CVE-2026-54446

netlicensing-mcp (Labs64) is a natural-language MCP server for the NetLicensing licensing API. Prior to 0.1.6 , the ApiKeyMiddleware in server.py fails to reject requests that carry no client API key; the downstream client then falls back to the operator's NETLICENSING_API_KEY environment variabl...

CVE-2026-54053

Many Notes , a Markdown note-taking web application, is vulnerable to path traversal via its ZIP vault import (app/Actions/ProcessImportedVault.php) prior to version 0.16.0 . The import accepts archive filenames containing parent-directory traversal segments, allowing an authenticated user to wri...

CVE-2026-54551

WireGuard Portal (wg-portal) is a web-based configuration portal for managing WireGuard servers. In versions 2.2.0 through 2.3.0 , the authenticated /api/v0/ws statistics WebSocket (implemented in endpoint_websocket.go) subscribes to peer and interface stats topics and forwards every TrafficDelta...

CVE-2026-44235

rabbitmq-c (a C-language AMQP client library) prior to 0.16.0 contains an unsigned size_t underflow in amqp_handle_input() (librabbitmq/amqp_connection.c). A malicious AMQP server can send an undersized HEADER or METHOD frame during client login, causing the computed encoded.len to wrap to 0xffff...

CVE-2026-84862

CVE-2026-84862 is an insecure deserialization vulnerability (CWE-502) in the Quartz JDBC job store of IBM Security Guardium Data Protection 12.2 . An authenticated attacker with high privileges can exploit this to execute arbitrary code on the affected system, resulting in high impact to confiden...

CVE-2026-84436

IBM Security Guardium Data Protection 12.2 is vulnerable to command injection (CWE-78) in the certificate export CLI functionality . A privileged authenticated CLI user can inject OS commands, resulting in arbitrary command execution with root privileges , impacting confidentiality, integrity, an...

CVE-2026-84249

IBM Guardium Data Protection versions 12.2 and 12.2.3 are affected by a missing authentication for critical function (CWE-306) that could allow a remote attacker to execute arbitrary management operations without prior authentication. The vulnerability carries a CVSS 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/...

CVE-2026-44236

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0 , a malicious or compromised AMQP server can send an undersized connection.tune.frame_max value (e.g., 1 byte) during the amqp_login() handshake. The library accepts the value in amqp_login_inner() and uses it in amqp_tu...

CVE-2026-84245

CVE-2026-84245 is a local privilege escalation vulnerability in IBM Guardium Data Protection 12.2 , specifically in the cp_wrapper component. A low-privileged local user can exploit improper privilege management (CWE-269) to gain root privileges , allowing access or modification of sensitive syst...

CVE-2026-84882

CVE-2026-84882 is a path traversal vulnerability in the Universal Connector Oracle Wallet upload component of IBM Guardium Data Protection 12.2 . An authenticated remote attacker could exploit insufficient path validation to write arbitrary files to the system , potentially leading to high impact...

CVE-2026-84278

IBM Security Guardium Data Protection version 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root pr...

CVE-2026-84244

CVE-2026-84244 affects IBM Guardium Data Protection 12.2 due to a stored cross-site scripting (XSS) vulnerability in the Quick Search results grid . An unauthenticated attacker who can influence monitored database traffic can execute a malicious script in the browser of an authenticated Guardium ...

CVE-2026-84440

CVE-2026-84440 is a command injection vulnerability in the SNMP alert notification functionality of IBM Guardium Data Protection 12.2 . An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter ...

CVE-2026-84422

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality , allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges . The CVSS 3.1 base score is 7.2 (C:H/I:H/A:H). Remediation is avai...

CVE-2026-85029

IBM Guardium Data Protection 12.2 is vulnerable to path traversal (CWE-22) caused by improper limitation of a pathname to a restricted directory. A remote attacker with low privileges could obtain sensitive information, delete arbitrary files, or execute arbitrary code. The CVSS 3.1 base score is...

CVE-2026-54546

CloudTAK (a browser-based situational awareness tool compatible with TAK) is vulnerable to an authenticated full-read SSRF in the PUT /api/basemap endpoint prior to version 13.22.1 . The importBasemapURL() function in api/routes/basemap.ts passes an attacker-controlled URL to fetch() without IP-a...

CVE-2026-54579

mport , the MidnightBSD Package Manager, contained a vulnerability in the ping() function within libmport/ping.c prior to version 2.7.8 . The function accepted ICMP replies without validating icmp_id or icmp_seq and parsed the reply using a fixed IP-header offset instead of the actual ip_hl field...

CVE-2026-54576

mport , the MidnightBSD Package Manager, is affected by a symlink TOCTOU vulnerability in do_actual_install() (file libmport/bundle_read_install_pkg.c) prior to version 2.7.8 . The function used path-based lstat(), chown(), stat(), and chmod() operations during package installation. A local attac...

CVE-2026-54587

mport , the MidnightBSD Package Manager, is vulnerable to symlink and path traversal races in versions prior to 2.7.8 . The flaw resides in libmport/bundle_read_install_pkg.c, where directory assets (ASSET_DIR / ASSET_DIR_OWNER_MODE) used path-based mport_mkdirp(), ownership, and permission opera...

CVE-2026-54575

mport , the MidnightBSD Package Manager, is affected by a TOCTOU filesystem race in its privileged package fetch and cache-cleaning operations prior to version 2.7.8 . The race-prone path handling spans multiple components including libmport/fetch.c, libmport/clean.c, and the mport.create helper....