CVE-2026-121440

A flaw was found in Wasmtime. When processing HTTP traffic via the WebAssembly System Interface WASI, the runtime fails to validate forwarded HTTP trailers against forbidden header filtering rules. A WebAssembly guest application can exploit this vulnerability by forwarding a request or response...

CVE-2026-121550

A flaw was found in nnn. The application handles its communication path without verifying that an existing target is a legitimate first-in, first-out FIFO special file. A local attacker can exploit this issue by pre-creating the predictable file path as a symbolic link or regular file. This...

CVE-2026-121441

A flaw was found in Wasmtime's wasi-http component. A malicious WebAssembly Wasm guest application can set multiple conflicting Content-Length headers on outgoing HTTP requests. This flaw allows an attacker to perform HTTP request smuggling through downstream servers or intermediaries that do not...

CVE-2026-121389

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a Denial of Service DoS by sending a malformed Device Redirection RDPDR announcement. Under configurations where diagnostic trace logging and assertions are active, processing the invalid data length triggers ...

CVE-2026-121604

A flaw was found in wlroots. An out-of-bounds read vulnerability in the XWayland window manager component allows a local user to cause an information disclosure. By providing an improperly terminated window class property, an attacker can read beyond allocated memory and expose compositor heap da...

CVE-2026-120754

A flaw was found in HDF5. This vulnerability allows an attacker to cause information disclosure by convincing a user or application to process a specially crafted HDF5 file. During decompression, bounds checks incorrectly evaluate the buffer's total allocated size rather than the actual amount of...

CVE-2026-121549

A flaw was found in nnn. The pdfread and nuke plugins create temporary files in shared directories using predictable file paths. A local attacker can exploit this flaw by pre-creating a symbolic link at the intended location, causing the application to truncate and overwrite arbitrary files...

CVE-2026-121439

A flaw was found in wasmtime. The wasi-http component fails to properly validate Content-Length headers when processing network responses. A malicious WebAssembly guest can supply an invalid Content-Length header and splice response bodies, allowing HTTP Hypertext Transfer Protocol response...

CVE-2026-121438

A flaw was found in mistune. A remote attacker could cause a Denial of Service DoS by submitting specially crafted Markdown input containing deeply nested brackets. Because the link parser performs repetitive scans when evaluating these nested brackets, processing the crafted input consumes...

CVE-2026-121425

A flaw was found in Nodemailer. This vulnerability allows a remote attacker to cause information disclosure by redirecting outgoing messages to attacker-chosen recipients and bypassing recipient allowlists. The issue occurs because the address parser prematurely terminates email address groups wh...

CVE-2026-121424

A flaw was found in nodemailer. A remote attacker can cause email redirection and information disclosure by supplying a specially crafted email address containing nested comments. The internal address parser prematurely ends comment processing at the first closing parenthesis, treating the...

CVE-2026-121409

A flaw was found in FreeRDP. This vulnerability allows a malicious server or an unauthenticated remote peer to cause a Denial of Service DoS by sending an oversized connection routing token. When the client or proxy processes this oversized data during connection negotiation, an internal validati...

CVE-2026-121407

A flaw was found in FreeRDP. An authenticated remote attacker can cause a Denial of Service DoS by sending a specially crafted message to the shadow server's remdesk virtual channel. Due to an inverted packet length verification check, processing the malformed data triggers an internal assertion...

CVE-2026-121405

A flaw was found in FreeRDP. When serial device redirection is enabled, a malicious Remote Desktop Protocol RDP server can send a crafted serial device-control request specifying an excessively large output buffer length. Because FreeRDP fails to limit this buffer length before allocating memory,...

CVE-2026-121399

A flaw was found in FreeRDP. A malicious Remote Desktop RD Gateway server can trigger a Denial of Service DoS by sending a specially crafted packet header with an excessively large declared length prior to authentication. This causes the client to allocate an excessive amount of system memory,...

CVE-2026-121397

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause an information disclosure by sending crafted clipboard image data to a connected client. When the client converts the image into Portable Network Graphics PNG format, a heap buffer over-read occurs, embedding...

CVE-2026-121393

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending crafted RemoteFX graphics data to a connecting client. When the client processes malformed region rectangle coordinates, an internal assertion failure occurs, abruptly...

CVE-2026-120755

A flaw was found in hdf5. An attacker could cause a Denial of Service DoS by convincing a user or application to process a specially crafted HDF5 file. When decoding szip-compressed data, the library does not verify that a data chunk is large enough before subtracting the header size, leading to ...

CVE-2026-120689

A flaw was found in HDF5. When traversing internal B-tree data structures, the library fails to properly validate child node relationships if a node is already loaded in the metadata cache. An attacker could exploit this vulnerability by enticing a user or application to open a specially crafted...

CVE-2026-65165

A flaw was found in Slurm. An authenticated local user can exploit this vulnerability by deliberately manipulating the provided node list in conjunction with the arbitrary task distribution option. Successful exploitation allows the user to gain unauthorized access to compute nodes outside of the...

CVE-2026-65138

A flaw was found in Slurm. A local user can trigger an arbitrary memory read vulnerability through the slurmstepd daemon socket Application Programming Interface API. This issue allows an attacker to cause information disclosure by reading sensitive process memory, potentially exfiltrating...

CVE-2026-65108

A flaw was found in Slurm. A local attacker with low privileges can trigger a heap-based buffer overflow in the slurmstepd daemon while it runs with root permissions. Successful exploitation may allow an attacker to escalate privileges or execute arbitrary code with root access, leading to the...

CVE-2026-65168

A flaw was found in Slurm. A heap-based buffer overflow exists in the socket handling code of the slurmstepd service. A local attacker with low privileges could exploit this vulnerability by sending crafted data to the service socket, corrupting memory. This could allow the attacker to achieve...

CVE-2026-65140

A flaw was found in Slurm. Inconsistent authorization checks against the Operator permission level within the Slurm Database Daemon SlurmDBD can be chained together. An authenticated user with Operator privileges could exploit this flaw to escalate their privileges to Administrator, gaining full...

CVE-2026-65109

A flaw was found in Slurm. Improper symbolic link symlink resolution during container cleanup operations allows a local attacker to delete arbitrary files on the compute node outside of their control. This issue can lead to unauthorized data loss and compromise system integrity...

CVE-2026-65107

A flaw was found in Slurm. A local user can alter the supplemental group list during an sbcast file broadcast transmission to write files to restricted directory paths. This vulnerability could lead to unauthorized file modification and potential privilege escalation on affected systems...

CVE-2026-120757

A flaw was found in HDF5. When traversing external links, the library fails to validate the length of user-supplied link data, resulting in a heap buffer over-read. By convincing a user or application to open a specially crafted HDF5 file containing a malformed external link, an attacker can caus...

CVE-2026-120758

A flaw was found in HDF5. An attacker can cause a Denial of Service DoS by convincing a user or application to open a specially crafted HDF5 file. Due to improper handling of corrupted metadata in local heap structures, the library attempts to dereference a NULL pointer during cache operations,...

CVE-2026-120756

A flaw was found in hdf5. When parsing object header messages, insufficient boundary checks can allow an attacker to trigger a heap buffer over-read by convincing a user or application to open a specially crafted file. Successful exploitation could cause the application to crash, resulting in a...

CVE-2026-116641

A flaw was found in mongo-tools. The application fails to reject connections using certificates issued by distrusted Certificate Authorities CAs due to an incomplete internal certificate denylist. A remote attacker in an intercepted network position could exploit this flaw by presenting a...

CVE-2026-116542

A flaw was found in netty-tcnative. A remote, unauthenticated attacker can exploit this issue by sending a specially crafted Server Name Indication SNI hostname with overlong character encodings during a Transport Layer Security TLS handshake. This causes the application to decode the hostname...

CVE-2026-115710

A flaw was found in Elasticsearch. For certain query types, cached search results are incorrectly shared between users subject to field-level security restrictions and unrestricted users. An authenticated attacker with restricted permissions can exploit this flaw by submitting crafted search...

CVE-2026-116539

A flaw was found in netty-tcnative. A remote attacker can cause a denial of service DoS by sending specially crafted Transport Layer Security TLS messages. Due to improper buffer index handling, incoming data triggers a heap-based buffer overflow and an out-of-bounds memory write, which crashes t...

CVE-2026-115715

A flaw was found in Elasticsearch. An authenticated remote user with permissions to write to or search an index utilizing the phonetic analysis plugin can cause a Denial of Service DoS by submitting specially crafted input. Processing this input results in excessive heap memory consumption, causi...

CVE-2026-115298

A flaw was found in Elasticsearch. An authenticated user can bypass access controls to view restricted data, leading to information disclosure. Certain search and query operations fail to enforce field-level security—which restricts access to specific data fields within an index—on constant keywo...

CVE-2026-121548

A flaw was found in nnn. The togglex plugin fails to properly sanitize filenames before passing them to a system command. A local attacker can exploit this flaw by placing a file with a specially crafted name in a directory, leading to arbitrary command execution with the privileges of the user...

CVE-2026-121506

A flaw was found in NTPsec. An out-of-bounds memory read and write issue in the Network Time Security NTS client extension field parsing allows a remote attacker capable of sending server responses to trigger heap memory corruption. By supplying a crafted NTS extension field with an excessive non...

CVE-2026-121437

A flaw was found in mistune. A remote attacker could cause a Denial of Service DoS by submitting specially crafted Markdown documents containing repeating emphasis delimiter patterns. Processing these patterns triggers an inefficient index-fixup loop that consumes excessive CPU resources and stal...

CVE-2026-121386

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server or a man-in-the-middle network attacker can cause a Denial of Service DoS by sending malformed PNG or JPEG image data during clipboard synchronization. Due to missing error handling in the image parsing routines, processi...

CVE-2026-112902

A flaw was found in Pillow. When saving an image in the TIFF format, Pillow incorrectly forwards unknown metadata tags to the underlying image processing library. A remote attacker could exploit this flaw by providing a specially crafted image containing malicious metadata to an application that...

CVE-2026-121426

A flaw was found in Nodemailer. This vulnerability allows a remote attacker to cause information disclosure by bypassing recipient address restrictions. Due to improper parsing of email addresses containing angle brackets within quoted sections, the parser misidentifies the intended destination...

CVE-2026-121412

A flaw was found in FreeRDP. This vulnerability allows an authenticated remote client to cause a Denial of Service DoS by exhausting system memory on the proxy server. When intercepting Dynamic Virtual Channel DVC communications, the proxy does not enforce cumulative limits on reassembling...

CVE-2026-121395

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a Denial of Service DoS by sending crafted RemoteFX graphic data to a connecting client. When processing the malformed display tiles with verbose assertions enabled, an unexpected value in the differential...

CVE-2026-117666

A flaw was found in sslverifyfun. The library improperly validates Transport Layer Security TLS certificates containing partial wildcards, allowing wildcard patterns to match across domain label boundaries and IP addresses. A man-in-the-middle attacker can exploit this vulnerability by presenting...

CVE-2026-113730

A flaw was found in OGNL Object Graph Navigation Library. Under configurations that rely on stricter-invocation mode as a security boundary, the validation mechanism inspects the declaring class of invoked methods but fails to restrict Java reflection objects. A remote attacker capable of...

CVE-2026-110008

A flaw was found in @fastify/oauth2. Due to inconsistent cookie path handling during the authentication process, temporary verification cookies are not properly removed after the login flow completes. As a result, single-use authentication tokens persist throughout the user's browser session. A...

CVE-2026-118489

A flaw was found in Eclipse Vert.x Web Client. When a caching client is shared across multiple user sessions, responses intended for a specific user that are not explicitly marked as private are stored in a shared cache. Consequently, an unauthorized user or caller requesting the same resource ca...

CVE-2026-82976

A flaw was found in the image-customization-controller used in OpenShift's bare metal provisioning stack. The controller registers an HTTP file server on port 8084 with no authentication. The custom imageFileSystem implementation exposes a browsable HTML directory listing of all registered images...

CVE-2026-118027

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Frame poisoning in the Layout component...

CVE-2026-121505

A flaw was found in NTPsec. A malicious Network Time Security Key Exchange NTS-KE server can cause information disclosure by sending a response record with a declared length exceeding the data received. This triggers an out-of-bounds read in the client response parser, allowing the server to...