CVE-2026-118177

The Thunderbird email client (specifically versions prior to 159 and 153.6 ) is vulnerable to a flaw where it accepts calendar locations pointing to local files , network shares , or other servers during account setup or network calendar addition. A malicious server or network attacker using plai...

CVE-2026-118178

The Thunderbird email client is vulnerable to a flaw where a remote RSS feed can use the itunes:new-feed-url or newLocation element to redirect its subscription URL to a file: URL. This allows an attacker to force Thunderbird to read local files or, on Windows , connect to an attacker-controlled ...

CVE-2026-118176

Thunderbird on Windows is vulnerable to a bypass of remote UNC path restrictions in mailbox: URLs . An attacker can use extended-length UNC paths to bypass security checks by displaying a specially crafted email. This causes Thunderbird to connect to an SMB server chosen by the attacker, potentia...

CVE-2026-118175

The Thunderbird email client is vulnerable to a flaw where replying to, forwarding, or editing a crafted email message as new can cause the application to embed parts of a different message stored in the same folder into the new message. This occurs without displaying a blocked content warning. I...

CVE-2026-118174

Thunderbird automatically loads the content of OpenPGP key attachments when a message is displayed to offer a key import. An attacker can mark these as external attachments pointing to an arbitrary URL, causing the application to load the content without user interaction and bypassing remote cont...

CVE-2026-118173

The MISP Guard proxy contains an incomplete validation check for required taxonomy tags (such as TLP ). The system incorrectly verifies that only at least one tag within a required taxonomy matches the allowed list, rather than ensuring every present tag is permitted. This flaw allows feed events...

CVE-2026-115413

The AWS API MCP Server (versions prior to 1.6.0 ) is vulnerable to an OAuth Token Audience Validation Bypass . The root cause is a failure to validate the token audience in the OAuth authentication mode. This allows a local user to execute AWS operations using the server's configured AWS credenti...

CVE-2026-118171

The strapi/content-manager package is vulnerable due to a missing content-scope authorization check in the content manager preview URL endpoint. This flaw allows low-privileged admins to generate preview URLs even without holding read permissions or knowing specific document identifiers. Remediat...

CVE-2026-118172

The strapi/strapi (Core Admin / Webhook Runner) package is vulnerable to a semi-blind SSRF via a webhook follow-redirect. The vulnerability exists because the webhook dispatcher automatically follows HTTP redirects without performing post-redirect IP resolution or RFC1918/link-local boundary chec...

CVE-2026-118170

The strapi/review-workflows package is subject to a broken access control vulnerability. The flaw allows unauthorized updates to be performed because the system fails to verify if the caller possesses the necessary update rights for the underlying document. Remediation information is referenced i...

CVE-2026-57202

The Asterisk telephony toolkit is vulnerable to a security bypass where an authenticated attacker with read-only ARI credentials can execute write dialplan functions. By using setChannelVar, an attacker can trigger functions like FILE() writes, even if live_dangerously is set to no in asterisk.co...

CVE-2026-57188

Asterisk, an open source telephony toolkit, contains a stack buffer overflow vulnerability in the res_xmpp module's handling of XMPP namespace prefixes . An authenticated attacker with an XMPP account on the same or a federated server can trigger this by sending carefully crafted packets. This co...

CVE-2026-84999

The Pie Register Premium WordPress plugin (versions

CVE-2026-116682

FileBrowser Quantum , a web-based file manager, is vulnerable to an arbitrary file read vulnerability in versions prior to 1.5.2-stable and 2.0.1-beta . The root cause is located in backend/pkg/indexing/indexingFiles.go, where the application resolves symbolic links using GetRealPath without veri...

CVE-2026-117526

A code injection vulnerability exists in reduxjs redux-devtools version 5.0.0 within the Remotedev Server component. The flaw is located in the evalAction function, where manipulating the action argument allows for code execution. This vulnerability requires local access to exploit. While the pro...

CVE-2026-116680

HomeBox , a home inventory and organization system, is vulnerable to Server-Side Request Forgery (SSRF) prior to version 0.27.0 . While the application validates generic notifier URLs using ValidateNotifierURL, the underlying shoutrrr component uses http.DefaultClient.Do without a CheckRedirect p...

CVE-2026-88812

A double-free vulnerability exists in the XKB SetGeometry geometry processing of the X.Org X Server (versions before 21.1.25 ) and XWayland (versions before 24.1.14 ). The issue is caused by an error handling flaw where a memory pointer is not cleared after an allocation failure, leading to a dou...

CVE-2026-107625

The WordPress Ultimate Member plugin (versions

CVE-2026-102816

The TP-Link RE305 V3 is affected by an authorization vulnerability in its country or region configuration interface . An unauthenticated attacker on the same local network can modify the wireless regulatory region, forcing the device to reapply its wireless configuration. Successful exploitation ...

CVE-2026-102815

A local command injection vulnerability exists in the tmpServer service of the TP-Link RE305 V3 . The service runs with root privileges and listens on the local loopback interface. A local attacker with access to a low-privileged process can submit a crafted request to the TDDPv1 service to execu...