CVE-2026-92792

OpenNHP through version 1.0.2 is vulnerable to an authentication bypass in its trusted-execution attestation mechanism. The verifier selection logic is driven by attacker-supplied evidence: if the evidence contains a test_purpose key, the FallbackVerifier is selected and executes unconditionally....

CVE-2026-92790

Higress before 2.2.4 is affected by a rate-limit bypass in its AI token rate-limiting plugin (WASM-Go). The root cause is a panic triggered when the plugin processes a Cookie header segment without an equals sign ; the plugin wrapper recovers from the panic and returns a continue action , effecti...

CVE-2026-92791

Uber Kraken versions through 0.1.29 contain a path traversal vulnerability in the /tags/{tag} endpoint. The endpoint fails to validate the tag parameter, allowing unauthenticated attackers to supply percent-encoded parent-directory segments (e.g., ..) to traverse outside the configured storage ro...

CVE-2026-92789

Graylog versions through 7.1.4 are vulnerable to Server-Side Request Forgery (SSRF) via HTTP redirects. The root cause is that Graylog validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redirects . An attacker with lookup table or eve...

CVE-2026-92788

Coze Studio through version 0.5.1 is affected by a cross-tenant database access vulnerability in its workflow SQL customization nodes. The root cause is a missing validation that ensures table names in those nodes belong to the caller's workspace, allowing an authenticated attacker to enumerate p...

CVE-2026-92787

Feast through 0.66.0 is vulnerable to an authentication bypass caused by failing to verify JWT token signatures before establishing user identity. An attacker can present an unverified token containing a hardcoded claim value to obtain a trusted internal identity, gaining unchecked read and write...

CVE-2026-92786

LightGBM versions through 4.7.0 are affected by an out-of-bounds write vulnerability triggered during SHAP prediction (feature contribution computation). The root cause is a failure to validate child and split array values when parsing text model files. An attacker can craft a malicious model fil...

CVE-2026-92784

@refinedev/inferencer through version 7.0.0 (part of the refine framework) is vulnerable to code injection via API field names . The root cause is a failure to escape API field names when interpolating them into generated JSX source code . An attacker controlling the data provider can inject mali...

CVE-2026-92785

Angel through 3.3.0 (a distributed machine learning framework by Tencent) deserializes the untrusted setAlgoMetrics payload using Kryo without class registration or allowlist validation, as seen in KryoUtils.java. An unauthenticated network attacker can send crafted serialized objects to the mast...

CVE-2026-92783

Yeti (through version 2.11.0 ) fails to validate caller permissions in the DELETE /api/v2/rbac/{id} endpoint, allowing users with only read access to delete access control (RBAC) relationships. An attacker can revoke the owner's grant and permanently lock legitimate owners out of objects . The vu...

CVE-2026-92782

Chroma through 1.5.9 contains an authorization bypass in its collection resolution logic (Rust frontend). The root cause is a failure to validate tenant and database segments when resolving collections, as seen in get_collection_with_segments_provider.rs and server.rs. An authenticated attacker w...

CVE-2026-92780

KnowStreaming through version 3.4.1 fails to enforce role-based access control on its REST API endpoints , specifically in the PermissionInterceptor component. Any authenticated user can call identity-management endpoints to create administrator accounts or grant themselves administrative privile...

CVE-2026-92781

Builder.io Gen2 SDKs (through versions 5.2.11 and 0.25.13 ) are affected by a prototype pollution vulnerability in the unflatten helper that processes builder.userAttributes query parameters without prototype guards. An attacker can craft preview links containing __proto__ or prototype segments t...

CVE-2026-92779

Builder.io Gen2 SDKs (through versions 5.2.11 and 0.25.13 ) contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings without validation. An attacker with low privileges can craft content blocks whose binding keys contain __proto__, prototyp...

CVE-2026-92776

Wiki.js through 2.5.314 suffers from a path prefix matching authorization bypass in its page permission rule engine. The vulnerability resides in the START and END page rule matching logic (server/core/auth.js), which fails to enforce path segment boundary checks. As a result, users granted acces...

CVE-2026-92778

CMAK (Yahoo's Cloud Management for Apache Kafka) through 3.0.0.6 contains a feature gate bypass in its HTML form routes. The scheduled leader election feature toggle is not applied to these routes, allowing an authenticated low-privilege attacker to access form endpoints and start or stop the rec...

CVE-2026-92775

Wiki.js through 2.5.314 is affected by a Server-Side Request Forgery (SSRF) vulnerability in the Image Prefetch renderer . The root cause is the absence of protocol, host, or address validation when fetching image URLs. An attacker with page editing permissions can inject elements carrying the p...

CVE-2026-92773

Trigger.dev before 4.6.0 contains a GitHub App installation takeover vulnerability in its GitHub integration service (gitHub.server.ts). The root cause is a failure to verify that an authenticated user actually controls a GitHub App installation before binding it to their organization. An attacke...

CVE-2026-92774

Wiki.js through version 2.5.314 is affected by an authorization bypass in its GraphQL API. The root cause is the omission of page tags from authorization checks in multiple resolvers (list , tree , tags , searchTags , and links ), allowing attackers with low privileges to bypass tag-based access ...

CVE-2026-92772

Leantime before 3.9.6 contains an authorization bypass in the HTMX plugin install endpoint , which lacks permission validation. Authenticated users with limited roles can install marketplace plugins and control arbitrary properties—including identifier , version , and license key —to deploy malic...