CVE-2026-101283

The iperf3 network testing tool (versions 3.20–3.21 by esnet/iperf) is vulnerable to a pre-auth heap buffer overflow within the decrypt_rsa_message() function. The root cause is that a 256-byte RSA buffer is populated using BIO_read with an attacker-controlled ciphertext length; while a guard pro...

CVE-2026-103001

The PyJWT library (versions 2.11.0 through 2.13.0 ) contains a vulnerability where the PyJWT._merge_options() method modifies a caller-supplied mutable options mapping when verify_signature is set to false . If an application reuses this same mapping for subsequent decode() or decode_complete() c...

CVE-2026-101276

The iperf3 network testing tool (version 3.21 ) is vulnerable to a remote, unauthenticated heap use-after-free flaw. The issue occurs because the server's per-test watchdog function, server_timer_proc(), frees streams without properly cancelling or joining their associated worker threads. Consequ...

CVE-2026-91159

Technical details for CVE-2026-91159 are not publicly available in the provided documents. While a proof-of-concept was sighted, no information regarding the affected product, root cause, or impact is provided. Monitor for updates.

CVE-2026-92172

Prior to version v66.0.0.733.524 of Meta Horizon OS , a vulnerability exists where OVRMediaService can be induced to send a privileged PendingIntent containing a com.oculus.horizon CallerIdentity . This occurs when an arbitrary application registers for the com.oculus.systemactivities.SCREENSHOT ...

CVE-2026-92173

Meta Horizon OS versions prior to 74.0.0.878.1682 are vulnerable to a flaw in MediaSyncJobReceiver . An attacker can induce this component to send a privileged PendingIntent containing a com.oculus.vrshell CallerIdentity to an arbitrary application listening via NotificationListenerService . This...

CVE-2023-54403

Yonyou U8 CRM (versions before V16.5 and V18 ) is vulnerable to an arbitrary file read vulnerability located in the /ajax/getemaildata.php endpoint. The flaw allows unauthenticated attackers to bypass authentication by using the DontCheckLogin=1 parameter and subsequently read arbitrary files via...

CVE-2026-102105

Kiteworks Email Protection Gateway versions prior to 9.5.0 are vulnerable to a Server-Side Request Forgery (SSRF) . The flaw occurs when the gateway renders message content that references external resources, allowing a remote, unauthenticated attacker to induce the gateway to issue crafted reque...

CVE-2026-102106

The Kiteworks Email Protection Gateway contains an improper authentication vulnerability within an administrative service. The root cause is that the service fails to consistently enforce administrator authentication, allowing a required password check to be bypassed. An attacker referencing a va...

CVE-2026-102107

Kiteworks Core contains a business logic flaw within its file-request feature. This flaw allows an authenticated user to send requests that appear to originate from a different user because the server fails to verify if the requester is authorized to act as the specified account. An attacker coul...

CVE-2024-58387

Inspur Haiyue HCM Cloud is affected by an arbitrary file read vulnerability in the /api/model_report/file/download endpoint. The root cause is the use of unvalidated path parameters (index and ext), which allows unauthenticated remote attackers to perform path traversal attacks. By crafting reque...

CVE-2026-102108

The Kiteworks Email Protection Gateway is vulnerable to a deserialization of untrusted data flaw. An authenticated administrator with specific queue-management privileges could submit a crafted serialized object to a cluster management interface . Due to insufficient validation during deserializa...

CVE-2026-102109

A SQL injection vulnerability exists in Kiteworks Secure Data Forms . The root cause is the improper sanitization of a value derived from an authenticated user's stored account data when incorporated into a database query. Exploitation requires an authenticated session and is only applicable to d...

CVE-2023-54402

The software iDocView is vulnerable to a Server-Side Request Forgery (SSRF) flaw in its /doc/upload endpoint. Remote unauthenticated attackers can bypass authentication by using a hardcoded default token value (testtoken ) to fetch arbitrary URLs. Due to unrestricted URL scheme handling, includin...

CVE-2026-102110

A Kiteworks appliance is vulnerable to a missing authentication flaw in a setup function used during initial activation . An unauthenticated network attacker can repeatedly re-trigger the privileged activation process during this specific window because the endpoint fails to enforce intended stat...

CVE-2026-102111

The Kiteworks Core software contains a vulnerability where it fails to enforce the maximum permitted value for a configurable security-policy setting . An authenticated administrator can set this value outside its intended range, causing the associated security control to remain silently ineffect...

CVE-2026-102112

A privilege escalation vulnerability exists in Kiteworks , where an attacker with existing local access and code execution as an unprivileged backend service account on the appliance can escalate to root privileges. This allows the attacker to run arbitrary commands with the highest privileges. T...

CVE-2026-102113

A privilege escalation vulnerability exists in Kiteworks where an attacker with local code execution as an unprivileged backend service account on the appliance can escalate to root privileges. The root cause is a privileged routine that fails to safely handle a filesystem path influenced by the ...

CVE-2026-102114

A command injection vulnerability exists in Kiteworks that allows a high-privileged authenticated administrator to execute arbitrary operating-system commands as root on the affected appliance node. Successful exploitation requires an administrative account with elevated privileges. No specific r...

CVE-2026-102115

Kiteworks Core is vulnerable to an authentication bypass in its password reset workflow due to insufficient validation of a submitted parameter. An unauthenticated attacker who possesses a user's email address can reset the account's password without needing access to the emailed reset link. This...