CVE-2026-108856

The UnicomAI Wanwu software through version 0.6.5 is vulnerable to an authorization bypass (CWE-639) via the POST /v1/appspace/app/key endpoint. This flaw allows authenticated users to mint AppKeys bound to other users' MCP servers by providing a victim's MCP server UUID and setting the appType t...

CVE-2026-108855

The UnicomAI Wanwu platform, version through 0.6.5 , is vulnerable to a missing authorization flaw (CWE-862) via the DELETE /v1/appspace/app/publish endpoint. This vulnerability allows any authenticated enabled user to revoke AppKeys for arbitrary apps by supplying a target appId and appType from...

CVE-2026-108854

Wanwu versions prior to 0.6.3 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability. An authenticated enabled user can delete other users' legacy AppKeys by providing a numeric apiId to the DELETE /v1/appspace/app/key endpoint. This flaw allows attackers to iterate sequential...

CVE-2026-108853

Versions of UnicomAI Wanwu prior to 0.6.3 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability. Authenticated low-privileged users can delete other tenants' agent or RAG applications by sending requests to the DELETE /v1/appspace/app endpoint with guessed sequential assistan...

CVE-2026-108852

Deep Chat version 2.5.1 is vulnerable to a cross-site scripting (XSS) flaw due to a Markdown link validation bypass . The root cause is that the RemarkableConfig.createNew function disables Remarkable link validation, allowing attackers to inject javascript: links. Attackers can execute scripts i...

CVE-2026-108851

The phpMyFAQ application (through version 4.1.10 ) is vulnerable to a missing authorization flaw in the MCP server faq_search tool . The root cause is that the Search::searchDatabase() function fails to apply necessary user or group permission checks. Consequently, an attacker connected to the ph...

CVE-2026-108850

The Company Research Agent software (versions through 2.2.0 ) is vulnerable to a server-side request forgery (SSRF) via the /generate-pdf endpoint. The root cause is the injection of unescaped ReportLab paragraph markup into the report_content parameter. Unauthenticated attackers can embed inline...

CVE-2026-108839

The software thClaws (versions through 0.141.0 ) is vulnerable to a link-following vulnerability (CWE-59) within the post_inputs handler of the v1 API POST /v1/inputs endpoint. An attacker can plant a symlink under the permitted inputs/ prefix, which allows subsequent authenticated uploads to wri...

CVE-2026-108699

The hyper-mcp framework (versions through 0.8.3 ) is vulnerable to an improper signature verification flaw involving OCI WebAssembly plugins. The root cause is that the cosign_verify_args() function accepts any signer identity and OIDC issuer by default. This allows an attacker who controls a plu...

CVE-2026-108698

The hyper-mcp software (versions through 0.8.3 ) contains a TOCTOU (Time-of-Check Time-of-Use) Race Condition vulnerability within the load_wasm function in src/wasm/oci.rs. The root cause is that the system verifies the Cosign signature of a separately resolved tag instead of the actual loaded m...

CVE-2026-108697

CoreShop versions through 2026.2.2 contain a missing authorization vulnerability (CWE-862) within the ResourceController listAction . The root cause is that the action skips the isGrantedOr403() check, allowing authenticated Pimcore users with low privileges to bypass permission restrictions. Exp...

CVE-2026-108681

A security flaw in the zhayujie CowAgent Web Console (up to version 2.1.7 ) allows for a remote denial of service (DoS). The vulnerability exists within an unknown function in the file channel/web/web_channel.py where manipulation of the session_id argument triggers the DoS. Public exploit code i...

CVE-2026-108584

A security flaw in FunnyWolf Viper (up to version 3.1.11 ) allows for the disclosure of hard-coded credentials . The vulnerability stems from an unknown function within the file /root/viper/.git/config, where specific manipulation can trigger the leak. Remote exploitation is possible, and an expl...

CVE-2026-108578

A vulnerability exists in the Embedded Web Server component of Neterbit NW-431F 20250715 . Specifically, an unknown function within the /sms.json file allows for information disclosure . This vulnerability can be triggered via a remote attack . No remediation details or specific exploit informati...

CVE-2026-108577

A vulnerability exists in Konstanty Bialkowski libmodplug versions up to 0.8.9.1 . The flaw is located within the abc_add_gchord function in the src/load_abc.cpp file of the ABC Music Format Parser component. This issue leads to resource consumption and can be initiated remotely. No specific reme...

CVE-2026-108760

LlamaFarm versions through 0.0.34 are vulnerable to an unauthenticated API exposure due to an insecure default configuration. The software binds its FastAPI server to 0.0.0.0 on port 14345 , while the lf CLI silently ignores HOST overrides . This allows network-adjacent attackers to access the pr...

CVE-2026-108759

Versions 0.9.0 through 0.9.4 of mistral.rs are vulnerable to a sandbox escape via a link following vulnerability in the mistralrs-code-exec component. The root cause is improper link resolution (CWE-59), which allows sandboxed shell code to read and overwrite files outside the designated sandbox ...

CVE-2026-108757

The Nexting pinclaw OpenClaw channel plugin, in versions through 0.3.0 , contains a missing authentication vulnerability in src/core/http-router.ts. The flaw occurs because the software fails to perform an authToken check on the POST /pinclaw/send endpoint. Because the service binds to all interf...

CVE-2026-108758

Easy!Appointments versions through 1.6.0 are vulnerable to an authorization bypass within the Booking::register() function. This flaw allows unauthenticated attackers to modify any appointment by providing an appointment ID without the required hash. By enumerating sequential IDs and self-asserti...

CVE-2026-108756

The Abilityai Trinity software (versions through 0.9.5 ) contains a missing authorization vulnerability within the Telegram router . This flaw allows agent-scoped MCP API keys to execute operations restricted to human users, specifically binding operations . An attacker who gains control of an ag...