CVE-2026-61670

CVE-2026-61670 affects microsandbox , a local-first microVM runtime and library, prior to version 0.5.10 . The root cause is that sdk/rust/lib/runtime/spawn.rs serializes NetworkConfig secret values into the --network-config argument and passes per-sandbox secrets through repeated --env arguments...

CVE-2026-68928

Acode is a text and code editor for Android. In versions 1.11.6 through 1.12.7 , the bundled terminal plugin's TerminalService is declared as an exported service without a binding permission, and the service implementation does not verify the calling application. Any locally installed app can bin...

CVE-2026-85271

Open edX Platform (versions from Redwood until Ulmo and Verawood.1) contains a stored CSS injection vulnerability in email digest notifications. The add_additional_attributes_to_notifications function in openedx/core/djangoapps/notifications/email/utils.py fails to sanitize discussion-title value...

CVE-2026-93894

Vinyl Cache before 9.0,2 contains a workspace buffer overflow in the .upper() and .lower() string type methods of VCL , allowing a remote denial of service by causing the child process to segfault or assert and restart. Effective exploitation requires prior knowledge of the VCL in use and the abi...

CVE-2026-85272

CVE-2026-85272 affects Open edX Platform from Aspen.1 through the Ulmo and Verawood.1 releases. The root cause lies in openedx/core/lib/extract_archive.py, where the _is_bad_path function validates extracted archive targets using a string prefix comparison (startswith) instead of comparing indivi...

CVE-2026-71855

The Suricata network security engine (IDS/IPS/NSM) is vulnerable to a hash collision flaw in src/flow-hash.c . Prior to versions 8.0.6 and 7.0.17 , the system can treat IPv4 and IPv6 flows as identical because it fails to compare the IP family when specific attributes—such as raw address words, p...

CVE-2026-71418

Suricata is a network IDS/IPS/NMS engine. Affected versions are 8.0.0 through 8.0.6 . The vulnerability resides in DNS-over-HTTP/2 (DoH2) processing in rust/src/http2/http2.rs, where previously processed HTTP/2 DATA frame contents are retained in the internal buffer instead of being cleared. An a...

CVE-2026-57223

Suricata (OISF network IDS/IPS engine) prior to 7.0.17 and 8.0.6 contains a local privilege escalation vulnerability in its Windows service installation logic (src/win32-service.c). The service ImagePath is passed unquoted to CreateServiceA; if Suricata is installed under a path containing spaces...

CVE-2026-63446

Suricata (OISF) versions 8.0.0 through 8.0.6 are affected by a resource exhaustion flaw in the application-layer parser. The function AppLayerParserSetTransactionInspectId() in src/app-layer-parser.c uses an inverted guard , marking only already-inspected transactions as inspected. On flows match...

CVE-2026-63447

Suricata (OISF network IDS/IPS/NSM engine) versions 8.0.5 through 8.0.6 are affected by a quadratic CPU consumption vulnerability in the FTP parser (src/app-layer-ftp.c). When processing a single large chunk of FTP command data, the parser can continue allocating transactions even after the app-l...

CVE-2026-63448

The Suricata network security engine (prior to versions 7.0.17 and 8.0.6 ) contains a vulnerability in its SMB parser . The root cause is that the parser retains force-completed transactions on flows where payload is seen in only one direction (including async-oneside flows), because cleanup oper...

CVE-2026-57229

Suricata's SMTP MIME parser (rust/src/mime/smtp.rs) in versions 8.0.0 through 8.0.6 fails to fully reset state when processing Content-Type: message/rfc822 encapsulation. An outer MIME part's filename or Content-Transfer-Encoding state leaks into the inner message, allowing a crafted email to byp...

CVE-2026-57225

Suricata , a network Intrusion Detection and Prevention System, is vulnerable to a NULL pointer dereference in versions 8.0.0 through 8.0.6 . The flaw exists in src/datasets-context-json.c, where the engine incorrectly assumes that a configured JSON or NDJSON dataset value_key will always resolve...

CVE-2026-63452

Suricata (OISF), a network IDS/IPS/NSM engine, is affected in versions 8.0.0 through 8.0.6 . The HTTP/1 parser enforces a per-transaction decompression limit but does not cap the total number of small brotli compression bombs a single flow can submit. When the response-body-decompress-layer-limit...

CVE-2026-63451

The network security engine Suricata versions 8.0.0 through 8.0.6 is vulnerable to a heap buffer overflow . A local user can trigger this flaw by loading a specially crafted detection rule that combines frame inspection without content and a transformed match without content. This interaction cau...

CVE-2026-57227

Suricata (a network IDS/IPS/NNSM engine) has a denial-of-service vulnerability in its MQTT parser (rust/src/mqtt/mqtt.rs). The root cause is that repeated PUBREC or PUBREL messages can be appended to a single transaction without any limit, allowing crafted MQTT traffic to grow transaction state i...

CVE-2026-63450

The Suricata network Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) is vulnerable in versions prior to 8.0.6 due to a flaw in the FTP parser located in src/app-layer-ftp.c. The parser incorrectly treats a RETR or STOR command sent before PORT or PASV negotiation as a fatal...

CVE-2026-93562

CVE-2026-93562 is an HTTP request smuggling vulnerability in Netty's HTTP/1 decoder (package io.netty/netty-codec-http). The root cause is incomplete validation of malformed Transfer-Encoding headers, allowing a remote attacker with no privileges to inject arbitrary HTTP requests and potentially ...

CVE-2026-93574

CVE-2026-93574 affects Netty's netty-codec-http component, where an incorrect parsing of HTTP/1.1 chunk-size tokens containing post-digit whitespace enables HTTP request smuggling . A remote attacker with no privileges can exploit this over the network to bypass security controls or access unauth...

CVE-2026-63449

Suricata versions 8.0.0 through 8.0.6 are vulnerable to a flaw in the SIP parser (specifically in rust/src/sip/parser.rs). The parser incorrectly uses 16-bit fields to store request and response body lengths. Consequently, a SIP body exceeding 65,536 bytes causes the length to truncate, preventin...