CVE-2026-100881

The zhistaredu StarTraining application (versions up to 3.8.1 ) is vulnerable to cross-site scripting (XSS) . The root cause involves the manipulation of the xss.enabled argument during the processing of the application.yml file. This vulnerability can be triggered remotely, though the attack com...

CVE-2026-96281

The Flatpak system is vulnerable to an anti-downgrade bypass on multi-user systems. An unprivileged local user with an active session can utilize the RemoveLocalRef system-helper method to remove an app's remote reference. This action prevents the anti-downgrade check from locating a reference da...

CVE-2026-100880

The zhistaredu StarTraining software (versions up to 3.8.1 ) is vulnerable to Cross-Site Scripting (XSS) within the Upload Endpoint component. The root cause lies in the manipulation of the File argument within the file du-common/src/main/java/com/edu/common/utils/file/MimeTypeUtils.java. This vu...

CVE-2026-101090

Nezha version 2.2.3 is vulnerable to a Host header injection regression in the OAuth2 redirect endpoint located at /api/v1/oauth2/{provider} (specifically in cmd/dashboard/controller/oauth2.go). When the optional dashboard_host setting is empty, the application reflects an attacker-supplied HTTP ...

CVE-2026-101089

Versions of Nezha before 2.2.7 are susceptible to an information disclosure vulnerability within the GET /api/v1/profile endpoint. This flaw allows authenticated users to retrieve their bcrypt-hashed password field. Because there are no rate limiting or audit trail constraints, an attacker can ex...

CVE-2026-101088

The Nezha server and website monitoring tool versions >= 2.2.11 and

CVE-2026-101087

Nezha versions 2.0.10 through 2.3.2 are vulnerable to a server-side request forgery (SSRF) denylist bypass. The software uses a restricted HTTP client to validate user-configurable notification and DDNS webhook URLs, but the denylist fails to include specific IPv6 transition ranges, namely the 6t...

CVE-2026-101086

Nezha Dashboard versions prior to 2.3.5 are vulnerable to a task type validation bypass. The root cause is a shared protobuf Task.Type namespace between service monitors and privileged operations, which fails to restrict service monitor task types to supported probe types. This allows authenticat...

CVE-2026-101085

Versions of Nezha before 2.3.8 are vulnerable to a Denial of Service (DoS) because the software fails to validate alert rule types and duration bounds. Authenticated non-administrator users can submit a crafted alert rule via the POST /api/v1/alert-rule endpoint, triggering unrecovered panics in ...

CVE-2026-101084

Versions of obot prior to v0.21.1 are vulnerable to an authorization bypass due to a failure to enforce Access Control Rules on the /mcp-connect endpoint. Any authenticated user who possesses a specific server ID can connect to restricted MCP servers . This allows attackers to bypass authorizatio...

CVE-2026-101065

The Obot open-source AI agent/MCP platform is vulnerable in all versions up to and including commit d7e6970 . The issue stems from the Docker quickstart command in the README, which initializes the container listening on 0.0.0.0:8080 with authentication disabled by default. Under these conditions...

CVE-2026-101064

Obot versions before v0.23.0 are vulnerable to a server-side request forgery (SSRF) in the remote MCP server registration component. The root cause is a lack of destination validation, allowing users with Power User roles or higher to specify arbitrary URLs. This enables attackers to coerce the s...

CVE-2026-101063

Obot versions prior to v0.23.0 contain an authentication bypass vulnerability in the MCP Registry endpoints under /v0.1/*. When registry authentication is enabled, the system fails to properly enforce it for these specific endpoints. This allows unauthenticated attackers to perform GET requests t...

CVE-2026-101062

Obot versions prior to v0.23.0 (specifically

CVE-2026-100879

A security flaw exists in zhistaredu StarTraining up to version 3.8.1 . The vulnerability is located in the checkRoleAllowed function within the SysRoleServiceImpl.java file of the dataScope Endpoint component. This flaw leads to missing authorization , which may be triggered via a remote attack ...

CVE-2026-100878

A vulnerability exists in zhistaredu StarTraining versions up to 3.8.1 within the authRole Endpoint . The flaw is located in the SysUser.isAdmin function inside the file edu-common/src/main/java/com/edu/common/core/domain/entity/SysUser.java. By manipulating the userId/roleIds arguments, an attac...

CVE-2026-96280

The Flatpak OCI delta stream parser contains a vulnerability where it reads sizes as guint64 but passes them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit systems). This discrepancy results in undersized allocations while subsequent operations use the original 64-bit siz...

CVE-2026-100877

The mathurvishal CloudClassroom-PHP-Project (up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be ) contains a Cross-Site Scripting (XSS) vulnerability. The flaw exists in an unknown functionality within the registrationform.php file. An attacker can achieve remote execution of this attack by ma...

CVE-2026-96279

A path traversal issue in the Flatpak OCI archive extraction process allows a malicious OCI registry to hardlink arbitrary host files into the extraction directory. This occurs when a user installs or updates a Flatpak application from an OCI remote, potentially leading to the disclosure of sensi...

CVE-2026-100876

A vulnerability exists in the mathurvishal CloudClassroom-PHP-Project (up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be ) due to missing authentication in an unknown function of the loginlinkstudent.php file. By manipulating the umail argument, an attacker can bypass authentication. Remote e...