CVE-2026-92205

CVE-2026-92205 affects the libarchive component of BusyBox . The flaw is a symlink directory traversal that allows remote attackers to create arbitrary files in the context of the current user. The root cause is the lack of proper validation of a user-supplied path before it is used in file opera...

CVE-2026-51990

Sogou Input Method (Tencent) for Windows below version 16.3.0.3498 is vulnerable to remote code execution via the biz_helper.exe component. The attack chain involves an unvalidated sgbiz: URI protocol handler passing attacker-controlled arguments to SGMyInput.exe, which instructs the embedded Chr...

CVE-2026-92206

CVE-2026-92206 (tracked as ZDI-26-706 ) affects the CrewAI crewAI Framework . The flaw resides in the load_agent_from_repository function, which does not properly restrict a user-supplied argument before using it to import a module, enabling remote code execution in the context of the service acc...

CVE-2026-92208

NoMachine is vulnerable to a heap-based buffer overflow in the parsing of mDNS resource records . The root cause is the lack of proper length validation on user-supplied data before it is copied to a heap-based buffer. A network-adjacent attacker can exploit this flaw without authentication to ac...

CVE-2026-88593

kkFileView versions 5.0.0 through 5.0.2 are affected by a reflected XSS vulnerability in the /onlinePreview endpoint. The OnlinePreviewController passes user-controlled page and kkagent request parameters to FreeMarker templates without sanitization, and those templates insert the values directly...

CVE-2026-92210

CVE-2026-92210 corresponds to ZDI-26-712 , a Server-Side Request Forgery (SSRF) leading to information disclosure in NoMachine . The flaw resides in the nxhtd web service , which listens on UDP port 4443 by default, and stems from insufficient validation of a URI before accessing resources. A rem...

CVE-2026-92203

CVE-2026-92203 is a Server-Side Request Forgery (SSRF) vulnerability in Airbyte's SharePoint Connector , specifically in the _get_shared_drive_object method. The flaw stems from the lack of proper URI validation before accessing resources, allowing a remote authenticated attacker to initiate arbi...

CVE-2025-56563

CVE-2025-56563 is a Server-Side Request Forgery (SSRF) vulnerability in sat_proxy.php of Zenith Satellite Tracker 1.0 . The script accepts an attacker-controlled address URL parameter and passes it to curl_setopt(CURLOPT_URL) without host or scheme validation , allowing an unauthenticated remote ...

CVE-2026-92204

CVE-2026-92204 affects Airbyte , specifically its OneDrive Connector . The vulnerability is a Server-Side Request Forgery (SSRF) in the _get_shared_drive_object method, caused by the lack of proper validation of a URI before accessing resources. A remote attacker with valid authentication can ini...

CVE-2025-56565

DD-WRT firmware running on TP-Link TL-WR740N v1–v4 routers stores sensitive authentication credentials in cleartext within non-volatile memory (SPI flash). The exposed material includes SSH private keys , dynamic DNS passwords , email notification credentials , and administrative passwords . An a...

CVE-2026-92183

CVE-2026-92183 is a stack-based buffer overflow in GIMP that can be leveraged for remote code execution . The flaw resides in the parsing of APNG files , where user-supplied data is copied to a stack-based buffer without proper validation of its length. A remote attacker can exploit this by convi...

CVE-2026-92209

CVE-2026-92209 affects NoMachine , where an improper authentication flaw exists in the Redis database access mechanism. The root cause is insufficient entropy in credential generation, allowing a local attacker with low-privileged code execution to escalate privileges and run arbitrary code in th...

CVE-2026-84579

CVE-2026-84579 is one of two Gatekeeper bypass CVEs awarded, as confirmed by a PT Security advisory (PT-2026-93360). The CVE entry remains in reserved status in the initial document, meaning the full technical description, affected versions, and root cause details have not yet been publicly publi...

CVE-2026-79298

CVE-2026-79298 is an incomplete remediation of the UEFI Secure Boot bypass originally disclosed as CVE-2024-7344 in Howyar SysReturn (NetCopy feature). While the x64 boot path was fixed, the IA-32 boot path (BOOTia32.efi) retained the same custom RxPE PE loader, the same bypassed Secure Boot veri...

CVE-2026-92184

A server-side request forgery (SSRF) vulnerability exists in ag-ui-protocol ag-ui 0.3.0 , affecting the function urllib.request.urlopen in the file integrations/aws-strands/python/src/ag_ui_strands/utils.py within the Multimodal Content component. Manipulation of the argument Value enables the fl...

CVE-2026-15640

CVE-2026-15640 affects Delinea Secret Server , a secrets management product. Under certain conditions, a valid SAML Identity Provider (IdP) response can be manipulated to impersonate another Secret Server user , effectively bypassing authentication. The vulnerability is rated CVSS 4.0: 9.5 (Criti...

CVE-2026-15639

CVE-2026-15639 is a Reflected Cross-Site Scripting vulnerability in a Delinea product (specific product and version not detailed in the provided documents). An attacker crafts a malicious link that, when clicked by a legitimate user, causes the user's browser to execute attacker-supplied JavaScri...

CVE-2026-15638

Delinea Secret Server is affected by a cryptographic padding oracle vulnerability (CVE-2026-15638). An unauthenticated user with network access to the server can leverage the oracle to decrypt or encrypt data using one of the server's cryptographic keys; however, the key itself is not directly ex...

CVE-2026-73460

CVE-2026-73460 affects Arista EOS running with IS-IS graceful restart enabled. An unauthenticated attacker in the same Layer 2 domain can inject a malformed IS-IS LSP PDU, causing the graceful restart procedure to terminate prematurely and resulting in traffic loss after a restart event. The unde...

CVE-2026-73459

CVE-2026-73459 affects Arista EOS with IS-IS configured (versions 4.36.1F and below in the 4.36.x train). An unauthenticated attacker in the same Layer 2 domain can inject a specially crafted IS-IS LSP PDU, causing the legitimate LSP to be purged from the link-state database due to a checksum val...