CVE-2026-79315

A reflected cross-site scripting (XSS) vulnerability exists in x-ui 0.3.2 . The management interface reflects the raw request URI into a client-side template binding expression used for sidebar menu highlighting. Because the browser decodes HTML entities before the client-side framework evaluates...

CVE-2026-88418

CMSimple 5.24 is vulnerable to persistent remote code execution because it ships with CSRF protection disabled by default. This flaw causes csrfProtection() to become a no-op on state-changing admin requests and omits the csrf_token hidden field in admin forms. An unauthenticated attacker can tri...

CVE-2026-79311

webpy (web.py) version 0.76 is vulnerable to Cross-Site Scripting (XSS) through the render_jinja.__init__() function. The vulnerability allows injected script to be executed in a user's browser when the Jinja rendering path is invoked. No specific affected version range beyond 0.76, remediation d...

CVE-2026-88415

Versions 6.1.1 through 6.2.1 of MCMS are vulnerable to stored Cross-Site Scripting (XSS) . The root cause is that the article content field contentDetails is excluded from the application's global XSS filter. The impact allows for the execution of malicious scripts in the context of the user's br...

CVE-2026-88416

The MCMS software, specifically versions 6.1.1 through 6.2.1 , contains a SQL injection vulnerability within the custom model/form import feature . While the root cause is identified as a flaw in this specific functionality, the provided documents do not specify the exact technical impact or reme...

CVE-2026-88344

The flatcc library (specifically version 4c3b999e ) contains an out-of-bounds read vulnerability in its schema lexer. The issue occurs within the lex() function's integer digit-scan loop, which can advance past the end of an exact-length FlatBuffers schema buffer if it ends with a digit, leading ...

CVE-2026-88350

An integer overflow vulnerability exists in MPack version 1.1.1 within the functions mpack_node_cstr_alloc() and mpack_node_utf8_cstr_alloc(). The vulnerability is associated with CWE-190 . According to the provided documentation, some Linux distributions may have packages impacted by this vulner...

CVE-2026-75432

An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information . The vulnerability originates from the src/scanner.cpp file, specifically within the Scanner::PopIndent() and Scanner::PushIndentTo() components. No details regarding specific remediation or in-the-wild exploitat...

CVE-2026-94489

A path traversal vulnerability in OctoPrint 1.0.0 affects the _validate function in src/octoprint/server/api/files.py (File Download API). Manipulation of the filename argument allows a remote attacker with low privileges to traverse directories, resulting in low confidentiality impact . The expl...

CVE-2026-94426

xuxueli xxl-job up to version 3.5.0 is affected by a cross-site scripting (XSS) vulnerability in the /jobgroup/insert endpoint. The flaw is triggered by manipulating the Name argument, allowing a remote attacker to inject scripts that execute in a victim's browser. The CVSS 3.1 score is 3.5 (LOW)...

CVE-2026-94425

CVE-2026-94425 affects the Moore Threads MTT S80 Driver Package 340.150 , specifically the IOCTL Handler in the driver library mtdispkm64.sys (function sub_140006F0C). The root cause is improper privilege management , allowing a local attacker with low privileges to escalate access. The CVSS 3.1 ...

CVE-2026-94627

vLLM Mooncake connector (through version 0.29.0) fails to properly manage GPU KV cache block ownership when concurrent child requests share a single transfer ID in prefill/decode disaggregated deployments. An unauthenticated remote attacker can trigger GPU memory exhaustion by submitting completi...

CVE-2026-94626

vLLM through 0.29.0 fails to validate the tp_size parameter in kv_transfer_params on OpenAI-compatible completion endpoints. In prefill/decode disaggregated deployments using NIXL, an unauthenticated remote attacker can supply an arbitrary tp_size value to allocate unbounded memory , ultimately t...

CVE-2026-94625

vLLM through 0.29.0 is affected by a resource exhaustion vulnerability in its MooncakeConnector component (used for KV-cache transfer). Rejected prefill requests create ownerless transfer placeholders that are never reclaimed, allowing a remote, unauthenticated attacker to exhaust sender task poo...

CVE-2026-94624

vLLM through version 0.29.0 contains a denial-of-service vulnerability in its P2P KV offloading subsystem. When the OffloadingConnector is configured with TieringOffloadingSpec and a peer-to-peer secondary tier, an unauthenticated remote attacker can supply arbitrary host and port values via kv_t...

CVE-2026-94623

vLLM through version 0.29.0 is affected by a denial of service vulnerability in the NIXL connector's prefix caching implementation. The root cause is a failure to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. An unauthenticated...

CVE-2026-94622

vLLM versions through 0.29.0 are affected by a denial of service vulnerability in the NIXL connector's metadata handling, specifically affecting prefill/decode disaggregated deployments. An unauthenticated, remote attacker can send requests with incomplete kv_transfer_params dictionary entries to...

CVE-2026-94540

DesktopSMS 1.11.0 by MrPear exposes an unauthenticated local service that can be reached via same-device loopback. A local attacker on the same device can exploit this to transmit SMS, retrieve SMS-derived content, and persist an attacker-selected paired identity—all without pairing confirmation ...

CVE-2026-65980

Chartbrew , an open-source web application for creating charts from databases and APIs, is vulnerable to SQL injection in its ClickHouse protocol prior to version 5.2.3 . The root cause is that applySqlVariables() is called without the escapeBackslash option, allowing an attacker to supply a back...

CVE-2026-61851

Chartbrew is an open-source web application that connects to databases and APIs to create charts. Prior to 5.2.2 , its runQuery() implementation in server/modules/ai/orchestrator/tools/runQuery.js enforced read-only database access using a blocklist of only seven SQL keywords . An authenticated u...