CVE-2026-71551

The EXEC IPC handler in electron/ipc-handlers/exec.ts passes arbitrary commands via child_process.exec() without requiring nodeExecution permission. Community plugins run with new Function() can call window.ea.exec() to execute OS commands under the desktop account's privileges. The confirmation ...

CVE-2026-69160

In server/handles/sharing.go, strings.HasPrefix(requested_path, user.BasePath) fails to enforce a directory separator boundary. An authenticated user with CanShare permission and a BasePath like /base can create a share for a sibling path like /base2/secret.txt, then use the public share download...

CVE-2026-48508

Lemur (Netflix's TLS certificate management service) prior to 1.9.1 contains an authorization bypass in StrictRolePermission and AuthorityCreatorPermission (lemur/auth/permissions.py). When ADMIN_ONLY_AUTHORITY_CREATION and LEMUR_STRICT_ROLE_ENFORCEMENT are unset (both default to False), flask_pr...

CVE-2026-75130

Context7 through 2.1.2 has a prompt injection flaw in its Custom AI Instructions feature served via the MCP server. Attackers poison unsanitized instructions to exfiltrate credentials from environment files and delete files on victim machines when the agent makes routine documentation requests. C...

CVE-2026-50167

In Kurrier versions prior to 1.2.4, GET and list endpoints for webhooks and identities lacked cross-account ownership enforcement, allowing any authenticated user with a valid API key to enumerate and read another account's resource metadata. The flaw is fixed in version 1.2.4. No exploitation ev...

CVE-2026-55178

GeoLens read/link endpoints authorized only the URL resource but not a second caller-influenced dataset reachable via relationships, layer refs, mosaics, or request bodies. Anonymous callers could read private vector tiles, raster pixels, table rows, and metadata; authenticated editors could cros...

CVE-2026-49452

In weasyprint/css/__init__.py, the background HTML attribute is interpolated unescaped into background-image:url({element.get("background")}) and parsed by tinycss2.parse_blocks_contents(). A PoC () demonstrates CSS injection and SSRF against cloud metadata endpoints. Affected only when presentat...

CVE-2026-73502

In openapi3filter/req_resp_decoder.go (~line 197), defaultContentParameterDecoder dereferences mt.Schema.Value without a nil check, panicking on any spec using a schema-less content parameter. Unauthenticated clients trigger this with one request, causing per-request aborts or full process crashe...

CVE-2026-61696

Forem versions before commit 92eacd16a82cf9007ba8e16a2258b42e3b53ca9c render unsanitized feedback_message[message] via raw() in app/views/admin/feedback_messages/_feedback_message.html.erb, enabling stored XSS when an admin views an abuse report. The unauthenticated FeedbackMessagesController acc...

CVE-2026-71880

GBIF Integrated Publishing Toolkit (versions before 3.3.4) has a server-side template injection vulnerability in its template engine. Remote authenticated attackers with low privileges can inject untrusted input into templates, achieving high confidentiality and integrity impact (CVSS 7.6) by rea...

CVE-2026-75625

Uber Kraken's P2P blob download path skips SHA-256 digest verification before committing to the content-addressable cache, relying only on CRC32. Attackers can forge CRC32 values to inject malicious container image layers or manifests that propagate to other hosts, enabling supply-chain compromis...

CVE-2026-53533

aiosmtplib's SMTP.mail(), SMTP.rcpt(), SMTP.vrfy(), and SMTP.expn() methods transmit caller-supplied addresses without filtering CR/LF bytes, allowing SMTP command injection (CWE-93/CWE-77) when attacker-influenced addresses are passed. This enables desynchronization, client hangs, or arbitrary m...

CVE-2026-50161

libre (a real-time communications library) contains an integer overflow in websock_decode() (src/websock/websock.c) when validating a masked WebSocket frame using 64-bit extended length encoding. The expression 4 + hdr->len wraps when hdr->len is close to UINT64_MAX, bypassing the mbuf_get_...

CVE-2026-50143

In @apify/actors-mcp-server versions before 0.10.11, getActorMCPServerURL() in src/mcp/actors.ts:44 naively concatenates a trusted base URL with an attacker-controlled webServerMcpPath, allowing an @ character to inject an arbitrary hostname. Node.js's WHATWG URL parser treats the prefix as useri...

CVE-2026-32657

A UNIX symlink following vulnerability affects multiple Dell products (AppSync 4.6.0.0, PowerFlex Manager 4.5.4, PowerFlex Rack 4.5.4 and prior, VxRail 8.0.322, PowerMax 10.3.0, Unity 5.4, among others). A low-privileged local attacker can follow symlinks to elevate privileges, with CVSS 7.3 (HIG...

CVE-2026-68923

In MobSF versions before 4.5.1, settings.py placed CsrfViewMiddleware only in the deprecated MIDDLEWARE_CLASSES tuple, omitting it from the active MIDDLEWARE tuple. This left authenticated endpoints (/delete_scan/, /upload/, /change_password/, /create_user/, /delete_user/) without CSRF protection...

CVE-2026-68927

MobSF (Mobile Security Framework) prior to 4.5.1 contains an SSRF port restriction bypass in the Android App Link assetlinks checker. The function get_browsable_activities in manifest_analysis.py validates only the android:host value via valid_host(), but appends a separately supplied android:por...

CVE-2026-68922

In MobSF versions before 4.5.1, find_icon_path_zip in mobsf/StaticAnalyzer/views/android/icon_analysis.py constructs paths from the manifest android:icon value without sanitizing traversal or verifying containment. An authenticated user can upload a crafted ZIP/APK to read server files matching A...

CVE-2026-68924

In MobSF prior to 4.5.1, the unzip function in mobsf/StaticAnalyzer/views/common/shared_func.py logs an oversized archive member as skipped but fails to advance to the next member, allowing an authenticated user to extract a crafted ZIP/APK member to disk when the aggregate total-size limit is no...

CVE-2026-71879

GBIF Integrated Publishing Toolkit versions before 3.3.4 leave initial setup functionality unauthenticated until first reboot, allowing remote authenticated attackers to bypass authentication and gain administrative control. CVSS 4.0 scores it 9.1 CRITICAL (network, low complexity, no privileges ...