CVE-2026-61709

OpenFGA prior to 1.18.1 had an authorization-decision over-inclusion flaw in the ListUsers API. When an authorization relation combined a but not exclusion under a type-bound wildcard with another relation via intersection (and), the function expandIntersection in pkg/server/commands/listusers/li...

CVE-2026-76163

ISC BIND 9 is vulnerable to a denial-of-service condition when the named process is loaded with a named.conf file that contains no global options block . In that configuration, an unauthenticated remote attacker can trigger an assertion failure by sending a single QTYPE TKEY query, causing an une...

CVE-2026-89031

The Adenion Blog2Social WordPress plugin before version 9.1.0 is affected by a broken access control vulnerability in the b2s_calendar_move_post AJAX handler (includes/Ajax/Post.php). The handler issues an UPDATE against the b2s_posts table using only the attacker-supplied b2s_id primary key with...

CVE-2026-19666

BIND 9 named contains a use-after-free vulnerability in query_addnoqnameproof() along the DNS64 filter64 code path. When a resolver is configured with dns64 and receives a malformed answer from an authoritative server, the named process exits unexpectedly, causing a denial of service (CVSS 7.5 HI...

CVE-2026-82964

Avast's sandbox minifilter driver (aswSnx.sys) on Windows contains an improper permission-preservation flaw. When virtualizing a file, the driver opened the target object with GENERIC_WRITE and FILE_WRITE_ATTRIBUTES only, omitting WRITE_DAC , causing every attempt to apply the original DACL to fa...

CVE-2026-89030

The Adenion Blog2Social plugin for WordPress (before 9.1.0 ) allows low-privileged users to enumerate email addresses of all registered users, including administrators. The b2s_search_user AJAX handler in includes/Ajax/Get.php calls B2S_Tools::searchUser() in includes/Tools.php, which returns the...

CVE-2026-92365

A Denial of Service (DoS) vulnerability exists in vllm-project vllm (up to version 0.29.0). A remote attacker with low privileges can exploit an inefficient algorithmic complexity in the file vllm/v1/sample/thinking_budget_state.py, degrading service availability for legitimate users. The specifi...

CVE-2026-81563

CVE-2026-81563 is a resource exhaustion vulnerability in the BIND 9 resolver (ISC). When a resolver encounters an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records , it may fail to properly deallocate internal qpcache references . Repeated occurrences lead to resou...

CVE-2026-89029

Adenion Blog2Social is a WordPress plugin that, in versions before 9.1.0 , exposes a user enumeration flaw. The b2s_get_select_mandant_user AJAX handler (in includes/Ajax/Get.php) resolves arbitrary user IDs supplied via the owner parameter to display names without verifying the caller's authoriz...

CVE-2026-61598

In djust versions prior to 1.0.7 , the ModelBindingMixin default update_model handler allows a client to mass-assign any public, existing view attribute over the WebSocket by supplying an arbitrary field name. Protection relies only on a 14-entry denylist of framework internals and an optional al...

CVE-2026-78301

CVE-2026-78301 affects ISC BIND 9 (named). A malformed zone containing an NS or DNAME node above its origin is incorrectly treated as a zone cut. An attacker who inserts such a zone into a BIND authoritative server (e.g., via zone transfer) causes queries for names inside the zone to lose authori...

CVE-2026-77692

CVE-2026-77692 allows an unauthenticated remote attacker to crash the BIND 9 named daemon by sending a single crafted DNS-over-HTTPS (DoH) request containing a cryptographically invalid SIG(0) record and then closing the transport connection prematurely . The resulting abort produces an availabil...

CVE-2026-92140

The Jenkins Gitee Plugin (versions 1301.v8957053c7902 and earlier) fails to escape the sender name from Gitee push webhook payloads when rendering build causes. This results in a stored cross-site scripting (XSS) vulnerability exploitable by any attacker able to trigger builds via the plugin's we...

CVE-2026-92141

The Jenkins Keycloak Authentication Plugin versions 2.4.1 and earlier do not restrict the redirect URL after login. An attacker can craft a Jenkins URL that, after a successful authentication, forwards the user to an arbitrary external site, enabling phishing attacks . The vulnerability is classi...

CVE-2026-92139

The Jenkins Bitbucket Push and Pull Request Plugin (versions 4.0.1 and earlier) is affected by a Server-Side Request Forgery (SSRF) vulnerability in its webhook endpoint (/bitbucket-hook/). The plugin trusts URL values supplied in the webhook payload and uses its configured Bitbucket credentials ...

CVE-2026-92138

CVE-2026-92138 affects the Jenkins Bitbucket Server Integration Plugin (atlassian-bitbucket-server-integration) versions 6.0.1 and earlier . The OAuth authorization endpoint reads the oauth_callback URL from the submitted form instead of the server-side stored request token , allowing an attacker...

CVE-2026-92137

Jenkins Robot Framework Plugin (robot) versions 6.2.2 and earlier suffer from a path traversal flaw: the archive directory configured for Robot Framework report files is not validated to be contained within the build directory on the Jenkins controller. An attacker with Item/Configure permission ...

CVE-2026-92136

Jenkins OWASP Dependency-Check Plugin (dependency-check-jenkins-plugin) 5.6.4 and earlier does not escape CWE values from Dependency-Check reports when rendered in the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability. Attackers with Item/Configure permission can inject m...

CVE-2026-92135

Jenkins Coverage Plugin versions 3.3358.v9487dde48783 and earlier do not validate the coverage results ID when a job configuration is submitted through the REST API. Attackers with Item/Configure permission can use a javascript: scheme URL as the identifier, resulting in a stored cross-site scrip...

CVE-2026-92134

Jenkins Warnings Plugin (warnings-ng) version 13.10258.va_17d49a_78c3b_ and earlier fails to validate the analysis results ID when a job configuration is submitted through the REST API. An attacker with Item/Configure permission can inject a javascript: scheme URL as the identifier, resulting in ...