tsecurity.de - 🕵️ Reverse Engineering

Heap-Buffer-Überlauf im Discord-Backend

Thu, 17 Sep 2026 07:15:08 +0200

32768 × 32768 × 4 = 2^32 In 32-bit arithmetic: 0. That's how the size check in discord/lilliput computes its output buffer requirement. "0 > buffer_len" is never true, so the guard is inert — the PNG decoder then writes 4 GiB into an 8 MiB buffer. Trigger: a 10 KB, perfectly valid PNG. Not RCE — the product only wraps at 2^32, so every overflow... Weiterlesen

CVE-2022-44251 | TOTOLINK NR1800X 9.1.0u.6279_B20210910 setUssd ussd command injection (EUVD-2022-47200)

Thu, 17 Sep 2026 07:12:38 +0200

A vulnerability marked as critical has been reported in TOTOLINK NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function setUssd. Performing a manipulation of the argument ussd results in command injection. This vulnerability is identified as CVE-2022-44251. The attack can only be performed from the local network. There is not any... Weiterlesen

CVE-2022-44253 | TOTOLINK LR350 9.3.5u.6369_B20220309 setDiagnosisCfg via improper authentication (EUVD-2022-47202)

Thu, 17 Sep 2026 07:12:38 +0200

A vulnerability was found in TOTOLINK LR350 9.3.5u.6369_B20220309 and classified as critical. Impacted is the function setDiagnosisCfg. Such manipulation of the argument via leads to improper authentication. This vulnerability is traded as CVE-2022-44253. Access to the local network is required for this attack to succeed. There is no exploit... Weiterlesen

CVE-2022-44252 | TOTOLINK NR1800X 9.1.0u.6279_B20210910 setUploadSetting FileName command injection (EUVD-2022-47201)

Thu, 17 Sep 2026 07:12:38 +0200

A vulnerability described as critical has been identified in TOTOLINK NR1800X 9.1.0u.6279_B20210910. This affects the function setUploadSetting. Executing a manipulation of the argument FileName can lead to command injection. This vulnerability is tracked as CVE-2022-44252. The attack is only possible within the local network. No exploit exists. Weiterlesen

CVE-2022-44254 | TOTOLINK LR350 9.3.5u.6369_B20220309 setSmsCfg buffer overflow (EUVD-2022-47203)

Thu, 17 Sep 2026 07:12:38 +0200

A vulnerability classified as critical has been found in TOTOLINK LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setSmsCfg. The manipulation leads to buffer overflow. This vulnerability is listed as CVE-2022-44254. The attack must be carried out from within the local network. There is no available exploit. Weiterlesen

From Bug to Schema: Exploring Error-Based SQL Injection on an Authenticating Portal

Thu, 17 Sep 2026 07:12:33 +0200

Case Study Analysis of how I identified an Error-Based SQL Injection vulnerability in a production environment via (VDP).Disclaimer: This paper is only intended for informative and educational use. The vulnerability described here in has been identified by a Vulnerability Disclosure Program (VDP) during a designated testing period. All sensitive... Weiterlesen

AI, Cryptanalysis and Offensive Security: Rahul Singh Choudhary on What Comes Next

Thu, 17 Sep 2026 07:10:31 +0200

AI is moving deeper into cryptanalysis, vulnerability research and offensive security, raising new questions about how quickly vulnerabilities can be discovered and exploited. In the latest episode of Security Pill Season 2.0, The Cyber Express spoke with Rahul Singh Choudhary, Cyber Security Analyst, about AI-assisted cryptanalysis, vulnerability... Weiterlesen

CVE-2026-65017 | Apache Airflow Config API information disclosure

Thu, 17 Sep 2026 06:41:35 +0200

A vulnerability labeled as problematic has been found in Apache Airflow. Affected is an unknown function of the component Config API. Executing a manipulation can lead to information disclosure. The identification of this vulnerability is CVE-2026-65017. The attack may be launched remotely. There is no exploit available. Weiterlesen

CVE-2026-67587 | Apache Airflow deserialization

Thu, 17 Sep 2026 06:41:35 +0200

A vulnerability identified as critical has been detected in Apache Airflow. This impacts an unknown function. Performing a manipulation results in deserialization. This vulnerability was named CVE-2026-67587. The attack may be initiated remotely. There is no available exploit. Weiterlesen

CVE-2026-54183 | Apache Airflow information disclosure (EUVD-2026-57310)

Thu, 17 Sep 2026 06:41:35 +0200

A vulnerability categorized as problematic has been discovered in Apache Airflow. This affects an unknown function. Such manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2026-54183. The attack can be launched remotely. No exploit exists. Weiterlesen

CVE-2026-59242 | Apache Airflow XCom deserialize endpoint deserialization

Thu, 17 Sep 2026 06:41:35 +0200

A vulnerability was found in Apache Airflow. It has been rated as critical. The impacted element is an unknown function of the component XCom deserialize endpoint. This manipulation causes deserialization. This vulnerability is handled as CVE-2026-59242. The attack can be initiated remotely. There is not any exploit available. Weiterlesen

CVE-2026-59244 | Apache Airflow Secrets masker information disclosure (EUVD-2026-57316)

Thu, 17 Sep 2026 06:41:35 +0200

A vulnerability was found in Apache Airflow. It has been declared as problematic. The affected element is an unknown function of the component Secrets masker. The manipulation results in information disclosure. This vulnerability is known as CVE-2026-59244. It is possible to launch the attack remotely. No exploit is available. Weiterlesen

CVE-2026-58076 | Apache Airflow Exception Deserialization BaseSerialization.deserialize deserialization (EUVD-2026-57315)

Thu, 17 Sep 2026 06:41:35 +0200

A vulnerability classified as critical has been found in Apache Airflow. Affected is the function BaseSerialization.deserialize of the component Exception Deserialization. The manipulation leads to deserialization. This vulnerability is listed as CVE-2026-58076. The attack may be initiated remotely. There is no available exploit. Weiterlesen

CVE-2026-67260 | Apache Airflow Scheduler next_kwargs deserialization

Thu, 17 Sep 2026 06:41:35 +0200

A vulnerability was found in Apache Airflow. It has been classified as critical. Impacted is an unknown function of the component Scheduler. The manipulation of the argument next_kwargs leads to deserialization. This vulnerability is traded as CVE-2026-67260. It is possible to initiate the attack remotely. There is no exploit available. Weiterlesen

CVE-2026-18708 | MongoDB up to 7.0.39/8.0.28/8.3.7 JavaScript Scripting Engine code injection

Thu, 17 Sep 2026 06:41:34 +0200

A vulnerability, which was classified as problematic, was found in MongoDB up to 7.0.39/8.0.28/8.3.7. The affected element is an unknown function of the component JavaScript Scripting Engine. Such manipulation leads to code injection. This vulnerability is referenced as CVE-2026-18708. It is possible to launch the attack remotely. No exploit is... Weiterlesen

CVE-2026-68868 | Apache Airflow Secret Manager Backend privileges management

Thu, 17 Sep 2026 06:41:34 +0200

A vulnerability identified as problematic has been detected in Apache Airflow. Affected by this vulnerability is an unknown functionality of the component Secret Manager Backend. Performing a manipulation results in improper privilege management. This vulnerability is identified as CVE-2026-68868. The attack can be initiated remotely. There is not... Weiterlesen

CVE-2026-18706 | MongoDB Server up to 8.3.7 GraphLookup Aggregation Stage use after free

Thu, 17 Sep 2026 06:41:34 +0200

A vulnerability has been found in MongoDB Server up to 8.3.7 and classified as problematic. Affected by this issue is some unknown functionality of the component GraphLookup Aggregation Stage. The manipulation leads to use after free. This vulnerability is listed as CVE-2026-18706. The attack may be initiated remotely. There is no available... Weiterlesen

CVE-2026-18709 | MongoDB Server up to 7.0.39/8.0.28/8.3.7 Transaction Coordinator behavioral workflow

Thu, 17 Sep 2026 06:41:34 +0200

A vulnerability described as very critical has been identified in MongoDB Server up to 7.0.39/8.0.28/8.3.7. This affects an unknown part of the component Transaction Coordinator. Executing a manipulation can lead to enforcement of behavioral workflow. This vulnerability is handled as CVE-2026-18709. The attack can be executed remotely. There is... Weiterlesen

CVE-2026-18707 | MongoDB up to 8.3.7 Aggregation assertion (Nessus ID 343459)

Thu, 17 Sep 2026 06:41:34 +0200

A vulnerability marked as problematic has been reported in MongoDB up to 8.3.7. The affected element is an unknown function of the component Aggregation. The manipulation leads to reachable assertion. This vulnerability is uniquely identified as CVE-2026-18707. The attack is possible to be carried out remotely. No exploit exists. It is suggested... Weiterlesen

CVE-2026-76460 | Cisco Identity Services Engine Software API improper authentication

Thu, 17 Sep 2026 05:41:34 +0200

A vulnerability classified as very critical was found in Cisco Identity Services Engine Software and ISE Passive Identity Connector. This affects an unknown function of the component API. Such manipulation leads to improper authentication. This vulnerability is listed as CVE-2026-76460. The attack may be performed from remote. In addition, an... Weiterlesen

CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance Software Remote Access SSL VPN service denial of service

Thu, 17 Sep 2026 05:41:34 +0200

A vulnerability was found in Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software and classified as critical. Affected by this issue is some unknown functionality of the component Remote Access SSL VPN service. The manipulation results in denial of service. This vulnerability is cataloged as... Weiterlesen

CVE-2026-69116 | xpf0000 FlyEnv up to 4.17.x Html Sanitization injection

Thu, 17 Sep 2026 05:41:34 +0200

A vulnerability, which was classified as problematic, has been found in xpf0000 FlyEnv up to 4.17.x. This vulnerability affects unknown code of the component Html Sanitization. Performing a manipulation results in injection. This vulnerability is known as CVE-2026-69116. Remote exploitation of the attack is possible. No exploit is available. It is... Weiterlesen

CVE-2026-69114 | Spacebar Server Message Deletion Handlers permission

Thu, 17 Sep 2026 05:41:34 +0200

A vulnerability classified as problematic was found in Spacebar Server. This affects an unknown part of the component Message Deletion Handlers. Such manipulation leads to permission issues. This vulnerability is traded as CVE-2026-69114. The attack may be launched remotely. There is no exploit available. It is advisable to implement a patch to... Weiterlesen

CVE-2026-71967 | OP-TEE OS up to 4.10.0 Widevine PTA is_user_ta_ctx null pointer dereference

Thu, 17 Sep 2026 05:41:34 +0200

A vulnerability was found in OP-TEE OS up to 4.10.0. It has been declared as critical. Affected is the function is_user_ta_ctx of the component Widevine PTA. Such manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2026-71967. The attack may be performed from remote. There is no available exploit. Applying a patch... Weiterlesen

CVE-2026-18694 | MongoDB up to 7.0.39/8.0.28/8.3.7 Geospatial Query Processing memory corruption

Thu, 17 Sep 2026 05:41:34 +0200

A vulnerability was found in MongoDB up to 7.0.39/8.0.28/8.3.7. It has been declared as critical. The impacted element is an unknown function of the component Geospatial Query Processing. Executing a manipulation can lead to memory corruption. This vulnerability is registered as CVE-2026-18694. It is possible to launch the attack remotely. No... Weiterlesen

CVE-2026-18695 | MongoDB Server up to 7.0.39/8.0.28/8.3.7 denial of service

Thu, 17 Sep 2026 05:41:34 +0200

A vulnerability, which was classified as problematic, has been found in MongoDB Server up to 7.0.39/8.0.28/8.3.7. Affected is an unknown function. Performing a manipulation results in denial of service. This vulnerability is identified as CVE-2026-18695. The attack can be initiated remotely. There is not any exploit available. It is advisable to... Weiterlesen

CVE-2026-69112 | Hugging Face Accelerate up to 1.14.0 Sharded Checkpoint Index weight_map path traversal

Thu, 17 Sep 2026 05:41:34 +0200

A vulnerability, which was classified as critical, was found in Hugging Face Accelerate up to 1.14.0. Affected by this issue is the function load_checkpoint_in_model/load_checkpoint_and_dispatch of the component Sharded Checkpoint Index. Such manipulation of the argument weight_map leads to path traversal. This vulnerability is uniquely identified... Weiterlesen

CVE-2026-18691 | MongoDB Server up to 7.0.39/8.0.28/8.3.7 Intra-cluster Connection Setup improper authentication

Thu, 17 Sep 2026 05:41:34 +0200

A vulnerability has been found in MongoDB Server up to 7.0.39/8.0.28/8.3.7 and classified as critical. This issue affects some unknown processing of the component Intra-cluster Connection Setup. This manipulation causes improper authentication. This vulnerability is tracked as CVE-2026-18691. The attack is possible to be carried out remotely. No... Weiterlesen

CVE-2026-18692 | MongoDB Server up to 8.3.7 Timeseries use after free

Thu, 17 Sep 2026 05:41:34 +0200

A vulnerability was found in MongoDB Server up to 8.3.7 and classified as critical. Impacted is an unknown function of the component Timeseries Handler. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-18692. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the... Weiterlesen

CVE-2026-18693 | MongoDB up to 7.0.39/8.0.28/8.3.7 Timeseries memory corruption

Thu, 17 Sep 2026 05:41:34 +0200

A vulnerability was found in MongoDB up to 7.0.39/8.0.28/8.3.7. It has been classified as critical. The affected element is an unknown function of the component Timeseries Handler. Performing a manipulation results in memory corruption. This vulnerability is cataloged as CVE-2026-18693. It is possible to initiate the attack remotely. There is no... Weiterlesen

CVE-2022-44194 | Netgear R7000P 1.3.0.8 apmode_dns1_pri/apmode_dns1_sec buffer overflow (EUVD-2022-47144)

Thu, 17 Sep 2026 05:41:34 +0200

A vulnerability marked as critical has been reported in Netgear R7000P 1.3.0.8. Impacted is an unknown function. Performing a manipulation of the argument apmode_dns1_pri/apmode_dns1_sec results in buffer overflow. This vulnerability is reported as CVE-2022-44194. The attacker must have access to the local network to execute the attack. No exploit... Weiterlesen

CVE-2022-44197 | Netgear R7000P 1.3.0.8 openvpn_server_ip buffer overflow (EUVD-2022-47147)

Thu, 17 Sep 2026 05:41:34 +0200

A vulnerability classified as critical has been found in Netgear R7000P 1.3.0.8. The impacted element is an unknown function. The manipulation of the argument openvpn_server_ip leads to buffer overflow. This vulnerability is traded as CVE-2022-44197. Access to the local network is required for this attack to succeed. There is no exploit available. Weiterlesen

CVE-2022-44196 | Netgear R7000P 1.3.0.8 openvpn_push1 buffer overflow (EUVD-2022-47146)

Thu, 17 Sep 2026 05:41:33 +0200

A vulnerability described as critical has been identified in Netgear R7000P 1.3.0.8. The affected element is an unknown function. Executing a manipulation of the argument openvpn_push1 can lead to buffer overflow. This vulnerability appears as CVE-2022-44196. The attacker needs to be present on the local network. There is no available exploit. Weiterlesen

CVE-2022-44198 | Netgear R7000P 1.3.1.64 openvpn_push1 buffer overflow (EUVD-2022-47148)

Thu, 17 Sep 2026 05:41:33 +0200

A vulnerability classified as critical was found in Netgear R7000P 1.3.1.64. This affects an unknown function. The manipulation of the argument openvpn_push1 results in buffer overflow. This vulnerability is known as CVE-2022-44198. Access to the local network is required for this attack. No exploit is available. Weiterlesen

CVE-2022-44199 | Netgear R7000P 1.3.1.64 openvpn_server_ip buffer overflow (EUVD-2022-47149)

Thu, 17 Sep 2026 05:41:33 +0200

A vulnerability, which was classified as critical, has been found in Netgear R7000P 1.3.1.64. This impacts an unknown function. This manipulation of the argument openvpn_server_ip causes buffer overflow. This vulnerability is handled as CVE-2022-44199. The attack can only be done within the local network. There is not any exploit available. Weiterlesen

CVE-2022-44201 | D-Link DIR823G 1.02B05 command injection (EUVD-2022-47151)

Thu, 17 Sep 2026 05:41:33 +0200

A vulnerability was found in D-Link DIR823G 1.02B05 and classified as critical. Affected by this issue is some unknown functionality. Executing a manipulation can lead to command injection. The identification of this vulnerability is CVE-2022-44201. The attack needs to be done within the local network. There is no exploit available. Weiterlesen

CVE-2022-44200 | Netgear R7000P 1.3.0.8/1.3.1.64 stamode_dns1_pri/stamode_dns1_sec buffer overflow (EUVD-2022-47150)

Thu, 17 Sep 2026 05:41:33 +0200

A vulnerability, which was classified as critical, was found in Netgear R7000P 1.3.0.8/1.3.1.64. Affected is an unknown function. Such manipulation of the argument stamode_dns1_pri/stamode_dns1_sec leads to buffer overflow. This vulnerability is uniquely identified as CVE-2022-44200. The attack can only be initiated within the local network. No... Weiterlesen

CVE-2022-44211 | GL.iNet Goodcloud 1.1 Setting access control (EUVD-2022-47161)

Thu, 17 Sep 2026 05:41:33 +0200

A vulnerability identified as critical has been detected in GL.iNet Goodcloud 1.1. This vulnerability affects unknown code of the component Setting Handler. This manipulation causes improper access controls. This vulnerability is tracked as CVE-2022-44211. The attack is possible to be carried out remotely. No exploit exists. Weiterlesen

CVE-2022-44212 | GL.iNet Goodcloud 1.0 Admin Panel access control (EUVD-2022-47162)

Thu, 17 Sep 2026 05:41:33 +0200

A vulnerability labeled as critical has been found in GL.iNet Goodcloud 1.0. This issue affects some unknown processing of the component Admin Panel. Such manipulation leads to improper access controls. This vulnerability is listed as CVE-2022-44212. The attack may be performed from remote. There is no available exploit. Weiterlesen

CVE-2022-44213 | ZKTeco ZKBio ECO ADMS up to 3.1-164 cross site scripting (EUVD-2022-47163)

Thu, 17 Sep 2026 05:41:33 +0200

A vulnerability was found in ZKTeco ZKBio ECO ADMS up to 3.1-164 and classified as problematic. This affects an unknown function. Executing a manipulation can lead to cross site scripting. This vulnerability is tracked as CVE-2022-44213. The attack can be launched remotely. No exploit exists. Weiterlesen

CVE-2022-44215 | Titan FTP Server up to 19.0 redirect (EUVD-2022-47165)

Thu, 17 Sep 2026 05:41:33 +0200

A vulnerability classified as problematic was found in Titan FTP Server up to 19.0. This issue affects some unknown processing. The manipulation results in open redirect. This vulnerability is identified as CVE-2022-44215. The attack can only be performed from the local network. There is not any exploit available. Weiterlesen

CVE-2022-44232 | libming 0.4.8 decompile.c getInt denial of service (EUVD-2022-47182)

Thu, 17 Sep 2026 05:41:33 +0200

A vulnerability was found in libming 0.4.8. It has been classified as problematic. The affected element is the function getInt of the file decompile.c. The manipulation leads to denial of service. This vulnerability is traded as CVE-2022-44232. Access to the local network is required for this attack to succeed. There is no exploit available. Weiterlesen

CVE-2022-44216 | Gnuboard 5.5.4/5.5.5 Change Password permission (EUVD-2022-47166)

Thu, 17 Sep 2026 05:41:33 +0200

A vulnerability was found in Gnuboard 5.5.4/5.5.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Change Password Handler. Such manipulation leads to permission issues. This vulnerability is referenced as CVE-2022-44216. The attack needs to be initiated within the local network. No exploit is... Weiterlesen

CVE-2022-44235 | Beijing Zed-3 VoIP Simpliclty ASG 8.5.0.17807 cross site scripting (EUVD-2022-47185)

Thu, 17 Sep 2026 05:41:33 +0200

A vulnerability was found in Beijing Zed-3 VoIP Simpliclty ASG 8.5.0.17807. It has been classified as problematic. Affected by this vulnerability is an unknown functionality. This manipulation causes cross site scripting. This vulnerability is handled as CVE-2022-44235. The attack can be initiated remotely. There is not any exploit available. Weiterlesen

CVE-2022-44236 | Beijing Zed-3 VoIP Simpliclty ASG 8.5.0.17807 weak password (EUVD-2022-47186)

Thu, 17 Sep 2026 05:41:33 +0200

A vulnerability classified as critical has been found in Beijing Zed-3 VoIP Simpliclty ASG 8.5.0.17807. Impacted is an unknown function. This manipulation causes weak password requirements. This vulnerability is registered as CVE-2022-44236. The attack requires access to the local network. No exploit is available. Weiterlesen

CVE-2022-44249 | TOTOLINK NR1800X 9.1.0u.6279_B20210910 UploadFirmwareFile FileName command injection (EUVD-2022-47198)

Thu, 17 Sep 2026 05:41:32 +0200

A vulnerability identified as critical has been detected in TOTOLINK NR1800X 9.1.0u.6279_B20210910. Affected is the function UploadFirmwareFile. This manipulation of the argument FileName causes command injection. The identification of this vulnerability is CVE-2022-44249. The attack needs to be done within the local network. There is no exploit... Weiterlesen

CVE-2022-44250 | TOTOLINK NR1800X 9.1.0u.6279_B20210910 setOpModeCfg Hostname command injection (EUVD-2022-47199)

Thu, 17 Sep 2026 05:41:32 +0200

A vulnerability labeled as critical has been found in TOTOLINK NR1800X 9.1.0u.6279_B20210910. Affected by this vulnerability is the function setOpModeCfg. Such manipulation of the argument Hostname leads to command injection. This vulnerability is referenced as CVE-2022-44250. The attack needs to be initiated within the local network. No exploit... Weiterlesen

CVE-2026-18701 | MongoDB up to 7.0.39/8.0.28/8.3.7 Query Subsystem denial of service

Thu, 17 Sep 2026 05:41:32 +0200

A vulnerability was found in MongoDB up to 7.0.39/8.0.28/8.3.7 and classified as problematic. Affected by this issue is some unknown functionality of the component Query Subsystem. Such manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2026-18701. The attack can be launched remotely. No exploit exists. It is... Weiterlesen

CVE-2026-18705 | MongoDB Server up to 7.0.39/8.0.28/8.3.7 Atlas Vector Search privileges management

Thu, 17 Sep 2026 05:41:32 +0200

A vulnerability has been found in MongoDB Server up to 7.0.39/8.0.28/8.3.7 and classified as problematic. The impacted element is an unknown function of the component Atlas Vector Search. Performing a manipulation results in improper privilege management. This vulnerability is identified as CVE-2026-18705. The attack can be initiated remotely.... Weiterlesen

CVE-2026-18704 | MongoDB up to 8.3.7 Aggregation Framework improper authorization

Thu, 17 Sep 2026 05:41:32 +0200

A vulnerability marked as problematic has been reported in MongoDB up to 8.3.7. Affected by this issue is some unknown functionality of the component Aggregation Framework. Performing a manipulation results in improper authorization. This vulnerability is known as CVE-2026-18704. Remote exploitation of the attack is possible. No exploit is... Weiterlesen

CVE-2026-18700 | MongoDB Server up to 7.0.39/8.0.28/8.3.7 Geospatial Validation use after free

Thu, 17 Sep 2026 05:41:32 +0200

A vulnerability labeled as problematic has been found in MongoDB Server up to 7.0.39/8.0.28/8.3.7. Affected by this vulnerability is an unknown functionality of the component Geospatial Validation. Such manipulation leads to use after free. This vulnerability is traded as CVE-2026-18700. The attack may be launched remotely. There is no exploit... Weiterlesen

CVE-2026-18698 | MongoDB Server up to 7.0.39/8.0.28/8.3.7 improper authorization

Thu, 17 Sep 2026 05:41:32 +0200

A vulnerability identified as very critical has been detected in MongoDB Server up to 7.0.39/8.0.28/8.3.7. Affected is an unknown function. This manipulation causes improper authorization. This vulnerability appears as CVE-2026-18698. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component. Weiterlesen

CVE-2026-18696 | MongoDB up to 7.0.39/8.0.28/8.3.7 Authorization Check applyOps improper authorization

Thu, 17 Sep 2026 05:41:31 +0200

A vulnerability was found in MongoDB up to 7.0.39/8.0.28/8.3.7. It has been rated as critical. This affects the function applyOps of the component Authorization Check. The manipulation leads to improper authorization. This vulnerability is documented as CVE-2026-18696. The attack can be initiated remotely. There is not any exploit available.... Weiterlesen

CVE-2026-18697 | MongoDB up to 7.0.39/8.0.28/8.3.7 Aggregation Framework denial of service

Thu, 17 Sep 2026 05:41:31 +0200

A vulnerability categorized as problematic has been discovered in MongoDB up to 7.0.39/8.0.28/8.3.7. This impacts an unknown function of the component Aggregation Framework. The manipulation results in denial of service. This vulnerability is reported as CVE-2026-18697. The attack can be launched remotely. No exploit exists. It is advisable to... Weiterlesen

CVE-2026-18699 | MongoDB up to 7.0.39/8.0.28/8.3.7 Query Planner denial of service

Thu, 17 Sep 2026 05:41:31 +0200

A vulnerability classified as problematic has been found in MongoDB up to 7.0.39/8.0.28/8.3.7. Affected by this vulnerability is an unknown functionality of the component Query Planner. Performing a manipulation results in denial of service. This vulnerability was named CVE-2026-18699. The attack may be initiated remotely. There is no available... Weiterlesen

CVE-2026-18702 | MongoDB Server up to 7.0.39/8.0.28/8.3.7 Diagnostic Logging improper authorization

Thu, 17 Sep 2026 05:41:31 +0200

A vulnerability classified as critical was found in MongoDB Server up to 7.0.39/8.0.28/8.3.7. Affected by this issue is some unknown functionality of the component Diagnostic Logging. Executing a manipulation can lead to improper authorization. The identification of this vulnerability is CVE-2026-18702. The attack may be launched remotely. There... Weiterlesen

CVE-2026-18703 | MongoDB Server up to 8.3.7 certificate validation

Thu, 17 Sep 2026 05:41:31 +0200

A vulnerability, which was classified as problematic, was found in MongoDB Server up to 8.3.7. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to improper certificate validation. This vulnerability is tracked as CVE-2026-18703. The attack can be launched remotely. No exploit exists. You should upgrade... Weiterlesen

Detecting and Containing CVE-2026-19490: A Defender's Checklist for NetScaler SAML Bypass

Thu, 17 Sep 2026 05:40:31 +0200

Detecting and Containing CVE-2026-19490: A Defender's Checklist for NetScaler SAML Bypass Most authentication bypasses announce themselves through failed logins. CVE-2026-19490 does the opposite. An attacker who exploits it produces a session the appliance considers valid, so the logs look clean and the alerting rules stay quiet. For teams running... Weiterlesen

Self-Hosting a Dockerized App on WSL2, Exposed with a Cloudflare Tunnel

Thu, 17 Sep 2026 05:40:31 +0200

TL;DR: A proof-of-concept to-do app — Node/Express and Postgres, running in Docker on WSL2 — reachable at a real domain through a named cloudflared tunnel. No login system, just a per-browser cookie hash. If you already have WSL2 and a Cloudflare-managed domain, expect this to take a few minutes, not hours. I wanted a small proof of concept: a... Weiterlesen

CVE-2026-92599 | hapijs joi up to 17.13.6/18.0.0-18.2.5 isoDate Joi.string.isoDate redos (EUVD-2026-81299)

Thu, 17 Sep 2026 03:40:52 +0200

A vulnerability was found in hapijs joi up to 17.13.6/18.0.0-18.2.5. It has been declared as problematic. This impacts the function Joi.string.isoDate of the component isoDate. The manipulation results in inefficient regular expression complexity. This vulnerability is reported as CVE-2026-92599. The attack can be launched remotely. No exploit... Weiterlesen

CVE-2026-92598 | Nodemailer up to 9.0.x Domain Resolver encoding error (EUVD-2026-81298)

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability labeled as critical has been found in Nodemailer up to 9.0.x. This affects an unknown part of the component Domain Resolver. Executing a manipulation can lead to encoding error. This vulnerability is handled as CVE-2026-92598. The attack can be executed remotely. There is not any exploit available. The affected component should be... Weiterlesen

CVE-2026-92595 | Nodemailer up to 9.1.0 Content Resolution MailMessage.resolveContent data/key/callback server-side request forgery (EUVD-2026-81295)

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability described as critical has been identified in Nodemailer up to 9.1.0. This issue affects the function MailMessage.resolveContent of the component Content Resolution. The manipulation of the argument data/key/callback results in server-side request forgery. This vulnerability was named CVE-2026-92595. The attack may be performed from... Weiterlesen

CVE-2026-92597 | Nodemailer up to 9.0.x Addressparser lib/addressparser input validation (EUVD-2026-81297)

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability was found in Nodemailer up to 9.0.x. It has been classified as critical. This affects an unknown function of the file lib/addressparser of the component Addressparser. The manipulation leads to improper input validation. This vulnerability is documented as CVE-2026-92597. The attack can be initiated remotely. There is not any... Weiterlesen

CVE-2026-92596 | Nodemailer up to 9.0.x Addressparser resource consumption (EUVD-2026-81296)

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability was found in Nodemailer up to 9.0.x and classified as problematic. The impacted element is an unknown function of the component Addressparser. Executing a manipulation can lead to resource consumption. This vulnerability is registered as CVE-2026-92596. It is possible to launch the attack remotely. No exploit is available. It is... Weiterlesen

CVE-2026-92594 | Craft CMS up to 5.10.x GraphQL Resolver Gql::canQueryUsers improper authorization (EUVD-2026-81294)

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability marked as problematic has been reported in Craft CMS up to 5.10.x. This vulnerability affects the function Gql::canQueryUsers of the component GraphQL Resolver. The manipulation leads to improper authorization. This vulnerability is uniquely identified as CVE-2026-92594. The attack is possible to be carried out remotely. No exploit... Weiterlesen

CVE-2026-92593 | craftcms Craft CMS up to 5.10.12 Redirect renderObjectTemplate returnUrl/redirect special elements in template engine (EUVD-2026-81293)

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability was found in craftcms Craft CMS up to 5.10.12. It has been rated as critical. This issue affects the function View::renderObjectTemplate of the component Redirect Handler. Performing a manipulation of the argument returnUrl/redirect results in improper neutralization of special elements used in a template engine. This vulnerability... Weiterlesen

CVE-2026-92592 | craftcms Craft CMS up to 4.18.5/5.10.12 Twig template system redirect (EUVD-2026-81292)

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability identified as problematic has been detected in craftcms Craft CMS up to 4.18.5/5.10.12. The affected element is the function system of the component Twig template. The manipulation of the argument redirect leads to open redirect. This vulnerability is uniquely identified as CVE-2026-92592. The attack is possible to be carried out... Weiterlesen

CVE-2026-69110 | Microck opencode-studio up to 2.4.3 missing authentication

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability categorized as critical has been discovered in Microck opencode-studio up to 2.4.3. Affected by this issue is some unknown functionality. The manipulation results in missing authentication. This vulnerability was named CVE-2026-69110. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade... Weiterlesen

CVE-2026-69100 | dromara lamp-cloud up to 5.6.2 GlueFactory os command injection

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability was found in dromara lamp-cloud up to 5.6.2. It has been declared as very critical. Affected is an unknown function of the component GlueFactory. Executing a manipulation can lead to os command injection. This vulnerability is handled as CVE-2026-69100. The attack can be executed remotely. There is not any exploit available. It is... Weiterlesen

CVE-2025-71399 | better-auth Better Auth up to 1.4.4 Router privileges management (EUVD-2025-210590)

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability classified as critical has been found in better-auth Better Auth up to 1.4.4. This affects an unknown function of the component Router. The manipulation leads to improper privilege management. This vulnerability is traded as CVE-2025-71399. It is possible to initiate the attack remotely. There is no exploit available. Weiterlesen

CVE-2026-67326 | gitpython-developers GitPython up to 3.1.49 Config Writer config_writer section injection (EUVD-2026-51814 / Nessus ID 331643)

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability, which was classified as critical, was found in gitpython-developers GitPython up to 3.1.49. The impacted element is the function config_writer of the component Config Writer. Executing a manipulation of the argument section can lead to injection. This vulnerability is tracked as CVE-2026-67326. The attack can be launched remotely.... Weiterlesen

CVE-2026-67309 | Traefik up to 3.7.7 RewriteTarget Middleware path traversal (EUVD-2026-51815)

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability identified as critical has been detected in Traefik up to 3.7.7. Affected by this vulnerability is an unknown functionality of the component RewriteTarget Middleware. Performing a manipulation results in path traversal. This vulnerability is known as CVE-2026-67309. Remote exploitation of the attack is possible. No exploit is... Weiterlesen

CVE-2026-20316 | Cisco Secure Firewall Management Center up to 10.0.1 Web Interface information disclosure (EUVD-2026-50404)

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability was found in Cisco Secure Firewall Management Center. It has been classified as problematic. Affected is an unknown function of the component Web Interface. Performing a manipulation results in information disclosure. This vulnerability is reported as CVE-2026-20316. The attack is possible to be carried out remotely. Moreover, an... Weiterlesen

CVE-2022-44188 | Netgear R7000P 1.3.0.8 /usr/sbin/httpd enable_band_steering buffer overflow (EUVD-2022-47138)

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability was found in Netgear R7000P 1.3.0.8. It has been rated as critical. Affected by this issue is some unknown functionality of the file /usr/sbin/httpd. The manipulation of the argument enable_band_steering leads to buffer overflow. This vulnerability is listed as CVE-2022-44188. The attack must be carried out from within the local... Weiterlesen

CVE-2022-44190 | Netgear R7000P 1.3.1.64 enable_band_steering buffer overflow (EUVD-2022-47140)

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability categorized as critical has been discovered in Netgear R7000P 1.3.1.64. This affects an unknown part. The manipulation of the argument enable_band_steering results in buffer overflow. This vulnerability is cataloged as CVE-2022-44190. The attack must originate from the local network. There is no exploit available. Weiterlesen

CVE-2022-44193 | Netgear R7000P 1.3.1.64 /usr/sbin/httpd starthour/startminute /endhour/endminute buffer overflow (EUVD-2022-47143)

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability labeled as critical has been found in Netgear R7000P 1.3.1.64. This issue affects some unknown processing of the file /usr/sbin/httpd. Such manipulation of the argument starthour/startminute /endhour/endminute leads to buffer overflow. This vulnerability is documented as CVE-2022-44193. The attack requires being on the local... Weiterlesen

CVE-2022-44191 | Netgear R7000P 1.3.1.64 KEY1/KEY2 buffer overflow (EUVD-2022-47141)

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability identified as critical has been detected in Netgear R7000P 1.3.1.64. This vulnerability affects unknown code. This manipulation of the argument KEY1/KEY2 causes buffer overflow. This vulnerability is registered as CVE-2022-44191. The attack requires access to the local network. No exploit is available. Weiterlesen

CVE-2026-68772 | ZenML up to 0.94.6 CloudpickleMaterializer cloudpickle_materializer.py cloudpickle.load deserialization

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability was found in ZenML up to 0.94.6. It has been rated as problematic. Impacted is the function cloudpickle.load of the file cloudpickle_materializer.py of the component CloudpickleMaterializer. Performing a manipulation results in deserialization. This vulnerability is identified as CVE-2026-68772. The attack can be initiated... Weiterlesen

CVE-2026-5855 | Contiki-NG LwM2M TLV parser lwm2m-tlv.c lwm2m_tlv_read length out-of-bounds

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability, which was classified as very critical, has been found in Contiki-NG. This impacts the function lwm2m_tlv_read of the file os/services/lwm2m/lwm2m-tlv.c of the component LwM2M TLV parser. Performing a manipulation of the argument length results in out-of-bounds read. This vulnerability is known as CVE-2026-5855. Remote exploitation... Weiterlesen

CVE-2026-5856 | Contiki-NG mDNS Resolver resolv.c skip_name out-of-bounds

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability was found in Contiki-NG. It has been classified as critical. This affects the function skip_name of the file os/services/resolv/resolv.c of the component mDNS Resolver. This manipulation causes out-of-bounds read. The identification of this vulnerability is CVE-2026-5856. It is possible to initiate the attack remotely. There is no... Weiterlesen

CVE-2026-53977 | Bohdan Triapitsyn OpenChamber up to 1.11.7 Route bootstrap-runtime.js improper authentication

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability was found in Bohdan Triapitsyn OpenChamber up to 1.11.7. It has been rated as critical. The affected element is an unknown function of the file bootstrap-runtime.js of the component Route Handler. The manipulation leads to improper authentication. This vulnerability is referenced as CVE-2026-53977. Remote exploitation of the attack... Weiterlesen

CVE-2026-53975 | Bohdan Triapitsyn OpenChamber up to 1.11.7 Command Execution /api/fs/exec spawn os command injection

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability, which was classified as critical, was found in Bohdan Triapitsyn OpenChamber up to 1.11.7. This vulnerability affects the function spawn of the file /api/fs/exec of the component Command Execution. The manipulation results in os command injection. This vulnerability was named CVE-2026-53975. The attack may be performed from... Weiterlesen

CVE-2026-53976 | Bohdan Triapitsyn OpenChamber up to 1.11.7 File Serving /api/fs/read resolveReadPathFromContext allowOutsideWorkspace path traversal

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability has been found in Bohdan Triapitsyn OpenChamber up to 1.11.7 and classified as critical. This issue affects the function resolveReadPathFromContext of the file /api/fs/read of the component File Serving. This manipulation of the argument allowOutsideWorkspace causes path traversal. The identification of this vulnerability is... Weiterlesen

CVE-2026-70617 | Spacebar Server Channels Recipient Endpoint authorization (dcfd910)

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability marked as critical has been reported in Spacebar Server. Affected by this vulnerability is an unknown functionality of the component Channels Recipient Endpoint. Performing a manipulation results in missing authorization. This vulnerability is reported as CVE-2026-70617. The attack is possible to be carried out remotely. No exploit... Weiterlesen

CVE-2026-70618 | Spacebar Server Roles Member-Ids Endpoint improper authorization

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability classified as problematic has been found in Spacebar Server. This affects an unknown part of the component Roles Member-Ids Endpoint. The manipulation leads to improper authorization. This vulnerability is traded as CVE-2026-70618. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to... Weiterlesen

CVE-2022-4995 | Weaver Network E-cology up to 10.51 uploaderOperate.jsp secId/plandetailid unrestricted upload

Thu, 17 Sep 2026 03:40:51 +0200

A vulnerability, which was classified as critical, has been found in Weaver Network E-cology up to 10.51. This issue affects some unknown processing of the file /workrelate/plan/util/uploaderOperate.jsp. The manipulation of the argument secId/plandetailid leads to unrestricted upload. This vulnerability is uniquely identified as CVE-2022-4995. The... Weiterlesen

A stored-XSS report we couldn't quite reproduce, and hardened anyway

Thu, 17 Sep 2026 03:39:51 +0200

A researcher named Dhruv emailed us to report a stored XSS path: someone attaches a PDF with embedded JavaScript to a support ticket in our helpdesk product, and when a support agent opens it, the script runs "in the context of the application." What we found when we checked The download route has forced Content-Disposition: attachment and... Weiterlesen

CVE-2020-20212 | MikroTik RouterOS 6.44.5 /nova/bin/console null pointer dereference

Thu, 17 Sep 2026 02:44:10 +0200

A vulnerability described as problematic has been identified in MikroTik RouterOS 6.44.5. The impacted element is an unknown function of the file /nova/bin/console. Such manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2020-20212. The attack may be launched remotely. There is no exploit available. Weiterlesen

CVE-2020-20211 | MikroTik RouterOS 6.44.5 /nova/bin/console denial of service

Thu, 17 Sep 2026 02:44:10 +0200

A vulnerability marked as problematic has been reported in MikroTik RouterOS 6.44.5. The affected element is an unknown function of the file /nova/bin/console. This manipulation causes denial of service. This vulnerability appears as CVE-2020-20211. The attack may be initiated remotely. There is no available exploit. Weiterlesen

CVE-2017-17537 | MikroTik RouterBOARD 6.39.2/6.40.5 TCP Service 53 input validation (EDB-43200 / ID 860320)

Thu, 17 Sep 2026 02:44:10 +0200

A vulnerability was found in MikroTik RouterBOARD 6.39.2/6.40.5. It has been rated as problematic. This vulnerability affects unknown code of the component TCP Service 53. The manipulation leads to improper input validation. This vulnerability is listed as CVE-2017-17537. The attack may be initiated remotely. In addition, an exploit is available.... Weiterlesen

CVE-2017-6297 | MikroTik RouterOS 6.37.4/6.83.3 L2TP Client IPsec 7pk security (BID-96447 / ID 103115)

Thu, 17 Sep 2026 02:44:10 +0200

A vulnerability categorized as critical has been discovered in MikroTik RouterOS 6.37.4/6.83.3. This affects an unknown part of the component L2TP Client. The manipulation results in 7pk security features (IPsec). This vulnerability was named CVE-2017-6297. The attack may be performed from remote. There is no available exploit. Adding more... Weiterlesen

CVE-2023-27169 | Xpand IT Write-Back Manager 2.3.1 hash predictable salt (EUVD-2023-30949)

Thu, 17 Sep 2026 02:44:10 +0200

A vulnerability marked as problematic has been reported in Xpand IT Write-Back Manager 2.3.1. This impacts an unknown function. Performing a manipulation results in use of a one-way hash with a predictable salt. This vulnerability was named CVE-2023-27169. The attack needs to be approached within the local network. There is no available exploit. Weiterlesen

CVE-2023-27170 | Xpand IT Write-Back Manager 2.3.1 siteName path traversal (EUVD-2023-30950)

Thu, 17 Sep 2026 02:44:10 +0200

A vulnerability has been found in Xpand IT Write-Back Manager 2.3.1 and classified as critical. This issue affects some unknown processing. Performing a manipulation of the argument siteName results in path traversal. This vulnerability is reported as CVE-2023-27170. The attacker must have access to the local network to execute the attack. No... Weiterlesen

CVE-2024-33668 | Zammad up to 6.2.x Upload Cache excessive authentication

Thu, 17 Sep 2026 02:44:10 +0200

A vulnerability classified as problematic was found in Zammad up to 6.2.x. This affects an unknown part of the component Upload Cache. Executing a manipulation can lead to improper restriction of excessive authentication attempts. This vulnerability is handled as CVE-2024-33668. The attack can be executed remotely. There is not any exploit... Weiterlesen

CVE-2026-19655 | Arista EOS up to 4.33.9M/4.34.7.1M/4.35.5M DHCP Relay Service input validation (WID-SEC-2026-3287)

Thu, 17 Sep 2026 02:44:10 +0200

A vulnerability marked as critical has been reported in Arista EOS up to 4.33.9M/4.34.7.1M/4.35.5M. Affected by this issue is some unknown functionality of the component DHCP Relay Service. This manipulation causes improper input validation. The identification of this vulnerability is CVE-2026-19655. It is possible to initiate the attack remotely.... Weiterlesen

CVE-2026-73437 | Arista EOS up to 4.33.9M/4.34.7.1M/4.35.5M/4.36.1F DHCP denial of service (WID-SEC-2026-3287)

Thu, 17 Sep 2026 02:44:10 +0200

A vulnerability labeled as very critical has been found in Arista EOS up to 4.33.9M/4.34.7.1M/4.35.5M/4.36.1F. This issue affects some unknown processing of the component DHCP Handler. Executing a manipulation can lead to denial of service. This vulnerability appears as CVE-2026-73437. The attack may be performed from remote. There is no available... Weiterlesen

CVE-2026-73440 | Arista EOS up to 4.36.1F SNMP improper authorization (WID-SEC-2026-3287)

Thu, 17 Sep 2026 02:44:10 +0200

A vulnerability was found in Arista EOS up to 4.32.x/4.33.9M/4.34.7.1M/4.35.5M/4.36.1F. It has been declared as critical. This affects an unknown function of the component SNMP. The manipulation results in improper authorization. This vulnerability is known as CVE-2026-73440. It is possible to launch the attack remotely. No exploit is available.... Weiterlesen

CVE-2026-73443 | Arista EOS up to 4.33.9M/4.34.7M/4.35.5M/4.36.1F VRRP authentication replay (WID-SEC-2026-3287)

Thu, 17 Sep 2026 02:44:10 +0200

A vulnerability, which was classified as critical, has been found in Arista EOS up to 4.33.9M/4.34.7M/4.35.5M/4.36.1F. This impacts an unknown function of the component VRRP. The manipulation leads to authentication bypass by capture-replay. This vulnerability is referenced as CVE-2026-73443. Remote exploitation of the attack is possible. No... Weiterlesen

CVE-2026-73442 | Arista EOS up to 4.33.9M/4.34.7M/4.35.5M/4.36.1F VRRP missing encryption (WID-SEC-2026-3287)

Thu, 17 Sep 2026 02:44:10 +0200

A vulnerability classified as problematic was found in Arista EOS up to 4.33.9M/4.34.7M/4.35.5M/4.36.1F. This affects an unknown function of the component VRRP. Executing a manipulation can lead to missing encryption of sensitive data. The identification of this vulnerability is CVE-2026-73442. The attack may be launched remotely. There is no... Weiterlesen

CVE-2026-73447 | Arista EOS up to 4.36.0.1F Certz service/Bootz service os command injection (WID-SEC-2026-3287)

Thu, 17 Sep 2026 02:44:10 +0200

A vulnerability was found in Arista EOS up to 4.36.0.1F and classified as very critical. The impacted element is an unknown function of the component Certz service/Bootz service. Such manipulation leads to os command injection. This vulnerability is referenced as CVE-2026-73447. It is possible to launch the attack remotely. No exploit is... Weiterlesen

CVE-2026-73446 | Arista EOS up to 4.36.1F Broadcast Interface resource consumption (WID-SEC-2026-3287)

Thu, 17 Sep 2026 02:44:10 +0200

A vulnerability classified as critical has been found in Arista EOS up to 4.36.1F. The impacted element is an unknown function of the component Broadcast Interface. Performing a manipulation results in resource consumption. This vulnerability is cataloged as CVE-2026-73446. It is possible to initiate the attack remotely. There is no exploit... Weiterlesen

CVE-2026-73444 | Arista EOS up to 4.33.9M/4.34.7M/4.35.5M/4.36.1F VRRP improper authentication (WID-SEC-2026-3287)

Thu, 17 Sep 2026 02:44:10 +0200

A vulnerability marked as very critical has been reported in Arista EOS up to 4.33.9M/4.34.7M/4.35.5M/4.36.1F. Impacted is an unknown function of the component VRRP. The manipulation leads to improper authentication. This vulnerability is traded as CVE-2026-73444. It is possible to initiate the attack remotely. There is no exploit available. Weiterlesen

GitHub Release: can1357/oh-my-pi v18.2.3 (17.09.2026)

Thu, 17 Sep 2026 02:35:24 +0200

can1357/oh-my-piv18.2.317.09.2026@can1357

chore: bump version to 18.2.3

ZDI-26-713: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Thu, 17 Sep 2026 02:16:03 +0200

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-92183. Weiterlesen

ZDI-26-712: NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability

Thu, 17 Sep 2026 02:16:03 +0200

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-92210. Weiterlesen

ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability

Thu, 17 Sep 2026 02:16:03 +0200

This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-92209. Weiterlesen

ZDI-26-710: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability

Thu, 17 Sep 2026 02:16:03 +0200

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-92208. Weiterlesen

ZDI-26-709: Cisco Secure Firewall Management Center CommandSinkRmi Deserialization of Untrusted Data Remote Code Execution Vulnerability

Thu, 17 Sep 2026 02:16:02 +0200

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Secure Firewall Management Center. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-20242. Weiterlesen

CVE-2026-61599 | djust-org djust up to 1.0.6 Live Transport import view input validation (EUVD-2026-81307)

Thu, 17 Sep 2026 02:15:51 +0200

A vulnerability classified as critical was found in djust-org djust up to 1.0.6. This vulnerability affects the function __import__ of the component Live Transport. The manipulation of the argument view results in improper input validation. This vulnerability is identified as CVE-2026-61599. The attack can be executed remotely. There is not any... Weiterlesen

CVE-2026-61588 | djust-org djust up to 1.0.6 information disclosure (EUVD-2026-81304)

Thu, 17 Sep 2026 02:15:51 +0200

A vulnerability categorized as problematic has been discovered in djust-org djust up to 1.0.6. Affected by this vulnerability is an unknown functionality. Such manipulation leads to information disclosure. This vulnerability is traded as CVE-2026-61588. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade... Weiterlesen

CVE-2026-61589 | djust-org djust up to 1.0.6 Tenant Resolution ViewRuntime._build_request information disclosure (EUVD-2026-81306)

Thu, 17 Sep 2026 02:15:51 +0200

A vulnerability, which was classified as problematic, was found in djust-org djust up to 1.0.6. Impacted is the function ViewRuntime._build_request of the component Tenant Resolution. Such manipulation leads to information disclosure. This vulnerability is listed as CVE-2026-61589. The attack may be performed from remote. There is no available... Weiterlesen

CVE-2026-61596 | djust-org djust up to 1.0.6 Render Entry Points get_object/has_object_permission authorization (EUVD-2026-81305)

Thu, 17 Sep 2026 02:15:51 +0200

A vulnerability, which was classified as critical, has been found in djust-org djust up to 1.0.6. This issue affects the function get_object/has_object_permission of the component Render Entry Points. This manipulation causes authorization bypass. This vulnerability is tracked as CVE-2026-61596. The attack is possible to be carried out remotely.... Weiterlesen

CVE-2026-85880 | Microsoft Windows up to Server 2022 ALPC heap-based overflow (EUVD-2026-73365)

Thu, 17 Sep 2026 02:15:51 +0200

A vulnerability was found in Microsoft Windows up to Server 2022. It has been declared as very critical. The impacted element is an unknown function of the component ALPC. Such manipulation leads to heap-based buffer overflow. This vulnerability is referenced as CVE-2026-85880. The attack can only be performed from a local environment.... Weiterlesen

CVE-2022-44183 | Tenda AC18 15.03.05.19 formSetWifiGuestBasic buffer overflow (EUVD-2022-47133)

Thu, 17 Sep 2026 02:15:51 +0200

A vulnerability described as critical has been identified in Tenda AC18 15.03.05.19. Affected is the function formSetWifiGuestBasic. Executing a manipulation can lead to buffer overflow. The identification of this vulnerability is CVE-2022-44183. The attack needs to be done within the local network. There is no exploit available. Weiterlesen

CVE-2022-44184 | Netgear R7000P 1.3.0.8 /usr/sbin/httpd wan_dns1_sec buffer overflow (EUVD-2022-47134)

Thu, 17 Sep 2026 02:15:51 +0200

A vulnerability has been found in Netgear R7000P 1.3.0.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/httpd. Performing a manipulation of the argument wan_dns1_sec results in buffer overflow. This vulnerability was named CVE-2022-44184. The attack needs to be approached within the... Weiterlesen

CVE-2022-44187 | Netgear R7000P 1.3.0.8 wan_dns1_pri buffer overflow (EUVD-2022-47137)

Thu, 17 Sep 2026 02:15:51 +0200

A vulnerability was found in Netgear R7000P 1.3.0.8. It has been declared as critical. Affected by this vulnerability is the function wan_dns1_pri. Executing a manipulation can lead to buffer overflow. This vulnerability is tracked as CVE-2022-44187. The attack is only possible within the local network. No exploit exists. Weiterlesen

CVE-2022-44186 | Netgear R7000P 1.3.1.64 /usr/sbin/httpd wan_dns1_pri buffer overflow (EUVD-2022-47136)

Thu, 17 Sep 2026 02:15:51 +0200

A vulnerability was found in Netgear R7000P 1.3.1.64. It has been classified as critical. Affected is an unknown function of the file /usr/sbin/httpd. Performing a manipulation of the argument wan_dns1_pri results in buffer overflow. This vulnerability is identified as CVE-2022-44186. The attack can only be performed from the local network. There... Weiterlesen

DSA-6502-1 mkvtoolnix - security update

Thu, 17 Sep 2026 02:04:18 +0200

A buffer overflow was found in the ODML parser of MKVToolNix, a set of command-line tools (and GUI) to work with Matroska files, which could potentially result in the execution of arbitrary code when processing malformed .mkv files. https://security-tracker.debian.org/tracker/DSA-6502-1 Weiterlesen

DSA-6501-1 firefox-esr - security update

Thu, 17 Sep 2026 02:04:18 +0200

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or privilege escalation. https://security-tracker.debian.org/tracker/DSA-6501-1 Weiterlesen

CVE-2026-16794 | GitLab up to 19.1.7/19.2.5/19.3.1 Compliance Framework Management improper authorization (WID-SEC-2026-3315)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability was found in GitLab up to 19.1.7/19.2.5/19.3.1. It has been declared as problematic. This impacts an unknown function of the component Compliance Framework Management. Executing a manipulation can lead to improper authorization. This vulnerability is tracked as CVE-2026-16794. The attack can be launched remotely. No exploit exists.... Weiterlesen

CVE-2026-19619 | GitLab up to 19.1.7/19.2.5/19.3.1 Content Editor cross site scripting (WID-SEC-2026-3315)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability was found in GitLab up to 19.1.7/19.2.5/19.3.1. It has been rated as problematic. Affected is an unknown function of the component Content Editor. The manipulation leads to cross site scripting. This vulnerability is listed as CVE-2026-19619. The attack may be initiated remotely. There is no available exploit. Upgrading the... Weiterlesen

CVE-2026-3855 | GitLab up to 19.1.7/19.2.5/19.3.1 Terraform State Upload privileges management (WID-SEC-2026-3315)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability categorized as critical has been discovered in GitLab up to 19.1.7/19.2.5/19.3.1. Affected by this vulnerability is an unknown functionality of the component Terraform State Upload. The manipulation results in improper privilege management. This vulnerability is cataloged as CVE-2026-3855. The attack may be launched remotely. There... Weiterlesen

CVE-2026-79708 | GitLab up to 19.1.7/19.2.5/19.3.1 CI/CD Variables improper authorization (WID-SEC-2026-3315)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability described as problematic has been identified in GitLab up to 19.1.7/19.2.5/19.3.1. This issue affects some unknown processing of the component CI/CD Variables. Executing a manipulation can lead to improper authorization. This vulnerability appears as CVE-2026-79708. The attack may be performed from remote. There is no available... Weiterlesen

CVE-2026-7514 | GitLab up to 19.1.7/19.2.5/19.3.1 Generic Package Registry improper authorization (WID-SEC-2026-3315)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability labeled as critical has been found in GitLab up to 19.1.7/19.2.5/19.3.1. This affects an unknown part of the component Generic Package Registry. Such manipulation leads to improper authorization. This vulnerability is documented as CVE-2026-7514. The attack can be executed remotely. There is not any exploit available. The affected... Weiterlesen

CVE-2026-78252 | GitLab up to 19.1.7/19.2.5/19.3.1 Markdown JSON Table Renderer cross-site request forgery (WID-SEC-2026-3315)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability identified as problematic has been detected in GitLab up to 19.1.7/19.2.5/19.3.1. Affected by this issue is some unknown functionality of the component Markdown JSON Table Renderer. This manipulation causes cross-site request forgery. This vulnerability is registered as CVE-2026-78252. Remote exploitation of the attack is possible.... Weiterlesen

CVE-2026-8030 | GitLab up to 19.1.7/19.2.5/19.3.1 Namespace Transfer input validation (WID-SEC-2026-3315)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability marked as problematic has been reported in GitLab up to 19.1.7/19.2.5/19.3.1. This vulnerability affects unknown code of the component Namespace Transfer. Performing a manipulation results in improper input validation. This vulnerability is reported as CVE-2026-8030. The attack is possible to be carried out remotely. No exploit... Weiterlesen

CVE-2026-82837 | GitLab up to 19.1.7/19.2.5/19.3.1 improper authorization (WID-SEC-2026-3315)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability classified as problematic was found in GitLab up to 19.1.7/19.2.5/19.3.1. This vulnerability affects unknown code. The manipulation results in improper authorization. This vulnerability was named CVE-2026-82837. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised. Weiterlesen

CVE-2026-86341 | GitLab up to 19.1.7/19.2.5/19.3.1 access control (WID-SEC-2026-3315)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability classified as problematic was found in GitLab up to 19.1.7/19.2.5/19.3.1. Affected by this issue is some unknown functionality. Executing a manipulation can lead to improper access controls. This vulnerability appears as CVE-2026-86341. The attack may be performed from remote. There is no available exploit. Upgrading the affected... Weiterlesen

CVE-2026-88765 | GitLab up to 19.1.7/19.2.5/19.3.1 Advanced Search buffer overflow (WID-SEC-2026-3315)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability has been found in GitLab up to 19.1.7/19.2.5/19.3.1 and classified as critical. Affected by this issue is some unknown functionality of the component Advanced Search. This manipulation causes buffer overflow. The identification of this vulnerability is CVE-2026-88765. It is possible to initiate the attack remotely. There is no... Weiterlesen

CVE-2026-87719 | GitLab EE up to 19.1.7/19.2.5/19.3.1 GraphQL Subscription subscription information disclosure (WID-SEC-2026-3315)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability categorized as problematic has been discovered in GitLab EE up to 19.1.7/19.2.5/19.3.1. This affects an unknown function of the component GraphQL Subscription. The manipulation of the argument subscription results in information disclosure. This vulnerability is identified as CVE-2026-87719. The attack can be executed remotely.... Weiterlesen

CVE-2026-76438 | Cisco BroadWorks Web-based Management Interface improper authorization (EUVD-2026-81161)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability classified as problematic has been found in Cisco BroadWorks. This affects an unknown part of the component Web-based Management Interface. The manipulation leads to improper authorization. This vulnerability is referenced as CVE-2026-76438. Remote exploitation of the attack is possible. No exploit is available. It is recommended... Weiterlesen

CVE-2026-92809 | PrestaShop psgdpr up to 1.4.3 privileges management (EUVD-2026-81067)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability, which was classified as problematic, has been found in PrestaShop psgdpr up to 1.4.3. Impacted is an unknown function. The manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-92809. It is possible to initiate the attack remotely. There is no exploit available. Weiterlesen

CVE-2026-92806 | phpList up to 3.6.16 Mass Subscriber Removal Form cross-site request forgery (EUVD-2026-81066)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability categorized as problematic has been discovered in phpList up to 3.6.16. This impacts an unknown function of the component Mass Subscriber Removal Form Handler. Executing a manipulation can lead to cross-site request forgery. This vulnerability is tracked as CVE-2026-92806. The attack can be launched remotely. No exploit exists. It... Weiterlesen

CVE-2026-92805 | UVdesk Community Skeleton up to 1.1.8 Installation Wizard improper authentication (EUVD-2026-81065)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability has been found in UVdesk Community Skeleton up to 1.1.8 and classified as critical. The impacted element is an unknown function of the component Installation Wizard. This manipulation causes improper authentication. This vulnerability is handled as CVE-2026-92805. The attack can be initiated remotely. There is not any exploit... Weiterlesen

CVE-2026-92804 | NangoHQ Nango up to 0.70.4 input validation (EUVD-2026-81064)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability labeled as critical has been found in NangoHQ Nango up to 0.70.4. This vulnerability affects unknown code. Such manipulation leads to improper input validation. This vulnerability is listed as CVE-2026-92804. The attack may be performed from remote. There is no available exploit. Weiterlesen

CVE-2026-92803 | LibreTranslate up to 1.9.6 improper authorization (EUVD-2026-81063)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability classified as problematic was found in LibreTranslate up to 1.9.6. This issue affects some unknown processing. Executing a manipulation can lead to improper authorization. This vulnerability appears as CVE-2026-92803. The attack may be performed from remote. There is no available exploit. Weiterlesen

CVE-2026-92802 | kanbn kan up to 0.6.0 GitHub Project Import Endpoint improper authorization (EUVD-2026-81062)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability identified as problematic has been detected in kanbn kan up to 0.6.0. This affects an unknown part of the component GitHub Project Import Endpoint. This manipulation causes improper authorization. This vulnerability is tracked as CVE-2026-92802. The attack is possible to be carried out remotely. No exploit exists. Weiterlesen

CVE-2026-65388 | Apple containerization up to 0.40.x information disclosure (EUVD-2026-81274)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability classified as problematic has been found in Apple containerization up to 0.40.x. Impacted is an unknown function. This manipulation causes information disclosure. The identification of this vulnerability is CVE-2026-65388. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade... Weiterlesen

CVE-2026-61709 | OpenFGA up to 1.18.0 ListUsers API list_users_rpc.go expandIntersection improper authorization (EUVD-2026-80777)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability categorized as problematic has been discovered in OpenFGA up to 1.18.0. This affects the function expandIntersection of the file pkg/server/commands/listusers/list_users_rpc.go of the component ListUsers API. Executing a manipulation can lead to improper authorization. This vulnerability is tracked as CVE-2026-61709. The attack can... Weiterlesen

CVE-2026-58657 | Grav up to 2.0.0-rc.9 Media Action processMediaActions resize injection (EUVD-2026-42267)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability labeled as problematic has been found in Grav up to 2.0.0-rc.9. This affects the function Excerpts::processMediaActions of the component Media Action Handler. The manipulation of the argument resize results in injection. This vulnerability is known as CVE-2026-58657. It is possible to launch the attack remotely. No exploit is... Weiterlesen

CVE-2026-63671 | nuxt-content mdc up to 0.22.0 Sanitizer parseMarkdown allowDangerousHtml cross site scripting (EUVD-2026-80789)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability, which was classified as problematic, has been found in nuxt-content mdc up to 0.22.0. The impacted element is the function parseMarkdown of the component Sanitizer. This manipulation of the argument allowDangerousHtml causes cross site scripting. This vulnerability appears as CVE-2026-63671. The attack may be initiated remotely.... Weiterlesen

CVE-2026-63128 | modelcontextprotocol rust-sdk up to 1.x Streamable HTTP Server tower.rs handle_post initialization (EUVD-2026-80823)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability was found in modelcontextprotocol rust-sdk up to 1.x. It has been declared as problematic. This issue affects the function StreamableHttpService::handle_post of the file crates/rmcp/src/transport/streamable_http_server/tower.rs of the component Streamable HTTP Server. Such manipulation leads to improper initialization. This... Weiterlesen

CVE-2026-63127 | Model Context Protocol RMCP SDK up to 1.x OAuth Implementation auth.rs discover_oauth_server_via_resource_metadata improper authorization (EUVD-2026-80824)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability classified as problematic was found in Model Context Protocol RMCP SDK up to 1.x. This impacts the function discover_oauth_server_via_resource_metadata of the file crates/rmcp/src/transport/auth.rs of the component OAuth Implementation. Such manipulation leads to improper authorization. This vulnerability is documented as... Weiterlesen

CVE-2026-57173 | vllm-project vLLM up to 0.23.x Audio Decoder /v1/chat/completions AudioMediaIO.load_bytes resource consumption (EUVD-2026-80880)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability, which was classified as problematic, has been found in vllm-project vLLM up to 0.23.x. This affects the function AudioMediaIO.load_bytes of the file /v1/chat/completions of the component Audio Decoder. Performing a manipulation results in resource consumption. This vulnerability is cataloged as CVE-2026-57173. It is possible to... Weiterlesen

CVE-2026-59193 | getgrav Grav up to 1.x ZIP Archive extractTo denial of service (EUVD-2026-42951)

Thu, 17 Sep 2026 01:43:28 +0200

A vulnerability identified as problematic has been detected in getgrav Grav up to 1.x. This affects the function extractTo of the component ZIP Archive Handler. The manipulation leads to denial of service. This vulnerability is documented as CVE-2026-59193. The attack can be initiated remotely. There is not any exploit available. You should... Weiterlesen

CVE-2026-87931 | Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707 Apple Notification Center Service Event buffer overflow

Thu, 17 Sep 2026 00:14:39 +0200

A vulnerability classified as very critical has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unknown function of the component Apple Notification Center Service Event Handler. The manipulation leads to buffer overflow. This vulnerability is listed as CVE-2026-87931. The attack... Weiterlesen

CVE-2026-92815 | dgtlmoon changedetection.io up to 0.60.6 Browser Steps optional_value server-side request forgery (EUVD-2026-81073)

Thu, 17 Sep 2026 00:14:39 +0200

A vulnerability was found in dgtlmoon changedetection.io up to 0.60.6. It has been rated as problematic. The affected element is an unknown function of the component Browser Steps. Performing a manipulation of the argument optional_value results in server-side request forgery. This vulnerability was named CVE-2026-92815. The attack may be... Weiterlesen

CVE-2026-92816 | Comfy-Org ComfyUI up to 0.29.x Dataset Save Nodes folder_name path traversal (EUVD-2026-81074)

Thu, 17 Sep 2026 00:14:39 +0200

A vulnerability was found in Comfy-Org ComfyUI up to 0.29.x and classified as critical. This vulnerability affects unknown code of the component Dataset Save Nodes. The manipulation of the argument folder_name results in path traversal. This vulnerability is known as CVE-2026-92816. It is possible to launch the attack remotely. No exploit is... Weiterlesen

CVE-2026-92812 | Decap Server Local Proxy Containment Guard path traversal (EUVD-2026-81070)

Thu, 17 Sep 2026 00:14:39 +0200

A vulnerability categorized as critical has been discovered in Decap Server. The impacted element is an unknown function of the component Local Proxy Containment Guard. Executing a manipulation can lead to path traversal. The identification of this vulnerability is CVE-2026-92812. The attack may be launched remotely. There is no exploit available.... Weiterlesen

CVE-2026-92813 | Metabase up to 0.63.18 GeoJSON server-side request forgery (EUVD-2026-81071)

Thu, 17 Sep 2026 00:14:39 +0200

A vulnerability was found in Metabase up to 0.63.18. It has been classified as problematic. This issue affects some unknown processing of the component GeoJSON Handler. This manipulation causes server-side request forgery. This vulnerability is handled as CVE-2026-92813. The attack can be initiated remotely. There is not any exploit available. Weiterlesen

CVE-2026-92814 | dgtlmoon changedetection.io up to 0.60.6 HTML Notifications watch_title HTML injection (EUVD-2026-81072)

Thu, 17 Sep 2026 00:14:39 +0200

A vulnerability was found in dgtlmoon changedetection.io up to 0.60.6. It has been declared as problematic. Impacted is an unknown function of the component HTML Notifications. Such manipulation of the argument watch_title leads to HTML injection. This vulnerability is uniquely identified as CVE-2026-92814. The attack can be launched remotely. No... Weiterlesen

CVE-2026-92811 | Browserless up to 2.56.7 Playwright Websocket Endpoint ALLOW_FILE_PROTOCOL information disclosure (EUVD-2026-81069)

Thu, 17 Sep 2026 00:14:39 +0200

A vulnerability, which was classified as problematic, was found in Browserless up to 2.56.7. Affected by this issue is some unknown functionality of the component Playwright Websocket Endpoint. Executing a manipulation of the argument ALLOW_FILE_PROTOCOL can lead to information disclosure. This vulnerability appears as CVE-2026-92811. The attack... Weiterlesen

CVE-2026-92810 | PrestaShop blockwishlist up to 3.0.2 getUrlByIdWishListAction privileges management (EUVD-2026-81068)

Thu, 17 Sep 2026 00:14:39 +0200

A vulnerability marked as problematic has been reported in PrestaShop blockwishlist up to 3.0.2. This issue affects the function getUrlByIdWishListAction. Performing a manipulation results in improper privilege management. This vulnerability is cataloged as CVE-2026-92810. It is possible to initiate the attack remotely. There is no exploit... Weiterlesen

CVE-2026-16723: Pre-Auth RCE in Fastjson 1.x via the @JSONType Trust Branch

Thu, 17 Sep 2026 00:13:41 +0200

Overview CVE ID CVE-2026-16723 Affected Fastjson 1.2.68 – 1.2.83 (every 1.x release still receiving use) Preconditions Spring Boot executable fat-JAR, safeMode disabled (default), AutoType disabled (default) Auth required None (pre-authentication) CVSS 9.0 (9.8 under some scoring authorities) Patch None — Alibaba has declared Fastjson 1.x EOL and... Weiterlesen

USN-8774-1: libheif vulnerabilities

Thu, 17 Sep 2026 00:04:24 +0200

Ali Firas discovered that libheif incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-62291) Dmitrijs Trizna discovered that libheif incorrectly handled certain image sequences. An attacker could possibly use this issue to cause a denial of service.... Weiterlesen

USN-8776-1: python-cryptography vulnerabilities

Thu, 17 Sep 2026 00:04:24 +0200

It was discovered that python-cryptography incorrectly accepted objects with immutable buffers when performing certain cipher operations. This would result in corrupted output, contrary to expectations. This issue only affected Ubuntu 18.04 LTS. (CVE-2023-23931) It was discovered that python-cryptography reported the outcome of decrypting PKCS#7... Weiterlesen

CVE-2026-56942 | Google Android VP9 Hardware Decoder vp9hwd_headers.cc ReadTileInfo out-of-bounds write (CNNVD-2026-99553478)

Wed, 16 Sep 2026 23:46:35 +0200

A vulnerability classified as very critical has been found in Google Android. The affected element is the function ReadTileInfo of the file vp9hwd_headers.cc of the component VP9 Hardware Decoder. Performing a manipulation results in out-of-bounds write. This vulnerability is reported as CVE-2026-56942. The attack is possible to be carried out... Weiterlesen

CVE-2026-91819 | CIRCL MISP up to 2.5.45 Security _validatePost/_validateCsrf _method cross-site request forgery (CNNVD-2026-99528959)

Wed, 16 Sep 2026 23:46:35 +0200

A vulnerability, which was classified as problematic, has been found in CIRCL MISP up to 2.5.45. The affected element is the function _validatePost/_validateCsrf of the component Security Component. The manipulation of the argument _method leads to cross-site request forgery. This vulnerability is traded as CVE-2026-91819. It is possible to... Weiterlesen

CVE-2026-73458 | Arista EOS up to 4.33.8M/4.34.7M/4.35.5M/4.36.1F Bidirectional Forwarding Detection resource consumption (CNNVD-2026-99454354)