CVE-2026-92087

@fastify/auth (a Fastify plugin for composing authentication and authorization strategies) is vulnerable to authorization bypass in versions 5.0.0 through 5.1.0 . When strategies are composed using the or relation with the run: "all" option and a nested array acting as an AND group, the group is ...

CVE-2026-77119

BIND 9 (ISC) has a DNSSEC NSEC3 insecure-referral proof flaw: a validly signed NSEC3 RRset from an unrelated sibling zone may be accepted as proof of non-existence, downgrading a secure delegation and allowing a forged unsigned answer through. Affected versions are 9.11.0–9.18.50, 9.20.0–9.20.27,...

CVE-2026-75029

CVE-2026-75029 affects ISC BIND 9 (versions 9.11.0–9.18.50, 9.20.0–9.20.27, 9.21.0–9.21.25, and corresponding -S1 releases). The message parser fails to deduplicate singleton records (e.g., SOA) in a query response: when an attacker sends multiple copies with identical RDATA, each copy is appende...

CVE-2026-92366

code-projects Matrimonial System 1.0 is vulnerable to SQL injection in the Regular Search component via the /search.php file. Unauthenticated remote attackers can manipulate the arguments sex, mothertongue, maritialstatus, country, state, religion, agemin, and agemax to inject SQL. The impact is ...

CVE-2026-88064

Backstage is an open-source framework for building developer portals. The @backstage/plugin-techdocs-node package, prior to 1.14.6 and from 1.15.0 until 1.15.4, insufficiently validates mkdocs.yml files supplied by an authenticated user who can register or modify a TechDocs source. Unsafe Python ...

CVE-2026-19668

CVE-2026-19668 affects BIND 9 recursive resolvers that may suffer excessive resource consumption when processing large numbers of a particular kind of invalid DNSSEC record, leading to potential denial of service. The vulnerability stems from DNSSEC cryptographic material matching and is mitigate...

CVE-2026-88976

Plate (a rich-text editor with AI and shadcn/ui support) is vulnerable to a stored cross-site scripting (XSS) issue in its core HTML deserialization APIs. Prior to 53.3.11 , and in the discontinued 54.0.0-beta.0 through 54.0.0-beta.1 builds, supplied HTML strings are parsed in the active document...

CVE-2026-19033

BIND 9 named can serve zone data from a multi-message TCP IXFR transfer before the final TSIG signature arrives. If no valid signature ever arrives, the daemon does not roll back, allowing an unauthenticated attacker to inject unauthorized zone contents into a secondary server. Affected versions ...

CVE-2026-76825

RestrictedPython is a Python sandboxing tool from the Zope Foundation that allows defining a restricted subset of Python for untrusted input. Prior to version 8.4, a sandbox escape was possible when a custom import policy or globals exposed the standard library string.Formatter class, an instance...

CVE-2026-84997

react/http (ReactPHP) is vulnerable to a denial-of-service via a malformed HTTP chunked body. The ChunkedDecoder enters an infinite loop when it receives either an incomplete terminal-chunk trailer without CRLF or exactly two non-CRLF bytes after a completed non-terminal chunk, because handleData...

CVE-2026-80274

BIND 9 validating resolvers are affected by a bug where the resolver can abort (unexpected program exit) while caching a mismatched NOQNAME proof . Specifically, when querying a DNSSEC-signed authoritative zone , a response containing a valid wildcard answer with a signed NSEC3 proof followed by ...

CVE-2026-61709

OpenFGA prior to 1.18.1 had an authorization-decision over-inclusion flaw in the ListUsers API. When an authorization relation combined a but not exclusion under a type-bound wildcard with another relation via intersection (and), the function expandIntersection in pkg/server/commands/listusers/li...

CVE-2026-76163

ISC BIND 9 is vulnerable to a denial-of-service condition when the named process is loaded with a named.conf file that contains no global options block . In that configuration, an unauthenticated remote attacker can trigger an assertion failure by sending a single QTYPE TKEY query, causing an une...

CVE-2026-89031

The Adenion Blog2Social WordPress plugin before version 9.1.0 is affected by a broken access control vulnerability in the b2s_calendar_move_post AJAX handler (includes/Ajax/Post.php). The handler issues an UPDATE against the b2s_posts table using only the attacker-supplied b2s_id primary key with...

CVE-2026-19666

BIND 9 named contains a use-after-free vulnerability in query_addnoqnameproof() along the DNS64 filter64 code path. When a resolver is configured with dns64 and receives a malformed answer from an authoritative server, the named process exits unexpectedly, causing a denial of service (CVSS 7.5 HI...

CVE-2026-82964

Avast's sandbox minifilter driver (aswSnx.sys) on Windows contains an improper permission-preservation flaw. When virtualizing a file, the driver opened the target object with GENERIC_WRITE and FILE_WRITE_ATTRIBUTES only, omitting WRITE_DAC , causing every attempt to apply the original DACL to fa...

CVE-2026-89030

The Adenion Blog2Social plugin for WordPress (before 9.1.0 ) allows low-privileged users to enumerate email addresses of all registered users, including administrators. The b2s_search_user AJAX handler in includes/Ajax/Get.php calls B2S_Tools::searchUser() in includes/Tools.php, which returns the...

CVE-2026-92365

A Denial of Service (DoS) vulnerability exists in vllm-project vllm (up to version 0.29.0). A remote attacker with low privileges can exploit an inefficient algorithmic complexity in the file vllm/v1/sample/thinking_budget_state.py, degrading service availability for legitimate users. The specifi...

CVE-2026-81563

CVE-2026-81563 is a resource exhaustion vulnerability in the BIND 9 resolver (ISC). When a resolver encounters an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records , it may fail to properly deallocate internal qpcache references . Repeated occurrences lead to resou...

CVE-2026-89029

Adenion Blog2Social is a WordPress plugin that, in versions before 9.1.0 , exposes a user enumeration flaw. The b2s_get_select_mandant_user AJAX handler (in includes/Ajax/Get.php) resolves arbitrary user IDs supplied via the owner parameter to display names without verifying the caller's authoriz...