399959 matches found
CVE-2026-78227
NLnet Labs Unbound versions 1.22.0 through 1.26.1 contain a use-after-free vulnerability in the DNS-over-QUIC (DoQ) implementation, triggered only when compiled with '--with-libngtcp2'. The root cause is that ngtcp2's retransmission buffer retains a shallow pointer into a per-stream output buffer...
CVE-2026-77955
NLnet Labs Unbound versions 1.13.2 through 1.26.1 are affected by a timing window in ZONEMD verification for zones configured with zonemd-check: yes located below (but not at) a trust anchor. The root cause is the asynchronous DS/DNSKEY resolution required before the ZONEMD integrity check comple...
CVE-2026-77860
NLnetLabs Unbound versions 1.20.0 through 1.26.0 are affected by a double-decrement flaw in the serve-expired code path that causes the per-client wait-limit counter to be decremented twice. An attacker controlling an authoritative zone with short TTLs can alternate "slow" queries (never answered...
CVE-2026-86338
Ash (Elixir) field_policies were intended to prevent filter-based information disclosure by nilling forbidden field references in filters. The nilling mechanism matched only Ash.Resource.* structs (attributes) but failed to match Ash.Query.Calculation and Ash.Query.Aggregate structs, so filters r...
CVE-2026-88255
CVE-2026-88255 is an improper validation of unsafe equivalence in input in ZenHive mpp (versions 0.2.0 through before 0.16.2). The root cause lies in MPP.Methods.Tempo, where the pre-broadcast dedup reserve (reserve_hash_atomic/2) keys on the caller-supplied raw hex (tx.raw) rather than a canonic...
CVE-2026-89774
CVE-2026-89774 is a Use-After-Free (UAF) in the Linux kernel's Bluetooth SCO subsystem, specifically in sco_conn_ready(). The socket (conn->sk) and its parent are dereferenced without holding a refcount or under conn->lock, allowing a concurrent sco_sock_release() to free the socket before ...
CVE-2026-89186
ZenHive mpp (Elixir plug library) is vulnerable to sensitive information disclosure via shared HTTP caches . The MPP.Plug.verify_credential plug sets cache-control: private and a Payment-Receipt header before the wrapped application executes, but registers no register_before_send/2 callback to en...
CVE-2026-73454
Arista EOS devices with gNSI Credentialz enabled are vulnerable to a command injection (CWE-77) that allows a network attacker with low privileges to craft a request causing unintended modifications to a target account's properties, potentially granting elevated privileges . Affected EOS releases...
CVE-2026-73439
CVE-2026-73439 is a policy enforcement flaw in Arista EOS affecting the gNMI (gRPC Network Management Interface) server when gNSI Pathz is configured. The root cause (CWE-842) is that gNMI fails to correctly enforce Pathz policy rules when both a group rule and a user rule target the same path, a...
CVE-2026-73461
CVE-2026-73461 is an incorrect privilege assignment (CWE-266) in Arista EOS affecting platforms with AAA-based gRPC authorization enabled for OpenConfig. An authenticated user's gRPC request may be processed at the wrong privilege level , causing authorization to use an incorrect AAA method list ...
CVE-2026-89207
CVE-2026-89207 affects the web interfaces of the Siemens WTV676-HB6035 (all versions < V3.94) and WTV776-HB6035 (all versions
CVE-2026-86341
CVE-2026-86341 affects GitLab EE versions from 17.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2. The root cause is an improper access control check performed after a protected environment approval rule was already modified, rather than before. Under certain conditions, an authentica...
CVE-2026-27565
This remote code execution vulnerability allows an unauthenticated remote attacker to upload a malicious IODD file that places and executes a shell script with root privileges on the target system. The shell script persists across reboots , enabling sustained compromise. The CVSS 3.1 score is 9.8...
CVE-2026-27564
CVE-2026-27564 is a command injection vulnerability in the /api/datastorage/data endpoint, where a remote attacker holding admin credentials can send a PUT request to execute arbitrary commands with root privileges on the device. The specific affected product is not named in the provided document...
CVE-2026-27563
CVE-2026-27563 is a command injection vulnerability in the /api/datastorage/data endpoint. A high-privileged remote attacker with admin credentials can send a crafted GET request to execute arbitrary commands with root privileges on the affected device. The vulnerability is scored CVSS 3.1: 7.2 (...
CVE-2026-27562
CVE-2026-27562 is a command injection vulnerability in the /api/iodd/config endpoint. A remote attacker with admin-level credentials can send a crafted PUT request to execute arbitrary commands with root privileges on the affected device. The CVSS 3.1 score is 7.2 (HIGH) (AV:N/AC:L/PR:H/UI:N/S:U/...
CVE-2026-27561
CVE-2026-27561 is a command injection vulnerability in the /api/iodd/config endpoint. A high-privileged remote attacker can exploit it by sending a crafted GET request with admin credentials , enabling execution of commands with root privileges on the affected device. The CNA is CERT-VDE , which ...
CVE-2026-27560
CVE-2026-27560 is a command injection vulnerability in the /api/status/data endpoint, where a remote attacker with admin credentials can send a crafted DELETE request to execute arbitrary commands with root privileges on the device. The CVSS v3.1 score is 7.2 (HIGH) with a vector of AV:N/AC:L/PR:...
CVE-2026-27559
CVE-2026-27559 is a command injection vulnerability in the /api/status/data endpoint of a product managed by CERT VDE . A low-privileged remote attacker can send a crafted GET request with user credentials to execute commands with root privileges on the device. The assigned CVSS 3.1 score is 8.8 ...
CVE-2026-27558
CVE-2026-27558 is a command injection vulnerability in the /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files endpoint of a PHP-based device web interface. A low-privileged remote attacker with operator credentials can inject commands that execute with root privileges on the device. ...