CVE-2026-67234

A flaw was found in rabbitmq-server. When clearing authentication preferences, the server generates a non-compliant cookie name containing invalid characters that standard web browsers reject when attempting deletion. This issue prevents the browser from properly removing the cookie, allowing sta...

CVE-2026-66078

A flaw was found in RabbitMQ. A remote authenticated user with administrative privileges can bypass account deletion safeguards by removing accounts using the bulk-delete API endpoint. Because this endpoint fails to check whether a user account has the protected tag, protected service accounts ca...

CVE-2026-110759

A flaw was found in Text::CSVXS. When parsing comma-separated values CSV input ending in a field separator followed by an unescaped carriage return CR character, the parser incorrectly records an end-of-file marker as input data, introducing an extraneous byte into the output field. An attacker w...

CVE-2026-110758

A flaw was found in Text::CSVXS. This vulnerability can lead to a Denial of Service DoS or memory corruption when processing specially crafted input. When whitespace stripping is enabled, parsing an unquoted field containing only blank spaces can cause the parser to read and overwrite memory...

CVE-2026-110757

A flaw was found in Text::CSVXS. An attacker can cause record splitting and data tampering by supplying input containing embedded newline characters that evaluates as numeric. Because the library fails to quote fields flagged as numeric when formatting Comma-Separated Values CSV records, the...

CVE-2026-110756

A flaw was found in Text::CSVXS. When printing records where a UTF-8 flagged field precedes invalid UTF-8 bytes, the module drops held-back bytes, closing quotes, and line endings without signaling an error. An attacker capable of providing crafted input can exploit this flaw to cause data...

CVE-2026-110754

A flaw was found in Text::CSVXS. When parsing a CSV record containing a syntax error, the getline function fails to release memory allocated for fields parsed prior to the failure. An attacker who can supply malformed CSV input to a long-running application can exploit this vulnerability to trigg...

CVE-2026-110755

A flaw was found in Text::CSVXS. This vulnerability allows an attacker to cause a Denial of Service DoS by providing specially crafted comma-separated value CSV input using carriage return CR-only line endings. Under default configuration settings, the parser repeatedly copies unparsed data acros...

CVE-2026-110753

A flaw was found in perl-text-csvxs. This flaw allows an attacker who supplies specially crafted CSV input to trigger a Denial of Service DoS. When processing CSV data configured with bound column variables, the parser improperly releases memory references upon encountering empty rows. Subsequent...

CVE-2026-89096

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory...

CVE-2026-89088

A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversize...

CVE-2026-67413

A flaw was found in rabbitmq-server. An authenticated user with permissions to bind and publish messages can cause a Denial of Service DoS by submitting specially crafted pattern-matching expressions to the Java Message Service JMS topic exchange plugin. Because the message broker evaluates these...

CVE-2026-67407

A flaw was found in rabbitmq-server. Due to improper regular expression character escaping, topic permission templates for Message Queuing Telemetry Transport MQTT clients fail to sanitize hyphen characters. An authenticated, low-privileged attacker controlling their client identifier can exploit...

CVE-2026-67239

A flaw was found in rabbitmq-server. The stream-management interface fails to properly sanitize peer certificate fields, leading to a stored Cross-Site Scripting XSS vulnerability. A remote attacker with a valid Transport Layer Security TLS certificate containing a crafted Distinguished Name DN c...

CVE-2026-67237

A flaw was found in rabbitmq-server. When Open Authorization OAuth is enabled for the management interface, the application fails to properly sanitize authentication tokens before embedding them into the bootstrap script. A remote attacker could exploit this cross-site scripting XSS vulnerability...

CVE-2026-67227

A flaw was found in rabbitmq-server. An authenticated remote user with policymaker privileges can cause a Denial of Service DoS by sending repeated HTTP requests with unique parameter names to the global parameters API endpoint. Because user-supplied parameter names are unsafely converted into...

CVE-2026-67230

A flaw was found in RabbitMQ. When the Web STOMP plugin is enabled, the WebSocket handler fails to enforce maximum frame size limits or login timeouts prior to client authentication. An unauthenticated remote attacker can exploit this vulnerability by sending a continuous stream of small frames t...

CVE-2026-67225

A flaw was found in rabbitmq-server. The stream protocol fails to validate the declared length of incoming frames against the negotiated maximum frame size before buffering them into memory. When the stream plugin is enabled, a remote attacker can exploit this issue by declaring an oversized fram...

CVE-2026-67226

A flaw was found in rabbitmq-server. An authenticated user with administrative privileges can cause a Denial of Service DoS by submitting user definitions containing an excessive number of unique tag names. Because the application converts each tag string into an internal Erlang identifier that...

CVE-2026-67223

A flaw was found in rabbitmq-server. When the service uses the Lightweight Directory Access Protocol LDAP authentication plugin with a configured user Distinguished Name DN pattern, it fails to properly escape special characters in the username. A remote attacker can exploit this vulnerability by...

CVE-2026-67222

A flaw was found in rabbitmq-server. An authenticated remote attacker with policymaker privileges can exploit this issue when the Shovel or Federation plugin is enabled by supplying a specially crafted authentication mechanism value. This causes the server to permanently exhaust Erlang virtual...

CVE-2026-66073

A flaw was found in rabbitmq-server. An authenticated user with management API access can cause a Denial of Service DoS by sending requests containing arbitrary node names to queue, exchange, or binding endpoints. Because untrusted input is converted into internal system identifiers atoms without...

CVE-2026-61837

A flaw was found in RabbitMQ. The Advanced Message Queuing Protocol AMQP 1.0 management interface fails to perform proper authorization checks when processing requests for message bindings. An authenticated user without administrative privileges can exploit this issue to enumerate the complete...

CVE-2026-48496

A flaw was found in OpenTelemetry eBPF Profiler. An unprivileged process can exploit this vulnerability by causing the profiler to open a nonregular mapping file, such as a FIFO First-In, First-Out, which leads to the profiler blocking indefinitely. This prevents further ELF Executable and Linkab...

CVE-2026-39113

A flaw was found in SQLite. A buffer overflow vulnerability exists within the sqlar extension's uncompression functions. An attacker could exploit this by providing specially crafted input, leading to a denial of service DoS condition, which makes the affected system or application unavailable to...

CVE-2026-15310

A flaw was found in Python. When decompressing specially crafted zip files that use bzip, LZMA, or Zstandard compression methods, Python may pre-allocate memory based on an attacker-controlled size. This could lead to excessive memory consumption, potentially causing a Denial of Service DoS for t...

CVE-2026-110752

A flaw was found in perl-Text-CSVXS. When parsing fragment selectors, the component pre-allocates array entries for every index in a requested range before reading data and without validating the range bounds against the input. An attacker could exploit this vulnerability by providing a crafted...

CVE-2026-111802

A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage...

CVE-2026-110606

A flaw was found in libdxfrw. An out-of-bounds read vulnerability occurs when parsing drawing DWG files due to improper handling of non-null-terminated buffers in the file header reader. By convincing a user to open a specially crafted DWG file, an attacker could trigger an application crash,...

CVE-2026-17591

A flaw was found in libarchive. An attacker can cause a Denial of Service DoS or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archiveentrycopymacmetadata function...

CVE-2026-111151

A flaw was found in OpenJPH. This vulnerability allows an attacker to cause a Denial of Service DoS and memory corruption by tricking a user or application into processing a crafted image file. When the High-Throughput JPEG 2000 HTJ2K decoder processes single-row image blocks, an out-of-bounds...

CVE-2026-111163

A flaw was found in wildmidi. An attacker can exploit this vulnerability by supplying a specially crafted HMI audio file to be processed by an application using the library. Due to insufficient boundary checks in the WMParseNewHmi function, the application attempts to read memory beyond the...

CVE-2026-111275

A flaw was found in nifticlib. This vulnerability can result in a Denial of Service DoS or memory corruption when an application processes a specially crafted NIfTI-2 image file. Due to missing range validation on dimension header values, an attacker could supply a malicious file that triggers a...

CVE-2026-110716

A flaw was found in unshield. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing the application. By tricking a user or system into processing a specially crafted InstallShield cabinet file with manipulated header offsets or file counts, an attacker can trigger an...

CVE-2026-110658

A flaw was found in Sofia-SIP. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a specially crafted Session Initiation Protocol SIP message containing an oversized multipart boundary that exceeds the message body length. During message parsing, this flaw causes the...

CVE-2026-111130

A flaw was found in OpenSlide. By convincing a user or automated service to open a specially crafted MIRAX slide file, an attacker can trigger an out-of-bounds memory read in the format reader due to improper index validation. This vulnerability primarily results in an application crash, causing ...

CVE-2026-111105

A flaw was found in rlottie. This vulnerability allows remote attackers to execute arbitrary code due to improper validation of user-supplied data, which can cause an out-of-bounds write before the start of an allocated buffer. Successful exploitation requires user interaction, such as convincing...

CVE-2026-111162

A flaw was found in WildMIDI. When parsing HMP audio files, an integer underflow in chunk length calculations causes the application to read beyond allocated memory boundaries. By tricking a user into opening a specially crafted file, an attacker can trigger an application crash, resulting in a...

CVE-2026-110654

A flaw was found in zvbi. An out-of-bounds write vulnerability in the Teletext decoder allows an attacker to cause a Denial of Service DoS and memory corruption by supplying a specially crafted Teletext stream. When the application decodes the malicious stream containing unvalidated Dynamically...

CVE-2026-110597

A flaw was found in tinyexr. When processing multi-part image files, the library fails to properly track buffer boundaries during header parsing, leading to an out-of-bounds read. An attacker could exploit this vulnerability by convincing a user or system to open a specially crafted EXR file,...

CVE-2026-110596

A flaw was found in quirc. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a specially crafted QR code image. When processing manipulated patterns within the image, the library enters an excessive loop during alignment calculations. This behavior exhausts syste...

CVE-2026-111458

A flaw was found in ssldump. A heap-based buffer overflow allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS through an application crash. The issue occurs because memory is miscalculated and undersized when formatting certificate fingerprints. An attacker can...

CVE-2026-110237

A flaw was found in vifm. This vulnerability allows a local attacker to achieve arbitrary code execution with the privileges of another user. The application reuses pre-existing inter-process communication IPC named pipes in a shared temporary directory without verifying file ownership. A local...

CVE-2026-102460

A flaw was found in Eclipse Vert.x Web. When chained authentication handlers are used to protect endpoints, the handler fails to validate required permission scopes if an incoming request was already authenticated by an earlier handler in the pipeline. An authenticated remote user with a valid...

CVE-2026-100354

A flaw was found in kin-openapi. The runtime schema validation lacks cycle detection when processing circular schema references. A remote attacker can exploit this vulnerability by submitting a request or response that triggers recursive validation, leading to unbounded recursion and stack...

CVE-2026-100353

A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service DoS by sending specially crafted HTTP requests containing specific array query parameters or form-encoded data. Because the request decoder fails to properly validate certain array schemas before...

CVE-2026-89085

A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image,...

CVE-2026-86536

A flaw was found in Apache Thrift's JavaScript bindings. An unauthenticated remote attacker can exploit a prototype pollution vulnerability—where shared JavaScript object definitions are modified—by sending specially crafted input to an application using the affected bindings. Successful...

CVE-2026-87697

A flaw was found in dotnet. A remote attacker can achieve arbitrary code execution by tricking an application or user into processing maliciously crafted data during deserialization the process of reconstructing data into an application object. Successful exploitation allows the attacker to execu...

CVE-2026-85363

A flaw was found in .NET. An integer overflow issue allows an unauthenticated remote attacker to achieve privilege escalation over the network. By convincing a user to process specially crafted input, an attacker can cause a calculation error that leads to unauthorized access with elevated...