CVE-2026-49259

Technical details for CVE-2026-49259 are not publicly available in the provided documents. Monitor for updates as information remains reserved/no public details; no affected products, impacts, or mitigations can be determined from the current data.

CVE-2026-61500

Affected software: Rejetto HFS 3.0.0–3.2.0. Root cause: session-cookie signing key derived from the non‑cryptographic Math.random() generator; outputs disclosed to unauthenticated clients during login. Impact: remote attacker can observe login responses, reconstruct the generator state, recover t...

CVE-2026-48118

Technical details for CVE-2026-48118 are not publicly available in the provided documents. Monitor for updates as the entry is reserved with no disclosed details.

CVE-2026-45579

Technical details for CVE-2026-45579 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-45573

Technical details for CVE-2026-45573 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation information are included. Monitor for updates as more details may be published later.

CVE-2026-45572

Technical details for CVE-2026-45572 are not publicly available in the provided documents. Monitor for updates; no affected products, impact, or remediation can be inferred from the available data.

CVE-2026-45415

Technical details for CVE-2026-45415 are not publicly available in the provided documents. No affected products, impact, or remediation are described here. Monitor for updates and new disclosures as information becomes available.

CVE-2026-61462

CVE-2026-61462 affects mcp-gitlab. A path traversal weakness exists in the build/index.js job_id parameter, allowing an attacker to escape the intended path prefix (e.g., using ../../../user) and redirect GitLab API requests to arbitrary endpoints. This can enable access to arbitrary GitLab API r...

CVE-2026-45414

Technical details for CVE-2026-45414 are not publicly available in the provided documents. Monitor for updates; no affected products, impact, or remediation information can be confirmed from the supplied data.

CVE-2026-45378

Technical details for CVE-2026-45378 are not publicly available in the provided documents. Monitor for updates as the entry is reserved/not described.

CVE-2026-45377

Technical details for CVE-2026-45377 are not publicly available in the provided documents. No affected products, impact, or remediation are described here. Monitor for updates as new information is published.

CVE-2026-45376

Technical details for CVE-2026-45376 are not publicly available in the provided documents. The entry is reserved with no disclosed vulnerability specifics. Monitor for updates.

CVE-2026-45330

Technical details for CVE-2026-45330 are not publicly available in the provided documents. Monitor for updates and new information as it becomes available.

CVE-2026-45086

Technical details for CVE-2026-45086 are not publicly available in the provided documents. Monitoring for updates is recommended.

CVE-2026-13221

CVE-2026-13221 affects Perl versions through 5.43.9. When an alternation of more than 65,535 fixed-string branches is compiled into a trie in Perl_study_chunk, the 16‑bit delta between the first branch and the shared tail overflows. The trie’s match decision table is truncated with no warning, pr...

CVE-2026-57432

CVE-2026-57432 detail (supported by connected docs): Perl versions through 5.43.10 contain an integer overflow in the S_measure_struct function that sums item sizes (size × repeat) without overflow checks. A large repeat count in a pack or unpack template can wrap the signed SSize_t total negativ...

CVE-2026-57433

CVE-2026-57433 affects Perl’s Storable before 3.41. A signed 32-bit item count read from an SX_HOOK record is added to one and then fed to av_extend; when the count equals I32_MAX the addition overflows to negative, causing av_extend to panic during thaw/retrieve and terminate deserialization. Mu...

CVE-2026-59245

The CVE affects Apache Airflow FAB provider: FAB auth manager. A DAG with dag_id/DAGs collides with the global all-DAGs permission name produced by resource_name(), causing a per-DAG access_control grant on that DAG to silently confer the global all-DAGs permission. This yields privilege escalati...

CVE-2026-58065

The CVE affects the Apache Airflow Git provider when performing git-over-SSH operations with StrictHostKeyChecking=no, which disables SSH host-key verification and enables MITM risk between an Airflow worker and the Git server. Deployments that clone over SSH using a deploy key or involve the Git...

CVE-2026-6847

The CVE-2026-6847 entry concerns ThemisNETPanel, where an unauthenticated file upload endpoint allowed attackers to upload base64-encoded payloads and execute arbitrary PHP code on the server, leading to Remote Code Execution. The issue arises from missing authentication for a critical file uploa...