CVE-2026-75634

CAI Content Credentials is affected by an Improper Input Validation vulnerability (CWE-20) that could result in a Security feature bypass . An attacker could leverage this flaw to bypass security measures and obtain unauthorized limited write access . Successful exploitation requires user interac...

CVE-2026-19480

The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20) that can lead to a Security feature bypass . An attacker could exploit this flaw to bypass security measures and gain unauthorized write access . Notably, exploitation of this issue does not re...

CVE-2026-75633

CAI Content Credentials is impacted by an Improper Input Validation vulnerability (CWE-20). An attacker can exploit this flaw to crash the application, resulting in a denial-of-service (DoS) condition. Successful exploitation requires user interaction , such as a victim visiting a maliciously cra...

CVE-2026-89277

The CAI Content Credentials software is vulnerable to an Integer Overflow or Wraparound (CWE-190) vulnerability. An attacker could exploit this flaw to cause an application crash, resulting in a denial-of-service (DoS) condition. Exploitation requires user interaction, such as a victim visiting a...

CVE-2026-75638

The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20). This flaw could allow an attacker to bypass security features and obtain unauthorized write access . Successful exploitation requires user interaction , such as a victim visiting a maliciously...

CVE-2026-76194

The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20) that could lead to a Security feature bypass . An attacker could exploit this to gain unauthorized limited write access by tricking a victim into visiting a maliciously crafted URL or interacti...

CVE-2026-77248

Versions of MCP Atlassian prior to 0.22.0 are vulnerable to an unauthenticated arbitrary local file read. The streamable HTTP transport accepts requests without a user identity and defaults to operator credentials, while the upload_attachment function accepts an unrestricted file_path . An unauth...

CVE-2026-95862

Certain UniFi gateway devices are vulnerable to an Out-of-bounds Write vulnerability. A malicious actor with network access could exploit this flaw to perform a Denial of Service (DoS) attack against the device. No specific affected versions, root causes, or remediation steps are provided in the ...

CVE-2026-77256

The MCP Atlassian Model Context Protocol server (versions prior to 0.22.0 ) contains a vulnerability where the plaintext OAuth fallback file, which stores refresh and access tokens , is created with permissions inherited from the process umask . In many standard or permissive configurations, this...

CVE-2026-95861

Certain UniFi gateway devices are vulnerable to an Uncontrolled Recursion vulnerability. A malicious actor with network access can exploit this flaw to perform a Denial of Service (DoS) attack against the device. No specific software versions, root cause files, or remediation steps are provided i...

CVE-2026-77249

MCP Atlassian , an MCP server for Confluence and Jira, is vulnerable to a Server-Side Request Forgery (SSRF) via redirect-based attacks in versions prior to 0.22.0 . The root cause is that the JiraUserMixin._lookup_user_by_permissions function uses the module-level requests.get instead of a prote...

CVE-2026-77259

The MCP Atlassian Model Context Protocol server (for Confluence and Jira) is vulnerable to an arbitrary file read issue prior to version 0.22.0 . The confluence_upload_attachment function fails to verify that a caller-selected server-local file path remains within the intended workspace. This all...

CVE-2026-77268

The MCP Atlassian Model Context Protocol server for Confluence and Jira is vulnerable to insecure file permissions in versions prior to 0.22.0 . The application creates the OAuth fallback token directory and JSON file without explicit owner-only modes. This allows local users or processes with gr...

CVE-2026-77558

A network-based Out-of-bounds Read vulnerability exists in certain UniFi gateway devices . An attacker with network access can exploit this flaw to perform a Denial of Service (DoS) attack on the affected device. The vulnerability is assigned a High severity score of 7.5. No specific remediation ...

CVE-2026-77556

An Out-of-bounds Read vulnerability exists in certain UniFi gateway devices , which could be exploited by a malicious actor with network access. The vulnerability allows for a Denial of Service (DoS) attack against the device. No specific affected versions, root causes, or remediation details are...

CVE-2026-77555

An Out-of-bounds Write vulnerability exists in certain UniFi gateway devices , potentially accessible to a malicious actor via the network. Exploitation of this vulnerability can lead to a Denial of Service (DoS) attack on the affected device. The documents do not provide specific software versio...

CVE-2026-77544

Certain UniFi gateway devices are susceptible to an Out-of-bounds Write vulnerability. A malicious actor with network access can exploit this flaw to perform a Denial of Service (DoS) attack against the device. The vulnerability carries a CVSS 3.1 base score of 7.5 (High). No specific software ve...

CVE-2026-77247

The MCP Atlassian Model Context Protocol server (versions prior to 0.22.0 ) is vulnerable to an arbitrary server-local file upload on Jira and Confluence. The root cause is the interpretation of caller-controlled path arguments within the file_path and file_paths parameters. Specifically, the too...

CVE-2026-84396

Adobe InDesign Desktop is affected by a NULL Pointer Dereference (CWE-476) vulnerability. An attacker could exploit this issue to cause an application denial-of-service by crashing the software. Successful exploitation requires user interaction , specifically for a victim to open a malicious file...

CVE-2026-76192

Adobe InDesign Desktop is affected by a NULL Pointer Dereference (CWE-476) vulnerability. An attacker could exploit this issue by inducing a victim to open a malicious file , which may result in an application crash leading to a denial-of-service condition. No specific information regarding avail...