CVE-2026-119191

A flaw was found in node-forge. A remote attacker can exploit this vulnerability to cause a Denial of Service DoS by supplying specially crafted Abstract Syntax Notation One ASN.1 data containing deeply nested structures. Due to improper recursion depth limit enforcement and excessive memory...

CVE-2026-118626

A flaw was found in MLflow. Due to missing authorization checks within the pre-request handler configuration BEFOREREQUESTHANDLERS, an authenticated remote attacker can access restricted functionality without proper permission. This flaw allows an attacker to escalate privileges and access...

CVE-2026-118623

A flaw was found in MLflow. This vulnerability allows an attacker to execute arbitrary code in the context of the running application by tricking a user into opening a crafted file or visiting a malicious webpage. The issue stems from the unsafe deserialization reconstructing saved data objects o...

CVE-2026-118628

A flaw was found in MLflow. An unauthenticated remote attacker can exploit a Server-Side Request Forgery SSRF vulnerability in the get-artifacts function due to improper validation of Uniform Resource Identifiers URIs. By sending a crafted request, an attacker can coerce the server to access...

CVE-2026-118625

A flaw was found in MLflow. An authenticated remote attacker can exploit a missing authorization check within the getendpoints function of the tracking server component. By triggering this functionality without appropriate permission checks, the attacker can achieve privilege escalation and gain...

CVE-2026-118624

A flaw was found in MLflow. An authenticated remote attacker can exploit a missing authorization check within the Tracking Server Jobs functionality, specifically in the findvalidator function. Successful exploitation allows the attacker to access and disclose sensitive information in the context...

CVE-2026-120648

A flaw was found in perl-CGI. When generating HTML comments, input is placed directly into comment tags without proper escaping. A remote attacker could exploit this flaw by submitting input that prematurely terminates the comment block, enabling the injection of arbitrary HTML or client-side...

CVE-2026-120647

A flaw was found in perl-cgi. A remote attacker can manipulate the filename of downloaded files by providing input containing unescaped double quotes to applications that use untrusted data for attachment names in HTTP Hypertext Transfer Protocol responses. Because the module does not properly...

CVE-2026-120645

A flaw was found in perl-cgi. When rendering option groups using the scrollinglist function, user-supplied input from request parameters is directly inserted into regular expression search patterns without proper escaping. A remote attacker can exploit this vulnerability by submitting crafted inp...

CVE-2026-120644

A flaw was found in perl-cgi. This vulnerability allows a remote attacker to inject arbitrary cookie attributes into HTTP Hypertext Transfer Protocol Set-Cookie response headers. The issue occurs because the module fails to properly validate semicolons or control characters in path, domain, and...

CVE-2026-120638

A flaw was found in perl-cgi. The redirect function decodes HTML entities in target URLs before generating the HTTP Location header. A remote attacker could exploit this vulnerability by supplying a specially crafted URL containing encoded characters that bypasses application-level URL validation...

CVE-2026-120640

A flaw was found in perl-cgi. This vulnerability allows a remote attacker to conduct request forgery by spoofing internal request body parameters through query strings or form fields. Because the module does not distinguish between actual request payloads and user-supplied parameters, an attacker...

CVE-2026-120637

A flaw was found in perl-cgi. When processing an unrecognized HTTP request method, such as OPTIONS, the module unintentionally falls back into its default offline debugging mode. A remote attacker can exploit this issue by submitting a request with an unhandled method to force the application to...

CVE-2026-120639

A flaw was found in perl-cgi, where it fails to properly validate newline characters when generating HTTP headers. When an application passes untrusted input into header fields, entity-encoded newlines or unvalidated parameters can bypass sanitization checks. A remote attacker could exploit this...

CVE-2026-120636

A flaw was found in perl-cgi. The component constructs target URLs and form actions from client-supplied request values without sufficient validation. A remote attacker can exploit this flaw by sending a specially crafted request URI Uniform Resource Identifier containing arbitrary domains or...

CVE-2026-120635

A flaw was found in perl-CGI. Due to discrepancies in how multipart form-data requests are parsed compared to standard specifications, a remote attacker can smuggle form fields past intermediate proxies and Web Application Firewalls WAFs. By submitting specially crafted multipart requests, an...

CVE-2026-120634

A flaw was found in perl-cgi. When running in persistent server environments, the internal buffer used to forward warnings to the browser is not cleared between requests. Consequently, a user can view sensitive request data or error details from another user's session in the returned HTML comment...

CVE-2026-120643

A flaw was found in perl-CGI. When constructing Uniform Resource Locators URLs, the url and selfurl functions fail to properly encode single quote characters in request paths or query parameters. A remote attacker can exploit this issue by submitting a crafted request to an application that embed...

CVE-2026-120633

A flaw was found in perl-CGI. This vulnerability allows a remote attacker to conduct web cache poisoning or redirect users to malicious websites by sending crafted Hypertext Transfer Protocol HTTP requests with untrusted host headers. Because the module trusts client-provided headers such as...

CVE-2026-120632

A flaw was found in the Perl CGI module. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending a specially crafted HTTP request. Due to an inefficient regular expression used when parsing multipart/related Content-Type headers, processing non-matching headers...

CVE-2026-118627

A flaw was found in MLflow. This vulnerability allows a remote attacker to execute arbitrary code by convincing a user to open a crafted file or load a malicious SHAP SHapley Additive exPlanations model. Because MLflow improperly validates user-supplied data during model deserialization, an...

CVE-2026-114550

A flaw was found in libwebsockets. When processing Message Queuing Telemetry Transport MQTT publish acknowledgment PUBACK packets, incoming network data is not properly validated, resulting in an out-of-bounds memory write. An unauthenticated remote attacker can exploit this vulnerability by...

CVE-2026-120642

A flaw was found in perl-cgi. When running under Perl's taint mode—a security feature that prevents untrusted data from being used in sensitive operations—the module returns several request-derived values without taint flags. A remote attacker could exploit this vulnerability by submitting crafte...

CVE-2026-120641

A flaw was found in perl-cgi. The module returns client-supplied upload filenames without sanitizing directory traversal sequences or path separators. A remote attacker can exploit this flaw by submitting a file upload with a crafted filename, potentially causing the host application to write fil...

CVE-2026-120651

A flaw was found in perl-cgi. A remote attacker can trigger a denial of service DoS by sending an HTTP request containing a body shorter than its declared Content-Length header. When file upload processing is disabled, the server enters an infinite loop attempting to discard remaining data,...

CVE-2026-120650

A flaw was found in perl-cgi. A remote attacker can trigger a Denial of Service DoS through excessive memory, processor, and disk space consumption by sending specially crafted HTTP requests. Due to missing or unenforced limits on request sizes, parameters, and file uploads, the module processes...

CVE-2026-120646

A flaw was found in perl-cgi. A remote attacker can trigger a Denial of Service DoS by supplying a crafted request parameter processed by the uploadInfo function. Because the function fails to verify that the parameter represents an upload file handle, the invalid input causes an unhandled...

CVE-2026-120631

A flaw was found in perl-cgi. A remote attacker can cause a Denial of Service DoS by sending an HTTP request with a specially crafted Cookie header containing a malformed expiration attribute. Because the cookie parser inserts this unescaped value directly into an internal regular expression a...

CVE-2026-120572

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Layout: Block and Inline component...

CVE-2026-92051

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue due to invalid pointer in the Graphics component...

CVE-2026-115731

Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, allows a client that holds a CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by submitting a report containing a crafted rich-data type via a PUT...

CVE-2026-115732

Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. This enables impersonation of other nodes and,...

CVE-2026-121054

A flaw was found in chromium-browser. Improper state validation during XML processing allows a remote attacker to bypass the browser's Same-Origin Policy SOP, potentially leading to unauthorized information disclosure. By convincing a user to open a specially crafted HTML page, an attacker could...

CVE-2026-121189

A flaw was found in chromium-browser. A use-after-free vulnerability—where memory is accessed after it has been released—allows a remote attacker to execute arbitrary code outside the security sandbox. By convincing a victim to view a specially crafted HTML page, the attacker can bypass isolation...

CVE-2026-121165

A flaw was found in chromium-browser. A remote attacker could spoof user interface UI elements by convincing a user to visit a specially crafted HTML page on a mobile device. Successful exploitation allows an attacker to misrepresent interface components and mislead users through social engineeri...

CVE-2026-121228

A flaw was found in the V8 JavaScript engine in chromium-browser. This vulnerability is caused by a type confusion issue, where the engine incorrectly processes an object as a different type, leading to memory corruption. A remote attacker could exploit this flaw by enticing a user to visit a...

CVE-2026-121052

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the browser sandbox by convincing a user to view a specially crafted HTML page. This vulnerability is caused by a use-after-free flaw in the Graphics Processing Unit GPU component, which occurs when system...

CVE-2026-121036

An use after free flaw was found in the CSS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=577378379 https://code.google.com/p/chromium/issues/detail?id=121036...

CVE-2026-120930

A flaw was found in chromium-browser. An incorrect authorization issue in the Blink rendering engine allows a remote attacker to bypass the Same-Origin Policy SOP, a browser security mechanism that isolates data between different websites. By tricking a user into opening a specially crafted HTML...

CVE-2026-121127

A flaw was found in chromium-browser's WebAudio component. A remote attacker could execute arbitrary code within the browser sandbox by tricking a user into visiting a specially crafted HTML page. This vulnerability occurs due to a use-after-free condition, where the browser accesses system memor...

CVE-2026-121241

A flaw was found in the Navigation component of chromium-browser. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, triggering a use-after-free condition where memory is accessed after being released. Successful exploitation may allow th...

CVE-2026-121141

A flaw was found in Chromium's Editing component. Due to improper input validation, a remote attacker could use social engineering to convince a user to interact with a crafted HTML page to bypass the web origin policy a browser security boundary that isolates data between different websites...

CVE-2026-121117

A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code within the application's sandbox by enticing a user to visit a specially crafted HTML page. The issue stems from a use-after-free error in the Paint component, where memory is incorrectly accessed...

CVE-2026-63478

A flaw was found in isomorphic-git. A remote attacker controlling a malicious repository or intercepting network traffic can exploit improper path validation during clone or checkout operations by supplying directory traversal sequences in repository tree entries. This issue allows the attacker t...

CVE-2026-63476

A flaw was found in isomorphic-git. A malicious or compromised remote Git server can cause a Denial of Service DoS by sending a specially crafted packfile delta header with an excessively large target size during clone or fetch operations. Because isomorphic-git allocates memory for the target si...

CVE-2026-63475

A flaw was found in isomorphic-git. This vulnerability allows a malicious or compromised remote server to cause a persistent Denial of Service DoS. During a repository clone operation, the server can supply circular symbolic references that the client stores locally without cycle detection...

CVE-2026-88968

A flaw was found in Claude Code. An attacker capable of executing code within the tool's sandbox can overwrite arbitrary files outside the designated workspace, leading to a sandbox escape. This issue occurs because the Edit tool verifies file paths without securing them against changes to the...

CVE-2026-63395

A flaw was found in isomorphic-git. This vulnerability allows a remote attacker to achieve arbitrary code execution by tricking a user or automated process into checking out a specially crafted repository. During the checkout operation, the library writes files through directory symbolic links...

CVE-2026-54161

A flaw was found in Network UPS Tools NUT. An attacker capable of intercepting or controlling communications from an upstream server or monitored device can achieve arbitrary command execution with the privileges of the monitoring client, typically root. This issue occurs because the upsmon...

CVE-2026-121067

A flaw was found in the PermissionElement component of chromium-browser. A remote attacker can exploit this vulnerability to spoof user interface UI elements by convincing a user to visit a crafted HTML page. Through social engineering and interface misrepresentation, an attacker could mislead...