CVE-2026-52853

The open-source collaborative wiki software Docmost is vulnerable to privilege escalation prior to version 0.90.1 . An authenticated workspace ADMIN can bypass role ceilings within the workspace invitation flow to invite an external email address with OWNER permissions. This flaw allows an ADMIN ...

CVE-2026-61823

The code16 Sharp framework (a Laravel-based CMS/admin interface) is vulnerable to stored cross-site scripting (XSS) in versions prior to 9.22.5 . The root cause is that the rich-text editor's HTML sanitizer allows the srcdoc attribute on iframe elements. While the sanitizer HTML-encodes the inter...

CVE-2026-48072

Docmost , an open-source collaborative wiki and documentation software, is vulnerable to a path traversal flaw in versions prior to 0.80.1 . The public avatar and logo image endpoints fail to confine file path segments to the intended directory, allowing an unauthenticated attacker to traverse ou...

CVE-2026-97321

The YunaiV/zhijiantianya ruoyi-vue-pro software (up to version 2026.08) contains a SQL injection vulnerability in the GoView Data Endpoint component. Specifically, the GoViewDataServiceImpl.getDataBySQL function in the file yudao-module-report/src/main/java/cn/iocoder/yudao/module/report/service/...

CVE-2026-52850

The open-source wiki software Docmost is vulnerable to a broken access control flaw in its transclusion / sync-block lookup API prior to version 0.90.1 . An authenticated workspace member who lacks permission to access a private space can retrieve confidential sync-block content and source page m...

CVE-2026-65827

The open-source collaborative wiki software Docmost is vulnerable to a denial of service via an unbounded ZIP decompression (zip-bomb) in the page-import feature. In versions 0.21.0 through 0.95.0 , an authenticated workspace member with edit rights can upload an archive that lacks limits on tota...

CVE-2026-13248

The Honeywell PD45 Industrial Printer (firmware version F10.19.010040 ) contains an Authenticated Remote Code Execution vulnerability within the web management interface. The root cause allows an authenticated user with admin or itadmin account privileges to submit commands written in the Interme...

CVE-2026-61825

The code16/sharp Laravel-based framework is vulnerable to stored cross-site scripting (XSS) in versions before 9.22.5 . The flaw exists within the SharpEditorFormField component, where attacker-controlled content using the data-html-content attribute can bypass HTML sanitization to preserve and e...

CVE-2026-13249

The Honeywell PD45 Industrial Printer (version F10.19.010040 ) is vulnerable to an unauthenticated Remote Code Execution (RCE) via Arbitrary File Upload in its web management interface. This flaw allows an attacker to upload and execute malicious files or commands without any authentication. To r...

CVE-2026-82371

Brocade SANnav versions before 3.0.1a are vulnerable to a plaintext exposure of sensitive authentication data within the discovery service log files . This flaw allows individuals with file read access to retrieve administrative switch credentials and active session tokens . An attacker who gains...

CVE-2026-96749

The MongoDB Python Driver is vulnerable to a heap out-of-bounds write within its bundled native extension's BSON document encoding component. The root cause is a signed 32-bit integer overflow occurring during size arithmetic when processing unusually large amounts of caller-supplied data. Becaus...

CVE-2026-96748

The PyMongo database driver is vulnerable to connection redirection due to percent-encoded delimiter injection in connection string hosts. The root cause is that PyMongo decodes percent-encoded characters in the host portion before separating the host list by delimiters. If an application include...

CVE-2026-96747

The MongoDB Python Driver client-side field level encryption support contains a vulnerability where a key management endpoint ending in .sock is incorrectly treated as a local Unix domain socket path instead of a remote host. An attacker with write access to encryption key metadata in the databas...

CVE-2026-48070

The open-source wiki software Docmost (prior to version 0.80.1 ) is vulnerable to an avatar URL path traversal flaw. Authenticated users can store attacker-controlled avatarUrl values which are subsequently processed by the avatar cleanup function without proper directory confinement on local-sto...

CVE-2026-97320

A server-side request forgery (SSRF) vulnerability exists in the YunaiV/zhijiantianya ruoyi-vue-pro software (versions up to 2026.08). The flaw is located in the AI Knowledge Module within the AiKnowledgeDocumentServiceImpl.readUrl function of the AiKnowledgeDocumentServiceImpl.java file. Specifi...

CVE-2026-62286

Dozzle, a realtime log viewer for Docker containers, contains a vulnerability in versions prior to 10.6.7 . The streamEvents function in internal/web/events.go fails to apply user-specific label filters to the container-stat and container-event channels returned by the GET /api/events/stream endp...

CVE-2026-85738

The collaborative travel planner TREK (prior to version 3.4.0 ) is vulnerable to a Server-Side Request Forgery (SSRF) due to a flaw in the checkSsrf logic located in server/src/utils/ssrfGuard.ts. The application fails to recognize NAT64, 6to4, or Teredo IPv6 transition addresses that encode an I...

CVE-2026-77293

The collaborative travel planner TREK is vulnerable to an Insecure Direct Object Reference (IDOR) or Broken Access Control issue in versions prior to 3.3.0 . The DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId endpoint fails to properly verify if the target note-file belongs to the a...

CVE-2026-77320

The collaborative travel planner TREK is vulnerable to an information disclosure flaw in versions prior to 3.3.0 . The getSharedTripData function in server/src/services/shareService.ts fails to respect the share_map permission on the server-side. Consequently, while the client UI may hide the map...

CVE-2026-77321

The collaborative travel planner TREK is vulnerable prior to version 3.3.0 due to a missing scope check in the get_trip_summary tool located in server/src/mcp/tools/trips.ts. The application fails to require the trips:read scope for scoped OAuth MCP tokens. Consequently, an attacker with a token ...