CVE-2026-54053

Many Notes , a Markdown note-taking web application, is vulnerable to path traversal via its ZIP vault import (app/Actions/ProcessImportedVault.php) prior to version 0.16.0 . The import accepts archive filenames containing parent-directory traversal segments, allowing an authenticated user to wri...

CVE-2026-54551

WireGuard Portal (wg-portal) is a web-based configuration portal for managing WireGuard servers. In versions 2.2.0 through 2.3.0 , the authenticated /api/v0/ws statistics WebSocket (implemented in endpoint_websocket.go) subscribes to peer and interface stats topics and forwards every TrafficDelta...

CVE-2026-44235

rabbitmq-c (a C-language AMQP client library) prior to 0.16.0 contains an unsigned size_t underflow in amqp_handle_input() (librabbitmq/amqp_connection.c). A malicious AMQP server can send an undersized HEADER or METHOD frame during client login, causing the computed encoded.len to wrap to 0xffff...

CVE-2026-84436

IBM Security Guardium Data Protection 12.2 is vulnerable to command injection (CWE-78) in the certificate export CLI functionality . A privileged authenticated CLI user can inject OS commands, resulting in arbitrary command execution with root privileges , impacting confidentiality, integrity, an...

CVE-2026-84249

IBM Guardium Data Protection versions 12.2 and 12.2.3 are affected by a missing authentication for critical function (CWE-306) that could allow a remote attacker to execute arbitrary management operations without prior authentication. The vulnerability carries a CVSS 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/...

CVE-2026-44236

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0 , a malicious or compromised AMQP server can send an undersized connection.tune.frame_max value (e.g., 1 byte) during the amqp_login() handshake. The library accepts the value in amqp_login_inner() and uses it in amqp_tu...

CVE-2026-84245

CVE-2026-84245 is a local privilege escalation vulnerability in IBM Guardium Data Protection 12.2 , specifically in the cp_wrapper component. A low-privileged local user can exploit improper privilege management (CWE-269) to gain root privileges , allowing access or modification of sensitive syst...

CVE-2026-84278

IBM Security Guardium Data Protection version 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root pr...

CVE-2026-84244

CVE-2026-84244 affects IBM Guardium Data Protection 12.2 due to a stored cross-site scripting (XSS) vulnerability in the Quick Search results grid . An unauthenticated attacker who can influence monitored database traffic can execute a malicious script in the browser of an authenticated Guardium ...

CVE-2026-84440

CVE-2026-84440 is a command injection vulnerability in the SNMP alert notification functionality of IBM Guardium Data Protection 12.2 . An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter ...

CVE-2026-84422

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality , allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges . The CVSS 3.1 base score is 7.2 (C:H/I:H/A:H). Remediation is avai...

CVE-2026-54546

CloudTAK (a browser-based situational awareness tool compatible with TAK) is vulnerable to an authenticated full-read SSRF in the PUT /api/basemap endpoint prior to version 13.22.1 . The importBasemapURL() function in api/routes/basemap.ts passes an attacker-controlled URL to fetch() without IP-a...

CVE-2026-54579

mport , the MidnightBSD Package Manager, contained a vulnerability in the ping() function within libmport/ping.c prior to version 2.7.8 . The function accepted ICMP replies without validating icmp_id or icmp_seq and parsed the reply using a fixed IP-header offset instead of the actual ip_hl field...

CVE-2026-54576

mport , the MidnightBSD Package Manager, is affected by a symlink TOCTOU vulnerability in do_actual_install() (file libmport/bundle_read_install_pkg.c) prior to version 2.7.8 . The function used path-based lstat(), chown(), stat(), and chmod() operations during package installation. A local attac...

CVE-2026-54587

mport , the MidnightBSD Package Manager, is vulnerable to symlink and path traversal races in versions prior to 2.7.8 . The flaw resides in libmport/bundle_read_install_pkg.c, where directory assets (ASSET_DIR / ASSET_DIR_OWNER_MODE) used path-based mport_mkdirp(), ownership, and permission opera...

CVE-2026-54575

mport , the MidnightBSD Package Manager, is affected by a TOCTOU filesystem race in its privileged package fetch and cache-cleaning operations prior to version 2.7.8 . The race-prone path handling spans multiple components including libmport/fetch.c, libmport/clean.c, and the mport.create helper....

CVE-2026-8674

A assertion failure in the DNS stub resolver of the GNU C Library (glibc) versions 2.26 through 2.44 aborts any process that resolves names through the library. The root cause is that when the search list in /etc/resolv.conf or the LOCALDOMAIN environment variable contains a domain of roughly 200...

CVE-2026-54578

mport , the MidnightBSD Package Manager, contains a flaw in mport_verify_package() (libmport/verify.c) prior to version 2.7.8. After MD5File() or SHA256_File() fails, the function continues and compares an expected checksum against stale data in the hash buffer rather than a newly computed digest...

CVE-2026-54586

CVE-2026-54586 affects mport , the MidnightBSD Package Manager . Prior to version 2.7.8 , the mport_fetch_index(), mport_fetch_bootstrap_index(), and mport_fetch_bundle() paths in libmport/fetch.c accepted non-HTTPS repository and package mirror URLs without a url_is_https() enforcement check. Wh...

CVE-2026-54585

mport , the MidnightBSD Package Manager, is affected by a path-constraint flaw in create_sample_file() within libmport/bundle_read_install_pkg.c. Prior to version 2.7.8 , the function failed to constrain absolute source and destination paths from the sample-file manifest directive to the configur...