CVE-2026-73450

On affected Arista EOS platforms with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the heartbeat network segment can send crafted UDP packets to corrupt the dual-primary state. If the MLAG primary switch fails while these packets are present, the secondary sw...

CVE-2026-92221

A SQL injection vulnerability exists in gedelumbung HospitalManagement (up to commit c2d45543789a3887067d3915f69d44cfc2cf76a8), specifically in the function generate_index_pasien within application/models/app_global_admin_model.php. Manipulating the cari argument allows a remote attacker with hig...

CVE-2026-92220

A resource consumption vulnerability in vLLM 0.26.0/0.27.0 affects the MoRIIO Acknowledgement Handler (file moriio_connector.py), specifically the functions MoRIIOConnectorScheduler.request_finished, MoRIIOConnectorWorker.get_finished, and MoRIIOWrapper._handle_release_message. Manipulation of th...

CVE-2026-92217

a2ui-project a2ui versions up to 0.10.6 are affected by a vulnerability in the Message Parsing component, specifically the processMessages function in renderers/web_core/src/v0_9/processing/message-processor.ts. The root cause is dynamically-determined object attributes during message processing....

CVE-2026-92299

@jitsi/electron-sdk (the Electron-based desktop client for Jitsi Meet) prior to 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMedia() picker. This allows any script running in the meeting page to call the jitsi-screen-sharing-get-sources IPC route and ...

CVE-2026-92298

EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in, event invitation, and campaign URLs instead of a cryptographically secure generator. The tokens are roughly 31-bit , allowing remote unauthenticated attackers to guess them and confirm opt-ins, accept or...

CVE-2026-92216

a2ui-project a2ui versions up to 0.10.7 are affected by an open redirect vulnerability in the openUrl function of the Binder component (file: renderers/web_core/src/v0_9/rendering/generic-binder.ts). An attacker can launch the attack remotely by manipulating the openUrl function to redirect to an...

CVE-2026-92215

CVE-2026-92215 affects a2ui-project a2ui versions up to 0.10.7 . The vulnerability is a Server-Side Request Forgery (SSRF) in the FileResolver component, specifically in the httpx.get function within the file agent_sdks/python/a2ui_agent/src/a2ui/extensions/file_resolve/file_resolver.py. An unaut...

CVE-2026-92214

CVE-2026-92214 affects a2ui-project a2ui versions up to 0.10.7 , specifically the file sanitizer-markdown-renderer-service.ts within the a2a-chat-canvas Angular component. The vulnerability is a Cross-Site Scripting (XSS) flaw in an unknown function of that service. A remote attacker with low pri...

CVE-2026-92213

a2ui-project a2ui (versions up to 0.10.6) is affected by an injection vulnerability in the Angular Renderer component. The vulnerable code is located in the function z.any within the file renderers/web_core/src/v0_9/schema/server-to-client.ts. By manipulating the primaryColor argument, a remote a...

CVE-2026-92208

NoMachine is vulnerable to a heap-based buffer overflow in the parsing of mDNS resource records . The root cause is the lack of proper length validation on user-supplied data before it is copied to a heap-based buffer. A network-adjacent attacker can exploit this flaw without authentication to ac...

CVE-2025-56566

MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage (SPI flash). An attacker with physical access to the device can extract this material via an SPI flash dump, without authenticating to the device or knowing the administ...

CVE-2026-88592

kkFileView versions 4.2.0 and above are vulnerable to a Server-Side Request Forgery (SSRF) in the /getCorsFile cross-origin file proxy endpoint. The root cause is a parameter mismatch : TrustHostFilter validates the first non-empty parameter in a fixed priority order, while the controller only re...

CVE-2026-38999

CVE-2026-38999 is a Null Pointer Dereference in the mk_sched_event_close function (located in mk_server/mk_scheduler.c) of Monkey , an HTTP server and reverse proxy, affecting versions through commit 4fb0c16. An attacker can trigger a Denial of Service (DoS) by sending a crafted HTTP request to t...

CVE-2026-92207

CVE-2026-92207 corresponds to a code injection vulnerability in MindsDB , specifically within the OpenBBtable class . The flaw arises from insufficient validation of a user-supplied string before it is used to execute Python code, allowing an authenticated remote attacker to achieve Remote Code E...

CVE-2026-92206

CVE-2026-92206 (tracked as ZDI-26-706 ) affects the CrewAI crewAI Framework . The flaw resides in the load_agent_from_repository function, which does not properly restrict a user-supplied argument before using it to import a module, enabling remote code execution in the context of the service acc...

CVE-2026-51990

Sogou Input Method (Tencent) for Windows below version 16.3.0.3498 is vulnerable to remote code execution via the biz_helper.exe component. The attack chain involves an unvalidated sgbiz: URI protocol handler passing attacker-controlled arguments to SGMyInput.exe, which instructs the embedded Chr...

CVE-2026-92205

CVE-2026-92205 affects the libarchive component of BusyBox . The flaw is a symlink directory traversal that allows remote attackers to create arbitrary files in the context of the current user. The root cause is the lack of proper validation of a user-supplied path before it is used in file opera...

CVE-2026-92210

CVE-2026-92210 corresponds to ZDI-26-712 , a Server-Side Request Forgery (SSRF) leading to information disclosure in NoMachine . The flaw resides in the nxhtd web service , which listens on UDP port 4443 by default, and stems from insufficient validation of a URI before accessing resources. A rem...

CVE-2026-92203

CVE-2026-92203 is a Server-Side Request Forgery (SSRF) vulnerability in Airbyte's SharePoint Connector , specifically in the _get_shared_drive_object method. The flaw stems from the lack of proper URI validation before accessing resources, allowing a remote authenticated attacker to initiate arbi...