CVE-2026-94047

samanhappy MCPHub (up to version 1.0.32) is affected by an improper privilege management flaw in the Template Import Endpoint , specifically the importTemplate function within src/services/templateService.ts. The vulnerability is remotely exploitable over the network with low complexity and low p...

CVE-2026-94046

ACE-MCP (version up to 4.10.8) contains a path traversal vulnerability in the get_file_snippet function of getFileSnippet.ts within its MCP Tool component. The root cause is that isPathInsideProjectRoot only validates that filePath does not escape the projectRootPath, but projectRootPath itself i...

CVE-2026-94045

newbee-mall (up to 1.0.0) contains a persisted cross-site scripting vulnerability in the Goods Save Endpoint (controller/common/UploadController.java). The root cause is that ImageIO.read() performs a format-agnostic read, returning non-null for a polyglot PNG| payload and thereby bypassing the i...

CVE-2026-94044

A path traversal vulnerability affects the create_file function in app/api/mcp/route.ts of the 03-lovepreetSingh MCP project (GitHub). By manipulating the filePath/content argument, a remote attacker with no privileges or user interaction can traverse the filesystem, resulting in low impact on co...

CVE-2026-94043

Free5GC (up to 4.2.3 ) contains a race condition in the Gmm Handler component, specifically in the file NFs/amf/internal/gmm/handler.go. The vulnerability is exploitable remotely with no authentication or user interaction required. CVSS 3.1 scoring places the base score at 5.3 (MEDIUM) , with imp...

CVE-2026-88857

CVE-2026-88857 is an authenticated remote code execution vulnerability in the OrdaSoft Joomla Gallery extension for Joomla

CVE-2026-88854

CVE-2026-88854 is an unauthenticated SQL injection in the OrdaSoft Joomla Gallery extension (mod_osgallery_search) affecting Joomla getVar()—not a real Joomla filter method—so only HTML tags are stripped while quotes and SQL syntax pass through. The value is concatenated directly into a LIKE clau...

CVE-2026-88855

CVE-2026-88855 is an authenticated SQL injection in the OrdaSoft Joomla Gallery extension for Joomla

CVE-2026-88856

OrdaSoft Joomla Gallery extension for Joomla versions

CVE-2026-94042

CVE-2026-94042 is a SQL injection vulnerability in the AdithyaYelloju Restaurant Management System (affects the mysqli_query function in admin/add_table.php ). The unvalidated parameters table , members , and price can be manipulated remotely by an authenticated low-privilege user to inject arbit...

CVE-2026-94041

AdithyaYelloju Restaurant-Management-System (a rolling-release web app) is vulnerable to SQL injection in the file admin/add_menu.php. Manipulating the item/price/image/type arguments allows a remote, authenticated (low privilege) attacker to execute arbitrary SQL, leading to low impact on confid...

CVE-2026-94040

A Server-Side Request Forgery (SSRF) vulnerability exists in vas3k TaxHacker up to version 0.8.5 . The flaw is in the function testLLMProviderAction within the file app/(app)/apps/settings/actions.ts. Remote, unauthenticated attackers can manipulate the provider , apiKey , model , and baseUrl arg...

CVE-2026-94039

vas3k TaxHacker (versions up to 0.8.5 ) is affected by a server-side request forgery (SSRF) vulnerability in the Invoice PDF Renderer component. The root cause is an unvalidated businessLogo argument in the generateInvoicePDF function located at /apps/invoices/actions.ts, which allows a remote at...

CVE-2026-94038

NonceGeek dim-sum-app is vulnerable to server-side request forgery (SSRF) in the Deno Backend component, specifically in the textSearchV2Handler function within deno/main.tsx. The root cause is unsanitized manipulation of the supabase_url argument, allowing a remote, unauthenticated attacker to f...

CVE-2026-94037

CVE-2026-94037 affects the mcp-file-analyzer project (by 00Kisumi00) up to commit 84740852 . The vulnerability is a path traversal in the ControlFlowNode function within main.py , part of the analyze_csv_data MCP tool. An attacker can manipulate the filename argument to traverse beyond the intend...

CVE-2026-94036

D-Link DIR-X1860 and DIR-X1860Z routers (up to version 1.0.2.220120.165402) are affected by an improper access control flaw in the /ubus file of the routerd component. Manipulation of the passwd_set argument allows an attacker on the local network to bypass access controls, with no authentication...

CVE-2026-94035

SourceCodester Drug Recommendation System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the file /drug_recommender/index.php, triggered by manipulating the full name argument. The attack is remotely launchable but requires user interaction . The CVSS 3.1 score is 4.3 (MEDIUM) w...

CVE-2026-94034

A cross-site scripting (XSS) vulnerability exists in SourceCodester Drug Recommendation System 1.0 , specifically in the Password Change component (file /drug_recommender/Admin/change_password). Manipulating the txtoldpassword/txtnewpassword parameters leads to XSS, with the attack vector being r...

CVE-2026-94033

A cross-site scripting (XSS) vulnerability affects the User Management component of SourceCodester Drug Recommendation System 1.0 , specifically in the file /drug_recommender/Admin/add_user. Manipulation of the txtname, txtemail, or txtpassword arguments enables the XSS payload. The attack is rem...

CVE-2026-94032

CVE-2026-94032 is a SQL injection vulnerability in itsourcecode Leave Management System 1.0 , triggered by manipulating the ID argument in the file /module/department/index.php . The flaw is exploitable remotely with low privileges and no user interaction , leading to partial compromise of confid...