CVE-2026-87108

The MongoDB Ops Manager is vulnerable to an improper authorization flaw where an authenticated user with a read-only project role can retrieve daily host monitoring records from different projects. By providing a specific record identifier, the attacker can bypass ownership validation to access s...

CVE-2026-87110

The Ops Manager web port is susceptible to uncontrolled resource consumption (CWE-770). An unauthenticated user with network access can repeatedly request specific monitoring endpoints that perform costly operations. Because these endpoints lack rate limiting , the attack can temporarily slow dow...

CVE-2026-107914

Backdrop CMS versions 1.34 (before 1.34.5) and 1.35 (before 1.35.1) fail to sufficiently protect configuration exports when delivering a compressed archive. This vulnerability, categorized under CWE-497 , allows for the exposure of sensitive system information. The risk is partially mitigated bec...

CVE-2026-107911

A type confusion vulnerability exists in the _read_flags function (src/commands/cmd_dispatcher.c) of FalkorDB before version 4.20.0 . A remote authenticated attacker capable of running GRAPH.QUERY can trigger the flaw because the system accepts a --bolt argument and casts a Redis string object to...

CVE-2026-107910

FalkorDB versions before 4.20.0 are vulnerable to an authentication bypass in the is_authenticated function (src/bolt/bolt_api.c ) of the Bolt endpoint. The root cause is fail-open error handling during an empty AUTH command sent to Redis; the system only mandates a password upon receiving a WRON...

CVE-2026-107909

FalkorDB versions before 4.20.0 are vulnerable to a pre-authentication heap out-of-bounds write in the ws_read_frame and buffer_apply_mask functions. This occurs because WebSocket frames with a 64-bit extended payload length are not properly bounded; the existing check is an ASSERT() that is omit...

CVE-2026-107908

FalkorDB versions prior to 4.20.0 are vulnerable to a heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c). The flaw occurs because the handler uses ASSERT() to validate the chunk size, which is omitted in release builds. This allows a remote unauthenticated attack...

CVE-2026-94597

The NukeViet application (version 4.6.01 ) is vulnerable to Remote Code Execution (RCE) via the image-upload component. The root cause is that the verify_image() function fails to account for PHP short-open tags , allowing an attacker to extract an uploaded path from a multipart upload and execut...

CVE-2026-107889

A stored Cross-Site Scripting (XSS) vulnerability exists in the login theme rendering component of Keycloak . The flaw arises because the security filter intended to sanitize user input can be bypassed, enabling a realm administrator to inject malicious scripts into display fields. If exploited, ...

CVE-2026-107890

OpenPrinting CUPS before version 2.4.20 is vulnerable to a NULL pointer dereference caused by repeated Internet Printing Protocol (IPP ) group tags in job-creation requests. During IPP parsing, unnamed separator attributes with IPP_TAG_ZERO are created, but add_job() converts these to IPP_TAG_JOB...

CVE-2026-107888

OpenPrinting CUPS versions before 2.4.20 are vulnerable to a NULL pointer dereference in the cupsdCheckJobs() function. The issue occurs when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Because cleanup removes the destination without cancelin...

CVE-2026-7826

FalkorDB versions prior to 4.18.4 are vulnerable to a heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (located in src/serializers/serializer_io.c). The root cause is a missing bounds check; while an ASSERT() exists, it is compiled out in release builds, allowing memc...

CVE-2026-7827

FalkorDB versions prior to 4.18.4 are vulnerable to a stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (located in src/serializers/decoders/*/decode_graph_entities.c). The root cause is an unbounded property count in a crafted RDB stream, where the count sizes ...

CVE-2026-5759

FalkorDB versions before 4.18.1 are vulnerable to a double free and use-after-free flaw in the RdbLoadDeletedNodes function within the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c ). The root cause is a length check relying on ASSERT() , which is removed in release build...

CVE-2026-107886

OpenPrinting CUPS before version 2.4.20 is vulnerable to a double-free memory error in printer-class management. When the add_class() function replaces an existing class member list, it frees pclass->printers without clearing the pointer; if subsequent validation fails, the dangling pointer is...

CVE-2026-107885

OpenPrinting CUPS versions through 2.4.20 are vulnerable to a resource-exhaustion denial of service (DoS) flaw in the cupsdCheckJobs() function. The vulnerability exists because the scheduler globally suppresses timeout processing for all pending jobs whenever any client connection has an in-flig...

CVE-2026-75353

The OpENer v2.3 (commit 76b95cf) software contains an out-of-bounds read vulnerability within the server-side EtherNet/IP ForwardOpen connection-path parser . This flaw could allow a remote attacker to trigger a denial of service condition. No specific exploit details or remediation steps are pro...

CVE-2026-78797

iStoreOS versions prior to 24.10.7 are vulnerable to a remote code execution (RCE) flaw. An attacker can exploit the task_id variable within the tasks-lib.lua file to execute arbitrary code. The impact is critical, with a CVSS 3.1 score of 9.8 . To remediate this, users should update to version 2...

CVE-2026-78835

The Rocket Software Rocket Remote Desktop version 18.0.8583.1 is vulnerable to Insufficiently Protected Credentials (CWE-522). This security weakness allows for unauthorized access or data exposure due to inadequate protection of sensitive information. The vulnerability is reported with a CRITICA...

CVE-2026-75352

The OpENer v2.3/commit 76b95cf software is affected by an integer underflow vulnerability within the server-side EtherNet/IP ForwardOpen connection-path parser . A remote attacker can exploit this flaw by sending specially crafted network requests, which can cause the service to crash and result ...