CVE-2026-120215

A flaw was found in @fastify/cors. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a Cross-Origin Resource Sharing CORS preflight request to an application configured with a non-default hook. Under these conditions, the plugin improperly attempts to write response...

CVE-2026-99228

A flaw was found in the Linux kernel's iouring subsystem. When an application thread exits while running asynchronous operations via internal worker queues, the signal intended to interrupt and terminate worker tasks can be lost. A local user could exploit this vulnerability by submitting...

CVE-2026-119627

A flaw was found in Gitea. An authenticated user possessing a restricted, public-only personal access token can bypass visibility controls when requesting user or organization web profiles and feed routes. This issue leads to information disclosure by allowing unauthorized viewers to access the...

CVE-2026-119533

A flaw was found in Gitea. Project boards do not properly verify read permissions when listing pull requests that reference board issues. An unauthorized user or anonymous visitor viewing an accessible board can see metadata from private pull requests, including repository paths, pull request...

CVE-2026-119625

A flaw was found in Gitea. The user profile web route accepts personal access tokens through HTTP Basic authentication without properly verifying their assigned permission scopes. An authenticated attacker possessing a token with limited permissions can bypass intended scope restrictions to view...

CVE-2026-118370

A flaw was found in expat. An integer overflow in the XML attribute parsing logic allows a remote attacker to cause memory corruption and a Denial of Service DoS. By supplying a specially crafted XML document containing an excessively large number of attributes, an attacker can trigger...

CVE-2026-117649

A flaw was found in Gitea. This vulnerability leads to unauthorized information disclosure due to missing access control checks on issue dependency events in the web interface and application programming interface API. If an accessible issue is linked to an issue in a restricted or private...

CVE-2026-117610

A flaw was found in expat. A remote attacker who controls input stream chunking can trigger a NULL pointer dereference by forcing an empty initial parse on an external entity subparser. Successful exploitation causes the application to crash, resulting in a Denial of Service DoS. Mitigation Avoid...

CVE-2026-116289

A flaw was found in Gitea. An authenticated attacker holding a personal access token restricted to public resources can register an organization-level Actions runner because Gitea fails to validate the token's scope properly. This issue allows the runner to receive and execute automated jobs from...

CVE-2026-107229

A flaw was found in AsyncHttpClient. The library's cookie store incompletely validates domain attributes when processing HTTP cookies. A remote attacker controlling a server can exploit this vulnerability to store cookies that the client subsequently sends to unrelated domains. This allows...

CVE-2026-107228

A flaw was found in AsyncHttpClient. When applications share a client instance across multiple users, the default cookie store overwrites explicitly configured request Cookie headers with stored cookies from another user targeting the same destination. This can cause requests to execute under the...

CVE-2026-106123

A flaw was found in the RabbitMQ Java client library, leading to information disclosure. When parsing of an Advanced Message Queuing Protocol AMQP Uniform Resource Identifier URI fails, the connection configuration loader includes the raw URI string in exception messages. If the URI contains...

CVE-2026-103878

A flaw was found in the Apache Directory LDAP API. When a StartTLS operation is initiated after a search request has already been sent, the client can receive response data in cleartext before the Transport Layer Security TLS handshake completes. An attacker capable of intercepting network traffi...

CVE-2026-103433

A flaw was found in Docker Buildx. This vulnerability allows an attacker to cause information disclosure by convincing a user to run an untrusted Bake build definition. Due to missing filesystem read authorization checks, an untrusted build configuration can access client-side files or container...

CVE-2026-100724

A flaw was found in http4k. When reverse proxy routing is configured with multiple virtual hosts, incoming HTTP Host headers are evaluated using loose substring matching instead of exact matching. A remote attacker can exploit this vulnerability by submitting a crafted Host header that contains t...

CVE-2026-85720

A flaw was found in the AsyncHttpClient library. When a Java application uses an HTTP proxy to connect to an HTTPS origin, the library sends sensitive origin credentials, such as Basic, Digest, NTLM, Kerberos, or SPNEGO tokens, in the plaintext CONNECT request. This occurs before a secure TLS...

CVE-2026-85532

A flaw was found in Apache WSS4J. A remote attacker can exploit this issue by sending crafted Web Services Security WS-Security messages containing derived-key lengths and offsets without adequate bounds. Successful exploitation can lead to a Denial of Service DoS through excessive CPU and memory...

CVE-2026-85317

A flaw was found in the Apache Camel HTTP component. The OAuth2 authentication token cache incorrectly shares stored tokens across different endpoints because key authorization attributes, such as requested permissions and target service destinations, are omitted from the cache key. In...

CVE-2026-85316

A flaw was found in the Apache Camel Platform HTTP component. The component determines whether an endpoint operates in proxy mode using a prefix match for paths starting with "proxy" rather than requiring an exact match, inadvertently causing non-proxy endpoints to act as forward proxies. A remot...

CVE-2026-85315

A flaw was found in the Apache Camel gRPC component. When an internal route processing a gRPC remote procedure call request fails, the application includes the unhandled exception message directly in the status description returned to the client. A remote attacker able to trigger a route failure...

CVE-2026-85314

A flaw was found in the Apache Camel Mail component. A remote attacker can exploit this vulnerability by sending a specially crafted multipart email message containing arbitrary mail configuration headers. Because these headers bypass filtering during message processing, the attacker can influenc...

CVE-2026-85313

A flaw was found in Apache Camel's Jetty component. When Cross-Origin Resource Sharing CORS—a mechanism that controls how web applications access resources from other domains—is enabled on an endpoint, the component applies an insecure default policy that permits requests from any domain with...

CVE-2026-85312

A flaw was found in Apache Camel. The saga processing component fails to filter the Long-Running-Action header on incoming messages, which is used to determine which distributed transaction a request belongs to. A remote attacker can exploit this vulnerability by submitting a message with a craft...

CVE-2026-85296

A flaw was found in the Apache Camel AS2 component. Cryptographic signing material belonging to an individual transaction was stored in a shared state across requests rather than isolated to the active request. Under concurrent network traffic in multi-partner deployments, delivery receipts, know...

CVE-2026-85260

A flaw was found in the Apache Camel MLLP Minimal Lower Layer Protocol component. This issue leads to information disclosure because clinical message payloads containing sensitive patient data are written to standard application logs. The component enables logging of protected health information ...

CVE-2026-85257

A flaw was found in the Apache Camel CXF component. When a service route encounters an undeclared exception, detailed error information is returned directly in the Simple Object Access Protocol SOAP fault response. A remote, unauthenticated attacker can exploit this flaw by sending requests that...

CVE-2026-85254

A flaw was found in Apache Camel's Platform HTTP component. The mechanism designed to prevent request headers from being reflected into HTTP responses improperly compares header names using case-sensitive checks. A remote attacker can exploit this behavior by varying header name casing or sending...

CVE-2026-85247

A flaw was found in the Apache Camel Knative component. This vulnerability can lead to information disclosure when Transport Layer Security TLS is enabled without a configured truststore. In this scenario, the HTTP client defaults to trusting all presented digital certificates rather than...

CVE-2026-85249

A flaw was found in Apache Camel's Tika component. When processing documents, the component maps extracted metadata keys directly to internal message headers without filtering. A remote attacker can exploit this vulnerability by submitting a crafted document with manipulated metadata, injecting...

CVE-2026-84181

A flaw was found in the Apache Camel Shiro component. The security processor fails to verify user credentials when an incoming request matches the identity of an authenticated user still associated with a reused worker thread. Under specific timing conditions, a remote attacker can exploit this...

CVE-2026-85246

A flaw was found in the Apache Camel Mina component. When message processing fails, the Mina consumer directly returns the unhandled exception across the network connection to the client. A remote attacker can exploit this vulnerability by triggering a processing failure to obtain sensitive...

CVE-2026-85245

A flaw was found in the Apache Camel Thrift component, which can lead to information disclosure. When processing incoming messages, the component unmarshals data into a shared process-wide object rather than creating a fresh instance for each exchange. Consequently, data from earlier or concurren...

CVE-2026-84176

A flaw was found in the Apache Camel Platform HTTP Vertx component. Due to an overly permissive Cross-Origin Resource Sharing CORS configuration, the server reflects incoming request origins while enabling credential access. A remote attacker could exploit this flaw by enticing an authenticated...

CVE-2026-78163

A flaw was found in the Apache Camel Docling component. This issue can lead to sensitive information disclosure because the component automatically determines whether to treat input text as document content, a local file path, or an external web address based solely on its prefix. A remote attack...

CVE-2026-75883

A flaw was found in pppd. A remote attacker could exploit a buffer overflow vulnerability in the PEAP response handling. By sending a specially crafted PEAP Request packet, an attacker could cause the pppd process to corrupt global static data, leading to incorrect behavior or a system crash...

CVE-2026-71883

A flaw was found in Bouncy Castle for Java LTS. This flaw can lead to information disclosure when an application performs in-place encryption using native packet ciphers. Due to improper memory handling in native code bindings, the library overwrites the newly produced ciphertext with the origina...

CVE-2026-99234

A flaw was found in the Linux kernel's tracing subsystem. When configuring event triggers, a failure during command parsing does not unregister the trigger before releasing its internal tracking memory. A local user with access to the kernel tracing interface could exploit this flaw by submitting...

CVE-2026-99232

A flaw was found in the Linux kernel. A local attacker can trigger this issue by invoking faultable system calls with non-user memory addresses while tracing is active. Because the kernel fails to verify that the source address resides in user space before copying data into trace buffers, this fl...

CVE-2026-99230

A flaw was found in the Linux kernel's iouring subsystem. When cancelable commands are removed, recycled request objects can retain stale list pointers instead of being cleanly reinitialized. A local attacker can trigger this issue by submitting specific asynchronous I/O requests, causing the...

CVE-2026-99229

A flaw was found in the Linux kernel's iouring subsystem. A local attacker can cause a Denial of Service DoS by triggering an infinite loop when waiting for completion queue events. If entries on the overflow list cannot be flushed into the completion queue, the waiting kernel task continuously...

CVE-2026-92899

A flaw was found in Apache WSS4J. An attacker who intercepts an authenticated request can bypass replay protection by slightly modifying the base64-encoded nonce a unique identifier used once to prevent repeated use. Because the replay cache stores the raw encoded text rather than the decoded...

CVE-2026-92573

A flaw was found in Apache Qpid Broker-J. An authenticated attacker can cause a Denial of Service DoS by sending specially crafted compressed data to the message broker. Because the shared decompression mechanism does not enforce limits on decompressed output size during Advanced Message Queuing...

CVE-2026-92121

A flaw was found in Apache WSS4J. This vulnerability allows a remote attacker to bypass security policy enforcement by submitting a specially crafted message using a Security Token Reference STR transformation. Due to an internal state tracking error in the streaming message processor, signature...

CVE-2026-91858

A flaw was found in camel-fop. When third-party XML processing libraries are present on the classpath, the component fails to properly restrict external resource resolution during document transformations. A remote attacker can exploit this flaw by submitting a crafted document containing externa...

CVE-2026-90979

A flaw was found in Apache Karaf. When constructing Lightweight Directory Access Protocol LDAP search filters for user and role lookups, the application fails to properly escape special characters in user-supplied input. A remote attacker can exploit this vulnerability by submitting a crafted...

CVE-2026-89140

A flaw was found in Temporal Server. Internal completion callbacks are not properly restricted to the namespace that created them, allowing a cross-namespace authorization bypass. An authenticated attacker with write permissions in one namespace can submit forged internal callbacks to manipulate...

CVE-2026-102703

A flaw was found in Xen. When processing batched grant copy operations used for memory sharing between virtual machines, the hypervisor caches internal validation data but fails to properly re-validate it when frame numbers and grant references are intermixed. A malicious guest domain can exploit...

CVE-2026-99223

A flaw was found in the Linux kernel. A local unprivileged attacker can exploit this flaw to cause an information disclosure by inserting keys with known descriptions into a keyring and observing the order in which they are retrieved. Because internal keyring indexing relies on memory addresses,...

CVE-2026-99226

A flaw was found in the Linux kernel's keyrings subsystem. A race condition between concurrent named keyring lookups and key ownership changes allows a local user to cause a use-after-free read. When a key's ownership is transferred while a lookup is in progress, the previous user structure can b...

CVE-2026-99225

A flaw was found in the Linux kernel. A local attacker could exploit this vulnerability to cause a Denial of Service DoS by crashing the system. This flaw occurs due to a race condition in the key management subsystem during process keyring searches, where revoking an authorization key concurrent...