CVE-2026-114278

A flaw was found in che-machine-exec. The service improperly sanitizes user-supplied input when constructing shell commands from configuration endpoints. An unauthenticated remote attacker can exploit this vulnerability by submitting crafted network requests, leading to arbitrary code execution...

CVE-2026-119379

A flaw was found in SQLite's session extension. A local attacker can supply a specially crafted changeset containing inconsistent table definitions, causing the application to write data past allocated memory boundaries. This heap-based buffer overflow results in memory corruption, potentially...

CVE-2026-119374

A flaw was found in SQLite. When the Full Text Search FTS5 extension is enabled and secure-delete mode is active, processing a database containing a corrupted search index triggers a heap-based buffer overflow. An attacker who tricks an application or user into opening a crafted database file can...

CVE-2026-119191

A flaw was found in node-forge. A remote attacker can exploit this vulnerability to cause a Denial of Service DoS by supplying specially crafted Abstract Syntax Notation One ASN.1 data containing deeply nested structures. Due to improper recursion depth limit enforcement and excessive memory...

CVE-2026-120931

An out of bounds write flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/550607402...

CVE-2026-119190

A flaw was found in node-forge. The certificate verification mechanism improperly parses deprecated extension identifiers as standard basic constraints when validating certificate chains. An attacker holding a certificate issued by a trusted Certificate Authority CA with a permissive deprecated...

CVE-2026-118782

A flaw was found in node-forge. The library improperly handles PKCS12 Message Authentication Code MAC and password-based encryption iteration counts of zero or less, causing the key derivation function to produce a constant, predictable key independent of the password or salt. A remote attacker c...

CVE-2026-118779

A flaw was found in node-forge. The pem.decode function uses inefficient regular expressions when parsing Privacy-Enhanced Mail PEM data with missing end boundaries or long encapsulated headers. A remote, unauthenticated attacker can exploit this vulnerability by submitting specially crafted PEM...

CVE-2026-16762

A flaw was found in Qt. An unauthenticated remote attacker could exploit this vulnerability by submitting a specially crafted XML document to an application utilizing the QXmlStreamReader parser, causing disproportionate processor consumption during parsing. This issue leads to a Denial of Servic...

CVE-2026-118131

A flaw was found in GnuPG for Windows. Insecure default Discretionary Access Control List DACL permissions allow low-privileged local users to create subdirectories under the shared program data directory. A local attacker can exploit this issue by pre-creating the expected configuration director...

CVE-2026-115908

A flaw was found in the zip library. During archive extraction, the software fails to properly resolve intermediate symbolic links shortcuts pointing to other file locations, relying instead on superficial path comparisons. By providing a specially crafted archive, an attacker can bypass path...

CVE-2026-115907

A flaw was found in zip. This vulnerability allows a remote attacker to cause a Denial of Service DoS by submitting a specially crafted ZIP archive. When handling legacy compression formats, the library attempts to allocate output memory based on an unverified, attacker-controlled file size befor...

CVE-2026-115506

A flaw was found in expat. The parser's protection mechanism against recursive entity expansion detects amplification thresholds too late during document processing. A remote attacker can exploit this vulnerability by supplying a crafted XML document with nested entity definitions, causing...

CVE-2026-103653

A flaw was found in the Qt Constrained Application Protocol CoAP module. A remote attacker can trigger an out-of-bounds read during message parsing by sending a malformed CoAP message. Successful exploitation primarily causes the application to crash, resulting in a Denial of Service DoS, or may...

CVE-2026-89321

A flaw was found in OpenVSX. A publisher can upload a small, highly compressible VSIX Visual Studio Code Extension file. When this file is processed, the server's WebResourceService decompresses it without limiting the size of the extracted content, leading to uncontrolled growth of temporary fil...

CVE-2026-88789

A flaw was found in Apache Camel Quarkus. The XML transformation support extension configures a transformer that fails to enforce restrictions on external entities and stylesheets. A remote attacker can exploit this vulnerability by submitting a specially crafted XML document during transformatio...

CVE-2026-89147

A flaw was found in Net-SNMP. An unauthenticated remote attacker can exploit a vulnerability in the SMUX SNMP Multiplexing module by connecting to the SMUX listener and sending no data. This action causes the single-threaded snmpd main loop to block indefinitely, suspending all SNMP processing...

CVE-2026-88094

A flaw was found in the Azure Storage Library. This vulnerability allows an authenticated remote attacker to escalate privileges over the network. The issue occurs when the library fails to properly sanitize special characters before passing data to downstream components, enabling an attacker to...

CVE-2026-88060

A flaw was found in @angular/platform-server. Untrusted input in server-side rendered SSR templates, specifically within fallback raw-content elements like noscript or iframe, is not properly escaped. This allows a remote attacker to inject malicious code by crafting input that includes unescaped...

CVE-2026-88034

A flaw was found in the MongoDB C++ Driver. This flaw, located in the GridFS component, allows an authenticated user to perform query-operator injection by influencing file identifiers. This can lead to unauthorized access to stored file content or the deletion of all GridFS file chunks, making...

CVE-2026-88023

A flaw was found in the GridFS component of the MongoDB PHP Library. This vulnerability allows an authenticated user to inject special elements into file identifiers, causing them to be interpreted as query conditions. This can lead to unauthorized access to stored file content, the deletion of a...

CVE-2026-87082

A flaw was found in Net::IDN::Punycode. An attacker can provide specially crafted, malformed UTF-8 input to the encodepunycode function. This lack of validation can lead to the application hanging, crashing, or generating an incorrect label, resulting in a Denial of Service DoS or data integrity...

CVE-2026-87081

A flaw was found in Net::IDN::UTS46. A remote attacker could exploit a vulnerability in the 'toascii' function, which performs punycode encoding. By providing a specially crafted, overlong label containing distinct non-ASCII characters, the attacker could trigger a quadratic time complexity issue...

CVE-2026-87079

A flaw was found in Net::IDN::Punycode. An attacker can trigger CPU exhaustion by supplying a long label to the decodepunycode function. This occurs because the function's internal process for inserting decoded characters into a buffer has a quadratic cost relative to the label's length, leading ...

CVE-2026-86831

A flaw was found in the aws-network-policy-agent. An authenticated remote user could exploit improper validation of pod identifier uniqueness by crafting specific pod and namespace names. This allows them to bypass NetworkPolicy enforcement on co-located pods in other namespaces, potentially...

CVE-2026-86303

A flaw was found in markdown. A remote attacker could exploit an out-of-bounds read vulnerability in the lds function of md.c by manipulating input. This could lead to information disclosure or potentially a denial of service...

CVE-2026-86040

A flaw was found in the floodsub component of libp2p. The package accepts unauthenticated Remote Procedure Call RPC frames without properly enforcing limits on subscription elements and processes them synchronously. A remote unauthenticated attacker can exploit this vulnerability by sending...

CVE-2026-85670

A flaw was found in the Hugging Face tokenizers library. A remote attacker could provide a specially crafted tokenizer.json file, which, when processed, leads to an out-of-bounds buffer access. This vulnerability can cause the application to terminate, resulting in a denial of service. In certain...

CVE-2026-85298

A flaw was found in Google Cloud Application Integration. An improper authorization flaw in the authentication configuration AuthConfig validation and integration execution runtime allows an authenticated user to escalate privileges. By exploiting this vulnerability, an attacker can impersonate a...

CVE-2026-85267

A flaw was found in Cloud Shell. This Cross-Site WebSocket Hijacking vulnerability allows an unauthenticated remote attacker to intercept an active user session by initiating cross-origin requests. A successful attack enables an adversary to hijack the session and exfiltrate the user's Open...

CVE-2026-85091

A flaw was found in zlib. A heap buffer overflow vulnerability exists in the gzvacate function. This flaw can be triggered by a remote attacker calling gzprintf or gzvprintf after a write stall during non-blocking gzwrite operations with stale external buffer pointers. Successful exploitation cou...

CVE-2026-84439

A flaw was found in Apache ZooKeeper. When audit logging is enabled, an unauthenticated attacker can inject arbitrary fields into the audit log. This is achieved by sending a digest authentication request with tab characters embedded in the username, or by a client calling setACL with crafted...

CVE-2026-83531

A flaw was found in Apache Camel's Dynamic Router component. An attacker able to send messages to a dynamic router control endpoint can achieve arbitrary code execution by submitting a specially crafted subscription message. The application compiles and evaluates user-supplied expressions without...

CVE-2026-83803

A flaw was found in Sentry. When the relocation feature is enabled, Sentry instances unsafely deserialize a legacy database field during the import of a user-supplied relocation archive. This allows an authenticated user to craft a malicious archive, leading to arbitrary code execution within the...

CVE-2026-82416

A flaw was found in FrankenPHP. When operating in worker mode with the session extension configured as a shared module, the application server fails to properly clear session state across request boundaries. Under concurrent traffic, a worker thread can reuse an existing session identifier rather...

CVE-2026-83497

A flaw was found in the OpenSearch SQL plugin. A remote authenticated user with basic read/search permissions can exploit this vulnerability by sending a specially crafted cursor parameter to the plugins/sql endpoint. This unrestricted deserialization of untrusted data allows the attacker to...

CVE-2026-82026

A flaw was found in radar. A remote attacker could achieve arbitrary code execution due to missing authorization in the local terminal endpoint /api/local-terminal. By connecting to this endpoint without proper access control checks, an attacker can spawn an interactive shell on the host system a...

CVE-2026-80312

A flaw was found in the Apache Camel OAuth component. When authentication fails, the route processor does not terminate the exchange and instead allows the request to proceed to protected endpoints. A remote, unauthenticated attacker can exploit this flaw to bypass authentication controls and gai...

CVE-2026-80352

A flaw was found in Apache Camel K. This vulnerability, identified as a YAML injection, allows an authorized custom resource CR author to insert arbitrary Kubernetes objects into the system. This could lead to unauthorized creation of resources with the elevated privileges of the operator,...

CVE-2026-79986

A flaw was found in the Apache Camel Azure Files component. When polling remote directories, the component concatenates file paths without properly sanitizing or restricting them to the designated folder. A malicious server or an attacker manipulating directory listing responses can supply...

CVE-2026-77620

A flaw was found in Vector's logstash source. An unauthenticated remote attacker can send specially crafted nested compressed frames. This can cause recursive decoding, leading to the exhaustion of the worker thread stack and amplification of decompressed input. Consequently, the process may...

CVE-2026-76646

A flaw was found in Apache MyFaces. A remote attacker could exploit this by sending specially crafted request parameters, leading to excessive resource consumption. This could potentially result in a denial of service DoS condition, making the affected system unavailable to legitimate users...

CVE-2026-77180

A flaw was found in NGINX Ingress Controller. When configured with Ingress annotations, an injection vulnerability in the configuration generator allows an authenticated attacker with specific permissions to craft values that inject arbitrary NGINX configuration directives. This can enable the...

CVE-2026-65141

A flaw was found in NVIDIA Isaac Lab. The software improperly evaluates untrusted input during dynamic code execution. A local attacker could exploit this vulnerability by enticing a user to process malicious input, leading to arbitrary code execution, unauthorized data modification, sensitive...

CVE-2026-75759

A flaw was found in oidcc. This vulnerability allows an unauthenticated attacker to impersonate an arbitrary user. The oidcc component improperly verifies cryptographic signatures in encrypted ID tokens or JSON Web Application Response JARM responses. By exploiting this, an attacker can forge...

CVE-2026-74766

A flaw was found in Net::IDN::Punycode. A heap use-after-free vulnerability exists in the decodepunycode function when processing a specially crafted punycode label. This occurs because the output buffer is reallocated without updating the insertion pointer, leading to reads and writes to freed...

CVE-2026-97370

A flaw was found in Junrar. The RAR virtual machine RarVM fails to properly enforce execution limits when handling jump instructions that target addresses beyond the program boundaries. A remote attacker could provide a specially crafted RAR archive to force the extraction process into an infinit...

CVE-2026-95859

A flaw was found in libp2p-gossipsub. This issue allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending crafted GRAFT control messages with arbitrary topic identifiers. Because the service unconditionally records these topics without validating prior subscriptions, ...

CVE-2026-94106

A flaw was found in getID3. This vulnerability allows an attacker with low privileges to inject arbitrary operating system OS commands. By crafting malicious filenames containing special shell characters, an attacker can exploit unescaped filenames in shell-out handlers, leading to the execution ...

CVE-2026-94044

A flaw was found in 03-lovepreetSingh MCP. A remote attacker could exploit a path traversal vulnerability by manipulating the filePath or content arguments when calling the createfile function. This could allow the attacker to access or modify arbitrary files on the system, potentially leading to...