CVE-2026-92298

EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in, event invitation, and campaign URLs instead of a cryptographically secure generator. The tokens are roughly 31-bit , allowing remote unauthenticated attackers to guess them and confirm opt-ins, accept or...

CVE-2026-92299

@jitsi/electron-sdk (the Electron-based desktop client for Jitsi Meet) prior to 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMedia() picker. This allows any script running in the meeting page to call the jitsi-screen-sharing-get-sources IPC route and ...

CVE-2026-92216

a2ui-project a2ui versions up to 0.10.7 are affected by an open redirect vulnerability in the openUrl function of the Binder component (file: renderers/web_core/src/v0_9/rendering/generic-binder.ts). An attacker can launch the attack remotely by manipulating the openUrl function to redirect to an...

CVE-2026-92215

CVE-2026-92215 affects a2ui-project a2ui versions up to 0.10.7 . The vulnerability is a Server-Side Request Forgery (SSRF) in the FileResolver component, specifically in the httpx.get function within the file agent_sdks/python/a2ui_agent/src/a2ui/extensions/file_resolve/file_resolver.py. An unaut...

CVE-2026-92214

CVE-2026-92214 affects a2ui-project a2ui versions up to 0.10.7 , specifically the file sanitizer-markdown-renderer-service.ts within the a2a-chat-canvas Angular component. The vulnerability is a Cross-Site Scripting (XSS) flaw in an unknown function of that service. A remote attacker with low pri...

CVE-2026-92213

a2ui-project a2ui (versions up to 0.10.6) is affected by an injection vulnerability in the Angular Renderer component. The vulnerable code is located in the function z.any within the file renderers/web_core/src/v0_9/schema/server-to-client.ts. By manipulating the primaryColor argument, a remote a...

CVE-2026-92205

CVE-2026-92205 affects the libarchive component of BusyBox . The flaw is a symlink directory traversal that allows remote attackers to create arbitrary files in the context of the current user. The root cause is the lack of proper validation of a user-supplied path before it is used in file opera...

CVE-2025-56566

MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage (SPI flash). An attacker with physical access to the device can extract this material via an SPI flash dump, without authenticating to the device or knowing the administ...

CVE-2026-38999

CVE-2026-38999 is a Null Pointer Dereference in the mk_sched_event_close function (located in mk_server/mk_scheduler.c) of Monkey , an HTTP server and reverse proxy, affecting versions through commit 4fb0c16. An attacker can trigger a Denial of Service (DoS) by sending a crafted HTTP request to t...

CVE-2026-92208

NoMachine is vulnerable to a heap-based buffer overflow in the parsing of mDNS resource records . The root cause is the lack of proper length validation on user-supplied data before it is copied to a heap-based buffer. A network-adjacent attacker can exploit this flaw without authentication to ac...

CVE-2026-88592

kkFileView versions 4.2.0 and above are vulnerable to a Server-Side Request Forgery (SSRF) in the /getCorsFile cross-origin file proxy endpoint. The root cause is a parameter mismatch : TrustHostFilter validates the first non-empty parameter in a fixed priority order, while the controller only re...

CVE-2026-51990

Sogou Input Method (Tencent) for Windows below version 16.3.0.3498 is vulnerable to remote code execution via the biz_helper.exe component. The attack chain involves an unvalidated sgbiz: URI protocol handler passing attacker-controlled arguments to SGMyInput.exe, which instructs the embedded Chr...

CVE-2026-92206

CVE-2026-92206 (tracked as ZDI-26-706 ) affects the CrewAI crewAI Framework . The flaw resides in the load_agent_from_repository function, which does not properly restrict a user-supplied argument before using it to import a module, enabling remote code execution in the context of the service acc...

CVE-2026-92207

CVE-2026-92207 corresponds to a code injection vulnerability in MindsDB , specifically within the OpenBBtable class . The flaw arises from insufficient validation of a user-supplied string before it is used to execute Python code, allowing an authenticated remote attacker to achieve Remote Code E...

CVE-2026-92203

CVE-2026-92203 is a Server-Side Request Forgery (SSRF) vulnerability in Airbyte's SharePoint Connector , specifically in the _get_shared_drive_object method. The flaw stems from the lack of proper URI validation before accessing resources, allowing a remote authenticated attacker to initiate arbi...

CVE-2025-56563

CVE-2025-56563 is a Server-Side Request Forgery (SSRF) vulnerability in sat_proxy.php of Zenith Satellite Tracker 1.0 . The script accepts an attacker-controlled address URL parameter and passes it to curl_setopt(CURLOPT_URL) without host or scheme validation , allowing an unauthenticated remote ...

CVE-2026-92210

CVE-2026-92210 corresponds to ZDI-26-712 , a Server-Side Request Forgery (SSRF) leading to information disclosure in NoMachine . The flaw resides in the nxhtd web service , which listens on UDP port 4443 by default, and stems from insufficient validation of a URI before accessing resources. A rem...

CVE-2026-88593

kkFileView versions 5.0.0 through 5.0.2 are affected by a reflected XSS vulnerability in the /onlinePreview endpoint. The OnlinePreviewController passes user-controlled page and kkagent request parameters to FreeMarker templates without sanitization, and those templates insert the values directly...

CVE-2025-56565

DD-WRT firmware running on TP-Link TL-WR740N v1–v4 routers stores sensitive authentication credentials in cleartext within non-volatile memory (SPI flash). The exposed material includes SSH private keys , dynamic DNS passwords , email notification credentials , and administrative passwords . An a...

CVE-2026-79298

CVE-2026-79298 is an incomplete remediation of the UEFI Secure Boot bypass originally disclosed as CVE-2024-7344 in Howyar SysReturn (NetCopy feature). While the x64 boot path was fixed, the IA-32 boot path (BOOTia32.efi) retained the same custom RxPE PE loader, the same bypassed Secure Boot veri...