CVE-2026-27553

CVE-2026-27553 affects a web application with a diagnostics tab endpoint (/index.php/diagnostics_tab/ajax_diag_table_rows). A low-privileged remote attacker holding a valid user cookie can manipulate the schema path parameter to achieve disclosure of all user password hashes . The CNA-assigned CV...

CVE-2026-27552

CVE-2026-27552 is a high-severity vulnerability (CVSS 3.1: 8.1) involving improper authorization in the /index.php/attached_devices_tab/do_upload endpoint. A low-privileged remote attacker can exploit this flaw to upload IODD files to the device, potentially altering device behavior or causing sy...

CVE-2026-27551

CVE-2026-27551 is a command injection vulnerability in the /index.php/ajax/parameterManage endpoint. A low-privileged remote attacker with valid user credentials can execute arbitrary commands with root privileges on the affected device. The CNA-assigned CVSS 3.1 score is 8.8 (HIGH) with a vector...

CVE-2026-27550

CVE-2026-27550 is a command injection vulnerability in the Field_Shadow_Password class, as reported by CERT-VDE (CNA: [email protected]). A low-privileged remote attacker can exploit this flaw using operator credentials to execute commands with root privileges on the affected device, resulting in...

CVE-2026-27549

CVE-2026-27549 is a command injection vulnerability in the /index.php/attached_devices_tab/do_upload endpoint. A remote attacker with low-privileged operator credentials can inject commands that execute with root privileges on the device. The CVSS 3.1 score is 8.8 (HIGH) , reflecting network vect...

CVE-2026-27548

CVE-2026-27548 is a command injection vulnerability in the /index.php/ajax/get_iodd_port_info endpoint. A low-privileged remote attacker with user or operator credentials can exploit it to execute commands with root privileges on the device, resulting in high impact on confidentiality, integrity,...

CVE-2026-27547

A command injection vulnerability in the /index.php/ajax/get_iodd_menu_info endpoint allows a low-privileged remote attacker with valid user or operator credentials to execute arbitrary commands with root privileges on the device. The CERT-VDE assigns a CVSS 3.1 score of 8.8 (HIGH) with vector AV...

CVE-2026-27546

CVE-2026-27546 is an authentication bypass in the _account_log function , allowing an unauthenticated remote attacker to log in as an admin even when accounts are properly configured. The vulnerability is rated CVSS 9.8 (CRITICAL) by CERT-VDE (CNA), with references to advisories VDE-2026-028, VDE...

CVE-2026-92091

jwcrypto , a Python library for JOSE (JWS/JWE), is vulnerable to a denial of service in the JWK.import_key() function. The function validates the key_ops JWK member for duplicate values using an O(n²) algorithm with no bound on array length. A remote, unauthenticated attacker can supply a JWK con...

CVE-2026-84408

QND (a client by QualitySoft ) contains an improper access control vulnerability in a named pipe . A local attacker with an existing logon session on an affected Windows PC can exploit this to execute arbitrary commands with SYSTEM privileges , leading to high impact on confidentiality, integrity...

CVE-2026-81326

CVE-2026-81326 affects QND by QualitySoft, a product whose client is installed on Windows PCs. The root cause is a hard-coded cryptographic key , which may allow a local attacker with logged-in access to the client machine to obtain administrator credentials , including an ID and password. The vu...

CVE-2026-92355

Octopus Server is affected by a path traversal flaw in the handling of non built-in external feeds. A user with low privileges (specifically, permission to modify non built-in external feeds) can exploit this to overwrite arbitrary files on the server. In some configurations, this may escalate to...

CVE-2026-88263

XikeStor Layer3 switches have a missing-authentication flaw that allows an unauthenticated attacker to download configuration data over the network. The retrieved data may contain network configurations and passwords , enabling an attacker to operate the switch improperly or use it as a jump host...

CVE-2026-19248

CVE-2026-19248 affects Qt (qtbase) and involves an unbounded recursion vulnerability in the QDomNode destructor during QDomDocument XML parsing . When an application processes untrusted XML input through QDomDocument, the recursion in the destructor can be triggered remotely, leading to a denial-...

CVE-2024-11222

GitLab CE/EE is affected by a Time-of-check Time-of-use (TOCTOU) race condition in pipeline creation, impacting versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 . Under certain conditions, a developer user could perform actions in the context of another user's merge re...

CVE-2025-14871

CVE-2025-14871 affects GitLab CE/EE versions 18.4.6 through 19.1.7, 19.2 through 19.2.5, and 19.3 through 19.3.1. The root cause is improper resource allocation limits in the GraphQL complexity calculation logic , which under certain conditions allows an unauthenticated attacker to trigger a deni...

CVE-2026-1168

GitLab CE/EE is affected by a denial of service vulnerability in the GraphQL complexity calculation logic , where improper resource allocation limits allow an unauthenticated attacker over the network to exhaust server resources. The issue affects all versions from 18.4.6 before 19.1.8 , 19.2 bef...

CVE-2026-3855

CVE-2026-3855 is an improper control of resource identifiers (resource injection) vulnerability in GitLab CE/EE 's Terraform state upload functionality, caused by improper validation of parameters. An authenticated user with project-level permissions could, under certain conditions, access restri...

CVE-2026-7514

CVE-2026-7514 is a missing authorization vulnerability in the Generic Package Registry of GitLab CE/EE , affecting versions 13.9 through before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 . An authenticated user with developer-role permissions could substitute package file content and hide...

CVE-2026-8030

CVE-2026-8030 is a Missing Authorization vulnerability in GitLab CE/EE affecting versions 13.0 through 19.1.7, 19.2 through 19.2.5, and 19.3 through 19.3.1 . The root cause is improper validation of group URL slugs during namespace transfers , which under certain conditions allowed an authenticat...