CVE-2026-97646

A vulnerability exists in the ningzichun student-management-system (up to commit 98760f5711cf6dc8b4adca53a9e207ca49b02ebf ) within the admin/fun/getStudent.php file. The root cause is an authorization bypass triggered by the manipulation of the sid argument. This flaw can be exploited remotely . ...

CVE-2026-92288

The Lemonldap::NG::Portal component for Perl is vulnerable in versions 2.20.0 before 2.21.6 and 2.22.0 before 2.23.4 . The root cause is that the checkEndPointAuthenticationCredentials function fails to verify the client secret for Relying Parties marked as public , while still allowing the reque...

CVE-2026-53493

The open-source container runtime containerd is vulnerable to a Denial of Service (DoS) attack prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1. A crafted OCI index graph can cause extreme CPU and memory usage during the PullImage operation, leading to significant ContainerCreating stall...

CVE-2026-85417

Brocade SANnav versions prior to 3.0.1a are vulnerable to incomplete property masking within the logging subsystem. Under specific configuration conditions, this flaw allows SNMP authentication and privacy passwords to be recorded in plain text within application logs. Attackers with read access ...

CVE-2025-51457

The D-Link DAP-2610 router, running firmware version up to 2.06B08r099 , is susceptible to an authenticated command injection vulnerability. This flaw exists within the web interface at the /index.xgi endpoint, where an attacker with valid credentials can exploit specific parameters to execute ar...

CVE-2026-79153

The Seclore FileSecure Desktop Client before version 3.25.1.0 contains an improper access control vulnerability within its kernel-mode driver component. This flaw allows an authenticated local user to achieve privilege escalation to NT AUTHORITY\SYSTEM on affected systems. No specific exploit cod...

CVE-2026-52622

Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal models WES100 , WES270 , WES280 , and WES290 (versions prior to 08-08-2023) are vulnerable to a remote information disclosure flaw. An attacker can obtain sensitive information by exploiting a vulnerability in the global API req...

CVE-2026-51772

A Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenStack Glance . When the show_multiple_locations configuration option is enabled in glance-api.conf, an authenticated attacker can manipulate the locations attribute of an image in the queued state by sending a ...

CVE-2026-51773

The VMware datastore driver of OpenStack glance_store contains a vulnerability where an authenticated attacker can provide a maliciously crafted image location URI. The _retry_request function fails to validate the destination host before attaching sensitive authentication headers, potentially le...

CVE-2026-5431

CVE-2026-5431 identifies a critical Remote Code Execution (RCE) vulnerability in Adobe Commerce and Magento (CVSS 9.8). While specific technical root causes are not yet released, the flaw is confirmed to be actively exploited in the wild and is considered potentially wormable . Affected users are...

CVE-2026-88420

A reflected cross-site scripting (XSS) vulnerability exists in the EntryAbstract.save() component of APSL puput versions v1.2.1 through v2.2.0 . This flaw allows authenticated attackers possessing Wagtail Editor privileges to execute arbitrary code within a victim's browser by providing a crafted...

CVE-2026-78902

A Cross Site Scripting (XSS) vulnerability exists in Netgate pfSense 26.03.1-RELEASE . This flaw specifically affects the pfBlockerNG package , potentially allowing an attacker to achieve arbitrary code execution . No specific remediation or exploit details are provided in the documents.

CVE-2026-88421

APSL puput versions v1.2.1 through v2.2.0 are vulnerable to an incorrect access control flaw in the BlogPage.get_entries() component. This vulnerability allows unauthenticated attackers to view restricted blog entries through multiple access points, including the blog index, tag, category, author...

CVE-2026-88389

Espruino 2v29 (commit bffc6d0 ) is susceptible to a NULL pointer dereference vulnerability within the jslGetRawString() function in src/jslex.c. Processing crafted raw or binary string input can cause the lexer to pass a NULL iterator target to jsvLockAgain(). In RELEASE/NO_ASSERT builds, the abs...

CVE-2026-85082

The Root Browser Classic 3.3.0 application is vulnerable to an OS command injection due to the improper handling of SQLite database paths. The application passes the file path of a selected database to an operating-system shell without ensuring the filename is safely separated from the command. T...

CVE-2026-84283

In FluteCode Secure Folder 1.2 , files designated for the password-protected vault are stored as unencrypted files within the Android shared-storage tree . This flaw allows a local application or file manager with access to the relevant shared-storage path to enumerate, copy, and open these files...

CVE-2026-97230

The IO::Socket::SSL::SelfCertificate module (version 1.00 ) for Perl contains malware that executes arbitrary code. The generate_certificate function runs a Python script disguised as a certificate file, located at lib/Crypt/SelfCertificate/sample/cert.pem. This script retrieves and executes code...

CVE-2026-87722

Gerrit Code Review versions 2.1.6 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 are vulnerable to Uncontrolled Resource Consumption (CWE-400 / CWE-1333). The root cause is the compilation of user-supplied regular expressions into unbounded dk.brics.automaton instances on the re...

CVE-2026-87721

Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 are vulnerable to Uncontrolled Resource Consumption (CWE-400 / CWE-407) in the ANTLR 3 search query parser (QueryParser / Query.g ). An unauthenticated remote attacker can trigger a persistent deni...

CVE-2026-87720

A vulnerability exists in Gerrit Code Review versions 2.16.0 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 due to Incorrect Authorization (CWE-863) . The flaw stems from project name normalization in ProjectUtil.stripGitSuffix and eviction logic in ProjectCacheImpl. Specificall...