CVE-2026-92259

CVE-2026-92259 is an integer overflow or wraparound vulnerability in Samsung Opensource Escargot , an open-source JavaScript engine. An attacker with local write access to the bytecode-cache directory can plant a crafted cache file that triggers a heap-based buffer overflow , resulting in a denia...

CVE-2026-81855

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard , a marine engine management platform. An attacker with network access and no prior privileges can exploit this to gain high confidentiality and high integrity...

CVE-2026-92114

a2ui-project a2ui versions up to 0.10.6 are affected by a Regular Expression Denial of Service (ReDoS) vulnerability in the Basic Catalog component, specifically in the file renderers/web_core/src/v0_9/basic_catalog/functions/safe_regex.ts. The root cause is inefficient regular expression complex...

CVE-2026-78225

Wärtsilä FOS-Onboard contains a hardcoded cryptographic server key in the deployer-ng Update Controller component. This allows an attacker with network access and high complexity to achieve full compromise of confidentiality, integrity, and availability on both the vulnerable and subsequent syste...

CVE-2026-73444

CVE-2026-73444 affects Arista EOS switches where VRRPv2 is configured with IP-AH authentication enabled. An unauthenticated attacker with access to the layer 2 network segment can bypass VRRP authentication and claim the virtual router master role, enabling them to intercept, modify, or discard t...

CVE-2026-61560

@zereight/mcp-gitlab is a Model Context Protocol (MCP) server for GitLab. Prior to version 2.1.27 , when the SSE transport mode is enabled (SSE=true), all MCP tools are exposed without authentication. The upload_markdown tool reads arbitrary files from the server's local filesystem via an unsanit...

CVE-2026-73437

Arista EOS DHCP relay is vulnerable to spoofed DHCP reply forwarding (CWE-345). An unauthenticated attacker on an adjacent network can send crafted DHCP reply packets from a non-helper IP address, which the relay forwards to clients without source validation, potentially supplying malicious netwo...

CVE-2026-10144

Rsbuild before 2.0.9 contains a command injection vulnerability in the openBrowser() function (packages/core/src/server/open.ts). The function passes a URL through encodeURI() before interpolating it into a shell command executed via child_process.exec(). Because encodeURI() does not encode dolla...

CVE-2026-68491

SolusVM 1 is affected by an insufficient check that allows the overwrite of arbitrary files via a symlink , enabling a guest-to-host privilege escalation . The vulnerability is scored CVSS 4.0: 9.4 (CRITICAL) with a network attack vector, low complexity, and low privileges required, resulting in ...

CVE-2026-61559

@zereight/mcp-gitlab (a Model Context Protocol server for GitLab) is vulnerable to Server-Side Request Forgery in versions 0.0.1 through

CVE-2026-19655

CVE-2026-19655 affects Arista EOS when DHCP relay/snooping is configured with Option 82 (information option) or when the DHCP server uses match criteria based on that option. An unauthenticated attacker on a client-facing VLAN can send a specially crafted packet that triggers a DHCP Relay service...

CVE-2026-92234

QloApps versions through 1.7.0 contain a reflected cross-site scripting (XSS) vulnerability in the Hotel Reservation System feature management page (back-office). The child_features parameter is reflected unescaped into validation error messages, allowing an authenticated back-office user who fol...

CVE-2026-91939

Cotonti 1.0.0 Comments plugin passes the ci GET parameter directly to unserialize() without an allowed_classes restriction. This allows unauthenticated attackers to inject arbitrary PHP objects via crafted serialized payloads, triggering gadget chains that can lead to database manipulation or rem...

CVE-2026-92000

adm-zip versions 0.5.14 through 0.6.0 are vulnerable to a denial-of-service attack caused by failing to apply zlib decompression output limits when ZIP entries declare a zero uncompressed size . An attacker can craft a malicious ZIP archive containing highly compressible entries that declare zero...

CVE-2026-61568

@zereight/mcp-gitlab, a Model Context Protocol server for GitLab, is affected in versions prior to 2.1.30 . The Streamable HTTP MCP endpoint lacks an effective Host or Origin allowlist , allowing a malicious web page to exploit DNS rebinding to route browser requests to a victim's local MCP liste...

CVE-2026-61554

emp3r0r , a C2 framework for Linux environments, is vulnerable to an unauthenticated HTTP Polling DoS prior to version 4.2.5 . The http_poll C2 transport accepts attacker-controlled HTTP polling sessions before CBOR MsgAuth authentication completes, allowing a remote unauthenticated attacker to c...

CVE-2026-91730

CVE-2026-91730 is an incomplete cleanup vulnerability in the GetUserMedia component of Google Chrome prior to version 153.0.8010.47 . A remote attacker who had already compromised the renderer process and leveraged social engineering could obtain cross-origin data via a crafted HTML page, leading...

CVE-2026-91719

CVE-2026-91719 is a code injection in XML vulnerability in Google Chrome prior to version 153.0.8010.47 . A remote attacker could exploit it via a crafted HTML page to bypass the web origin policy . The vulnerability is rated Low severity by Chromium. The fix is available in Chrome 153.0.8010.47 ...

CVE-2026-91722

CVE-2026-91722 is a use-after-free vulnerability in the Input component of Google Chrome prior to version 153.0.8010.47 . A remote attacker can exploit it by serving a crafted HTML page to a user, potentially enabling arbitrary code execution outside the Chrome sandbox . The vulnerability carries...

CVE-2026-91738

CVE-2026-91738 is an improper input validation vulnerability in ANGLE (the cross-platform graphics translation library) within Google Chrome , fixed in version 153.0.8010.47 for Windows, Mac, and Linux. A remote attacker could potentially execute arbitrary code outside the sandbox by luring a use...