CVE-2026-122322

A flaw was found in Kyverno. This vulnerability allows a remote attacker to cause a Denial of Service DoS by exhausting system memory. By supplying specially crafted, highly compressed attestation layers in container registry artifacts, an attacker triggers unbounded decompression within the...

CVE-2026-122320

A flaw was found in Kyverno. An authenticated user with permission to create namespaced policies can bypass authorization controls by templating target namespace values within clone generation rules. By triggering the background controller to copy resources from restricted namespaces into an...

CVE-2026-122319

A flaw was found in Kyverno. This vulnerability allows a remote attacker to cause a Denial of Service DoS by submitting specially crafted resources evaluated by the In and NotIn operators. Because the policy engine fails to properly validate unexpected data types, processing these inputs triggers...

CVE-2026-122299

A flaw was found in Dulwich. This flaw allows arbitrary code execution on systems that process untrusted repositories. When parsing Git commit objects, Dulwich resolves duplicate tree headers to the last occurrence instead of the first, conflicting with standard Git behavior. A remote attacker ca...

CVE-2026-81744

A flaw was found in Apache OFBiz. This vulnerability allows a remote authenticated attacker to achieve privilege escalation and gain unauthorized read, update, and deletion control over arbitrary content. Due to an improper authorization check in the content permission service, operations that do...

CVE-2026-122038

A flaw was found in EmployeeRecruitmentSystem. A remote, unauthenticated attacker can submit specially crafted input to the Requirement Board Update Handler source/reqformprocessing.php, leading to a Structured Query Language SQL injection vulnerability. This flaw allows an attacker to execute...

CVE-2026-121966

A flaw was found in Traefik. The ForwardAuth middleware routes authentication requests through a connection pool shared across all clients, failing to isolate connection-bound authentication protocols such as NT LAN Manager NTLM or Negotiate. An unauthenticated remote attacker could exploit this...

CVE-2026-82894

A flaw was found in Apache OFBiz. An authorization vulnerability in the ContentWorker component allows a remote unauthenticated attacker to execute arbitrary internal services with attacker-controlled parameters. By sending a request to a publicly accessible view referencing manipulated content...

CVE-2026-76826

A flaw was found in tsParticles. The automated release workflow interpolates release note text directly into a shell command without proper sanitization. A remote attacker or contributor can exploit this vulnerability by submitting content containing shell control characters, leading to arbitrary...

CVE-2026-76077

A flaw was found in asn1scc. The XML Encoding Rules XER tokenizer does not properly enforce length bounds when copying tag data and fails to check buffer limits during input processing. A remote attacker could exploit this vulnerability by providing a crafted XER message, leading to stack memory...

CVE-2026-73577

A flaw was found in Apache OFBiz. A remote, unauthenticated attacker can bypass authorization controls by appending the path of a protected view to a publicly accessible request URL. Because the application evaluates permissions based on the public path while rendering the restricted view, an...

CVE-2026-49272

A flaw was found in OAuthLib. This vulnerability allows a remote attacker to bypass authentication and obtain unauthorized access tokens during the device authorization workflow. By submitting a token request with a valid client identifier alongside an invalid or missing device authorization code...

CVE-2026-115928

A flaw was found in FreeSWITCH. A remote attacker can cause a Denial of Service DoS by sending a specially crafted Session Description Protocol SDP message containing a zero-length key and salt in the crypto attribute. This triggers an integer underflow that overflows a stack buffer with decoded...

CVE-2026-111492

A flaw was found in MatchPoint. The application's push notification handler constructs database queries by concatenating untrusted input received from push notification messages, resulting in a SQL Structured Query Language injection vulnerability. An attacker capable of sending crafted messages ...

CVE-2026-109856

A flaw was found in Apache OFBiz. An authenticated user with low-level privileges can bypass access controls by sending direct requests to restricted financial account services. This vulnerability allows an attacker to escalate privileges and create, modify, or cancel financial account balances a...

CVE-2026-109408

A flaw was found in vault-java-driver. Under certain configuration conditions, the driver fails to properly enforce Transport Layer Security TLS certificate and hostname verification even when verification has been requested. An attacker positioned on the network path between the client and the...

CVE-2026-102739

A flaw was found in ESPectre. The analysis tools insecurely load dataset files with Python object deserialization enabled. An attacker can supply a specially crafted dataset file containing malicious serialized data, leading to arbitrary code execution when a user or developer processes the file...

CVE-2026-105330

A flaw was found in Apache OFBiz. A remote, unauthenticated attacker can bypass authentication to obtain full administrative access by presenting a forged JSON Web Token JWT signed with a known factory-default cryptographic key. This issue arises when configurations retain default token signing...

CVE-2026-108387

A flaw was found in radare2. An attacker can exploit this vulnerability by convincing a user to open or analyze a specially crafted binary file. When parsed, malicious data causes radare2 to invoke an internal debugging handler that executes system commands with attacker-supplied arguments. This...

CVE-2026-104269

A flaw was found in ModSecurity. The multipart parser fails to properly prioritize parameter handling when processing filenames in Content-Disposition headers. A remote attacker can exploit this discrepancy by submitting a request containing both a benign filename and an encoded alternative that...

CVE-2026-100365

A flaw was found in SuiteCRM. An authenticated remote user with report generation access can supply crafted field labels that are concatenated directly into database queries without proper validation. This vulnerability enables SQL injection SQLi, allowing an attacker to achieve unauthorized...

CVE-2026-123033

A flaw was found in middlewared. An unauthenticated attacker on the same local network segment can bypass authentication by establishing a connection matching high-availability HA heartbeat attributes. This improper origin check grants administrative API access, enabling the attacker to execute...

CVE-2026-123019

A flaw was found in DB-GPT's Hugging Face adapter. A remote attacker could exploit this vulnerability by manipulating the trustremotecode setting when loading model repositories. This causes the application to include and run untrusted external code, leading to arbitrary code execution on the hos...

CVE-2026-123020

A flaw was found in DB-GPT. The application fails to properly sanitize user input before passing it to the Jinja2 template engine in the skill prompt component. A remote attacker could exploit this vulnerability by submitting crafted template expressions, leading to server-side template injection...

CVE-2026-122328

A flaw was found in SDLmixer. A stack-based buffer overflow vulnerability exists in the WAV audio decoder when processing audio streams compressed with A-law or mu-law formats. By enticing a user or application to process a specially crafted WAV file, an attacker could overwrite stack memory,...

CVE-2026-121955

A flaw was found in FreeRDP. A use-after-free vulnerability exists in the smartcard emulation feature where a smartcard context is released before its background worker thread is properly terminated. A malicious server can exploit this by sending a crafted sequence of smartcard I/O Request Packet...

CVE-2026-122308

A flaw was found in Kyverno. An authorization bypass vulnerability in the Generation Handler allows authenticated users with resource creation or update privileges to trigger automated generation policies by spoofing internal system labels. By applying crafted labels to resources such as...

CVE-2026-122307

A flaw was found in Kyverno. This vulnerability allows an authenticated attacker with permissions to create policy exceptions to bypass cluster-wide security controls. The admission policy generator improperly folds policy exceptions into generated admission policies without enforcing configured...

CVE-2026-122306

A flaw was found in Kyverno. An authenticated attacker with policy creation privileges can cause a Denial of Service DoS by submitting policies containing crafted wildcard patterns. When evaluated, these complex patterns consume excessive processor resources, resulting in admission controller...

CVE-2026-121958

A flaw was found in FreeRDP. This vulnerability allows a remote attacker to cause a Denial of Service DoS or potentially execute arbitrary code on the client system. An attacker operating a malicious Remote Desktop Protocol RDP server, or acting in a man-in-the-middle position, can exploit this...

CVE-2026-114604

A flaw was found in @graphql-tools/utils. A remote attacker or compromised upstream GraphQL service can exploit this vulnerability by supplying crafted incremental response path segments during streaming or deferred GraphQL operations. Because the helper function fails to validate data types befo...

CVE-2026-121751

A flaw was found in Node Version Manager nvm. Remote version data retrieved from a mirror is stored without sufficient validation and later evaluated during shell arithmetic operations. An attacker controlling a malicious or compromised mirror can provide crafted version strings that trigger...

CVE-2026-122127

A flaw was found in ipfixcol2. A heap-based buffer overflow in the LZ4 decompression component allows an unauthenticated remote attacker to cause a Denial of Service DoS by crashing the collector service. By sending network traffic that specifies a small buffer size alongside a disproportionately...

CVE-2026-118494

A flaw was found in JReviews. The extension stores cached configuration settings, including system secrets and third-party application programming interface API keys, in a web-accessible directory without proper access controls. An unauthenticated remote attacker who determines the cache file pat...

CVE-2026-116568

A flaw was found in FreeSWITCH. A remote attacker can trigger a Denial of Service DoS by sending a specially crafted Real-Time Messaging Protocol RTMP video stream to a server running the RTMP module. Due to insufficient validation of video unit length headers, parsing the malformed stream causes...

CVE-2026-82912

A flaw was found in Apache OFBiz. An expression language injection vulnerability in the email service allows a remote authenticated attacker with basic view permissions to execute arbitrary operating system commands. By submitting crafted script expressions through the invoice email form, the...

CVE-2026-100395

A flaw was found in LXC. When a privileged user or process clones an untrusted container, LXC follows symbolic links symlinks while updating the hostname in the target container file system. An attacker with control over the source container can craft a symlink targeting files outside the...

CVE-2026-97355

A flaw was found in Apache OFBiz. The AdminServer component relies on a hard-coded default control key for administrative access. An attacker with network access to the AdminServer control port can use this key to cause a Denial of Service DoS by initiating an unauthenticated server shutdown, or...

CVE-2026-84183

A flaw was found in Apache OFBiz. An improper authorization check allows a remote authenticated user with limited view permissions to modify restricted content and execute arbitrary commands. By exploiting flawed permission validation to evaluate server logs containing injected input as applicati...

CVE-2026-82916

A flaw was found in Apache OFBiz. A remote authenticated user with low-level permissions can bypass authorization controls within the data export component by submitting requests with unvalidated file path parameters. This flaw allows an attacker to export sensitive database records, including us...

CVE-2026-81815

A flaw was found in Apache OFBiz. A remote, unauthenticated attacker can exploit a Structured Query Language SQL injection vulnerability by submitting a specially crafted search request. This issue occurs because the entity engine improperly sanitizes input values when building database queries o...

CVE-2026-68524

A flaw was found in Apache OFBiz. An unauthenticated remote attacker can exploit improper temporary file handling by accessing an open file descriptor and injecting a file URI Uniform Resource Identifier. This issue allows the attacker to force the application to load an attacker-controlled scree...

CVE-2026-54140

A flaw was found in OpenHuman. The application incorporates tool descriptions and parameters from external Model Context Protocol MCP servers directly into the model context without proper sanitization or boundaries. A malicious or compromised MCP server can exploit this vulnerability to execute...

CVE-2025-71456

A flaw was found in vtenext. A Structured Query Language SQL injection vulnerability exists in the Fax module due to improper validation of the fieldname parameter. An authenticated remote attacker with low privileges can exploit this flaw by sending a specially crafted request to execute arbitra...

CVE-2026-57488

A flaw was found in pupnp. An integer truncation vulnerability in the HTTP parser allows an adjacent network attacker to cause a Denial of Service DoS. When processing the Content-Length header on 64-bit systems, large integer values can truncate or wrap, causing the parser to miscalculate the...

CVE-2026-82960

A flaw was found in Apache OFBiz. A remote authenticated attacker with Content Management System CMS editor permissions can exploit this code injection vulnerability to achieve arbitrary code execution on the underlying server. By submitting a crafted parameter in an HTTP request to the CMS...

CVE-2026-82910

A flaw was found in Apache OFBiz. A server-side template injection vulnerability in the MacroScreenRenderer component allows an authenticated remote attacker with basic view permissions to execute arbitrary commands. This issue occurs because the application incorporates unescaped link parameter...

CVE-2026-82904

A flaw was found in Apache OFBiz. A remote, unauthenticated attacker can cause a Denial of Service DoS by sending a specially crafted HTTP request containing multi-form parameter names with an excessively large row count. Because the application does not enforce an upper bound on the row count, i...

CVE-2026-78661

A flaw was found in golang.org/x/net/html. A remote attacker can cause a Denial of Service DoS by providing specially crafted HTML input containing numerous short text fragments separated by ignored tags. When combining adjacent text nodes, the parser repeatedly reallocates and copies memory for...

CVE-2026-77604

A flaw was found in Code Graph RAG. When handling paginated file read requests, the application fails to properly validate and restrict file paths against the intended root directory. An unauthenticated attacker can exploit this vulnerability using absolute file paths or directory traversal...