CVE-2026-87659

A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1 . A compromised switch within the fabric can send crafted inband Fibre Channel vendor-unique CT (Common Transport) management requests to circumvent administrative au...

CVE-2026-87671

An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1 . The flaw occurs because unauthenticated HTTP endpoints process specific URL query parameters without performing numerical range checks or validating array index boundaries ...

CVE-2026-87684

A stack-based buffer overflow exists in the SNMP daemon request handling of Brocade Fabric OS (FOS) versions before 10.0.1 . The vulnerability is triggered when processing an incoming SNMPv3 packet ; specifically, an internal statistics gathering handler copies user-supplied context name data int...

CVE-2017-20283

NXP MQX Classic before version 5.0 is vulnerable to an out-of-bounds write within the RTCS UDP recvfrom() implementation. The root cause is the improper enforcement of application-supplied receive buffer lengths, which allows a crafted UDP packet to overflow the destination buffer. This vulnerabi...

CVE-2026-87726

The NXP NXPNfcRdLib software (versions RC663 through 07.14.00_Pub ) contains a vulnerability in the phalFelica component due to insufficient API bounds checking . This flaw may allow an attacker with high privileges or an untrusted third party to access unintended memory regions, potentially resu...

CVE-2026-102488

Octopus Server is vulnerable to an incorrect authorization issue (CWE-863) caused by the software incorrectly evaluating multiple scoped permission assignments. This flaw allows a highly privileged user to obtain deployment permissions that exceed their actual granted authority. No specific affec...

CVE-2026-82627

The Uncanny Automator plugin for WordPress (versions up to and including 7.6.1.1 ) is vulnerable to PHP Object Injection due to the deserialization of untrusted input. This flaw allows authenticated attackers with Subscriber-level access or higher to inject a PHP Object. The attack is feasible wh...

CVE-2026-87683

Brocade Fabric OS versions prior to 10.0.1 are susceptible to multiple stack-based buffer overflow vulnerabilities within the REST API management component . The root cause is a failure to properly validate incoming array counts and string lengths against internal buffer capacities when processin...

CVE-2026-87682

Brocade Fabric OS versions before 10.0.1 are vulnerable to multiple OS Command Injection flaws in the management interface and session processing routines. The root cause is input processing flaws during remote management connection validation and session verification for directory-based user acc...

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1 . The flaw occurs because the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks while processing specific mana...

CVE-2026-87680

A command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions prior to 10.0.1 . This flaw allows an authenticated user to execute arbitrary system commands by providing crafted input parameters . The vulnerability is addressed in FOS 10.0.1 .

CVE-2026-87679

Brocade Fabric OS versions before 10.0.1 are vulnerable to a heap-based buffer overflow (CWE-122) during trunk configuration operations. The application fails to enforce boundary checks when parsing user-supplied list strings into dynamically allocated heap arrays. An authenticated administrator ...

CVE-2024-8122

The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor authentication (MFA). Because unused OTPs remain valid indefinitely, malicious actors can conduct brute force attacks by repeatedly guessing the code over an unlimited timeframe....

CVE-2026-71482

The stargz-snapshotter tool, specifically the estargz component in versions v0.10.0 through v0.18.2 , is vulnerable to a denial of service due to a stack overflow. The root cause is that the getSource function in estargz.go follows hardlinks recursively without tracking visited entries, allowing ...

CVE-2026-95209

An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, resulting in a Denial of Service (DoS) . The provided documents do not specify the underlying root cause, specific component details, or available remediation steps. Exploitation details are not provided.

CVE-2026-95116

An issue in libming versions through 0.4.8 allows a remote attacker to trigger a denial of service (DoS) . The vulnerability resides in the readtag_file() function located in src/blocks/fromswf.c . The issue is associated with CWE-400 (Uncontrolled Resource Consumption) . While a proof-of-concept...

CVE-2026-95125

libming versions through 0.4.8 are vulnerable to a heap buffer overflow within the r_readc() function located in src/blocks/fromswf.c. This flaw can be triggered by processing a crafted SWF file containing a malformed or truncated RECT header , potentially leading to a denial of service . No spec...

CVE-2026-95208

The wolfSSL library versions v5.9.1 and v5.9.2 are vulnerable to a Denial of Service (DoS) condition due to an issue in the ConfirmNameConstraints() function located in wolfcrypt/src/asn.c. An attacker can provide crafted Certificate Authority certificates which cause wolfSSL-based TLS clients to...

CVE-2026-95116

An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtagfile in src/blocks/fromswf.c...

CVE-2026-95210

The gnutls library in version v3.8.13 is vulnerable to improper certificate validation . This flaw allows the application to accept certificates that contain invalid extensions , potentially compromising the integrity of the TLS connection. While the provided documents do not specify a direct rem...