CVE-2026-94091

A deserialization flaw exists in piskvorky gensim (up to 4.4.0 ) in the Model Loader component, specifically the Load function in gensim/utils.py. The root cause is an unguarded pickle.load call in SaveLoad.load when processing the fname argument, enabling remote exploitation. The maintainers clo...

CVE-2026-94090

JusticeRage Manalyze 1.0.0 contains an integer underflow in the PE Parser component, specifically in the function PE::_parse_debug within the file manape/pe.cpp . The flaw is triggered by manipulation of the misc.Length argument. The attack vector is remote with no privileges required , but user ...

CVE-2026-94089

D-Link DIR-868L version 2.01b05 is affected by a stack-based buffer overflow in the strcpy function of the file /webfa_authentication.cgi , within the Authentication Handler component. Remote attackers with no privileges can trigger the overflow by manipulating the id/password argument, leading t...

CVE-2026-94051

CVE-2026-94051 affects the cowork_bench project (GitHub user 0717376), specifically the ControlFlowNode function in local_servers/pdf-tools-mcp/pdf_tools_mcp/server.py (component pdf-tools-mcp ). The root cause is an unsanitized pdf_file_path argument that enables server-side request forgery (SSR...

CVE-2026-94050

An information disclosure vulnerability affects the ubus JSON-RPC interface of the D-Link DIR-X1860Z wireless router (firmware up to 1.0.2.220120.165402). The vulnerable functions are routerd.wificfg_get and routerd.get_rand_key , where manipulation allows an attacker on the local network to retr...

CVE-2026-94049

A path traversal vulnerability exists in the 06ketan slideshot CLI (up to version 4.4.0 ). The flaw is in the render_slides function within packages/cli/src/renderer.ts, where an attacker can manipulate the htmlPath argument to traverse the file system. The attack vector is remote with low privil...

CVE-2026-94048

CodeAstro QR Code Attendance Management System 1.0 is affected by an improper privilege management vulnerability in the Save function of app/Controllers/UserController.php. Manipulation of the role_id argument allows a remote, authenticated user with high privileges to escalate access, with a sco...

CVE-2026-94047

samanhappy MCPHub (up to version 1.0.32) is affected by an improper privilege management flaw in the Template Import Endpoint , specifically the importTemplate function within src/services/templateService.ts. The vulnerability is remotely exploitable over the network with low complexity and low p...

CVE-2026-94046

ACE-MCP (version up to 4.10.8) contains a path traversal vulnerability in the get_file_snippet function of getFileSnippet.ts within its MCP Tool component. The root cause is that isPathInsideProjectRoot only validates that filePath does not escape the projectRootPath, but projectRootPath itself i...

CVE-2026-94045

newbee-mall (up to 1.0.0) contains a persisted cross-site scripting vulnerability in the Goods Save Endpoint (controller/common/UploadController.java). The root cause is that ImageIO.read() performs a format-agnostic read, returning non-null for a polyglot PNG| payload and thereby bypassing the i...

CVE-2026-94044

A path traversal vulnerability affects the create_file function in app/api/mcp/route.ts of the 03-lovepreetSingh MCP project (GitHub). By manipulating the filePath/content argument, a remote attacker with no privileges or user interaction can traverse the filesystem, resulting in low impact on co...

CVE-2026-94043

Free5GC (up to 4.2.3 ) contains a race condition in the Gmm Handler component, specifically in the file NFs/amf/internal/gmm/handler.go. The vulnerability is exploitable remotely with no authentication or user interaction required. CVSS 3.1 scoring places the base score at 5.3 (MEDIUM) , with imp...

CVE-2026-88857

CVE-2026-88857 is an authenticated remote code execution vulnerability in the OrdaSoft Joomla Gallery extension for Joomla

CVE-2026-88854

CVE-2026-88854 is an unauthenticated SQL injection in the OrdaSoft Joomla Gallery extension (mod_osgallery_search) affecting Joomla getVar()—not a real Joomla filter method—so only HTML tags are stripped while quotes and SQL syntax pass through. The value is concatenated directly into a LIKE clau...

CVE-2026-88855

CVE-2026-88855 is an authenticated SQL injection in the OrdaSoft Joomla Gallery extension for Joomla

CVE-2026-88856

OrdaSoft Joomla Gallery extension for Joomla versions

CVE-2026-94042

CVE-2026-94042 is a SQL injection vulnerability in the AdithyaYelloju Restaurant Management System (affects the mysqli_query function in admin/add_table.php ). The unvalidated parameters table , members , and price can be manipulated remotely by an authenticated low-privilege user to inject arbit...

CVE-2026-94041

AdithyaYelloju Restaurant-Management-System (a rolling-release web app) is vulnerable to SQL injection in the file admin/add_menu.php. Manipulating the item/price/image/type arguments allows a remote, authenticated (low privilege) attacker to execute arbitrary SQL, leading to low impact on confid...

CVE-2026-94040

A Server-Side Request Forgery (SSRF) vulnerability exists in vas3k TaxHacker up to version 0.8.5 . The flaw is in the function testLLMProviderAction within the file app/(app)/apps/settings/actions.ts. Remote, unauthenticated attackers can manipulate the provider , apiKey , model , and baseUrl arg...

CVE-2026-94039

vas3k TaxHacker (versions up to 0.8.5 ) is affected by a server-side request forgery (SSRF) vulnerability in the Invoice PDF Renderer component. The root cause is an unvalidated businessLogo argument in the generateInvoicePDF function located at /apps/invoices/actions.ts, which allows a remote at...