CVE-2026-108715

LibreNMS versions through 26.9.1.1 are affected by an authorization bypass vulnerability in the includes/html/graphs/smokeping/auth.inc.php component. The root cause is an incorrect authorization check that validates the src probe device instead of the rendered target device . Consequently, restr...

CVE-2026-108714

The MCP Kotlin SDK (versions through 0.15.0 ) is vulnerable to a memory exhaustion issue via the Application.mcpWebSocket component. The root cause is that the SDK installs Ktor WebSockets without enforcing a maxFrameSize limit. An attacker can exploit this by sending small frame headers that dec...

CVE-2026-108712

SuiteCRM versions through 7.15.2 and 8.10.2 are affected by a missing authorization vulnerability in the DetailUserRole entry point. This flaw allows authenticated non-admin users to view the ACL data of other non-admin users. An attacker can achieve this by supplying another user's ID in the rec...

CVE-2026-108713

SuiteCRM versions through 7.15.2 and 8.x through 8.10.2 are vulnerable to a missing authorization vulnerability (CWE-862). The flaw exists in the setCampaignMarketingAndTemplate entry point, allowing authenticated users with low privileges to create and modify EmailMarketing records. Specifically...

CVE-2026-108711

Plastic Labs Honcho versions through 3.3.0 are vulnerable to an incorrect authorization flaw (CWE-863) via the POST /v3/workspaces endpoint. The root cause is that the get_or_create_workspace function only validates the workspace claim, allowing API key holders with peer- or session-scoped access...

CVE-2026-108710

NornicDB versions through 1.4.1 are vulnerable to a missing authorization flaw (CWE-862) affecting the /nornicdb/search and /nornicdb/similar endpoints. This vulnerability allows authenticated users with a viewer-role —who are allowlisted for a database but explicitly denied read permissions—to b...

CVE-2026-108576

A critical OS command injection vulnerability exists in TOZED X300 (versions up to 6.01.3 ). The flaw is located within the process_ping function of the IPPingDiagnostics Handler component. An attacker can achieve remote code execution by manipulating the Host argument. The impact is severe, with...

CVE-2026-108575

A vulnerability exists in BerriAI LiteLLM (up to version 1.94.0 ) within the Secret Resolution component. The flaw resides in the get_secret function located in the file secret_managers/main.py. Specifically, an attacker can manipulate the api_key argument to cause improper authorization , potent...

CVE-2026-108574

A flaw in BerriAI LiteLLM up to version 1.95.0 allows for an authorization bypass within the Spend Tracking component. The vulnerability exists in the ui_view_session_spend_logs function of the litellm/proxy/spend_tracking/spend_management_endpoints.py file, where manipulating the session_id argu...

CVE-2026-108573

A vulnerability exists in the Open Asset Import Library Assimp (versions up to 6.0.5 ). Specifically, the PLY File Handler component contains a flaw in the IOStreamBuffer::getNextBlock function. An attacker can perform manipulations resulting in an out-of-bounds read , which can be initiated remo...

CVE-2026-108572

A server-side request forgery (SSRF) vulnerability exists in Casdoor up to versions 3.164.0 and 4.10.0 . The flaw is located in the CasP3ProxyValidate function within the controllers/cas.go file of the Proxy Validation component. An attacker can remotely manipulate the pgtUrl argument to trigger ...

CVE-2026-108571

A SQL injection vulnerability exists in Xinhu Rainrock RockOA versions up to 2.7.6 . The flaw is located within the kqjcmdModel::returnchuli function in the webmain/task/openapi/openkqjAction.php file of the Openkqj Action component. Attackers can exploit this by manipulating the ID argument to p...

CVE-2026-108570

A security flaw exists in the Furion .NET Framework (up to version 4.9.9.95) within the View Engine component. Specifically, the RunCompile function in the file framework/Furion/ViewEngine/Engines/ViewEngine.cs fails to properly neutralize special elements used in the template engine when process...

CVE-2026-108569

A SQL injection vulnerability exists in the Furion .NET Framework up to version 4.9.9.92 . The issue is located within the String.Replace function in the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. Specifically, improper handling of the Name argument allows for injection...

CVE-2026-108568

The InstantSoft icms2 software (versions up to 2.18.2 ) contains a vulnerability in the Billing Module specifically within the validatePaypalOrder function located in the file system/controllers/billing/actions/paypal.php. An attacker can remotely manipulate the bid/sig arguments to cause insuffi...

CVE-2026-108567

A path traversal vulnerability exists in InstantSoft icms2 (up to version 2.18.2) within the Image Handler component. Specifically, the files_delete_file function in the file system/fields/image.php file is susceptible to exploitation through manipulation of the argument size. This flaw can be tr...

CVE-2026-108566

A cross-site scripting (XSS) vulnerability exists in InstantSoft icms2 versions up to 2.18.2 . The flaw is located in the index function of the templates/default/controllers/messages/index.tpl.php file within the Private Message Handler component. Improper handling of the nickname argument allows...

CVE-2026-108544

A path traversal vulnerability exists in the Lippu Docx Reader Office Viewer App on Android , affecting versions up to 1.4.5 . The flaw is located in the word.office.docxviewer.document.docx.reader.ViewTxt function, where improper handling of the _display_name argument allows for directory traver...

CVE-2026-108543

The ag2ai ag2 library (versions up to 0.13.4 ) is vulnerable to a path traversal vulnerability within the UserProxyAgent component. The root cause is the improper handling of the filename argument in the os.path.join function, which allows for remote execution of the attack. While an exploit has ...

CVE-2026-108542

A server-side request forgery (SSRF) vulnerability exists in the 021is elvix-sdk up to version 0.10.1 . The flaw is located within an unknown functionality of the src/mcp/index.ts file in the MCP Request Handler component. By manipulating the argument path , an attacker can execute the attack rem...