CVE-2026-92926

A SQL injection vulnerability exists in code-projects Matrimonial System 1.0 , specifically in the writepartnerprefs function of /partner_preference.php. Manipulating the education argument allows a remote attacker with no authentication to inject SQL, resulting in low impact on confidentiality, ...

CVE-2026-52836

OpenDDS , an open-source C++ implementation of the OMG Data Distribution Service (DDS), is affected by an out-of-bounds read pointer dereference in RtpsSampleHeader::init() (dds/DCPS/transport/rtps_udp/RtpsSampleHeader.cpp). A network attacker can crash a reachable participant by sending a malfor...

CVE-2026-54676

Scoold , a Q&A and knowledge-sharing platform for teams, is affected by an authorization bypass in ApiController.getPostReplies() (file ApiController.java). Prior to 1.69.0 , the GET /api/posts/{id}/answers endpoint did not call canAccessSpace before returning reply data, allowing users holding a...

CVE-2026-54677

Scoold is a team Q&A and knowledge-sharing platform. Prior to 1.69.0 , the QuestionController.reply() and CommentController.createAjax() methods failed to apply the canAccessSpace authorization check used by the question read path. When scoold.is_default_space_public is set to false and private s...

CVE-2026-54446

netlicensing-mcp (Labs64) is a natural-language MCP server for the NetLicensing licensing API. Prior to 0.1.6 , the ApiKeyMiddleware in server.py fails to reject requests that carry no client API key; the downstream client then falls back to the operator's NETLICENSING_API_KEY environment variabl...

CVE-2026-54053

Many Notes , a Markdown note-taking web application, is vulnerable to path traversal via its ZIP vault import (app/Actions/ProcessImportedVault.php) prior to version 0.16.0 . The import accepts archive filenames containing parent-directory traversal segments, allowing an authenticated user to wri...

CVE-2026-54551

WireGuard Portal (wg-portal) is a web-based configuration portal for managing WireGuard servers. In versions 2.2.0 through 2.3.0 , the authenticated /api/v0/ws statistics WebSocket (implemented in endpoint_websocket.go) subscribes to peer and interface stats topics and forwards every TrafficDelta...

CVE-2026-44235

rabbitmq-c (a C-language AMQP client library) prior to 0.16.0 contains an unsigned size_t underflow in amqp_handle_input() (librabbitmq/amqp_connection.c). A malicious AMQP server can send an undersized HEADER or METHOD frame during client login, causing the computed encoded.len to wrap to 0xffff...

CVE-2026-84436

IBM Security Guardium Data Protection 12.2 is vulnerable to command injection (CWE-78) in the certificate export CLI functionality . A privileged authenticated CLI user can inject OS commands, resulting in arbitrary command execution with root privileges , impacting confidentiality, integrity, an...

CVE-2026-84249

IBM Guardium Data Protection versions 12.2 and 12.2.3 are affected by a missing authentication for critical function (CWE-306) that could allow a remote attacker to execute arbitrary management operations without prior authentication. The vulnerability carries a CVSS 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/...

CVE-2026-44236

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0 , a malicious or compromised AMQP server can send an undersized connection.tune.frame_max value (e.g., 1 byte) during the amqp_login() handshake. The library accepts the value in amqp_login_inner() and uses it in amqp_tu...

CVE-2026-84245

CVE-2026-84245 is a local privilege escalation vulnerability in IBM Guardium Data Protection 12.2 , specifically in the cp_wrapper component. A low-privileged local user can exploit improper privilege management (CWE-269) to gain root privileges , allowing access or modification of sensitive syst...

CVE-2026-84278

IBM Security Guardium Data Protection version 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root pr...

CVE-2026-84244

CVE-2026-84244 affects IBM Guardium Data Protection 12.2 due to a stored cross-site scripting (XSS) vulnerability in the Quick Search results grid . An unauthenticated attacker who can influence monitored database traffic can execute a malicious script in the browser of an authenticated Guardium ...

CVE-2026-84440

CVE-2026-84440 is a command injection vulnerability in the SNMP alert notification functionality of IBM Guardium Data Protection 12.2 . An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter ...

CVE-2026-84422

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality , allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges . The CVSS 3.1 base score is 7.2 (C:H/I:H/A:H). Remediation is avai...

CVE-2026-54546

CloudTAK (a browser-based situational awareness tool compatible with TAK) is vulnerable to an authenticated full-read SSRF in the PUT /api/basemap endpoint prior to version 13.22.1 . The importBasemapURL() function in api/routes/basemap.ts passes an attacker-controlled URL to fetch() without IP-a...

CVE-2026-54579

mport , the MidnightBSD Package Manager, contained a vulnerability in the ping() function within libmport/ping.c prior to version 2.7.8 . The function accepted ICMP replies without validating icmp_id or icmp_seq and parsed the reply using a fixed IP-header offset instead of the actual ip_hl field...

CVE-2026-54576

mport , the MidnightBSD Package Manager, is affected by a symlink TOCTOU vulnerability in do_actual_install() (file libmport/bundle_read_install_pkg.c) prior to version 2.7.8 . The function used path-based lstat(), chown(), stat(), and chmod() operations during package installation. A local attac...

CVE-2026-54587

mport , the MidnightBSD Package Manager, is vulnerable to symlink and path traversal races in versions prior to 2.7.8 . The flaw resides in libmport/bundle_read_install_pkg.c, where directory assets (ASSET_DIR / ASSET_DIR_OWNER_MODE) used path-based mport_mkdirp(), ownership, and permission opera...