CVE-2025-56566

MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage (SPI flash). An attacker with physical access to the device can extract this material via an SPI flash dump, without authenticating to the device or knowing the administ...

CVE-2026-92207

CVE-2026-92207 corresponds to a code injection vulnerability in MindsDB , specifically within the OpenBBtable class . The flaw arises from insufficient validation of a user-supplied string before it is used to execute Python code, allowing an authenticated remote attacker to achieve Remote Code E...

CVE-2026-92210

CVE-2026-92210 corresponds to ZDI-26-712 , a Server-Side Request Forgery (SSRF) leading to information disclosure in NoMachine . The flaw resides in the nxhtd web service , which listens on UDP port 4443 by default, and stems from insufficient validation of a URI before accessing resources. A rem...

CVE-2026-92203

CVE-2026-92203 is a Server-Side Request Forgery (SSRF) vulnerability in Airbyte's SharePoint Connector , specifically in the _get_shared_drive_object method. The flaw stems from the lack of proper URI validation before accessing resources, allowing a remote authenticated attacker to initiate arbi...

CVE-2025-56563

CVE-2025-56563 is a Server-Side Request Forgery (SSRF) vulnerability in sat_proxy.php of Zenith Satellite Tracker 1.0 . The script accepts an attacker-controlled address URL parameter and passes it to curl_setopt(CURLOPT_URL) without host or scheme validation , allowing an unauthenticated remote ...

CVE-2026-88593

kkFileView versions 5.0.0 through 5.0.2 are affected by a reflected XSS vulnerability in the /onlinePreview endpoint. The OnlinePreviewController passes user-controlled page and kkagent request parameters to FreeMarker templates without sanitization, and those templates insert the values directly...

CVE-2026-84579

CVE-2026-84579 is one of two Gatekeeper bypass CVEs awarded, as confirmed by a PT Security advisory (PT-2026-93360). The CVE entry remains in reserved status in the initial document, meaning the full technical description, affected versions, and root cause details have not yet been publicly publi...

CVE-2026-79298

CVE-2026-79298 is an incomplete remediation of the UEFI Secure Boot bypass originally disclosed as CVE-2024-7344 in Howyar SysReturn (NetCopy feature). While the x64 boot path was fixed, the IA-32 boot path (BOOTia32.efi) retained the same custom RxPE PE loader, the same bypassed Secure Boot veri...

CVE-2025-56565

DD-WRT firmware running on TP-Link TL-WR740N v1–v4 routers stores sensitive authentication credentials in cleartext within non-volatile memory (SPI flash). The exposed material includes SSH private keys , dynamic DNS passwords , email notification credentials , and administrative passwords . An a...

CVE-2026-92204

CVE-2026-92204 affects Airbyte , specifically its OneDrive Connector . The vulnerability is a Server-Side Request Forgery (SSRF) in the _get_shared_drive_object method, caused by the lack of proper validation of a URI before accessing resources. A remote attacker with valid authentication can ini...

CVE-2026-92183

CVE-2026-92183 is a stack-based buffer overflow in GIMP that can be leveraged for remote code execution . The flaw resides in the parsing of APNG files , where user-supplied data is copied to a stack-based buffer without proper validation of its length. A remote attacker can exploit this by convi...

CVE-2026-92209

CVE-2026-92209 affects NoMachine , where an improper authentication flaw exists in the Redis database access mechanism. The root cause is insufficient entropy in credential generation, allowing a local attacker with low-privileged code execution to escalate privileges and run arbitrary code in th...

CVE-2026-92184

A server-side request forgery (SSRF) vulnerability exists in ag-ui-protocol ag-ui 0.3.0 , affecting the function urllib.request.urlopen in the file integrations/aws-strands/python/src/ag_ui_strands/utils.py within the Multimodal Content component. Manipulation of the argument Value enables the fl...

CVE-2026-15640

CVE-2026-15640 affects Delinea Secret Server , a secrets management product. Under certain conditions, a valid SAML Identity Provider (IdP) response can be manipulated to impersonate another Secret Server user , effectively bypassing authentication. The vulnerability is rated CVSS 4.0: 9.5 (Criti...

CVE-2026-15639

CVE-2026-15639 is a Reflected Cross-Site Scripting vulnerability in a Delinea product (specific product and version not detailed in the provided documents). An attacker crafts a malicious link that, when clicked by a legitimate user, causes the user's browser to execute attacker-supplied JavaScri...

CVE-2026-15638

Delinea Secret Server is affected by a cryptographic padding oracle vulnerability (CVE-2026-15638). An unauthenticated user with network access to the server can leverage the oracle to decrypt or encrypt data using one of the server's cryptographic keys; however, the key itself is not directly ex...

CVE-2026-73460

CVE-2026-73460 affects Arista EOS running with IS-IS graceful restart enabled. An unauthenticated attacker in the same Layer 2 domain can inject a malformed IS-IS LSP PDU, causing the graceful restart procedure to terminate prematurely and resulting in traffic loss after a restart event. The unde...

CVE-2026-73459

CVE-2026-73459 affects Arista EOS with IS-IS configured (versions 4.36.1F and below in the 4.36.x train). An unauthenticated attacker in the same Layer 2 domain can inject a specially crafted IS-IS LSP PDU, causing the legitimate LSP to be purged from the link-state database due to a checksum val...

CVE-2026-73446

CVE-2026-73446 affects Arista EOS on multiple hardware platforms (710, 720D, 720XP, 750X, 7010TX, 7020R, 7130, 7170, 7050X, 7060X, 7260X, 7280R, 7300X, 7320X, 7358X4, 7368X4, 7388X5, 7500R, 7800R, 7700R, AWE, CloudEOS, cEOS/vEOS-lab, CloudVision eXchange). When IS-IS is configured on a broadcast ...

CVE-2025-11395

Podman is affected by an arbitrary file write vulnerability that occurs when importing an OCI archive via the podman load command. An attacker who can supply a crafted tar archive to this command can create files on the host with the privileges of the user running Podman. The flaw is scored CVSS ...