substitution filter to corrupt memory and potentially execute code as root...

CVE-2026-109810: SAP_SE SAP NetWeaver Application Server Java (Web Dynpro Java): SAP NetWeaver Application Server Java (Web Dynpro Java) does not sufficiently validate certain request parameters used…

SAP NetWeaver Application Server Java Web Dynpro Java does not sufficiently validate certain request parameters used to resolve styling resources in the application. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated victim, causes the victim's browser...

CVE-2026-60035: MB connect line, Helmholz: A high privileged remote attacker can perform a code injection in the backends network auth function leading to code…

A high privileged remote attacker can perform a code injection in the backends network auth function leading to code execution. This can result in a total loss of confidentiality, integrity and availability...

CVE-2026-92864: Hitachi: Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi…

Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX for markets outside Japan and Hitachi Dynamic Link Manager EX for AIX for the Japanese market. This issue affects Hitachi Dynamic Link Manager for AIX: from 7.4.1-00 before 9.0.4-01; Hitachi Dynamic Link Manager EX for...

CVE-2026-125376: Mereithhh vanblog: VanBlog through 0.54.0 contains an information disclosure vulnerability that allows unauthenticated attackers to read…

VanBlog through 0.54.0 contains an information disclosure vulnerability that allows unauthenticated attackers to read private and hidden articles via the POST /api/public/article/:id endpoint. Attackers can submit any non-empty password for private articles lacking an effective password, or reque...

CVE-2026-125082: sunkaifei FlyCMS: A security flaw has been discovered in sunkaifei FlyCMS up to e71738e0cfb7ffd48c2ce74242a2dbb43f84f25a

A security flaw has been discovered in sunkaifei FlyCMS up to e71738e0cfb7ffd48c2ce74242a2dbb43f84f25a. Affected by this vulnerability is the function ModelDataService.insertData of the file articles/detail.html of the component Content Rendering. Performing a manipulation of the argument content...

CVE-2026-125383: go2ismail Asp.Net-Core-Inventory-Order-Management-System: INDOTALENT WHMS (Asp.Net-Core-Inventory-Order-Management-System) before 10.20261109 contains an authentication bypass…

INDOTALENT WHMS Asp.Net-Core-Inventory-Order-Management-System before 10.20261109 contains an authentication bypass vulnerability caused by a hard-coded JWT signing key, issuer and audience in appsettings.json. Unauthenticated remote attackers can forge tokens for any user ID and role that the...

CVE-2026-60039: MB connect line, Helmholz: A high privileged remote attacker can perform a code injection in the backends backup restore function leading to code…

A high privileged remote attacker can perform a code injection in the backends backup restore function leading to code execution. This can result in a total loss of confidentiality, integrity and availability...

CVE-2026-60043: MB connect line, Helmholz: An unauthenticated remote attacker can perform a XSS attack on a logged in backend user allowing for execution of…

An unauthenticated remote attacker can perform a XSS attack on a logged in backend user allowing for execution of multiple critical system actions. This could allow an attacker to shutdown the server or restore an uploaded backup. This can result in a loss of integrity and availability...

CVE-2026-40705: n/a Intel(R) NPU Drivers: Improper resource locking for the Intel(R) NPU Drivers before version 32.0.100.4778 within Ring 1: Device Drivers may…

Improper resource locking for the IntelR NPU Drivers before version 32.0.100.4778 within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

CVE-2026-42917: n/a Intel(R) Neural Compressor software: Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User…

Deserialization of untrusted data for some IntelR Neural Compressor software before version 3.8 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This resul...

CVE-2026-46632: n/a Intel(R) Application Optimization User Interface: Uncontrolled search path for some Intel(R) Application Optimization User Interface within Ring 3: User Applications may…

Uncontrolled search path for some IntelR Application Optimization User Interface within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result...

CVE-2026-97849: Apache Software Foundation Apache TomEE: The embedded Derby network service ignores its configured bind address and listens on all network interfaces

The embedded Derby network service ignores its configured bind address and listens on all network interfaces. When the service is enabled, a remote attacker with network access can connect to the database server and read or modify data. Users are recommended to upgrade to version 10.3.0 or...

CVE-2026-111240: Apache Software Foundation Apache TomEE: The JDBC based JAAS login module accepts a login without a password for accounts whose stored password is NULL

The JDBC based JAAS login module accepts a login without a password for accounts whose stored password is NULL. A remote attacker who knows the user name of such an account can authenticate as that user and obtain its roles. Only deployments using this login module with NULL passwords in the user...

CVE-2026-111262: Apache Software Foundation Apache TomEE: The Jakarta Security LDAP identity store does not neutralize special characters in the caller name before using it in…

The Jakarta Security LDAP identity store does not neutralize special characters in the caller name before using it in directory queries. A remote unauthenticated attacker can alter the queries to enumerate accounts, infer directory attribute values, or influence which directory entry the login is...

CVE-2026-63010: Intermesh groupoffice: Group-Office is an enterprise customer relationship management and groupware tool

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.172, 25.0.108, and 26.0.33, a low-privileged user can create manual reminders containing arbitrary HTML/JavaScript and assign them to any other user including administrators. When the victim's...

CVE-2026-82518: Akamai Akamai CLI: Akamai CLI before 2.0.6 contains a path traversal vulnerability that allows malicious packages to write files outside…

Akamai CLI before 2.0.6 contains a path traversal vulnerability that allows malicious packages to write files outside the install directory via unvalidated commands.name values in cli.json. Attackers who convince victims to install or update a package can use '..' segments to overwrite executable...

CVE-2026-115791: Python Software Foundation CPython: When tarfile or zipfile command line interface (CLI) is used to decompress an archive, a Python script shadowing the…

When tarfile or zipfile command line interface CLI is used to decompress an archive, a Python script shadowing the stdlib can be created. Then if an error occurs during decompressing the next file, the newly created Python script is executed. This is especially true if the created Python is calle...

CVE-2026-125749: vas3k TaxHacker: TaxHacker through 0.8.5 contains an insecure direct object reference vulnerability in app/(app)/settings/actions.ts…

TaxHacker through 0.8.5 contains an insecure direct object reference vulnerability in app/app/settings/actions.ts that allows authenticated users to modify other users' data by supplying an arbitrary userId. Attackers can invoke Server Actions like deleteCategoryAction or editFieldAction with a...

CVE-2026-28743: n/a Intel(R) VTune(TM) Profiler software: Out-of-bounds write for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers…

Out-of-bounds write for the IntelR VTuneTM Profiler software before version 2026.0.0 within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may...

CVE-2026-28765: n/a Intel(R) VTune(TM) Profiler software: Improper input validation for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device…

Improper input validation for the IntelR VTuneTM Profiler software before version 2026.0.0 within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may...

CVE-2026-40065: n/a Intel(R) Neural Compressor software: Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User…

Improper input validation for some IntelR Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This...

CVE-2026-44627: n/a Intel(R) oneAPI Deep Neural Network Library (oneDNN) software: Integer overflow to buffer overflow for some Intel(R) oneAPI Deep Neural Network Library (oneDNN) software before…

Integer overflow to buffer overflow for some IntelR oneAPI Deep Neural Network Library oneDNN software before version v2026.0.0 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enab...

CVE-2026-33089: n/a Intel(R) CIP software: Improper input validation for some Intel(R) CIP software within Ring 2: Privileged Process may allow a denial of service

Improper input validation for some IntelR CIP software within Ring 2: Privileged Process may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when atta...

CVE-2026-35060: n/a AI Playground software: Missing authentication for critical function for some AI Playground software before version v3.1.1-beta within Ring 3:…

Missing authentication for critical function for some AI Playground software before version v3.1.1-beta within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of...

CVE-2026-59986: alanxz rabbitmq-c: rabbitmq-c is a C-language AMQP client library for RabbitMQ

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to version 0.17.0, the bounds check offset = o + len SIZEMAX on 32-bit systems. len is a uint32t read from the AMQP wire as a BYTES/UTF8 field length. The overflow wraps the check to a small value that passes, producing a decoded...

CVE-2026-12574: Zohocorp DDI Central: Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Server-side HTML/JavaScript…

Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Server-side HTML/JavaScript injection in analytics PDF generation leading to local file disclosure...

CVE-2026-125755: nodemailer: Nodemailer 3.0.0 before 10.4.1 contains an address parsing flaw in addressparser that truncates domains at folding…

Nodemailer 3.0.0 before 10.4.1 contains an address parsing flaw in addressparser that truncates domains at folding whitespace or comments before a dot, allowing attackers to bypass recipient domain restrictions. Attackers can submit crafted to, cc, bcc or replyTo addresses that pass RFC 5322 doma...

CVE-2026-125391: webmin: Webmin through 2.670 contains an OS command injection vulnerability in samba/save_euser.cgi that allows authenticated…

Webmin through 2.670 contains an OS command injection vulnerability in samba/saveeuser.cgi that allows authenticated Samba user maintainers to inject commands via unvalidated opts parameter. Attackers can embed shell metacharacters in account option flags passed by createuser and modifyuser to...

CVE-2026-20798: n/a Intel(R) Graphics Driver software installers: Uncontrolled search path for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may…

Uncontrolled search path for some IntelR Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This result may...

CVE-2026-35683: n/a Intel(R) Multi-Buffer Crypto for IPSec: Out-of-bounds write for some Intel(R) Multi-Buffer Crypto for IPSec within Ring 3: User Applications may allow a denial…

Out-of-bounds write for some IntelR Multi-Buffer Crypto for IPSec within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...