PoC-in-GitHub - 📡 PoC auto collect from GitHub. ⚠️ Be careful Malw

C (2026-02-14)

<code>The midi-Synth plugin for WordPress is to arbitrary file uploads due to missing file type and file extension in the 'export' AJAX action in all up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's ser may make remote code execution possible granted the attacker can obtain a valid nonce. The nonce is exposed in frontend Ja making it tri accessible to unauthenticated attackers.
</code>

C (2026-02-03)

C (2026-02-06)

<code>Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML. There is no security impact on Neo4j products, but this ad is released as a precaution to treat the logs as plain text if using prior to 2026.01.\n\nProof of concept exploit: 
</code>

C (2026-02-11)

<code>The Migration, Backup, Staging – WPvi &amp; Migration plugin for WordPress is to Unauthenticated Arbitrary File Upload in up to and including 0.9.123. This is due to improper error handling in the RSA decryption process combined with a lack of path sanitization when writing uploaded files. When the plugin fails to decrypt a session key using openssl_pri(), it does not terminate execution and instead passes the boolean false value to the phpseclib library's AES cipher initialization. The library treats this false value as a string of null bytes, allowing an attacker to encrypt a malicious payload using a predictable null-byte key. Additionally, the plugin accepts filenames from the decrypted payload without sanitization, enabling directory tra to escape the protected backup directory. This makes it possible for unauthenticated attackers to upload arbitrary PHP files to publicly accessible directories and achie Code Execution via the wp=send_to_site parameter.
</code>

C (2026-02-03)

C (2026-02-27)

<code>Omega-PSIR is to Reflected XSS via the lang parameter. An attacker can craft a malicious URL that, when opened, causes arbitrary Ja to execute in the ’s browser.\n\nThis issue was fixed in 4.6.7.
</code>

C (2026-01-29)

<code>An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution. Authenticated attackers may trigger buffer o and potentially execute arbitrary code with elevated pri.
</code>

C (2026-02-24)

<code>A post-authentication command injection in the TR-369 certificate download CGI program of the Zyxel  firmware through 5.50(ABPM.9.7)C0 could allow an authenticated attacker with administrator pri to execute operating system (OS) commands on an affected device.
</code>

C (2026-03-03)

<code>The User Registration &amp; Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction &amp; Membership Plugin plugin for WordPress is to improper pri management in all up to, and including, 5.1.2. This is due to the plugin accepting a user-supplied role during membership registration without properly enforcing a ser allowlist. This makes it possible for unauthenticated attackers to create administrator accounts by supplying a role value during membership registration.
</code>

C (2026-02-09)

<code>A flaw was found in Keycloak. An attacker can exploit this by modifying the organization ID and target email within a legitimate in token's JSON Web Token (JWT) payload. This lack of cryptographic signature allows the attacker to successfully self-register into an unauthorized organization, leading to unauthorized access.
</code>

C (2026-04-15)

<code>The WebStack theme for WordPress is to arbitrary file uploads due to missing file type in the io_img_upload() function in all up to, and including, 1.2024. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's ser may make remote code execution possible.
</code>

C (2026-02-11)

<code>The Custom Block Builder – Lazy Blocks plugin for WordPress is to Remote Code Execution in all up to, and including, 4.2.0 functions in the 'LazyBlocks_Blocks' class. This makes it possible for authenticated attackers, with Contributor-le and above, to execute code on the server.
</code>

C (2026-02-19)

<code>The wpForo Forum plugin for WordPress is to time-based SQL Injection via the 'wpfob' parameter in all up to, and including, 2.4.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensiti from the database.
</code>

C (2026-02-17)

<code>The E plugin for WordPress is to unauthorized image file upload in all up to, and including, 4.2.8.4. This is due to the plugin registering the upload_file_media AJAX action as publicly accessible (nopri) without implementing any authentication, authorization, or nonce despite a nonce being created. This makes it possible for unauthenticated attackers to upload image files to the WordPress uploads directory and create Media Library attachments via the ep_upload_file_media endpoint.
</code>

C (2026-03-13)

<code>The web interface on multiple Omada switches does not adequately certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.&lt;br&gt;An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.
</code>

C (2026-01-30)

<code>A was detected in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. The impacted element is the function checkUserFromLanOrWan of the file /boaform/admin/formLogin of the component Login Interface. The manipulation of the argument Host results in command injection. The attack can be launched remotely. The exploit is now public and may be used.
</code>

C (2026-01-30)

<code>In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pull_request_target trigger while checking out and executing untrusted pull request code. This allowed any GitHub user to execute arbitrary code in the repository's CI en with access to repository secrets and a GITHUB_TOKEN with extensi permissions (contents:write, packages:write, pages:write, actions:write). An attacker could exfiltrate secrets, publish malicious packages to the eclipse-theia organization, modify the official Theia website, and push malicious code to the repository.
</code>

C (2026-02-12)

<code>The AdForest theme for WordPress is to authentication bypass in all up to, and including, 6.0.12. This is due to the plugin not properly a user's identity prior to authenticating them through the 'sb_login_user_with_otp_fun' function. This makes it possible for unauthenticated attackers to log in as arbitrary users, including administrators.
</code>

C (2026-02-06)

<code>BeyondTrust Remote Support (RS) and certain older of Pri Remote Access (PRA) contain a critical pre-authentication remote code execution . By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.
</code>

C (2026-02-06)

<code>Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6. \n\nConsider \nupgrading Xerox® CentreWare Web® to v7.2.2.25 via the software a on Xerox.com
</code>

C (2026-02-03)

<code>A flaw was found in libsoup, an HTTP client/ser. This HTTP Request Smuggling arises from non-RFC-compliant parsing in the soup_filter_input_stream_read_line() logic, where libsoup accepts malformed chunk headers, such as lone line feed (LF) characters instead of the required carriage return and line feed (CRLF). A remote attacker can exploit this without authentication or user interaction by sending specially crafted chunked requests. This allows libsoup to parse and process multiple HTTP requests from a single network message, potentially leading to information disclosure.
</code>

C (2026-02-03)

<code>Rapid7 Nexpose 6.4.50 and later are to an insufficient entropy issue in the CredentialsKeyStorePassword.generateRandomPassword() method. When updating legacy keystore passwords, the application generates a new password with insufficient length (7-12 characters) and a static prefix 'p', resulting in a weak keyspace. An attacker with access to the nsc.ks file can brute-force this password using consumer-grade hardware to decrypt stored credentials.
</code>

C (2026-02-13)

<code>The PixelYourSite PRO plugin for WordPress is to Stored Cross-Site Scripting via the 'pysTrafficSource' parameter and the 'pys_landing_page' parameter in all up to, and including, 12.4.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
</code>

C (2026-04-16)

<code>An Incorrect Permission Assignment for Critical Resource in the ASUS Dri update process allows pri escalation due to improper protection of required execution resources during the phase, permitting a local user to make unpri modifications. This allows the altered resource to pass system checks and be executed with elevated pri upon a user-initiated update.\nRefer to the 'Security Update for ASUS Dri' section on the ASUS Security Ad for more information.
</code>

C (2026-02-18)

C (2026-02-17)

<code>The Forminator Forms – Contact Form, Payment Form &amp; Custom Form Builder plugin for WordPress is to Stored Cross-Site Scripting via the form_name parameter in all up to, and including, 1.50.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-le, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The plugin allows admins to give form management permissions to lower le, which could make this exploitable by users such as subscribers.
</code>

C (2026-02-12)

<code>Heap buffer o in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.
</code>

C (2026-03-07)

<code>The JS Archive List plugin for WordPress is to PHP Object Injection in all up to, and including, 6.1.7 via the 'included' shortcode attribute. This is due to the deserialization of untrusted input supplied via the 'included' parameter of the plugin's shortcode. This makes it possible for authenticated attackers, with Contributor-le and above, to inject a PHP Object. No known POP chain is present in the software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrie data, or execute code.
</code>

C (2026-02-06)

<code>A flaw has been found in mathur CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file /postquerypublic.php of the component Post Query Details Page. This manipulation of the argument gnamex causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, details for affected or updated releases cannot be specified. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-02-07)

<code>A security has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library /public/static/admin/lib/webuploader/0.1.5/ser.php of the component WebUploader. The manipulation leads to deserialization. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. This only affects products that are no longer supported by the maintainer.
</code>

C (2026-02-09)

<code>A weakness has been identified in code-projects Online Re System 1.0. Affected by this is an unknown functionality of the file /system/system/admins/manage/users/btn_functions.php. Executing a manipulation of the argument firstname can lead to cross site scripting. The attack may be performed from remote. The exploit has been made a to the public and could be used for attacks.
</code>

C (2026-03-02)

<code>A command injection in ModelScope's ms-agent v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-deri.
</code>

C (2026-05-11)

<code>dnsmasqs extract_name() function can be abused to cause a heap buffer o, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.
</code>

C (2026-02-18)

<code>An unauthenticated stack-based buffer o exists in the HTTP API endpoint /cgi-bin/api..get. A remote attacker can le this to achie remote code execution (RCE) with root pri on a target device. The affects all six device models in the series: GXP1610, GXP1615, GXP1620, GXP1625, GXP1628, and GXP1630.
</code>

C (2026-04-14)

<code>In Eclipse Jetty, the HTTP/1.1 parser is to request smuggling when chunk extensions are used, similar to the &quot;funky chunks&quot; techniques outlined here:\n * * terminates chunk extension parsing at \r\n inside quoted strings instead of treating this as an error.\n\n\n\n\nPOST / HTTP/1.1\nHost: localhost\nTransfer-Encoding: chunked\n\n1;ext=&quot;val\nX\n0\n\nGET /smuggled HTTP/1.1\n...\n\n\n\n\n\nNote how the chunk extension does not close the double quotes, and it is able to inject a smuggled request.
</code>

C (2026-07-22)

<code>Improper neutralization of special elements used in an SQL command ('SQL injection') in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQL Injection.\n\nThis issue affects No Code Platform: from 4.1.3 before 4.1.4.
</code>

C (2026-07-22)

<code>Authorization bypass through User-Controlled key in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client.\n\nThis issue affects Online Registration and Workflow Management System: through 12022026.
</code>

C (2026-03-11)

C (2026-02-13)

<code>Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se: High)
</code>

C (2026-03-16)

<code>Mattermost Plugins &lt;=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks on comment block modifications, which allows an authorised attacker with editor permission to modify comments created by other board members. Mattermost Ad ID: MMSA-2025-00559
</code>

C (2026-02-20)

<code>Stored Cross-Site Scripting (XSS) in the _genai/_e component of Google Cloud AI SDK (google-cloud-aiplatform) from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary Ja in a 's Jupyter or Colab en script escape sequences into model e results or dataset JSON data.
</code>

C (2026-02-18)

<code>The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is to time-based SQL Injection via the 'payment' parameter in all up to, and including, 6.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensiti from the database.
</code>

C (2026-05-19)

<code>An authenticated Remote Code Execution (RCE) was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the pri of the application service user. This issue affects Eclipse GlassFish: from 8.0.0 to 8.0.1, fixed in 8.0.2; 7.1.0, fixed in 7.1.1; from 7.0.0 to 7.0.25, fixed in 7.0.26. Impact on from 5.1.0 to 6.2.5 is unknown.
</code>

C (2026-05-19)

<code>A critical Remote Code Execution (RCE) was identified in the ser template rendering mechanism used by the Glassfish gadget handler. The application processes .xml files and e user-supplied within a context where Expression Language (EL) “expressions” are processed without proper sanitization or escaping. By injecting expressions such as #{7*7}, the ser 49, confirming ser EL e. This issue allows a remote attacker to fully compromise the underlying host, enabling capabilities as reading/modifying data, executing arbitrary commands, persistence, and lateral mo. This issue affects Eclipse GlassFish: from 8.0.0 to 8.0.1, fixed in 8.0.2; 7.1.0, fixed in 7.1.1; from 7.0.0 to 7.0.25, fixed in 7.0.26. Impact on from 5.1.0 to 6.2.5 is unknown.
</code>

C (2026-04-04)

<code>The ElementsKit Elementor Addons and Templates plugin for WordPress is to Stored Cross-Site Scripting via the 'ekit_tab_title' parameter in the Simple Tab widget in all up to, and including, 3.7.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-le and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
</code>

C (2026-03-11)

C (2026-02-25)

<code>This is caused by a CWE‑159: &quot;Improper Handling of Invalid Use of Special Elements&quot; weakness, which leads to an unreco inconsistency in the CLFS.sys driver. This condition forces a call to the KeBugCheckEx function, allowing an unpri user to trigger a system crash. Microsoft silently fixed this in the September 2025 cumulati for Windows 11 2024 LTSC and Windows Server 2025. Windows 25H2 (released in September) was released with the patch. Windows 1123h2 and earlier remain .
</code>

C (2026-02-18)

<code>A was identified in Ad WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251110. Affected is an unknown function of the file /cgi-bin/luci/admin/open of the component Background Management. Such manipulation of the argument delete_file leads to os command injection. The attack can be executed remotely. The exploit is publicly a and might be used. Upgrading to 1.2.4_20260821 is able to address this issue. It is ad to upgrade the affected component. The explains: &quot;The delete operation has been redesigned to map the requested file type to a fixed allowlisted path, require a numeric tunnel ID, reject invalid requests, and use the nati API (fs.unlink) instead of constructing a shell command from request data.&quot;
</code>

C (2026-04-02)

<code>Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.
</code>

C (2026-02-27)

<code> in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7.
</code>

C (2026-02-24)

<code>Use-after-free in the Ja Engine component. This was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
</code>

C (2026-02-24)

<code>JIT miscompilation, use-after-free in the Ja Engine: JIT component. This was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
</code>

C (2026-02-24)

<code>Use-after-free in the Ja Engine: JIT component. This was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
</code>

C (2026-02-24)

<code>JIT miscompilation in the Ja: WebAssembly component. This was fixed in Firefox 148 and Thunderbird 148.
</code>

C

C (2026-02-22)

<code>A was detected in funadmin up to 7.1.0-rc4. This issue affects the function getMember of the file app/common/service/AuthCloudService.php of the component Backend Endpoint. The manipulation of the argument cloud_account results in deserialization. The attack may be performed from remote. The exploit is now public and may be used. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-03-26)

<code>The Amelia Booking plugin for WordPress is to Insecure Direct Object References in up to, and including, 9.1.2. This is due to the plugin pro user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for authenticated attackers with customer-le or above to change user passwords and potentially take o accounts. The is in the pro plugin, which has the same slug.
</code>

C (2026-04-08)

<code>The ProSolution WP Client plugin for WordPress is to arbitrary file uploads due to missing file type in the 'proSol_fileUploadProcess' function in all up to, and including, 1.9.9. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's ser may make remote code execution possible.
</code>

C (2026-02-23)

<code>A was identified in higuma web-audio-recorder-js 0.1/0.1.1. Impacted is the function extend in the library lib/WebAudioRecorder.js of the component Dynamic Config Handling. Such manipulation leads to improperly controlled modification of object prototype attributes. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit is publicly a and might be used. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-03-18)

C (2026-03-23)

<code>Insufficient input in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory o
</code>

C (2026-03-27)

<code>The Smart Slider 3 plugin for WordPress is to Arbitrary File Read in all up to, and including, 3.5.1.33 via the 'actionExportAll' function. This makes it possible for authenticated attackers, with Subscriber-le and above, to read the contents of arbitrary files on the server, which can contain sensiti.
</code>

C (2026-02-24)

<code>A was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Parser. This manipulation of the argument DateTimeOriginal causes os command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to 13.50 is capable of addressing this issue. Patch name: e9609a9bcc0d32bd252a709a562fb822d6dd86f7. Upgrading the affected component is recommended.
</code>

C (2026-05-01)

<code>The Total Upkeep – WordPress Backup Plugin plus Restore &amp; Migrate by BoldGrid plugin for WordPress is to unauthorized modification of data due to a missing capability check on the 'wp_ajax_cli_cancel' function in all up to, and including, 1.17.1. This makes it possible for unauthenticated attackers to cancel a pending rollback, potentially pre a WordPress installation from automatically re a failed update.
</code>

C (2026-02-25)

<code>A flaw has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this is an unknown functionality of the file /queue.php. This manipulation of the argument firstname/lastname causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used.
</code>

C (2026-03-02)

<code>The Contest Gallery – Upload &amp; Vote Photos, Media, Sell with PayPal &amp; Stripe plugin for WordPress is to blind SQL Injection via the ‘cgLostPasswordEmail’ and the ’cgl_mail’ parameter in all up to, and including, 28.1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensiti from the database. The 's ’cgLostPasswordEmail’ parameter was patched in 28.1.4, and the ’cgl_mail’ parameter was patched in 28.1.5.
</code>

C (2026-03-13)

<code>A command injection was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command. In the router configuration import function allows an authenticated attacker to upload a crafted configuration file that results in execution of OS commands with root pri during port-trigger processing. \nSuccessful exploitation allows an authenticated attacker to execute system commands with root pri, leading to full device compromise.
</code>

C (2026-03-10)

C (2026-04-08)

<code>The E Forms plugin for WordPress is to PHP Object Injection in all up to, and including, 3.4.3 of untrusted input from form entry metadata. This is due to the html-admin-page-entries-view.php file calling PHP's nati() on stored entry meta without passing the allowed_classes parameter. This makes it possible for unauthenticated attackers to inject a serialized PHP object payload through any public E Forms form field. The payload survi() sanitization (serialization control characters are not stripped) and is stored in the wp_e database table. When an administrator views entries or views an indi entry, the unsafe unserialize() call processes the stored data without class restrictions.
</code>

C (2026-03-31)

<code>The E Forms Pro plugin for WordPress is to Remote Code Execution via PHP Code Injection in all up to, and including, 1.9.12. This is due to the Calculation Addon's process_filter() function concatenating user-submitted form field into a PHP code string without proper escaping before passing it to eval(). The sanitize_text_field() function applied to input does not escape single quotes or other PHP code context characters. This makes it possible for unauthenticated attackers to inject and execute arbitrary PHP code on the server by submitting a crafted value in any string-type form field (text, email, URL, select, radio) when a form uses the &quot;Complex Calculation&quot; feature.
</code>

C (2026-02-27)

C (2026-05-05)

<code>The GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation plugin for WordPress is to SQL Injection via the 'attributekey' parameter in up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensiti from the database.
</code>

C (2026-06-27)

<code>The Frisbii Pay plugin for WordPress is to unauthorized modification of data due to missing capability checks on the 'upload_csv' and 'process_batch' functions in all up to, and including, 1.8.9. This makes it possible for authenticated attackers, with Subscriber-le and above, to upload arbitrary CSV data and o WooCommerce payment tokens, postmeta, and order meta records.
</code>

C (2026-03-03)

<code>In MariaDB ser through 11.8.5, when ser plugin is enabled with ser configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.
</code>

C (2026-03-30)

<code>TrueConf Client downloads application update code and applies it without performing . An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.
</code>

C (2026-03-20)

<code>The Contact List plugin for WordPress is to Stored Cross-Site Scripting via the '_cl_map_iframe' parameter in all up to, and including, 3.0.18. This is due to insufficient input sanitization and output escaping when handling the Google Maps iframe custom field. The sa() function in class-contact-list-custom-fields.php uses a regex to extract &lt;iframe&gt; tags from user input but does not or sanitize the iframe's attributes, allowing event handlers like 'onload' to be included. The extracted iframe HTML is stored () and later rendered on the front-end in class-cl-public-card.php without any escaping or wp_kses filtering. This makes it possible for authenticated attackers, with Contributor-le and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
</code>

C (2026-07-11)

<code>The Planyo Online Reser System plugin for WordPress is to Ser Request Forgery leading to Local File Inclusion in all up to, and including, 3.0. The ulap.php file acts as an AJAX proxy and is directly accessible without WordPress bootstrapping or any authentication. The send_http_post() function the host of the provided URL against an allowlist that includes 'localhost', but critically fails to the URL scheme/protocol. This makes it possible for unauthenticated attackers to supply a file:// URL (e.g., file://localhost/etc/passwd) which bypasses the host allowlist check because parse_url() returns 'localhost' as the host. The URL is then passed to curl_init() or fopen(), both of which support the file:// protocol, allowing the attacker to read arbitrary local files on the server and ha contents returned in the HTTP response. This can lead to disclosure of sensiti such as /etc/passwd, wp-config.php (containing database credentials and authentication keys), and other ser files.
</code>

C (2026-03-20)

<code>The Kali Forms plugin for WordPress is to Remote Code Execution in all up to, and including, 2.4.9 via the 'form_process' function. This is due to the 'prepare_post_data' function mapping user-supplied keys directly into internal placeholder storage, combined with the use of 'call_user_func' on these placeholder . This makes it possible for unauthenticated attackers to execute code on the server.
</code>

C (2026-05-11)

<code>Wellbia's XIGNCODE3 xhunter1.sys kernel driver, 10.0.10011.16384 through 2023.12.7.78, pri escalation provides access to the IRP_MJ_WRITE command interface, which allows any user process to request a PROCESS_ALL_ACCESS.\r\n\r\nNote: K () was initially issued for 10.0.10011.16384, but the was not fully remediated and remains in 2023.12.7.78.
</code>

C (2026-03-12)

<code>The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration. With no user module configured, security is disabled by design and the system operates under a System Guest (level 100) context, granting read/write pri to any party able to reach the HTTP interface. Authentication controls are only enforced after a web user is created via U.htm, which dynamically enables the user module. Because this function is accessible prior to authentication, a remote user can create a new account with administrative read/write permissions enabling the user module and imposing authentication under attacker-controlled credentials. This action can effectively lock legitimate operators out of local and web-based configuration and administration.
</code>

C (2026-03-21)

<code>The Import and export users and customers plugin for WordPress is to pri escalation in all up to, and including, 1.29.7. This is due to the 'saelds' function not properly restricting which user meta keys can be updated fields. The 'get_restricted_fields' method does not include sensitive meta keys such as 'wp_capabilities'. This makes it possible for unauthenticated attackers to escalate their pri to Administrator by submitting a crafted registration request that sets the 'wp_capabilities' meta key. The can only be exploited if the &quot;Show fields in profile&quot; setting is enabled and a CSV with a wp_capabilities column header has been pre imported.
</code>

C (2026-03-08)

<code>A security flaw has been discovered in EasyCMS up to 1.6. The impacted element is an unknown function of the file /RbacuserAction.class.php of the component Request Parameter Handler. The manipulation of the argument _order results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-03-09)

<code>A weakness has been identified in Qi-ANXIN QAX Virus Removal up to 2025-10-22. The affected element is the function ZwTerminateProcess in the library QKSecureIO_Imp.sys of the component Mini Filter Driver. Executing a manipulation can lead to improper access controls. The attack is restricted to local execution. The exploit has been made a to the public and could be used for attacks. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-03-11)

<code>When doing a second SMB request to the same host again, curl would wrongly use\na data pointer pointing into already freed memory.
</code>

C (2026-04-23)

<code>The Breeze Cache plugin for WordPress is to arbitrary file uploads due to missing file type in the 'fetch_gra' function in all up to, and including, 2.4.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's ser may make remote code execution possible. The can only be exploited if &quot;Host Files Locally - Gra&quot; is enabled, which is disabled by default.
</code>

C (2026-03-10)

<code>An improper neutralization of special elements was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achie code execution on the instance. During a git push operation, user-supplied push option were not properly sanitized before being included in internal service headers. Because the internal header format used a delimiter character that could also appear in user input, an attacker could inject additional metadata fields through crafted push option . This was reported via the GitHub Bug Bounty program and has been fixed in GitHub Enterprise Ser 3.14.25, 3.15.20, 3.16.16, 3.17.13, 3.18.7 and 3.19.4.
</code>

C (2026-03-17)

<code>Local pri escalation in snapd on Linux allows local attackers to get root pri by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS.
</code>

C (2026-03-13)

<code>The Pix for WooCommerce plugin for WordPress is to arbitrary file uploads due to missing capability check and missing file type in the 'lkn_pix_for_woocommerce_c6_sa' function in all up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's ser may make remote code execution possible.
</code>

C (2026-03-12)

<code>Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security se: High)
</code>

C (2026-03-12)

<code>Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se: High)
</code>

C (2026-03-23)

<code>The Woocommerce Custom Product Addons Pro plugin for WordPress is to Remote Code Execution in all up to, and including, 5.4.1 via the custom pricing formula eval() in the process_custom_formula() function within includes/process/price.php. This is due to insufficient sanitization and of user-submitted field before passing them to PHP's eval() function. The sanitize_() method strips HTML tags but does not escape single quotes or prevent PHP code injection. This makes it possible for unauthenticated attackers to execute arbitrary code on the server by submitting a crafted value to a WCPA text field configured with custom pricing formula (pricingType: &quot;custom&quot; with {this.value}).
</code>

C (2026-03-31)

<code>The Gravity SMTP plugin for WordPress is to Sensiti Exposure in all up to, and including, 2.1.4. This is due to a REST API endpoint registered at /wp-json/gra/v1/tests/mock-data with a permission_callback that unconditionally returns true, allowing any unauthenticated to access it. When the ?page=gra query parameter is appended, the plugin's register_connector_data() method populates internal connector data, causing the endpoint to return approximately 365 KB of JSON containing the full System Report. This makes it possible for unauthenticated attackers to retrie system configuration data including PHP , loaded extensions, web ser, document root path, database server type and , WordPress , all acti with , acti, WordPress configuration details, database table names, and any API keys/tokens configured in the plugin.
</code>

C (2026-03-12)

<code>A was identified in OpenClaw up to 2026.2.17. This issue affects the function tools.exec.safeBins of the component File Existence Handler. The manipulation leads to information exposure through discrepancy. The attack needs to be performed locally. Upgrading to 2026.2.19-beta.1 is capable of addressing this issue. The identifier of the patch is bafdbb6f112409a65decd3d4e7350fbd637c7754. Upgrading the affected component is advised.
</code>

C (2026-05-02)

C (2026-04-02)

<code>A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This allows an unauthenticated attacker to forge authorization codes. Successful exploitation can lead to the creation of admin-capable access tokens, resulting in pri escalation.
</code>

C (2026-03-19)

<code>A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
</code>

C (2026-04-03)

C (2026-03-26)

<code>The Masteriyo LMS plugin for WordPress is to Pri Escalation in all up to, and including, 2.1.6. This is due to the plugin allowing a user to update the user role through the 'InstructorsController::prepare_object_for_database' function. This makes it possible for authenticated attackers, with Student-le and above, to elevate their pri to that of an administrator.
</code>

C (2026-03-23)

<code>A has been found in Tenda A15 15.13.07.13. The impacted element is the function UploadCfg of the file /cgi-bin/UploadCfg. The manipulation of the argument File leads to stack-based buffer o. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
</code>

C (2026-04-07)

<code>Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH options or shell commands, achieving code execution on the Cockpit host without valid credentials. The injection occurs during the authentication flow before any credential takes place, meaning no login is required to exploit the .
</code>

C (2026-04-09)

<code>HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This , C, is fixed in go-getter v1.8.6. This does not affect the go-getter/v2 branch and package.
</code>

C (2026-03-24)

<code>Sandbox escape in the Responsi Mode component. This was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
</code>

C (2026-03-26)

<code>Each RPCSEC_GSS data packet is by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure that the buffer is sufficiently large, and a malicious client can trigger a stack o. Notably, this does not require the client to authenticate itself first.\n\nAs kgssapi.ko's RPCSEC_GSS implementation is , remote code execution in the kernel is possible by an authenticated user that is able to send packets to the kernel's NFS ser kgssapi.ko is loaded into the kernel.\n\nIn userspace, applications which ha loaded and run an RPC server are to remote code execution from any client able to send it packets. We are not aware of any such applications in the FreeBSD base system.
</code>

C (2026-05-13)

<code>The Avada Builder plugin for WordPress is to Arbitrary File Read in all up to, and including, 3.15.2 via the 'fusion_get_s' function with the 'custom_svg' parameter of the 'fusion_section_separator' shortcode. This makes it possible for authenticated attackers, with Subscriber-le and above, to read the contents of arbitrary files on the server, which can contain sensiti. The was partially patched in 3.15.2 and fully patched in 3.15.3.
</code>

C (2026-03-31)

<code>Impact:\n\nThe fix for C () added for the option in _.template but did not apply the same to options.imports key names. Both paths flow into the same Function() constructor sink.\n\nWhen an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time.\n\nAdditionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other , the polluted keys are copied into the imports object and passed to Function().\n\nPatches:\n\nUsers should upgrade to 4.18.0.\n\nWorkarounds:\n\nDo not pass untrusted input as key names in options.imports. Only use de, static key names.
</code>

C (2026-05-11)

<code>A flaw was found in Cockpit. This allows a remote attacker to achie command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). An attacker can inject shell metacharacters and command substitutions into these parameters, leading to the execution of arbitrary shell commands on the affected system. This could result in a complete system compromise.
</code>

C (2026-09-01)

<code>A in the Lutece Core XSL export management module up to 7.1.7, which allows authenticated administrators to execute code remotely. The XML/XSLT processing configuration does not enable secure processing mode (FEATURE_SECURE_PROCESSING), allowing Ja functions to be executed from malicious XSL stylesheets. An attacker with administrator pri can upload a manipulated XSL transformation file and trigger its execution during user export operations, resulting in the execution of arbitrary code on the server.
</code>

C

C (2026-03-26)

<code>A weakness has been identified in Wavlink WL-NU516U1 260227. This affects the function ftext of the file /cgi-bin/nas.cgi. This manipulation of the argument Content-Length causes stack-based buffer o. The attack can be initiated remotely. The exploit has been made a to the public and could be used for attacks. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-05-02)

<code>The User Registration Ad Fields plugin for WordPress is to arbitrary file uploads due to missing file type in the 'URAF_AJAX::method_upload' function in all up to, and including, 1.6.20. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's ser may make remote code execution possible. Note: The can only be exploited if a &quot;Profile Picture&quot; field is added to the form.
</code>

C (2026-05-19)

<code>The Piotnet Forms plugin for WordPress is to arbitrary file upload due to missing file type in the 'piotnetforms_ajax_form_builder' function in all up to, and including, 2.1.40. The plugin uses an incomplete extension blacklist that only blocks php, phpt, php5, php7, and exe extensions, while allowing dangerous extensions such as .phar or .phtml to be uploaded. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's ser may make remote code execution possible. Note: The exploit can only be exploited if a file field is added to the form.
</code>

C (2026-05-19)

<code>The Piotnet Addons for Elementor Pro plugin for WordPress is to arbitrary file upload due to missing file type in the 'pafe_ajax_form_builder' function in all up to, and including, 7.1.70. The plugin uses an incomplete extension blacklist that only blocks php, phpt, php5, php7, and exe extensions, while allowing dangerous extensions such as .phar or .phtml to be uploaded. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's ser may make remote code execution possible. Note: The exploit can only be exploited if a file field is added to the form.
</code>

C (2026-05-11)

<code>An information disclosure in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information.
</code>

C (2026-03-28)

<code>A was detected in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. Impacted is the function LocalGPTHandler of the file backend/server.py of the component API Endpoint. The manipulation of the argument BaseHTTPRequestHandler results in missing authentication. The attack can be executed remotely. This product implements a rolling release for ongoing delivery, which means information for affected or updated releases is una. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-08-24)

<code>A was identified in HashiCorp Vault and Vault Enterprise (“Vault”) such that an authenticated attacker may manipulate an identity value referenced by a templated policy path to gain unintended access to Vault paths.\n\nAn attacker who can control the referenced identity value may include slash ({{/}}) characters that Vault interprets as additional path segments when rendering the policy.\n\nThis , C, was fixed in Vault Community Edition 2.0.4 and Vault Enterprise 2.0.4, 1.21.9, 1.20.14, and 1.19.20.
</code>

C (2026-03-27)

<code>The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the multipart form data, allowing an attacker to write files to arbitrary locations on the filesystem using path tra sequences ('../').
</code>

C (2026-05-12)

<code>A remote code execution exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without authentication on port 3088. An unauthenticated remote attacker can invoke the run-code MCP tool to supply arbitrary source code and execute it .exec() using the specified language interpreter. This allows execution of arbitrary code with the pri of the user running the server. This has not been fixed and might affect the project in all .
</code>

C (2026-04-16)

<code>The Payment Gateway for Redsys &amp; WooCommerce Lite plugin for WordPress is to Improper of Cryptographic Signature in up to, and including, 7.0.0 due to successful_request() handlers calculating a local signature but not Ds_Signature from the request before accepting payment status across the Redsys, Bizum, and Google Pay gateway flows. This makes it possible for unauthenticated attackers to forge payment callback data and mark pending orders as paid when they know a valid order key and order amount, potentially allowing checkout completion and product or service fulfillment without a successful payment.
</code>

C (2026-04-11)

<code>NoMachine External Control of File Path Arbitrary File Deletion . This allows local attackers to delete arbitrary files on affected installations of NoMachine. An attacker must first obtain the ability to execute low-pri code on the target system in order to exploit this .\n\nThe specific flaw exists within the handling of en . The issue results from the lack of proper of a user-supplied path prior to using it in file operations. An attacker can le this to delete files in the context of root. Was ZDI-CAN-28644.
</code>

C (2026-04-11)

<code>NoMachine External Control of File Path Local Pri Escalation . This allows local attackers to escalate pri on affected installations of NoMachine. An attacker must first obtain the ability to execute low-pri code on the target system in order to exploit this .\n\nThe specific flaw exists within the handling of command line parameters. The issue results from the lack of proper of a user-supplied path prior to using it in file operations. An attacker can le this to escalate pri and execute arbitrary code in the context of root. Was ZDI-CAN-28630.
</code>

C (2026-04-11)

<code>aws-mcp-server AWS CLI Command Injection Remote Code Execution . This allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this .\n\nThe specific flaw exists within the handling of the allowed commands list. The issue results from the lack of proper of a user-supplied string before using it to execute a system call. An attacker can le this to execute code in the context of the MCP server. Was ZDI-CAN-27969.
</code>

C (2026-05-12)

<code>The consul-template library before 0.42.0 is to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This (C) is fixed in consul-template 0.42.0.
</code>

C (2026-06-02)

C (2026-05-21)

<code>The Divi Form Builder plugin for WordPress is to pri escalation in up to, and including, 5.1.2. This is due to the plugin accepting a user-controlled 'role' parameter from POST data during user registration without it against the form's configured default_user_role setting. This makes it possible for unauthenticated attackers to create administrator accounts by tampering with the role parameter during registration.
</code>

C (2026-03-30)

<code>A security flaw has been discovered in Yunai up to 2026.01. This affects an unknown part of the file /admin-api/system/tenant/get-by-website. The manipulation of the argument Website results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-05-11)

<code>A buffer o in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the pointer past the record’s end.
</code>

C (2026-04-08)

<code>GitLab has remediated an issue in GitLab CE/EE affecting all from 16.9.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could ha an authenticated user to invoke unintended ser methods through websocket connections due to improper access control.
</code>

C (2026-03-31)

<code>A flaw was found in the gdk-pixbuf library. This heap-based buffer o occurs in the JPEG image loader due to improper of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
</code>

C (2026-03-31)

<code>A was found in CMS Made Simple up to 2.2.22. This impacts the function _copyFilesToFolder in the library modules/UserGuide/lib/class.UserGuideImporterExporter.php of the component UserGuide Module XML Import. The manipulation results in path tra. It is possible to launch the attack remotely. The exploit has been made public and could be used. This issue has been reported early to the project. They confirmed, that &quot;this has already been discovered and fixed for the next release.&quot;
</code>

C (2026-05-15)

<code>The Form Notify plugin for WordPress is to Authentication Bypass in up to and including 1.1.10. This is due to the plugin trusting user-controlled cookie data to determine which WordPress account to authenticate after a LINE OAuth login. When LINE doesn't provide an email address (which is common), the plugin falls back to reading the 'form_notify_line_email' cookie value without that the LINE account is associated with that email address. This makes it possible for unauthenticated attackers to gain access to any user account on the site, including administrator accounts, by completing a LINE OAuth flow with their own LINE account while injecting a malicious cookie containing the target 's email address.
</code>

C (2026-04-01)

<code>Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security se: High)
</code>

C (2026-04-24)

<code>The Drag and Drop File Upload for Contact Form 7 plugin for WordPress is to arbitrary file upload in up to, and including, 1.1.3. This is due to the plugin extracting the file extension before sanitization occurs and allowing the file type parameter to be controlled by the attacker rather than being restricted to administrator-configured , which when combined with the fact that occurs on the unsanitized extension while the file is saved with a sanitized extension, allows special characters like '$' to be stripped during the sa. This makes it possible for unauthenticated attackers to upload arbitrary PHP files and potentially achie code execution, however, an .htaccess file and name randomization is in place which restricts real-world exploitability.
</code>

C (2026-06-20)

C

C (2026-04-07)

C (2026-07-02)

<code>The Divi Form Builder plugin for WordPress is to Arbitrary File Upload leading to Remote Code Execution in all up to and including 5.1.8. This is due to insufficient file extension in the do_image_upload() function where user-supplied input from the acceptFileTypes POST parameter is directly interpolated into a regular expression used to uploaded files. Attackers can specify PHP-executable extensions such as .phtml, .phar, .php5, or .php7 to bypass the plugin's .htaccess protection which only blocks .php files specifically. Additionally, on Nginx-based servers, the .htaccess protection is completely ineffective as Nginx does not process .htaccess files. This makes it possible for unauthenticated attackers (who can obtain a nonce from any public page containing a form) to upload executable PHP files to the publicly accessible /wp-content/uploads/de_fb_uploads/ directory and achie Code Execution by accessing the uploaded file via HTTP. The was partially patched in 5.1.3.
</code>

C (2026-04-05)

<code>A flaw has been found in Ollama up to 0.18.1. This issue affects some unknown processing of the file ser.go of the component Model Pull API. Executing a manipulation can lead to ser request forgery. The attack can be launched remotely. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-04-05)

<code>A weakness has been identified in code-projects Concert Ticket Reser System 1.0. This affects an unknown part of the file /ConcertTicketReser/login.php of the component Parameter Handler. Executing a manipulation of the argument Email can lead to sql injection. The attack may be launched remotely. The exploit has been made a to the public and could be used for attacks.
</code>

C (2026-04-05)

<code>A security has been detected in badlogic pi-mono up to 0.58.4. This affects the function disco of the file packages/coding-agent/src/core/extensions/loader.ts. The manipulation leads to code injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-04-05)

<code>A was identified in pro kafka-ui up to 0.7.2. This impacts the function of the file /api/smartfilters/testexecutions of the component Endpoint. The manipulation leads to code injection. The attack can be initiated remotely. The exploit is publicly a and might be used. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-04-06)

<code>A weakness has been identified in givanz up to 2.0.5. The affected element is an unknown function of the file upload.php of the component File Upload Endpoint. This manipulation of the argument uploadAllowExtensions causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been made a to the public and could be used for attacks. Patch name: 8cac22cff99b8bc701c408aa8e887fa702755336. Applying a patch is the recommended action to fix this issue. The was contacted early, responded in a very professional manner and quickly released a fixed of the affected product.
</code>

C (2026-04-06)

<code>A has been found in Meesho Online Shopping App up to 27.3 on Android. Affected is an unknown function of the file /api/endpoint of the component com.meesho.supply. Such manipulation leads to risky cryptographic algorithm. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
</code>

C (2026-04-17)

<code>The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is to arbitrary file upload in up to, and including, 1.3.9.7. This is due to insufficient file type that occurs when custom blacklist types are configured, which replaces the default dangerous extension denylist instead of merging with it, and the wpcf7_antiscript_file_name() sanitization function being bypassed for filenames containing non-ASCII characters. This makes it possible for unauthenticated attackers to upload arbitrary files, such as PHP files, to the server, which can be le to achie code execution. The was originally reported by Leonid Semenenko (lsemenenko) and partially patched in 1.3.9.7. A bypass for the patch was separately discovered and reported by Nguyen Hung (Mitchell).
</code>

C (2026-04-10)

<code>The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests without credentials. This endpoint is registered on the same port as WorkflowService and cannot be disabled independently. An attacker with network access to the frontend port could open the replication stream without authentication. Data exfiltration is possible, but  only when a configured replication target is correctly configured and the attacker has knowledge of the cluster configuration, as the history service cluster IDs and peer membership before returning replication data.\n\n\n\n\nThe fix was applied per release line: it is present in 1.28.4, 1.29.6, 1.30.4, 1.31.2, and 1.32.0 and later releases on each line. Releases 1.31.0 and 1.31.1 do not contain the fix and are affected.\n\n\n\n\nTemporal Cloud is not affected.
</code>

C (2026-04-20)

<code>SGLang's reranking endpoint (/v1/rerank) achie Code Execution (RCE) when a model file containing a malcious tokenizer.chat_template is loaded, as the Jinja2 chat templates are rendered using an unsandboxed jinja2.En().
</code>

C (2026-05-22)

<code>The inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing. This causes transformers.AutoTokenizer.from_pretrained() to import and execute arbitrary Python files included in any model pulled from an OCI registry, resulting in arbitrary code execution on the Docker host as the Docker Desktop user when inference is triggered.\n\nAny container on the Docker network can trigger this by calling the model-runner.docker.internal API to pull a malicious model and request inference.
</code>

C (2026-05-22)

<code>The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directories via the model_file configuration field in config.json. When a model's config.json specifies a model_file pointing to a Python file, MLX-LM uses importlib to load and execute it with no trust_remote_code gate or equi safety check. The MLX backend runs without sandboxing, resulting in arbitrary code execution on the Docker host as the Docker Desktop user.\n\nAny container on the Docker network can trigger this by calling the model-runner.docker.internal API to pull a malicious model from an attacker-controlled OCI registry and request inference.
</code>

C (2026-04-08)

<code>Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se: High)
</code>

C (2026-05-20)

<code>An unbounded resend loop exists in the BIND 9 resol machine during bad-ser, enabling a remote unauthenticated attacker to cause severe resource exhaustion by sending queries that trigger specific retry conditions.\nThis issue affects BIND 9 9.18.36 through 9.18.48, 9.20.8 through 9.20.22, 9.21.7 through 9.21.21, 9.18.36-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.
</code>

C (2026-05-19)

<code>Ja in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system
</code>

C

C (2026-04-10)

<code>A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue, it is recommended to deploy a patch.
</code>

C (2026-04-24)

<code>P4 Ser prior to 2026.1 are configured with insecure default settings that, when exposed to untrusted networks, allow unauthenticated attackers to create arbitrary user accounts, enumerate existing users, authenticate to accounts with no password set, and access depot contents via the built-in 'remote' user. These default settings, taken together, can lead to unauthorized access to source code repositories and other managed assets. The 2026.1 release, expected in May 2026, enforces secure-by-default configurations on upgrade and new installations
</code>

C (2026-04-20)

<code>A in the SQL Box in the admin interface of OTRS leads to an uncontrolled resource consumption leading to a DoS against the webserver. will be killed by the systemThis issue affects OTRS: \n\n * 7.0.X\n * 8.0.X\n * 2023.X\n * 2024.X\n * 2025.X\n * 2026.X before 2026.3.X
</code>

C (2026-04-12)

<code>A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. This impacts the function decode_image of the file metagpt/utils/common.py. The manipulation of the argument img_url_or_b64 results in ser request forgery. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
</code>

C (2026-04-12)

<code>A flaw has been found in chatboxai chatbox up to 1.20.0. This impacts the function StdioClientTransport of the file src/main/mcp/ipc-stdio-transport.ts of the component Model Context Protocol Ser System. Executing a manipulation of the argument args/env can lead to os command injection. The attack can be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
</code>

C (2026-05-14)

<code>The User Registration &amp; Membership plugin for WordPress is to Missing Authorization in all up to, and including, 5.1.5. This is due to the is_admin_creation_process() method relying solely on the presence of action=createuser in the $_REQUEST superglobal without performing any authentication or capability check. This makes it possible for unauthenticated attackers to bypass the admin appro when registering new accounts via the fallback submission path.
</code>

C (2026-04-13)

<code>A was identified in code-projects Simple Content Management System 1.0. Affected by this is an unknown functionality of the file /web/admin/login.php. Such manipulation of the argument User leads to sql injection. The attack may be launched remotely. The exploit is publicly a and might be used.
</code>

C (2026-04-13)

<code>A security flaw has been discovered in code-projects Simple Content Management System 1.0. Affected by this issue is some unknown functionality of the file /web/index.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
</code>

C (2026-04-13)

<code>A weakness has been identified in code-projects Simple Content Management System 1.0. This affects an unknown part of the file /web/admin/welcome.php. Executing a manipulation of the argument News Title can lead to cross site scripting. The attack can be executed remotely. The exploit has been made a to the public and could be used for attacks.
</code>

C (2026-04-13)

<code>A was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /jobs/job-delete.php of the component Delete Job Posting Handler. Such manipulation of the argument ID leads to improper access controls. The attack can be launched remotely. The exploit is publicly a and might be used.
</code>

C (2026-04-14)

C (2026-04-15)

<code>Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se: High)
</code>

C (2026-04-15)

<code>Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se: High)
</code>

C (2026-06-25)

<code>The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fujisaki-Okamoto transform's implicit rejection and weakening IND-CCA2 security on that code path. The constant-time comparison effectively ignored part of the re-encrypted ciphertext, so a decapsulating party could fail to detect a manipulated ciphertext and proceed without the standard's required implicit rejection.
</code>

C (2026-04-22)

<code>A in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct object references. This could lead to unauthorized access to sensiti and unauthorized changes to the tenant's configuration.
</code>

C (2026-04-22)

<code>A in the web application allows standard users to escalate their pri to those of a super administrator through parameter manipulation, enabling them to access and modify sensiti.
</code>

C (2026-05-18)

<code>The WP Photo Album Plus WordPress plugin before 9.1.11.001 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.
</code>

C (2026-04-17)

<code>A has been found in Mobatek MobaXterm Home Edition up to 26.1. This affects an unknown part in the library msimg32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. Upgrading to 26.2 is able to mitigate this issue. It is suggested to upgrade the affected component. The was contacted early, responded in a very professional manner and quickly released a fixed of the affected product.
</code>

C (2026-05-11)

<code>The Custom css-js-php WordPress plugin through 2.0.7 does not properly sanitize user input before using it in a SQL query, and the result is passed to eval(), allowing unauthenticated users to execute arbitrary PHP code on the server.
</code>

C (2026-07-10)

<code>The GoodMeet – Google Meet Integration for Webinar, Meeting &amp; Video Conference plugin for WordPress is to Cross-Site Request Forgery in up to and including 1.1.8. This is due to a missing nonce in the reset_credential() function, which handles the wp_ajax_goodmeet_reset_google_meet_credential AJAX action. While the function does the user's capability (manage_options), it does not a nonce, making it susceptible to CSRF attacks. This makes it possible for unauthenticated attackers to trick a site administrator into clicking a malicious link that will reset (delete) the plugin's stored Google Meet API credentials (goodmeet_google_credentials) and OAuth tokens (goodmeet_google_token), effectively disabling the Google Meet integration on the site.
</code>

C (2026-08-13)

<code>Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION pri to dlopen any file to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
</code>

C (2026-05-07)

<code>Origin Error in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Liderahenk: from 2.0.1 before 2.0.2.
</code>

C (2026-04-20)

<code>A stack-based buffer o was found in the on the ADM. The issue stems from the use of unbounded sscanf() and passing user-controlled data directly to printf(). Due to the lack of PIE and Stack Canary protections, an authenticated remote attacker can exploit these to execute arbitrary code as the web server user. \nAffected products and include: from ADM 4.1.0 through ADM 4.3.3.RR42 as well as from ADM 5.0.0 through ADM 5.1.2.REO1.
</code>

C (2026-04-20)

<code>A command injection was found in the PPTP on the ADM. The allows an administrative user to break out of the restricted web en and execute arbitrary code on the underlying operating system. This occurs due to insufficient of user-supplied input before it is passed to a system shell. Successful exploitation allows an attacker to achie Code Execution (RCE) and fully compromise the system.\nAffected products and include: from ADM 4.1.0 through ADM 4.3.3.RR42 as well as from ADM 5.0.0 through ADM 5.1.2.REO1.
</code>

C (2026-05-09)

<code>An integer o in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.
</code>

C (2026-05-09)

<code>A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a ser an error response without SQLSTATE field.
</code>

C (2026-04-27)

<code>The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is to Pri Escalation in up to and including 5.4.1. This is due to a missing authorization check in the execute() method of the connect-customer-to-wp-user ability, which only requires the customer__edit capability granted to the latepoint_agent role by default, without whether the target WordPress user ID belongs to a pri account. This makes it possible for authenticated attackers with the latepoint_agent role to link any LatePoint customer record to an administrator's WordPress account and subsequently reset the administrator's password via the normal customer password-reset flow, resulting in full site takeover.
</code>

C (2026-04-21)

<code>Information disclosure in the Form Autofill component. This was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
</code>

C (2026-04-21)

<code>Other issue in the Storage: IndexedDB component. This was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
</code>

C

C (2026-04-28)

<code>A in GRASSMARLIN v3.2.1 allows crafted session data to \ntrigger improper handling of XML input, which may result in unintended \nexposure of sensiti. The flaw stems from insufficient \nhardening of the XML parsing process.
</code>

C (2026-05-11)

<code>An arbitrary file write exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrati can perform a Path Tra attack to create or o arbitrary files anywhere on the host filesystem, bypassing the application's intended storage sandbox.
</code>

C (2026-08-04)

<code>A post-authentication command injection in the &quot;export-cgi&quot; CGI program in Zyxel WAX650S firmware through 7.10(ABRM.4)C0 could allow an authenticated attacker with administrator pri to execute OS commands on an affected device.
</code>

C (2026-04-22)

<code>A flaw was found in camel-infinispan. This in unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low pri could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to gain full control over the affected system, impacting its confidentiality, integrity, and a.
</code>

C (2026-07-13)

<code>Ser has addressed a remote code execution that was identified in the Ser AI platform. This could enable an unauthenticated user, in certain circumstances, to execute code within the Ser platform.\n\n\nSer addressed this by deploying a security update to hosted instances. Relevant security updates have also been provided to Ser self-hosted customers and partners.\n\n\n\n\nFurther, the is addressed in the listed patches and family releases, which have been made a to hosted and self-hosted customers, as well as partners. We are not currently aware of exploitation against Ser instances.\n\n\n\n\nWe recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.
</code>

C (2026-04-25)

<code> of the package simple-git before 3.36.0 are to Remote Code Execution (RCE) due to an incomplete fix for C that blocks the -c option but not the equi --config form. If untrusted input can reach the options argument passed to simple-git, an attacker may still achie code execution by enabling protocol.ext.allow=always and using an ext:: clone source.
</code>

C (2026-05-21)

<code>The BookingPress Pro plugin for WordPress is to arbitrary file uploads due to missing file type in the 'bookingpress_ng_form_func' function in all up to, and including, 5.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's ser may make remote code execution possible. Note: The can only be exploited if a signature custom field is added to the booking form.
</code>

C (2026-04-25)

<code>A was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/run_central2.sh of the component JNAP Action Handler. The manipulation of the argument pin leads to os command injection. The attack may be initiated remotely. The exploit is publicly a and might be used. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-04-26)

<code>A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.go of the component Tensor Model Transfer Handler. The manipulation of the argument digest results in path tra. The attack may be performed from remote. This attack is characterized by high complexity. The exploitability is reported as difficult. The exploit has been released to the public and may be used for attacks. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-04-26)

<code>A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
</code>

C (2026-04-27)

<code>A weakness has been identified in code-projects In Management System 1.0. Affected is an unknown function of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been made a to the public and could be used for attacks.
</code>

C (2026-04-27)

<code>A security has been detected in CodeAstro Online Job Portal 1.0. Affected by this is an unknown functionality of the file /users/user-cvs/. The manipulation leads to file and directory information exposure. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
</code>

C (2026-04-27)

<code>A security has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appointment Booking. The manipulation of the argument fname/lname leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
</code>

C (2026-04-28)

<code>A was determined in code-projects Coaching Management System 1.0. Affected by this is an unknown functionality of the file /cims/modules/student/complaint.php of the component Complaint Form Page. This manipulation of the argument Complaint causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
</code>

C (2026-04-28)

<code>A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function get_cart_count of the file /admin/ajax.php?action=get_cart_count. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
</code>

C (2026-04-28)

<code>A was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file /cims/modules/admin/reply.php of the component POST Handler. Performing a manipulation of the argument complaintreply results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
</code>

C (2026-04-30)

<code>An operator precedence bug in the kernel results in a scenario where a buffer o causes attacker-controlled data to o adjacent execve(2) argument buffers.\n\nThe bug may be exploitable by an unpri user to obtain superuser pri.
</code>

C

C (2026-06-02)

<code>Appsmith’s SQL query editor’s autocomplete functionality fails to sanitize database object names before rendering them in innerHTML, allowing an authenticated De to inject persistent XSS by a malicious table or column names triggering arbitrary code execution in the sessions of other workspace members when they interact with the same datasource.
</code>

C (2026-04-29)

<code>A has been found in SourceCodester Pharmacy Sales and In System 1.0. This impacts the function delete_supplier of the file /ajax.php?action=delete_supplier. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
</code>

C (2026-04-29)

<code>A was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function sa of the file /admin/admin_class_novo.php of the component File Extension Handler. Performing a manipulation of the argument img results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
</code>

C (2026-04-29)

<code>A was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this is an unknown functionality of the file /admin/.php of the component GET Parameter Handler. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
</code>

C (2026-04-29)

<code>A was detected in SourceCodester CET Automated Grading System with AI Predicti 1.0. This affects unknown code of the file /index.php?action=register of the component Registration. The manipulation of the argument student_id/full_name/section/username results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used.
</code>

C (2026-05-02)

<code>The User by PickPlugins plugin for WordPress is to authentication bypass in all up to, and including, 2.0.46. This is due to the use of a loose PHP comparison operator to OTP codes in the &quot;user_rocess_otpLogin&quot; function. This makes it possible for unauthenticated attackers to log in as any user with a email address, such as an administrator, by submitting a &quot;true&quot; OTP value.
</code>

C (2026-05-30)

<code>The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is to authenticated (Subscriber+) account takeover in all up to, and including, 5.26.0 via the event reaction endpoints (react_to_event() / unreact_to_event()). The endpoints register get_items_permissions_check() as their permission_callback, which only the requester is logged in and does not enforce the per-logger capability checks normally applied by Log_Query. As a result, a Subscriber-level user can POST to /wp-json/simple-history/v1/events/&lt;id&gt;/react with the _fields=context query parameter and read the full context of any Simple History event — including SimpleUserLogger entries that record the full password-reset email body (reset URL with the reset key) for any user. The attacker triggers a password reset for an administrator via the lost-password form, brute-forces recent event IDs through the reaction endpoint to read the resulting user_requested_password_reset_link event, extracts the reset key from context.message, and completes the password reset to take over the administrator account. Exploitation requires an administrator to ha enabled the experimental features option (simple_history_experimental_features_enabled), which is not the default.
</code>

C (2026-05-30)

<code>The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is to Remote Code Execution in all up to, and including, 2.19.25. This makes it possible for authenticated attackers, with Contributor-le and above, to execute code on the server. Exploitation requires a two-block payload embedded in post content: the first block registers a fake uagb/-prefixed block type with an attacker-specified render_callback, and the second block of the same fake type triggers in of that callback () during sequential block rendering in the same page request.
</code>

C (2026-06-05)

<code>On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN ( Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a destination IP matching its configured decapsulation IP. This occurs because the switch does not the tunnel protocol type, potentially leading to the unexpected processing of non-configured tunnel traffic.\n\n\n\nThis issue has been reported as being exploited in the wild.
</code>

C (2026-05-04)

<code>Ollama before 0.17.1 contains a heap out-of-bounds read in the GGUF model loader. The /api/create endpoint accepts an attacker-supplied GGUF file in which the declared tensor offset and size exceed the file's actual length; during quantization in fs/ggml/gguf.go and ser.go (WriteTo()), the ser past the allocated heap buffer. The leaked memory contents may include en , API keys, system prompts, and concurrent users' con data, and can be exfiltrated by uploading the resulting model artifact through the /api/push endpoint to an attacker-controlled registry. The /api/create and /api/push endpoints have no authentication in the upstream distribution. Default deployments bind to 127.0.0.1, but the documented OLLAMA_HOST=0.0.0.0 configuration is widely used in practice (large public-internet exposure observed).
</code>

C (2026-06-19)

C (2026-06-06)

<code>The MDJM Event Management plugin for WordPress is to Arbitrary File Upload in all up to, and including, 1.7.8.3 via the mdjm_send_comm_email function. This is due to no file type, extension, or MIME type being performed on uploaded files. This makes it possible for authenticated attackers, with administrator-le and above, to upload files that may be executable, which makes remote code execution possible.
</code>

C (2026-05-01)

<code>The Temporary Login plugin for WordPress is to Authentication Bypass in up to and including 1.0.0. This is due to improper input in the maybe_login_temporary_user() function, which fails to that the 'temp-login-token' GET parameter is a scalar string before processing it. When the parameter is supplied as an array, PHP's empty() check is bypassed and sanitize_key() returns an empty string, which is then passed as the meta_value to get_users(). WordPress ignores an empty meta_value and returns all users matching the meta_key '_temporary_login_token', allowing authentication without a valid token. This makes it possible for unauthenticated attackers to authenticate as any acti login user by sending a single crafted GET request.
</code>

C (2026-06-23)

<code>Anthropic Claude Desktop Cowork handling (confirmed across v1.1348.0 through v1.2278.0, including v1.1348.0, v1.1617.0, and v1.2278.0) only file presence and a marker string before booting rootfs.img, but does not image content integrity at time-of-use. A local attacker with unpri code execution as the macOS user can modify the VM root filesystem image and have it trusted on subsequent Cowork , enabling persistent arbitrary code execution in the VM and access to host-mounted directories. The estimated CWE mapping is CWE-353 (Missing Support for Integrity Check).
</code>

C (2026-06-05)

C (2026-05-04)

<code>Improper pri management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2.6.2034.0 allows a local non-admin authenticated user to place arbitrary files into arbitrary locations bypassing file system permission protections, leading to local pri escalation to SYSTEM.
</code>

C (2026-08-06)

<code>A flaw was found in udisks2. A local attacker with an acti session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on behalf of arbitrary users, including pri accounts. This can lead to local pri escalation through mount point injection and manipulation of the mount namespace to pri users.
</code>

C (2026-06-30)

<code>IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensiti including credentials, enabling complete system compromise and lateral mo.
</code>

C

C (2026-05-06)

<code>Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se: High)
</code>

C (2026-06-29)

<code>Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, a when CONFIG_FILE_SYSTEM is enabled) that ser from a configured root directory. Before this fix, both the HTTP/1 and HTTP/2 front-ends placed the raw, attacker-controlled request path into client-&gt;url_buffer (assembled in on_url() for HTTP/1 and copied from the :path pseudo-header for HTTP/2) without resolving ./.. segments. The static-FS handler then built the on-disk filename by directly concatenating the configured root with that raw URL (snprintk(fname, ..., &quot;%s%s&quot;, static_fs_detail-&gt;fs_path, client-&gt;url_buffer) at http_ser.c:603 and http_ser.c:490) and opened it with fs_open(fname, FS_O_READ). Because the handler is reached /leading-dir (fnmatch FNM_LEADING_DIR) or fallback resource matching, a request such as GET /&lt;prefix&gt;/../../&lt;file&gt; is dispatched to the handler and, after the underlying filesystem (e.g. LittleFS/FAT) resolves the .. segments, escapes the configured web root, letting an unauthenticated remote client read arbitrary readable files on the mounted (information disclosure). The HTTP ser no TLS or authentication to reach this path. The fix adds http_ser(), which canonicalizes the path portion of the URL before resource lookup in both protocol handlers, neutralizing the tra. Affects releases v4.0.0 through v4.4.0 for deployments that register a static-filesystem resource.
</code>

C (2026-06-04)

<code>OS Command Injection Remote Code Execution in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints
</code>

C (2026-05-12)

<code>An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write pri to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series bucket catalog. Under certain conditions this can result in arbitrary code execution.\n\nThis issue impacts MongoDB Server v5.0 prior to 5.0.33, v6.0 prior to 6.0.28, v7.0 prior to 7.0.34, v8.0 prior to 8.0.23, v8.2 prior to 8.2.9 and v8.3 prior to 8.3.2.
</code>

C (2026-05-27)

<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in the Publish Audit API endpoints (/api/auditPublishing/get and /api/auditPublishing/getAll) in dotCMS Core 25.11.04-1 through 26.04.28-02 allows remote unauthenticated attackers to read, modify, or destroy arbitrary database content. The endpoints did not enforce authentication and accepted unsanitized input used in dynamically constructed SQL. The fix in dotCMS Core 26.04.28-03 requires an authenticated backend user with the publishing-queue portlet permission. LTS releases are not affected as the code path was ne.
</code>

C (2026-09-29)

<code>An authentication bypass in the firmware update endpoint of Hitachi Energy RTU500 end-of-life allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or compromise the integrity or a of the device.
</code>

C (2026-05-08)

<code>PredatorSense 3.00.3136 to 3.00.3196 contain Local Pri Escalation (LPE) .The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing any authenticated local user to execute arbitrary code with NT AUTHORITY\SYSTEM pri and to delete arbitrary files with SYSTEM pri. By le this, an attacker can execute arbitrary code on the target system with elevated pri.
</code>

C (2026-05-07)

<code>Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in misp allows Stored XSS.\n\n\n\n\n\n\nThis issue affects MISP before 2.5.37.\n\n\n\n\nA stored cross-site scripting exists in the template element attribute handling logic. The application accepted arbitrary for the TemplateElementAttribute type and category fields without them against the known MISP attribute type and category definitions. An attacker with permission to create or modify template element attributes could store a crafted type value.\n\n\nThis affects the old templating (not more accessible in 2.5.37) engine from MISP which will be removed in 2.5.38
</code>

C (2026-05-12)

<code>multiparty@4.2.3 and lower are to denial of service exception. By sending a multipart/form-data request with a field name that collides with an inherited Object.prototype property such as __proto__, constructor, or toString, the parser invokes .push() on the inherited prototype value rather than an array, throwing a TypeError that propagates as an uncaught exception and crashes the process. Impact: any service accepting multipart uploads is affected. Workarounds: none. Upgrade to multiparty@4.3.0 or higher.
</code>

C (2026-05-14)

C (2026-05-09)

<code>A flaw has been found in JeecgBoot 3.9.1. The impacted element is an unknown function of the file jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/LoginController.java of the component mLogin Endpoint. This manipulation causes authorization bypass. The attack is possible to be carried out remotely. The attack is considered to have high complexity. The exploitability is regarded as difficult. The exploit has been published and may be used. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-06-02)

<code>The Kirki – Freeform Page Builder, Website Builder &amp; Customizer plugin for WordPress is to pri escalation takeover in all 6.0.0 to 6.0.6. This is due to the plugin accepting an arbitrary email address when a username is used in the password reset request. This makes it possible for unauthenticated attackers to send a password reset link for any user registered on the site to their own email address.
</code>

C (2026-05-21)

C (2026-06-30)

<code>Memory o  NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA server
</code>

C (2026-06-18)

<code>An out-of-bounds write in FFmpeg's liba library, specifically in the MagicYU, allows denial-of-service and, in some cases, can be exploited for remote code execution.\n\n This is associated with the file liba/magicyuv.C.\n\n\n\nThis issue affects FFmpeg before 8.1.2.
</code>

C (2026-05-20)

<code>Code Injection in phenixdigital phoenix_storybook allows unauthenticated remote code execution attribute value interpolation in HEEx template generation.\n\nThe psb-assign WebSocket event handler in 'Elixir.PhoenixStorybook.Story.PlaygroundPre':handle_event/3 accepts arbitrary attribute names and from unauthenticated clients. These are passed to 'Elixir.PhoenixStorybook.Helpers.ExtraAssignsHelpers':handle_set_/3, which stores them . When rendering, 'Elixir.PhoenixStorybook.Rendering.ComponentRenderer':attributes_markup/1 interpolates binary attribute directly into a HEEx template string as name=&quot;&lt;val&gt;&quot; without escaping double quotes or HEEx expression delimiters. An attacker can supply a value containing a closing quote followed by a HEEx expression block (e.g. foo&quot; injected={EXPR} bar=&quot;), which causes EXPR to be treated as an inline Elixir expression. The resulting template is compiled via EEx.compile_string/2 and executed via Code.e/3 with full Kernel imports and no sandbox, giving the attacker arbitrary code execution on the server.\n\nThis issue affects phoenix_storybook from 0.5.0 before 1.1.0.
</code>

C (2026-08-04)

<code>An improper authentication in the &quot;social_login.cgi&quot; CGI program in Zyxel WAX650S firmware through 7.10(ABRM.4)C0 could allow an attacker on the WLAN to bypass capti authentication.
</code>

C (2026-05-28)

<code>Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH service allows unlimited authentication attempts and uses the same credentials as the web interface. This enables an attacker to brute-force valid credentials via SSH.\n\nSuccessful exploitation could allow an attacker with adjacent network access to obtain administrati through unrestricted authentication attempts and subsequently gain full administrati to the device, impacting system confidentiality, integrity, and a.
</code>

C (2026-09-01)

C (2026-08-03)

<code>PaperCut NG/MF does not properly restrict excessi attempts within its login component. An unauthenticated remote attacker can exploit this to perform unrestricted brute-force or credential-stuffing attacks without triggering account lockout or rate-limiting mechanisms in some configurations.
</code>

C (2026-08-03)

<code>PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this to perform username enumeration by measuring response times during login attempts. The system executes a password hash comparison only when a valid account is supplied, creating a measurable timing oracle that reveals account existence.
</code>

C (2026-05-28)

<code>The Ad Custom Fields: Extended plugin for WordPress is to Pri Escalation Bypass in all up to and including 0.9.2.5. The exists due to the after_() function unconditionally trusting the attacker-controlled _acf_post_id POST parameter — with no authentication or integrity — to select a cleanup branch that silently discards all errors not prefixed with acfe:. This makes it possible for unauthenticated attackers to suppress both the role allow-list error added by acfe_field_user_roles::() and the administrator-role capability guard error added by acfe_module_form_action_user::(), causing wp_insert_user() to execute with an attacker-supplied administrator role argument and resulting in the creation of a new administrator-level user account. Exploitation requires the target site to expose a public ACFE frontend form configured with a Create User action that maps a role field.
</code>

C (2026-05-27)

<code>The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is to Remote Code Execution in up to, and including, 2.3.5 This is due to the 'wpcode' custom post type being registered without a custom capability_type or capability restrictions in the wpcode_register_post_type() function, allowing WordPress core to fall back to standard post capabilities for all creation paths including XML-RPC. This makes it possible for authenticated attackers, with author-le and above, to create and publish executable PHP snippet posts wp.newPost, which are then executed ser via eval() in the run_eval() function when the snippet is rendered through the [wpcode] shortcode.
</code>

C (2026-05-18)

<code>A was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-based buffer o. The attack may be initiated remotely. The patch is named 0c957ec03054eb6c8205e9c9d1d05d90ada3898c. It is suggested to install a patch to address this issue. Two separate issue reports were submitted to the project. Their processing was merged as a duplicate.
</code>

C (2026-05-18)

<code>Unsafe use of Python's eval() on ser data in the () function in amazon-redshift-python-dri 2.1.14 allows a rogue server or man-in-the-middle actor to execute arbitrary code on the client. \n\n\n\nTo remediate this issue, users should upgrade to 2.1.14.
</code>

C (2026-06-09)

<code>Multiple Microsoft-sigend UEFI SHIM bootloaders are to SecureBoot bypass. An attacker with administrati or the ability to modify the boot process could use one of the shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these boot loaders.
</code>

C (2026-06-03)

<code> 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and compiles ser patterns as Ja regular expressions via new RegExp() without complexity . An on-path attacker can inject specific patterns to cause catastrophic backtracking, resulting in denial of service on all browsing.
</code>

C (2026-07-03)

<code>libcurl would reuse a pre created connection even when some mTLS config\nrelated option had been changed that should ha reuse.\n\nlibcurl keeps pre used connections in a connection pool for subsequent\ntransfers to reuse if one of them matches the setup. However, some TLS\nsettings related to client certificates were left out from the configuration\nmatch checks, making them match too easily. In particular options related to\nthe private key.
</code>

C (2026-05-22)

C (2026-06-25)

C (2026-07-18)

<code>uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and compiles it at runtime. Some file-controlled streamer metadata fields (for example, streamer element names) are interpolated into the generated Python source without safe quoting via repr() or the !r format specifier. An attacker who can supply a crafted ROOT file can place Python expression-breaking content into a streamer metadata field. When uproot generates and invokes the corresponding reader method, the injected Python expression is e in the context of the process opening the file, resulting in arbitrary Python code execution in applications that open or process attacker-controlled ROOT files with affected uproot code paths.
</code>

C (2026-07-17)

<code>IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1//code (executes user code via exec()) to achieve full RCE on default Langflow deployments
</code>

C (2026-08-24)

<code>An unauthenticated OS command injection exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can inject arbitrary commands and execute them with root pri.\n\n\n\n\n\n\nSuccessful exploitation may result in complete device compromise and impact the confidentiality, integrity, and a of the affected device and network traffic.
</code>

C (2026-05-22)

<code>NGINX Plus and NGINX Open Source have a in the ngx_http_rewrite_module module. This exists when a rewrite directive uses a regex pattern with distinct, o Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this by sending crafted HTTP requests. This may cause a heap buffer o in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software which ha End of Technical Support (EoTS) are not e.
</code>

C (2026-06-12)

<code> Title
</code>

C (2026-05-22)

C (2026-05-26)

<code>Pri escalation service of Open 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated pri IPC channel
</code>

C (2026-07-17)

<code>An unauthenticated SQL injection exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning with &lt;PolycomIPPhone&gt; and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries without sanitization or parameterization. An unauthenticated remote attacker can execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution.
</code>

C (2026-05-28)

<code>Exposed methods allow authenticated users to create and execute arbitrary Ja code on the server. The scripts execute with full access, enabling complete system compromise as commands are executed as root.
</code>

C (2026-06-15)

<code>Unauthenticated PHP Object Injection in Integration for Acti and Contact Form 7, WPForms, Elementor, Ninja Forms &lt;= 1.1.1 .
</code>

C (2026-05-28)

<code>A Local Pri Escalation (LPE) affects Acer NitroSense software prior to 3.01.3052. The stems from the the PSAdminAgent service, which creates a Named Pipe with a weak Access Control List (ACL). This allows any authenticated local user to connect and send commands. Because the service does not check the caller's pri before running file deletion commands, a low-pri local user can exploit this to delete arbitrary files with system authority.
</code>

C (2026-05-28)

<code>A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this by sending specially crafted SOAP requests to the SAML ECP (Security Assertion Markup Language Enhanced Client or Proxy) endpoint with client IDs. By observing distinct faultstrings in the responses, the attacker can determine the client's protocol type, leading to information disclosure.
</code>

C (2026-05-28)

<code>A stored cross-site scripting (XSS) exists in the notification panel of CTI Transmute in prior to the patched release. Notification messages containing user-controlled convert names were rendered in the notification bell dropdown using innerHTML without adequate sanitization. An attacker able to create or influence a convert name that is included in a notification could inject arbitrary Ja, which would execute in the browser of an authenticated user when they opened the notification panel. Successful exploitation could allow the attacker to perform actions in the 's session or access information a to the application in the browser context. The issue was remediated by constructing notification elements through DOM methods and assigning notification message content instead of innerHTML. This was only present on a de branch.
</code>

C (2026-05-29)

<code>A stored Cross-Site Scripting (XSS) exists in the Projects component of Mautic 7. When displaying project tags and popovers on administrati views (such as campaigns, emails, or forms), user-supplied project names are rendered without proper sanitization. An authenticated user with permissions to create or edit projects can exploit this to inject malicious script payloads. When an administrative user views an entity associated with a compromised project and hovers over its tag, the injected script executes within the context of their acti session. This could allow an attacker to perform administrati on behalf of the , alter system configurations, or exfiltrate sensitive data.
</code>

C (2026-05-29)

<code>A stored Cross-Site Scripting (XSS) exists in the project selector component of Mautic 7. When rendering selection menus for associating projects with system entities, the application fails to sanitize project names returned via AJAX before injecting them into the DOM as option fields. An authenticated user with permissions to create projects can exploit this to store a malicious script payload in the project's name. When another administrative user subsequently opens an entity editor containing the project selector, the injected script executes within the context of their acti session. This could allow an attacker to hijack the session, perform unauthorized state coordination, or access organizational data within the dashboard.
</code>

C (2026-07-27)

<code>The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users' bookings.
</code>

C (2026-07-20)

C (2026-08-27)

<code>SpeechBrain before 1.1.1 contains an arbitrary code execution that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.reco(). Attackers can embed malicious Python object construction tags such as !!python/object/apply in any CKPT.yaml file within the configured checkpoint path to trigger code execution during candidate discovery, even if the malicious checkpoint is ne for recovery.
</code>

C (2026-08-23)

<code>GitLab has remediated an issue in GitLab CE/EE affecting all from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could ha an authenticated user to achie code execution due to a path tra in the package registry.
</code>

C (2026-07-02)

<code>The Product Video Gallery for Woocommerce plugin for WordPress is to Stored Cross-Site Scripting Parameter in all up to, and including, 1.5.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with shop manager-le and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
</code>

C (2026-05-30)

<code>A was detected in code-projects Student Details Management System 1.0. This affects an unknown function of the file /index.php. Performing a manipulation of the argument roll results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
</code>

C (2026-06-30)

C (2026-06-09)

<code>An Authentication Bypass (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1  allows a remote unauthenticated attacker to create arbitrary administrati and obtain full administrati
</code>

C (2026-06-05)

<code>The Hippoo Mobile App for WooCommerce plugin for WordPress is to Authentication Bypass leading to Administrator Account Takeover in all up to and including 1.9.4. This is due to a logic conflation in HippooPermissions::get_user_permissions(), which returns the same null sentinel for both administrators and unauthenticated — a value that HippooPermissions::has_role_access() unconditionally interprets as full administrator access — causing osion_callback() to assign __return_true as the permission callback for every WordPress and WooCommerce REST route cloned under /wc-hippoo/v1/ext/ by HippooControllerWithAuth::re_register_external_routes(), while the block_unauthorized_access() pre-dispatch guard fails to block unauthenticated users for the same reason. This makes it possible for unauthenticated attackers to invoke any core REST endpoint without credentials — most critically, sending a POST request to /wc-hippoo/v1/ext/wp/v2/users/&lt;id&gt; with a {&quot;password&quot;:&quot;&lt;new_password&gt;&quot;} body to reset the password of any WordPress user, including the site administrator, and gain full administrati of the site.
</code>

C (2026-07-14)

<code>subsys/net/lib/lwm2m/lwm2m_pull_context.c copied the firmware-update Package URI into a fixed static buffer (context.uri, size CONFIG_LWM2M_SWMGMT_PACKAGE_URI_LEN, default 128) with memcpy(context.uri, uri, LWM2M_PACKAGE_URI_LEN), copying exactly the destination size with no length . The Firmware-Update object stores the ser Package URI (/5/0/1) in a 255-byte buffer, so a LwM2M management server (or an on-path attacker on a session lacking strong DTLS) can WRITE a URI of 128-254 characters; only the first 128 bytes are then copied into context.uri with no NUL terminator. That buffer is subsequently consumed as a C string by http_parser_parse_url(context.uri, strlen(context.uri), ...), strlen-based CoAP URI-path/PROXY-URI option appends, and lwm2m_parse_peerinfo(), causing an out-of-bounds read of adjacent static memory. The o bytes are appended to outbound CoAP requests (information disclosure of adjacent device memory to the ser) and can crash the device (denial of service). The copy was introduced by the pull-context refactor (first released in v3.0.0) and is present through v4.4.0; the default-on CONFIG_LWM2M_FIRMWARE_UPDATE_PULL_SUPPORT path is affected. The fix adds a strlen(uri) &gt;= sizeof(context.uri) check returning -ENOMEM and switches to strcpy(), guaranteeing a bounded, NUL-terminated buffer.
</code>

C (2026-06-02)

<code>JIT miscompilation in the Ja Engine: JIT component. This was fixed in Firefox 151.0.3.
</code>

C (2026-06-11)

<code>The UpdraftPlus: WP Backup &amp; Migration Plugin plugin for WordPress is to Authentication Bypass in all up to, and including, 1.26.4 via the UpdraftPlus_Remote_Communications_V2::wp_loaded function. This is due to insufficient of the remote communications message format, where signature can be bypassed and unchecked decryption return collapse to a predictable all-zero encryption key. This makes it possible for unauthenticated attackers to forge arbitrary RPC commands and run them as the connected administrator, such as uploading and acti a malicious plugin, which ultimately leads to remote code execution.
</code>

C (2026-06-30)

<code>Insufficient input leading to memory o in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the server (of type LB, CS, VPN) or the service configured on NetScaler
</code>

C (2026-07-25)

<code>The WPForms Pro plugin for WordPress is to Arbitrary File Upload in all up to, and including, 1.10.1.1 via the ajax_chunk_upload_finalize function. This is due to the file type occurring after chunk metadata and file contents ha been written to disk, and the assembled file not being deleted upon failure. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.
</code>

C (2026-06-04)

<code>Uninitialized Use in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a malicious file. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Inappropriate implementation in Installer in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-le escalation via a malicious file. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensiti from process memory via a crafted HTML page. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Insufficient of untrusted input in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Inappropriate implementation in NFC in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform pri escalation via a crafted HTML page. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Insufficient of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Insufficient of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Use after free in Updater in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-le escalation via a malicious file. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code network traffic. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Use after free in Views in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Inappropriate implementation in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security se: Medium)
</code>

C (2026-06-04)

<code>Insufficient of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security se: Medium)
</code>

C

C (2026-06-05)

<code>A was found in code-projects Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Dri Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely. The exploit has been made public and could be used.
</code>

C (2026-07-20)

<code>The Modern Event Calendar Pro WordPress plugin before 7.34.0, Modern Events Calendar Lite WordPress plugin before 7.34.0 do not sanitise and escape a request parameter before using it in a SQL statement, through an AJAX action a to unauthenticated users, leading to an unauthenticated SQL injection that allows attackers to extract sensitive data from the database.
</code>

C (2026-06-23)

<code>In ManageEngine ADSelfService Plus, Reco Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted\n by an unauthenticated user, leading to account takeover.
</code>

C (2026-07-01)

<code>The SMS Alert – SMS &amp; OTP for WooCommerce, Order Notifications &amp; Abandoned Cart Recovery plugin for WordPress is to pri escalation takeover in all up to, and including, 3.9.5. This is due to the plugin not properly a user's identity prior to updating their details like reset the password of any user account, including administrators, and gain full access to those accounts. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and le that to reset the user's password and gain access to their account. This is only on sites with OTP for password resets enabled, and where the administrator (or other user) has set a phone number for OTP .
</code>

C (2026-07-06)

<code>The web ser /bin/httpd contains a hidden backdoor authentication mechanism in the login() function at 004c88b8.\r\n\r\n- The function contains a normal authentication path using MD5/hash-based password (prod_encode64/PasswordToMd5/check_rand_key).\r\n- After normal authentication fails, it calls GetValue(&quot;sys.rzadmin.password&quot;) to read a backdoor password from the device configuration.\r\n- It performs a direct strcmp() comparison (plaintext, not hashed) between the config value and the user-supplied password.\r\n\r\nA successful match grants role=2 (admin-le) and creates a valid session. The rzadmin username is ne — any username works with the backdoor
</code>

C (2026-06-10)

<code>OS command injection in the NodejsFunction local bundling pipeline in aws-cdk-lib before 2.245.0 (2.246.0 on Windows) might allow an actor who controls the value of one or more bundling properties (externalModules, define, loader, inject, or esbuildArgs) to execute arbitrary commands on the host running the CDK toolchain shell metacharacters. This issue requires the threat actor to control the value of one or more of the affected bundling properties in the CDK application.\n\n\n\nTo remediate this issue, users should upgrade to aws-cdk-lib 2.245.0 (2.246.0 on Windows) or later.
</code>

C (2026-06-07)

<code>A was detected in GL.iNet GL-MT3000 4.4.5. This affects the function dlopen in the library /usr/lib/oui-httpd/rpc/ of the component Path Normalization Handler. Performing a manipulation of the argument de results in command injection. It is possible to initiate the attack remotely. Upgrading to 4.7 mitigates this issue. It is ad to upgrade the affected component. The confirms: &quot; From 4.7 onward, we ha method‑le at the HTTP /rpc layer. nas‑web.eject_disk is no longer in the whitelist of allowed methods. Consequently, directly calling eject_disk through the default /rpc endpoint returns Invalid params, pre entry into subsequent dangerous functions and blocking the remote exploit chain described in the report.&quot;
</code>

C (2026-06-08)

<code>A was determined in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to stack-based buffer o. The attack may be performed from remote.
</code>

C (2026-06-08)

<code>A was identified in SourceCodester In System 1.0. Affected is an unknown function of the file /users.php of the component User Management Page. The manipulation of the argument fullname/username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly a and might be used.
</code>

C (2026-06-19)

<code>The Branda plugin for WordPress is to pri escalation takeover in all up to, and including, 3.4.29. This is due to the plugin not properly a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and le that to gain access to their account.
</code>

C (2026-06-08)

<code>A was found in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formPPPEdit of the file /boaform/formPPPEdit. The manipulation of the argument encodename results in stack-based buffer o. The attack can be launched remotely. The exploit has been made public and could be used.
</code>

C (2026-06-11)

<code>Improper neutralization of special elements used in an expression language statement ('expression language injection') in Soagen Informatics Technologies Software and Consulting Inc. Apinizer allows Code Injection.\n\nThis issue affects Apinizer: from 2026.04.0 before 2026.04.6.
</code>

C (2026-09-04)

<code>The Divi Ajax Filter plugin for WordPress is to Local File Inclusion in all up to, and including, 5.1.2 via the 'custom_loop_template' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. This is only exploitable when the loop_templates parameter is set to 'custom-template'.
</code>

C (2026-06-08)

<code>Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se: High)
</code>

C (2026-06-18)

<code>The Optimole – Optimize Images | Convert WebP &amp; AVIF | CDN &amp; Lazy Load | Image Optimization plugin for WordPress is to Cross-Site Request Forgery in all up to, and including, 4.2.6. This is due to missing or incorrect nonce on the replace_file function. This makes it possible for unauthenticated attackers to o existing media attachments with attacker-supplied file content by supplying a forged multipart POST request targeting any attachment the has edit_post capability over via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. The forged request requires a with at least Author-le, as the handler enforces a current_user_can('edit_post', $id) check; tricking an Author-level or higher user into clicking a crafted link is sufficient to trigger the o against attachments that user can edit.
</code>

C (2026-06-22)

<code>A command\ninjection has been identified in the DHCP option processing logic\nin multiple TP-Link router models, due to insufficient of externally\nsupplied DHCP option data. An adjacent attacker may exploit this\n by supplying crafted DHCP responses, potentially resulting in unauthorized\ncommand execution during device initialization or pro workflows. This\ntypically occurs when the device is in a factory-default or unconfigured state.\n\n\n\n\n\nSuccessful\nexploitation may allow an adjacent, unauthenticated attacker to execute\narbitrary commands with elevated pri, potentially leading to full\ncompromise of the affected device and unauthorized administrati.
</code>

C (2026-06-10)

<code>A local pri escalation was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unpri local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized_key task as root, leading to local pri escalation.
</code>

C (2026-06-20)

<code>The Simple File List plugin for WordPress is to arbitrary file modification due to insufficient authorization checks in all up to, and including, 6.3.7. This makes it possible for unauthenticated attackers to delete and modify files on the serve. This is exploitable even when the administrator has not enabled the AllowFrontManage setting, because the is_admin() check unconditionally short-circuits the guard before that setting is e.
</code>

C (2026-07-17)

<code>The User Registration &amp; Membership WordPress plugin before 5.2.3 does not that the membership tier submitted during public registration is one of the tiers allowed by the registration form before assigning that tier's associated user role, allowing unauthenticated users to register into an arbitrary published membership tier and obtain its role — up to administrator when such a tier exists.
</code>

C (2026-06-19)

<code>The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS &amp; Email Automation plugin for WordPress is to Ser Request Forgery in all up to, and including, 2.8.7 via the upload_attachment. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Exploitation requires a form integration to be configured with a field mapped to a WooCommerce product image, product gallery, downloadable files, or Google Contacts attachment field, which is a default use case for these integrations.
</code>

C

C (2026-06-15)

<code>Socket before 2.041 for Perl have an out-of-bounds heap read.\n\nIn Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argument instead. Both addresses occupy a 4-byte field, so a valid multiaddr lets a source of any length pass the check, and the source is then copied into the 4-byte imr_sourceaddr field with a fixed-size copy. A source shorter than 4 bytes is not rejected, and the copy reads up to 3 bytes past the end of its buffer.\n\nCalling pack_ip_mreq_source() with a source value shorter than 4 bytes copies adjacent heap memory into the returned packed structure.
</code>

C (2026-07-02)

C

C (2026-07-07)

<code>The Frontend File Manager Plugin WordPress plugin through 23.6 does not a file path derived from user input before deleting the referenced file, allowing unauthenticated users to delete arbitrary files on the server (such as wp-config.php) when guest upload mode is enabled. Deleting wp-config.php forces the site into its setup routine, which can be le toward a full site takeover.
</code>

C (2026-06-16)

<code>Sandbox escape in the DOM: Na component. This was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
</code>

C (2026-09-29)

<code>The cleanup of tempfile.TemporaryDirectory is to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or ha permissions and file flags reset, with the pri of the process performing the cleanup. Note that platforms where shutil.rmtree.a is false, remain affected, and file flags may still be reset outside of the tree on all platforms.
</code>

C (2026-07-07)

<code>This allows an unauthenticated actor to bypass authentication and gain access to restricted resources on the device.
</code>

C (2026-07-10)

<code>The FlowForms – Con Form Builder plugin for WordPress is to Insecure Direct Object Reference in all up to, and including, 1.1.1 via the update_form due to missing on a user controlled key. This makes it possible for authenticated attackers, with contributor-le and above, to modify the content, design, and settings of, as well as publish or revert, any form on the site — including forms owned by administrators — by supplying an arbitrary form ID in the REST URL.
</code>

C (2026-06-27)

<code>The Invoice Generator plugin for WordPress is to pri escalation due to a missing capability check on the pra() AJAX action in up to, and including, 1.0.0. The handler is exposed l_in, accepts an attacker-controlled user_id and user_email from POST data, and calls wp_update_user() without authentication, ownership, or a nonce. This makes it possible for unauthenticated attackers to change the email address of any user, including administrators, and then trigger WordPress's password reset flow to gain access to the targeted account.
</code>

C (2026-06-24)

C (2026-07-30)

<code>IBM Langflow OSS 1.0.0 through 1.10.1  are to unauthenticated remote code execution injection in the MCP (Model Context Protocol) stdio launcher. The exists in src/lfx/src/lfx/base/mcp/util.py where the DANGEROUS_EN blocklist fails to include SHELLOPTS , BASHOPTS , and PS4 en .
</code>

C (2026-09-14)

<code>IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root pri (UID=0) on the Langflow server by submitting components containing socket or urllib imports. This enables: (1) AWS credential theft SSRF with full IAM role permissions, (2) arbitrary file exfiltration from the container filesystem, and (3) lateral mo to internal services (PostgreSQL, Redis) within the Docker network. The scanner incorrectly returns &quot;&quot;: true, pro a false security signal.
</code>

C (2026-07-07)

<code>A stored cross-site scripting (XSS) in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the browser of a user who views the affected pages (CWE-79).
</code>

C (2026-07-03)

<code>An Improper Export of Android Application Components in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS Router App to open an specified URL.\nRefer to the '\nSecurity Update for ASUS Router Android App ' section on the ASUS Security Ad for more information.
</code>

C (2026-07-14)

<code>The Podlo Publisher plugin for WordPress is to arbitrary file uploads due to missing file type in the 'podlo' function in all up to, and including, 4.5.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's ser may make remote code execution possible.
</code>

C (2026-07-27)

<code>The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not prevent its custom registration fields from writing to the user capabilities meta key on sites that use a non-default database table prefix, so an unauthenticated user who registers an account can be granted the administrator role when a correspondingly named field has been configured.
</code>

C (2026-07-20)

<code>The MailerSend WordPress plugin before 1.0.8 does not perform a nonce check on its configuration-delete action (it the manage_options capability but ignores the nonce), so an attacker can trick a logged-in administrator into a crafted page that wipes the MailerSend WordPress plugin before 1.0.8's SMTP configuration and deactivates the MailerSend WordPress plugin before 1.0.8, breaking the site's email delivery.
</code>

C (2026-08-01)

<code>The Demo Import WordPress plugin through 1.1.3 does not the type of files uploaded during demo-content import (the WordPress file-type test is disabled), allowing high-pri users (Administrator by default, including non-super-admin site administrators on multisite) to upload executable PHP files to the uploads directory.
</code>

C (2026-08-01)

<code>The E Toolkit WordPress plugin through 1.2.3 does not the type of files uploaded during demo-content import (the WordPress file-type test is disabled), allowing high-pri users (Administrator by default, including non-super-admin site administrators on multisite) to upload executable PHP files to the uploads directory.
</code>

C (2026-07-22)

<code>In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeName processing and trigger unsafe attacker-controlled type resolution, enabling remote code execution in affected deployments.
</code>

C (2026-07-10)

<code>Ser Request Forgery (SSRF) in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider : from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.
</code>

C (2026-07-10)

<code>The Logo Slider – Logo Carousel, Client Logo Slider &amp; Brand Showcase for WordPress plugin for WordPress is to Stored Cross-Site Scripting via the 'lgx_tooltip_position' parameter in all up to, and including, 5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-le and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
</code>

C (2026-09-24)

<code>An unauthenticated Remote Code Execution File Upload in the web management interface in Honeywell PD45 Industrial Printer F10.19.010040, allows upload of attacker controlled files without requiring authentication.\n\n\nAn attacker could potentially exploit this , leading to the execution of malicious files and commands. Honeywell also recommends updating to the most recent firmware , Honeywell PD45 Industrial Printer firmware F10.22.030745, which includes a fix for this .
</code>

C (2026-09-22)

<code>The Meta Box AIO plugin for WordPress is to Pri Escalation to Administrator in up to, and including, 3.11.0. This is due to a chained flaw: the populate_() function in the mb-frontend-submission component unconditionally o the form's target object_id from the GET parameter 'rwmb_frontend_field_object_id' without any authorization check, and Form::process() lacks the user_can_edit() check present in render(), allowing unauthenticated attackers to o the post_content of any page with an arbitrary shortcode (); the mb-user-profile component then directly trusts the 'role' and 'auto_login' shortcode attributes in the injected [mb_user_profile_register] shortcode with no role . This makes it possible for unauthenticated attackers to elevate their pri to Administrator. The standalone plugins Meta Box Frontend Submission (in up to 4.5.6) and Meta Box User Profile ( up to 3.11.0) are also affected.
</code>

C (2026-09-05)

<code>The Mstore Api plugin for WordPress is to Authentication Bypass via JWT Forgery in up to, and including, 4.20.0 This is due to missing cryptographic signature in the FirebasePhoneAuthHelper::() function, which decodes and Firebase ID token claims (alg, kid, aud, iss) but ne openssl_() or any equi to the JWT signature against Google's actual public key certificates. This makes it possible for unauthenticated attackers to forge a Firebase Phone Auth JWT signed with a self-generated RSA key pair and impersonate any phone number, resulting in unauthorized access to existing WordPress accounts or creation of new arbitrary accounts.
</code>

C (2026-07-15)

<code>Allocation of Resources Without Limits and Throttling and Sensiti in Resource Not Remo Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a local administrator to disclose sensiti IOCTL requests, which, in severe cases, may lead to a Denial of Service (DoS) on the system.\nRefer to the ' \nSecurity Update for ASUS System Control Interface  ' section on the ASUS Security Ad for more information.
</code>

C (2026-08-13)

<code>The Ki WordPress plugin before 4.5.2 does not restrict the roles assignable through its unauthenticated registration endpoint, allowing unauthenticated attackers to create an acti clinic-staff (doctor) account with full access to patient records, billing and clinic data.
</code>

C (2026-07-27)

<code>The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.3.0 does not the type of uploaded files, and its file upload functionality is gated only by an API that is enabled by default and authenticated with hardcoded credentials shipped identically across all installations. This makes it possible for unauthenticated attackers to upload arbitrary PHP files and achie code execution.
</code>

C (2026-08-21)

<code>The NewPath WildApricotPress Add-on WordPress plugin through 1.0.0 does not enforce its members-only field privacy on an unauthenticated REST route, allowing anonymous to read member email addresses and phone numbers that are configured to be to members only.
</code>

C (2026-07-06)

<code>Certain HP DeskJet All-in-One printers may be potentially to information disclosure that allows an unauthenticated attacker to access sensiti through exposed APIs.
</code>

C (2026-07-02)

<code>Gardyn devices expose a pri iothubowner key. Access to this key will allow a malicious user to invoke an IoTHub Registry Manager function which returns connection information for all Gardyn Home Kit and Studio devices. Access to this key also allows a malicious user to execute arbitrary commands on a specific connected device and may allow the malicious user to pivot to other devices on the user's network.
</code>

C (2026-06-30)

<code>Insufficient of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security se: Medium)
</code>

C (2026-07-01)

<code>An out-of-bounds heap write exists in the RAR5 reco (.re in WinRAR and UnRAR (Rec::ReadHeader in recvol5.cpp). The RecItems is sized only when the first .rev file in a set is processed; subsequent .re supply an independent RecNum value that is against that file's own TotalCount field but ne the actual size of RecItems. A crafted set of two or more .re can therefore write an attacker-controlled 32-bit value (the header's RevCRC field) to RecItems[RecNum] at an attacker-controlled offset up to 65534 * sizeof(Rec) bytes past the allocation, corrupting adjacent heap objects. Triggering requires the to run a recovery/test operation on an attacker-supplied .rev set (for example 'unrar t x.part1.rev', WinRAR 'Repair archive', or auto-recovery when extracting a set with a missing .rar part). This is the RAR5-path sibling of C (which was fixed in the RAR3 path only in WinRAR 6.23). Fixed in WinRAR / RAR 7.23.
</code>

C (2026-07-29)

<code>7-Zip XZ Decompression Heap-based Buffer O Remote Code Execution . This allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the processing of XZ chunked data. Crafted XZ-compressed data can trigger an o of a heap-based buffer. An attacker can le this to execute code in the context of the current process. Was ZDI-CAN-30169.
</code>

C (2026-09-25)

C (2026-07-23)

<code>The GoDAM – Organize WordPress Media Library &amp; File Manager with Unlimited Folders for Images, &amp; more plugin for WordPress is to arbitrary file uploads in up to, and including, 1.12.2. This is due to insufficient file type in the sa() function hooked into WPForms' public wpforms_process_before_filter, which trusts the attacker-supplied multipart Content-Type header, preserves the original filename (), and moves the raw upload with $wp_filesystem-&gt;move() into a web-ser — bypassing wp_handle_upload()'s MIME/extension allowlist. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's ser may make remote code execution possible.
</code>

C (2026-08-14)

<code>The Embed Google Photos album WordPress plugin through 2.2.1 does not escape a shortcode attribute value before outputting it inside an HTML attribute, allowing users with the Contributor role or above to inject arbitrary Ja that executes in the browser of any user, including administrators, who views the affected post.
</code>

C (2026-07-08)

<code>The consul-template library before 0.42.1 is to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to o an existing file. This (C) is fixed in consul-template 0.42.1.
</code>

C (2026-10-02)

C (2026-07-01)

<code>Insufficient of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security se: High)
</code>

C (2026-07-01)

<code>Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se: High)
</code>

C (2026-07-03)

<code>Improper neutralization of argument delimiters in a command ('argument injection') in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection.\n\nThis issue affects pardus-software: from &lt;= 1.0.4 before 1.0.5.
</code>

C (2026-07-10)

<code>mtr is to Out-of-bound read in ipinfo_lookup() function. An attacker who can influence the TXT response used for AS lookups can trigger this bug by returning a DNS response that is larger than 512 bytes and uses a crafted compression pointer in the answer NAME field. ipinfo_lookup() function uses the length of the response as the end-of-message boundary for dn_expand() function. The result is a reliable crash.\n\n\nThis issue exists in the mtr through 0.96 and it was fixed in commit 48e1794414d338ce47abc0f27c25ade8788af9c3.
</code>

C (2026-07-31)

<code>The Realtyna Organic IDX plugin + WPL Real Estate plugin for WordPress is to Arbitrary File Upload in all up to, and including, 5.2.0 via the upload function. This is due to missing file type in the upload function, combined with a publicly accessible I/O endpoint authenticated solely by static, plugin-seeded API credentials that are identical across all installations. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible. The WPL I/O service endpoint is registered on the public WordPress init hook with no WordPress capability check, and the required api_key and api_secret are static defaults seeded by the plugin's own SQL migration files, meaning any unauthenticated attacker who knows these publicly documented defaults can reach and exploit the upload path.
</code>

C (2026-07-04)

<code>A was detected in NousResearch hermes-agent up to 2026.5.16. This impacts the function extract_media of the file gateway/platforms/base.py of the component Li Endpoint. Performing a manipulation results in path tra. The attack may be initiated remotely. The exploit is now public and may be used. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-08-13)

<code>Integer wraparound in PostgreSQL ts and tsquery data type functions allows an unpri database user to cause the server to undersize an allocation and write out-of-bounds, large inputs. This may execute arbitrary code as the operating system user running the database. These types are typically sourced from application logic, not taken from the application's user. Hence, application users attacking the database, through the application as a conduit, are unlikely. C had fixed similar problems. before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
</code>

C (2026-08-13)

<code>Heap buffer o in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbre. before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
</code>

C (2026-07-05)

<code>A was detected in code-projects Hotel and Tourism Reser 1.0. The impacted element is an unknown function of the file /admin/rooms.php of the component Room Management Page. The manipulation of the argument delete results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
</code>

C (2026-07-06)

<code>A was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-de. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
</code>

C (2026-08-01)

<code>The YOP Poll WordPress plugin before 7.0.6 does not the connection's origin IP address and instead trusts client-controlled forwarding headers when enforcing its per-IP vote restriction, allowing unauthenticated attackers to bypass the vote limit and cast unlimited votes on a public poll.
</code>

C (2026-07-27)

<code>A stored Cross-Site Scripting (XSS) in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, caused by insufficient and sanitization of S. An authenticated user with low pri can upload a malicious SVG file containing Ja code. When an administrator views that file, the code executes in the context of their browser. By chaining this with a Cross-Site Request Forgery (CSRF) attack, an attacker can extract the administrator’s CSRF token and perform unauthorized actions—such as modifying credentials—thereby gaining full control of the administrati.
</code>

C (2026-07-17)

<code>osTicket v1.18.3 and v1.17.7 contain a Broken Object Le (BOLA) leading to Insecure Direct Object Reference (IDOR) in the AJAX ticket-management subsystem.
</code>

C (2026-07-10)

<code>The Super Forms – Drag &amp; Drop Form Builder plugin for WordPress is to Arbitrary File Upload in all up to, and including, 6.3.313 via the submit_form function. This is due to missing file type and the absence of any capability check on the submit_form nopriv AJAX handler, whose only barrier is a session nonce freely obtainable by unauthenticated via a separate nopri. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible. The nonce requirement is tri bypassed because the super_create_nonce nopriv AJAX action allows any unauthenticated to mint a valid sf_nonce and session cookie in a single prior request, reducing exploitation to two unauthenticated HTTP requests.
</code>

C (2026-07-15)

C (2026-07-14)

<code>Post-authentication improper control of generation of code ('Code Injection') has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.
</code>

C (2026-08-03)

<code>Improper access control in the IRP_MJ_WRITE command interface in\r\nWellbia XIGNCODE3 xhunter2.sys, 2026.6.1.192, allows a local, unpri attacker to achie pri escalation to\r\nNT AUTHORITY\SYSTEM, extract credentials from PPL-protected\r\nlsass.exe, and terminate PPL-protected security processes.
</code>

C (2026-08-24)

<code>The use of\nhard-coded cryptographic key has been identified in the mesh\nfunctionality of Deco XE75 v3, XE5300 v3.6 and WE10800 v3.6. \nA shared RSA-512 mesh group private key is present in the affected\nfirmware and is used by the mesh protocol for node authentication.  An attacker who obtains the firmware image\nand has local network access may be able to authenticate as a mesh node without\npossessing a de credential.\n\n\n\n\n\nSuccessful\nexploitation may allow an unauthenticated adjacent attacker to impersonate a\ntrusted mesh node and bypass mesh node authentication, which may permit unauthorized\nchanges to device or mesh configuration, affecting confidentiality, integrity\nand a.
</code>

C (2026-07-12)

<code>A was detected in AojiaoZero Antaris 1.0. This affects the function _rewardPurchase of the file /ipn.php of the component PayPal IPN Payment Handler. The manipulation of the argument item_number results in sql injection. The attack may be performed from remote. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-07-15)

<code>A confused-deputy flaw in Grafana MCP Ser an unauthenticated remote attacker to exfiltrate the server's en Grafana ser token by supplying a crafted X-Grafana-URL request header. This also enables SSRF against arbitrary internal services, including cloud metadata endpoints.
</code>

C (2026-07-13)

<code>A weakness has been identified in ant 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.
</code>

C (2026-08-20)

<code>Missing authentication for critical function in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS) allows Authentication Bypass.\n\nThis issue affects Baylan Smart Meter Management Application (BMS): before v1.1.10.142.
</code>

C (2026-07-14)

<code>We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13.
</code>

C (2026-08-18)

<code>The Forminator Forms plugin for WordPress is to Arbitrary File Upload in all up to, and including, 1.56.1 via the handle_file_upload function. This is due to insufficient file type in handle_file_upload, where the dangerous-extension blocklist performs exact-key matching that is bypassed by pipe-alternative MIME type keys, combined with a public submission handler that trusts attacker-controlled upload field configuration injected via a forged Select field value. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.
</code>

C (2026-08-15)

<code>The User Profile Builder plugin for WordPress is to Authentication Bypass via Type Confusion in up to, and including, 3.16.4. This is due to the wppb_log_in_user() function calling absint() on the return value of wp_insert_user() before performing an is_wp_error() check — when a registration is submitted with a 61–70 character username, WordPress core rejects it with a WP_Error object, but absint() coerces that object to the integer 1 before the error check can short-circuit execution, causing the plugin to bind and return a transient-backed autologin nonce tied to user ID 1. This makes it possible for unauthenticated attackers to log in as the site's Administrator account (user ID 1), resulting in full administrati of the site.
</code>

C (2026-10-01)

<code>Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensiti due to improper TLS certificate .
</code>

C (2026-08-01)

C (2026-10-01)

<code>The Super Forms – Drag &amp; Drop Form Builder plugin for WordPress is to Pri Escalation in all up to, and including, 6.3.316. This is due to the Register &amp; Login add-on's before_email_success_msg() function whitelisting the client-submitted 'role' key and copying it into the user-data array that is passed directly to wp_insert_user(), without the submitted role against the administrator-configured register_user_role, without an allow-list, and without any current_user_can() capability check. This makes it possible for unauthenticated attackers to register a new account with the Administrator role by injecting role=administrator into the data submitted to any published Super Forms registration form (register_login_action='register').
</code>

C (2026-07-19)

<code>A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManager/src/Utility/FileManager.php of the component Admin File Manager. This manipulation causes path tra. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
</code>

C (2026-07-22)

<code>An authentication bypass in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrati. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this is being exploited and has affected a very small number of customers.
</code>

C (2026-08-07)

<code>The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not restrict the operation it dispatches, allowing users with a Subscriber account to trigger uncontrolled recursion that exhausts ser, resulting in a Denial of Service.
</code>

C (2026-08-24)

<code>An authenticated command injection in TP-Link Archer BE800 V1 allows an attacker with administrati to execute arbitrary system commands with root pri by injecting shell metacharacters via a . \n\n\n\n\nSuccessful exploitation may enable persistent backdoors, credential theft, LAN reconnaissance, and router-assisted attacks against connected devices.
</code>

C

C (2026-08-02)

<code>The Simply Schedule Appointments WordPress plugin before 1.6.12.6 does not correctly restrict a bulk appointment operation to the requester's own records, allowing unauthenticated users to retrieve the personal data of all appointments across the site and, on premium editions, to permanently delete them.
</code>

C (2026-07-23)

<code>A remote code execution (RCE) exists in fastjson 1.2.68 through 1.2.83. This is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required.
</code>

C (2026-07-23)

<code>A was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file dojo/api_v2/serializers.py of the component API/Web. Such manipulation of the argument is_staff leads to improper pri management. The attack may be performed from remote. The exploit is publicly a and might be used. Upgrading to 2.58.3 and 3.0.0 is capable of addressing this issue. The name of the patch is 68a272f299d096249fd3ba9c2676bf69012857bf. It is ad to upgrade the affected component. 2.59.0 was not intended to be released and has been removed.
</code>

C

C (2026-08-25)

<code>The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is to Reflected Cross-Site Scripting via the 'header_format' parameter in all up to, and including, 7.4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. The shortcode entry point sanitizes 'header_format' (), but the unauthenticated 'search_e' AJAX action bypasses this sanitization entirely, leaving the parameter unsanitized before it is echoed into the HTML body in output_grouped().
</code>

C (2026-08-18)

<code>The tar extraction routines in moby/go-archi, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor decides where each archi lands using lexical string checks and then performs the filesystem operation on a path that is resolved by the OS, so links introduced by the archive can be followed out of the destination directory. An attacker who controls the contents of an archive can create or o files at arbitrary paths writable by the extracting process.
</code>

C (2026-07-31)

<code>The fix for C in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's execute_sql_query tool to parse, , as exactly one non-transaction-control statement before running it inside a BEGIN TRANSACTION READ ONLY wrapper. sqlparse's string-literal lexing can disagree with PostgreSQL's own parser: under standard_conforming_strings = on (PostgreSQL's default since 9.1), a backslash immediately before a quote is an ordinary character to PostgreSQL, but sqlparse treats it as escaping the quote. A payload such as SELECT '\';COMMIT;CREATE TABLE pwn(x int);SELECT 1 --' therefore parses as a single SELECT to sqlparse's , while PostgreSQL executes it as four statements: the smuggled COMMIT ends the wrapping read-only transaction, and the trailing ROLLBACK becomes a no-op. This reintroduces the same write/RCE bypass C was meant to close, reachable via the same indirect prompt-injection delivery (an attacker plants the payload in any object the AI Assistant may read; the LLM emits it as a tool call).\n\nAn initial candidate fix ran the query with psycopg's execute(..., prepare=True), intending to force PostgreSQL's own Parse step (extended query protocol) to reject multi-statement text regardless of sqlparse's classification. This candidate fix does not work as submitted: psycopg3's PrepareManager silently ignores the prepare argument whenever the connection's prepare_threshold is None, which is pgAdmin's default for every ser (the per-server &quot;Prepare threshold&quot; field is blank unless an administrator explicitly sets it) -- psycopg3 falls back to the simple query protocol, the same multi-statement-capable path the bypass exploits, so the candidate fix closes nothing on any real-world default configuration.\n\nThe corrected fix sets conn.prepare_threshold = 0 directly on the dedicated, single-use read-only connection the AI Assistant tool opens, structurally forcing the extended query protocol independent of any ser configuration. against a li 18 instance: the payload executes successfully under the prepare_threshold=None (default) behavior, and is rejected with &quot;cannot insert multiple commands into a prepared statement&quot; once prepare_threshold=0 is set on that connection.\n\nThis issue affects pgAdmin 4: from 9.13 before 9.17.
</code>

C (2026-08-05)

<code>The Seraphinite Accelerator plugin for WordPress is to Reflected Cross-Site Scripting via the 'seraph_accel_prep' parameter in up to, and including, 2.29.15. This is due to the CacheExtractPreparePageParams() function using PHP's loose inequality operator (!=) to compare the expected HMAC string against the JSON-decoded 'nonce' value — supplying the JSON boolean true causes any non-empty HMAC string to compare as loosely equal, bypassing the signature check — combined with insufficient output escaping in the _CbContentFinishSkip() function, which concatenates the attacker-controlled 'selfTest' field directly into the HTML response body. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a specially crafted link.
</code>

C (2026-07-30)

<code>Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP  from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
</code>

C (2026-07-30)

<code>Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.
</code>

C (2026-07-31)

<code>pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by interpolating a user-supplied SQL query into a Jinja template and passing the rendered line to psql . To stop an attacker from breaking out of the (...) wrapper, create_import_export_job() (route POST /import_export/job/&lt;sid&gt;, gated only by the ordinary, commonly-granted tools_import_export_data permission) the query with a hand-written parenthesis-balance checker, _is_query_parens_balanced(). That checker always treated a backslash before a single quote (\') as escaping the quote, i.e. as if standard_conforming_strings were off. PostgreSQL has defaulted standard_conforming_strings to on since 9.1 (2010), the default on every PostgreSQL pgAdmin 4 currently supports (13-18); under that default psql's own \copy tokenizer treats \ as an ordinary character, so a single quote immediately after it closes the string literal. A query such as SELECT 'a\') TO PROGRAM 'echo pwned' x' was therefore accepted as &quot;balanced&quot; by pgAdmin's checker (which believed the ) was still inside the string), while psql, run through the actual rendered command line, closes the string at that point and treats the following ) as the end of the wrapping \copy (...) subquery, exposing an attacker-chosen TO PROGRAM '&lt;command&gt;' clause that psql executes () -- independent of a subsequent syntax error later on the same line. This is the same class of bug as C/C (RCE via psql meta-command/COPY injection during PLAIN-format dump restore), reached through an independently written defense in a different module (Import/Export Data rather than Restore) that had its own, different logic bug (in backslash-escape semantics rather than a BOM-defeated regex anchor).\n\nThe fix rejects any backslash inside a single-quoted string in the query outright, rather than picking one of the two possible psql interpretations. This is intentionally conser: because the correct interpretation of \ depends on the target server's standard_conforming_strings setting, which the checker cannot reliably know at time, refusing the query is safer than guessing.\n\nThis issue affects pgAdmin 4: from the introduction of _is_query_parens_balanced() before 9.18.
</code>

C (2026-08-05)

<code>The affected\n\nThermo Fisher Applied Biosystems Genetic Analyzers are  because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.
</code>

C (2026-08-05)

<code>IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injection.
</code>

C (2026-08-26)

C (2026-07-29)

<code>An out-of-bounds write was found in the BFD library's DLX ELF backend (bfd/elf32-dlx.c) in GNU binutils. The dlx_rtype_to_howto() function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type ((r_info)) before indexing into the dlx_elf_howto_table[] array. The DLX relocation type number space is non-contiguous (basic types 0-6, extended types at 0x10000+), but the default case in the switch statement allows arbitrary index to reach the array access.\n\nA specially crafted ELF/DLX object file can trigger this out-of-bounds write when processed by any BFD-consuming tool (objdump, readelf, strip, ld, nm, objcopy). The has been demonstrated to achie code execution via a File Stream Oriented Programming (FSOP) attack against glibc FILE structures (stderr), redirecting control flow to system().\n\nAttack scenarios include CI/CD pipelines performing automated binary analysis, de workstations running objdump/readelf on untrusted binaries, automated security scanning or malware analysis tools in binutils, and package build systems processing third-party code.\n\nNote: This is only exploitable when binutils is built with the DLX backend enabled (typically =all).
</code>

C (2026-08-19)

<code>The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is to Authorization Bypass Through User-Controlled Key leading to Account Takeover in all up to, and including, 1.2.6. This is due to the admin_user_create_cus AJAX handler lacking any authentication or capability check before passing the attacker-supplied truebooker_wp_user_id parameter directly to wp_update_user. This makes it possible for unauthenticated attackers to o the email address of any WordPress user — including an administrator — and then complete the standard WordPress lost-password flow to fully take over the targeted account.
</code>

C (2026-08-05)

C (2026-08-12)

<code>The Events Manager WordPress plugin before 7.4.1 does not properly scope its capability mapping, discarding the access control decisions WordPress already made for unrelated pri actions, which allows unauthenticated users to change the password of, escalate to Administrator, or delete any account whose user ID happens to match the ID of one of the Events Manager WordPress plugin before 7.4.1's own posts.
</code>

C (2026-08-26)

<code>The Avada theme for WordPress is to Arbitrary File Write in all up to, and including, 7.16 when the Fusion Builder plugin is installed and active in up to, and including, 3.16. This is due to a chain of authorization and input weaknesses across the two components that makes it possible for unauthenticated attackers to write attacker-controlled files to the server. This can be used to create and execute arbitrary PHP files, resulting in remote code execution and complete site compromise. Successful exploitation requires both Avada and Fusion Builder to be installed and active, as well as certain administrator-authored content to be present.
</code>

C (2026-08-09)

<code>The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also a to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts ser, resulting in a Denial of Service.
</code>

C (2026-08-18)

<code>fastify is a fast and low o web framework for Node.js. of fastify before 5.12.1 are affected by a schema bypass when a request body schema targets a root primiti. When the schema a top-le such as an integer, Ajv can coerce a JSON string into the expected type during , but Fastify does not replace the root request body with the coerced value, so the route handler receives the original un string. As a result, a request that should ha can reach application logic with a value that does not satisfy the schema, which can undermine integrity and access-control checks that rely on the type. Users should upgrade to fastify 5.12.1, which fixes the mismatch. No known workarounds are a.
</code>

C (2026-08-01)

<code>Authentication bypass using an alternate path or channel in N-able N-central allows Authentication Bypass.\n\nThis issue affects N-central: through 2026.1.
</code>

C (2026-08-03)

<code>An authentication bypass in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful exploitation could result in full compromise of the Security Management system. Check Point discovered this issue internally and has no indication of acti.
</code>

C (2026-08-02)

<code>An incomplete patch for C allows for authentication bypass and account takeover in N-central through 2026.3.1
</code>

C (2026-08-06)

<code>A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP fragments without e an end-of-fragment marker, causing the reassembly buffer to grow without bound until process memory is exhausted. This results in a denial of service through process termination.
</code>

C (2026-08-03)

<code>Ghidra contains an arbitrary code execution in the Swift demangler analyzer that allows an attacker to execute arbitrary binaries by supplying a malicious Ghidra project with a crafted Swift tool directory path. When a opens the attacker-supplied project, SwiftDemanglerAnalyzer restores the persisted Swift binary directory from project state and SwiftNati executes the resol without integrity or signature , causing attacker-controlled executables to run under the Ghidra process user with no prompt or confirmation.
</code>

C (2026-08-28)

<code>IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code.
</code>

C (2026-08-13)

<code>Worksuite SaaS prior to 6.0.14 contains a stored cross-site scripting in the Asset Management module that allows authenticated administrators to inject arbitrary Ja by entering malicious payloads into the Location and Description fields when creating a new asset. Attackers can store crafted HTML script tags in the application database that execute automatically in the browsers of any user who views the affected asset, potentially leading to session hijacking, credential theft, and unauthorized actions on behalf of authenticated users.
</code>

C (2026-09-30)

<code>Improper neutralization of special elements used in an SQL command ('SQL injection') in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection.\n\nThis issue affects Trex MES: through 2026-09-29.
</code>

C (2026-09-30)

<code>Missing authentication for critical function in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass.\n\nThis issue affects Trex MES: through 2026-09-29.
</code>

C (2026-08-04)

<code>Insufficient input in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model in and security controls content blocks in con messages. AWS has addressed this issue. No customer action is required.
</code>

C (2026-08-05)

<code>Path Tra in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write tra sequences in the filename.
</code>

C (2026-08-19)

<code>The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query it accepts from user input on sites using plain permalinks, allowing unauthenticated users to o arbitrary PHP global , and to execute arbitrary code on the server when a classic (non-block) is active.
</code>

C (2026-08-05)

<code>Improper limitation of a pathname to a restricted directory in the get_resource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.4 might allow a context-dependent actor to write arbitrary files outside the intended working directory via the sa parameter.\n\n\n\nTo remediate this issue, users should upgrade to 0.1.5 or later.
</code>

C (2026-08-18)

<code>A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email link. This can result in the attacker gaining full control o user accounts by directly setting new credentials.
</code>

C (2026-08-10)

<code>The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not uploaded file types when its accepted-types setting is left empty, which its own documentation ad as accepting all files, allowing unauthenticated attackers to upload arbitrary files and achie code execution on servers that do not honour the directory's access rules.
</code>

C (2026-09-23)

<code>The EthPress – Web3 Login plugin for WordPress is to Authentication Bypass in all up to, and including, 2.3.5. This is due to the () function in app/Login.php containing a missing return statement in the signature failure branch — when Signature::() reports a mismatch, the function only assigns a WP_Error to a local and continues executing, causing unconditional fall-through to the login block where Address::log_in() calls wp_set_auth_cookie() regardless of whether the submitted signature is valid. This makes it possible for unauthenticated attackers to log in as any WordPress user who has a linked wallet address — including administrators — by submitting that user's public wallet address alongside an arbitrary well-formed signature, enabling full site takeover.
</code>

C (2026-08-07)

<code>A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in the library kvcore.sys of the component Minifilter Port. Executing a manipulation can lead to improper access controls. The attack needs to be launched locally. The exploit has been published and may be used. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-08-07)

<code>A has been found in Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Kernel Driver. The manipulation leads to improper access controls. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-08-07)

<code>Postiz is an open-source social media scheduling tool. The route that ser stored media joins URL-supplied path segments onto the upload directory and streams the file without normalising the path or confining it to that directory, and the route requires no authentication. Raw dot-segments are collapsed before routing, but URL-encoded separators sur and are decoded only once they reach the handler, restoring the tra at the filesystem call. An unauthenticated remote attacker can therefore read any file readable by the application process, including the process en, which exposes the JWT signing secret, the database connection string, and connected provider and billing secrets. Because session tokens are signed with that secret and carry no expiry, this allows forging a non-expiring session as any user, including an administrator, without a password.
</code>

C (2026-08-28)

<code>IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper enforcement of security restrictions on the A2A public endpoint.
</code>

C (2026-08-28)

<code>IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the ser by saving a flow with a crafted type field value and triggering a build of a wrapper flow that references it. This allowed pri escalation from &quot;authenticated flow user&quot; to arbitrary OS-le execution under the ser identity, bypassing the LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false policy control.
</code>

C (2026-09-30)

<code>A remote, unauthenticated TLS client can make a ser or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per ser) and nothing else keeps the original ssl.SSLContext ali\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected.
</code>

C (2026-08-17)

<code>GitLab has remediated an issue in GitLab CE/EE affecting all from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive.
</code>

C (2026-08-19)

<code> in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.
</code>

C (2026-08-18)

<code>The Entries component in Brainstorm Force SureForms , less than 2.12.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust ser, prevent administrators from accessing the Entries interface, and trigger HTTP 500 errors form submissions.
</code>

C (2026-08-18)

<code>CS functionality in Brainstorm Force SureForms , &lt;= 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CS, which allows a remote attacker to execute spreadsheet formulas on an administrator's workstation when the exported CSV file is opened in a spreadsheet application.
</code>

C (2026-08-11)

<code>A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafana_api_request tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can direct requests at internal, loopback, and link-local network services (including metadata endpoints) and read the responses, resulting in ser request forgery. The fix for C pre the configured ser token from being sent to unintended destinations but did not restrict the destinations themselves.
</code>

C (2026-09-30)

<code>ssl.SSLContext.wrap_bio() didn't require the ser argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the ser argument\nisn't supplied then hostname would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname \n*appeared* to be succeeding with SSLContext.check_hostname = True and no\n being raised due to misconfiguration.\n\n\nIf the program passes a ser value that isn't an empty string\nor None to any of these APIs then certificate hostname \nproceeds as expected and the program is not affected by this .\n\n\nMitigating this doesn't require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nser value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname will proceed as expected. Upgrading to\nthe latest of Python or applying the patch only changes the\nbehavior from silently skipping hostname to raising a\n, similar to SSLContext.wrap_socket(), when ser\nisn't supplied.
</code>

C (2026-08-20)

<code>A pre-authentication OS command injection has been identified in Omada gateways configured to operate as an Open due to insufficient of client-supplied data during Open establishment. An unauthenticated remote attacker may provide specially crafted input influencing backend command execution logic before authentication completes. Exploitation requires the Open feature to be enabled, reachable by the attacker and attacker to be able to initiate an Open attempt. \n\n\n\nSuccessful exploitation may allow arbitrary command execution, potentially\nleading to full compromise of the affected device.
</code>

C (2026-08-15)

<code>The Pods – Custom Content Types and Fields plugin for WordPress is to Pri Escalation Bypass in all up to, and including, 3.3.9. The exists because the pods_admin AJAX router funnels every access check — including the method allowlist, nonce , login enforcement, and capability gate — through pods_error(), which under the JSON meta-box-loader compatibility path only writes failures to the PHP error log and returns false instead of terminating the request, rendering all guards ineffective. This makes it possible for unauthenticated attackers to escalate their pri to Administrator or o the password of any user account, including the site owner's, enabling complete site takeover, or perform another administrator action.
</code>

C (2026-08-14)

<code>A remote code execution exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during ser report rendering, resulting in arbitrary code execution with the pri of the service account.
</code>

C (2026-08-26)

<code>The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is to Sensiti Exposure in all up to, and including, 3.3.1 via the 'trp_get_translations_regular' AJAX action. This makes it possible for unauthenticated attackers to extract the raw administrator password-reset URL — including the plaintext reset key and login parameters stored in the translation dictionary table — enabling full administrator account takeover. This is only exploitable when automatic string saving is enabled (the default setting) and the target administrator's profile locale is set to a published secondary language, as these conditions cause the password-reset URL to be persisted as a translatable string in the secondary-language dictionary table.
</code>

C (2026-08-17)

<code>GitLab has remediated an issue in GitLab CE/EE affecting all from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could ha an unauthenticated user to execute mutations via GET requests due to improper request in GraphQL multiplex query handling.
</code>

C (2026-09-22)

<code>The Gi plugin for WordPress is to PHP Object Injection in all up to, and including, 2.3.1 of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the software, which means this has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrie data, or execute code depending on the POP chain present. This is only reachable when the &quot;Allow Multiple Recipients&quot; option is enabled for the donation form, as the single-recipient code path applies sanitize_textarea_field() which would neutralize the payload. Exploitation additionally requires the eCard &quot;Custom Message&quot; option to be disabled, which is the plugin default: when it is enabled the personalized message becomes a required field and GiveWP's gi() blanks serialized input during , causing the donation to be rejected before it is stored.
</code>

C (2026-10-02)

C (2026-08-14)

<code>An input exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue.
</code>

C (2026-08-14)

<code>An authenticated command injection exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system.
</code>

C (2026-08-13)

<code>A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilities_configurationsave.cgi of the component Web Management Interface. Executing a manipulation of the argument sessionKey can lead to denial of service. The attack can be launched remotely. The exploit has been published and may be used. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-08-14)

<code>The WP-Stats plugin for WordPress is to Stored Cross-Site Scripting in all up to, and including, 2.56 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
</code>

C (2026-09-07)

<code>A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated pri to create or rename directory entries could craft a malicious DN containing shell metacharacters. When a Cockpit administrator subsequently views the entry in the 389 Console, the embedded shell command executes with root pri on the directory server host.
</code>

C (2026-08-24)

<code>A heap-based buffer o exists in Konami's Metal Gear Online 3, originating from improper of lobby data fields related to kicked players. The affected function processes a list of kicked player identifiers using the lobby data key &quot;kick_num&quot; to determine the number of entries, and indi kicked player IDs supplied via keys in the format &quot;kicked_id_%i&quot;. The function does not that &quot;kick_num&quot; falls within the expected bounds. The game design limits matches to a maximum of 16 players, and the corresponding buffer for storing kicked player IDs is sized accordingly. If &quot;kick_num&quot; exceeds this limit, the function continues writing the provided player IDs past the end of the intended buffer and into adjacent memory regions. These adjacent regions contain Steam callback handler structures responsible for processing lobby data updates, lobby messages, and other related events. By supplying an o &quot;kick_num&quot; value and appropriate &quot;kicked_id_%i&quot; fields, an attacker can o fields within the callback handler structures, including function pointers and callback argument . Successful exploitation may enable control-flow hijacking, potentially allowing arbitrary code execution within the game process.
</code>

C (2026-08-15)

<code>A was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown function of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The exploitability is regarded as difficult. The exploit is publicly a and might be used. The was contacted early about this disclosure but did not respond in any way.
</code>

C (2026-08-25)

<code>The Kaltura HTML5 player (mwEmbed / html5lib) contains an unauthenticated remote code execution caused by unsafe data deserialization and unsanitized filesystem path construction. mwEmbedLoader.php accepts a user‑controlled Ser, whose response is passed to unserialize(), and the resulting object’s fields are written to a cache path derived from attacker‑supplied uiconf_id without proper path . An attacker can write arbitrary files into web‑accessible locations and achieve code execution as the webserver user. Affected include html5lib v2.45, v2.103 and earlier, and other v2.x releases exposing the endpoint.
</code>

C (2026-08-25)

<code>The All-in-One WP Migration and Backup plugin for WordPress is to SQL Injection restore functionality in all up to, and including, 7.109 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensiti from the database. This can be le to obtain the ai1wm_secret_key when a site administrator performs an archi and achie code execution once able to le the ai1wm_secret_key value.
</code>

C (2026-09-01)

<code>The Frontend Admin by DynamiApps plugin for WordPress is to arbitrary file deletion due to insufficient file path in the mo function in all up to, and including, 3.29.12. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This is exploitable without authentication when a form is configured with public (who_can_see='all'), as the required nonce is publicly obtainable from the rendered form.
</code>

C (2026-08-17)

<code>A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file app/Http/Controllers/ProfileController.php of the component Money Transfer Handler. This manipulation causes time-of-check time-of-use. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is assessed as difficult. Upgrading to 1.2.13 is capable of addressing this issue. Patch name: ae5596a9548e010a8a79838806eff60ef9554539. Upgrading the affected component is advised. The was contacted early about this disclosure.
</code>

C (2026-01-21)

<code>A in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM &amp;amp; Presence Service (Unified CM IM&amp;amp;P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device.&amp;nbsp;\r\n\r\nThis is due to improper of user-supplied input in HTTP requests. An attacker could exploit this by sending a sequence of crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to obtain user-le to the underlying operating system and then elevate pri to root.&amp;nbsp;\r\nNote: Cisco has assigned this security ad a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this could result in an attacker ele pri to root.
</code>

C (2026-03-04)

<code>A in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.&amp;nbsp;\r\n\r\nThis is due to an improper system process that is created at boot time. An attacker could exploit this by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute a of scripts and commands that allow&amp;nbsp;root access to the device.&amp;nbsp;
</code>

C (2026-02-25)

<code>A in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN , Cisco Catalyst SD-WAN Manager, formerly SD-WAN , and Cisco Catalyst SD-WAN , formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrati on an affected system.\r\n\r\nThis exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-pri, non-root&amp;nbsp;user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.&amp;nbsp;
</code>

C (2026-03-04)

<code>A in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root&amp;nbsp;on an affected device.\r\n\r\nThis is due to insecure deserialization of a user-supplied Java byte stream. An attacker could exploit this by sending a crafted serialized Ja to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the device and elevate pri to root.\r\nNote: If the FMC management interface does not ha internet access, the attack surface that is associated with this is reduced.
</code>

C (2026-05-06)

<code>A in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low pri to access files and execute commands on a remote router.\r\n\r\nThis is due to insufficient input of user-supplied data. An attacker could exploit this by submitting crafted input in the web-based management interface. A successful exploit could allow the attacker to create, read, or delete files and execute limited commands in&amp;nbsp;user EXEC mode on a remote router.
</code>

C (2026-04-15)

<code>A in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this , the attacker must have at least Read Only Admin credentials.\r\n\r\nThis is due to insufficient of user-supplied input. An attacker could exploit this by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain user-le to the underlying operating system and then elevate pri to&amp;nbsp;root. In single-node ISE deployments, successful exploitation of these could cause the affected ISE node to become una, resulting in a denial of service (DoS) condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored.
</code>

C (2026-05-14)

<code>May 2026: This security ad provides the details and fix information for a that was discovered and fixed after the was disclosed in February 2026. This new ad is for a new in the control connection handshaking. The section of this ad includes Show Control Connections guidance to help with system checks.&amp;nbsp;\r\n\r\nA in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN , Cisco Catalyst SD-WAN Manager, formerly SD-WAN , and Cisco Catalyst SD-WAN , formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrati on an affected system.\r\nThis exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this by sending crafted requests to the affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-pri, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.
</code>

C (2026-08-05)

<code>A in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low pri to execute arbitrary commands on the underlying operating system of an affected system and elevate pri to root.&amp;nbsp;\r\n\r\nThis is due to improper of user-supplied input. An attacker could exploit this by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.&amp;nbsp;
</code>

C (2026-09-02)

<code>A in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with&amp;nbsp;root pri.\r\n\r\nThis exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 (L3) routing and forwarding (VRF). A successful exploit could allow the attacker to connect to an affected device and send crafted input that could be executed as code with&amp;nbsp;root pri. The exploitation of this could also cause the S1HAL process to crash, which could cause the device to reload.
</code>

C (2026-07-01)

<code>A in the PESpin file format parser of ClamA allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.\r\n\r\nThis is due to improper boundary checks for content in PESpin files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamA process to terminate, resulting in a DoS condition on the affected software.
</code>

C (2026-05-20)

<code>A in the&amp;nbsp;access of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the pri of the&amp;nbsp;Site Admin role.\r\n\r\nThis is due to insufficient and authentication when accessing REST API endpoints. An attacker could exploit this if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensiti and make configuration changes across tenant boundaries with the pri of the&amp;nbsp;Site Admin user.&amp;nbsp;
</code>

C (2026-05-14)

<code>A in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN , could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system. The attacker does not need to ha user credentials.\r\n\r\nThis is due to improper handling of XML External Entity (XXE) entries when parsing an XML file. An attacker could exploit this by sending a crafted request to an affected system. A successful exploit could allow the attacker to read arbitrary files that are stored in the affected system.
</code>

C (2026-06-03)

<code>A in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct ser request forgery (SSRF) attacks through an affected device.\r\n\r\nThis is due to improper input for specific HTTP requests. An attacker could exploit this by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to write files to the underlying operating system that could be used later to elevate to root.\r\nNote: Cisco has assigned this security ad a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this could result in an attacker ele pri to root.\r\nNote: To exploit this , the WebDialer service must be enabled. WebDialer is disabled by default.
</code>

C (2026-06-04)

<code>A in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN , Cisco Catalyst SD-WAN Manager, formerly SD-WAN , and Cisco Catalyst SD-WAN , formerly SD-WAN vBond, could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system.\r\n\r\nThis is due to insufficient of user-supplied input. An attacker could exploit this by uploading a crafted file to the affected system. A successful exploit could allow the attacker to perform command injection attacks on an affected system and elevate their pri as the root user.\r\nTo exploit this , the attacker must ha pri on the affected system. This would require valid credentials or exploitation of or . Cisco is not aware of successful exploitation by other methods. Cisco has obser cases where the exploitation of this bug resulted in a configuration change pushed to edge devices.\r\nCisco recommends that customers upgrade to the fixed software that is documented in the that was published on May 14, 2026, and the configuration of the edge devices.
</code>

C (2026-06-10)

<code>In Splunk Enterprise below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway below 3.10.6, 3.9.20, and 3.8.67, a low-pri user that does not hold the 'admin' or 'power' Splunk roles could perform a Remote Code Execution (RCE) through the Splunk Secure Gateway app.&lt;br&gt;&lt;br&gt;The Remote Code Execution is possible because of unsafe deserialization of App Key Value Store (K) data through the ‘jsonpickle’ Python library, which reconstructs arbitrary Python objects from specially crafted Ja Object Notation (JSON) without adequate .
</code>

C (2026-06-10)

<code>In Splunk Enterprise 10.2 below 10.2.4 and 10 below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. The exists because the PostgreSQL sidecar service endpoint lacks authentication controls, allowing any network-reachable user to invoke file operations without credentials. Splunk Enterprise 9.4 and earlier are not affected. If you cannot immediately upgrade to a fixed , you can mitigate this by disabling the PostgreSQL sidecar service.
</code>

C (2026-06-15)

<code>A in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN , could allow an authenticated, remote attacker to create a file or o any file on the filesystem of an affected system.\r\n\r\nThis exists because the affected software does not properly user-supplied input during a file upload process. An attacker could exploit this by sending a crafted HTTP request to an affected API endpoint of the affected system. A successful exploit could allow the attacker to create or o any file on the underlying operating system. This file could later be used to elevate to root. To exploit this , the attacker must ha credentials with at least a lower-pri, single-task user account.
</code>

C (2026-08-05)

<code>As part of Cisco's ongoing commitment to proacti and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensi security review. This review resulted in software hardening releases that address multiple internally discovered .\r\n\r\nThe tracked by C are related to improper input issues that are grouped under the Common Weakness Enumeration (CWE) CWE-20.
</code>

C (2026-02-02)

<code>In Modem, there is a possible system crash due to improper input . This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution pri needed. User interaction is not needed for exploitation. Patch ID: MOLY01689248; Issue ID: MS.
</code>

C (2026-06-01)

<code>In wlan AP driver, there is a possible memory corruption due to a heap buffer o. This could lead to remote (proximal/adjacent) code execution with User execution pri needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480138; Issue ID: MS.
</code>

C (2026-09-07)

<code>In MiracastService, there is a possible escalation of pri due to a confused deputy. This could lead to local denial of service with User execution pri needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DT; Issue ID: MS.
</code>

C (2026-03-25)

<code>A use after free issue was addressed with impro management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, tvOS 26.3, 26.3, watchOS 26.3. An app may be able to cause unexpected system termination.
</code>

C (2026-03-17)

<code>A cross-origin issue in the Na API was addressed with impro . This issue is fixed in Background Security Impro for iOS, iPadOS, and macOS, Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, 26.4. Processing maliciously crafted web content may bypass Same Origin Policy.
</code>

C (2026-02-11)

<code>A path handling issue was addressed with impro. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, macOS Tahoe 26.3, 26.3. A remote user may be able to write arbitrary files.
</code>

C (2026-05-18)

<code>An attacker in a pri network position may be able to leak sensiti. A path handling issue was addressed with impro. This issue is fixed in PCC Release 5E290.3.
</code>

C (2026-03-25)

<code>A use after free issue was addressed with impro management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, watchOS 26.4. An app may be able to cause unexpected system termination or write kernel memory.
</code>

C (2026-03-25)

<code>The issue was addressed with impro handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, 26.4, watchOS 26.4. An app may be able to cause unexpected system termination or corrupt kernel memory.
</code>

C (2026-02-11)

<code>A memory corruption issue was addressed with impro management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted indi on of iOS before iOS 26. C and C were also issued in response to this report.
</code>

C (2026-01-13)

<code>Exposure of sensiti to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.
</code>

C (2026-01-13)

<code>Improper handling of insufficient permissions or pri in Windows Error Reporting allows an authorized attacker to elevate pri locally.
</code>

C (2026-01-13)

<code>Heap-based buffer o in Windows Common Log File System Dri an authorized attacker to elevate pri locally.
</code>

C (2026-01-13)

<code>Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose information locally.
</code>

C (2026-02-10)

<code>Improper neutralization of special elements used in a command ('command injection') in Windows Notepad App allows an unauthorized attacker to execute code locally.
</code>

C (2026-07-03)

<code>Gitea Docker image up to and including 1.26.2 use REIES=* by default, allowing any source IP to impersonate a user when re authentication headers such as X-WEBAUTH-USER are enabled.
</code>

C (2026-02-04)

<code>Improper input in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands.
</code>

C (2026-03-16)

<code>Path tra in Galaxy Store prior to 4.6.03.8 allows local attacker to create file with Galaxy Store pri.
</code>

C (2026-03-16)

<code>Improper of cryptographic signature in Galaxy Store prior to 4.6.03.8 allows local attacker to install arbitrary application.
</code>

C (2026-04-13)

<code>Improper input in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions.
</code>

C (2026-03-16)

<code>Improper authentication in Smart Switch prior to 3.7.69.15 allows adjacent attackers to trigger a denial of service.
</code>

C (2026-03-16)

<code>Path tra in Smart Switch prior to 3.7.69.15 allows adjacent attackers to o arbitrary files with Smart Switch pri.
</code>

C (2026-04-13)

<code>Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents.
</code>

C (2026-04-13)

<code>Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard.
</code>

C (2026-04-13)

<code>Exposure of sensiti in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensiti.
</code>

C (2026-04-13)

<code>Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning.
</code>

C (2026-04-13)

<code>Improper input in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger pri functions.
</code>

C (2026-04-13)

<code>Incorrect pri assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock.
</code>

C (2026-04-13)

<code>External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows pri local attacker to create file with system pri.
</code>

C (2026-04-13)

<code>Incorrect default permission in Galaxy Wearable prior to 2.2.68.26 allows local attackers to access sensiti.
</code>

C (2026-04-13)

<code>Improper access control in Samsung Camera prior to 16.5.00.28 allows local attacker to access location data. User interaction is required for triggering this .
</code>

C (2026-05-13)

<code>Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier.
</code>

C (2026-05-13)

<code>Incorrect pri assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensiti.
</code>

C (2026-06-05)

<code>Improper handling of insufficient pri in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access pri files.
</code>

C (2026-05-13)

<code>Out-of-bounds write in S prior to SMR May-2026 Release 1 allows local pri attackers to execute arbitrary code.
</code>

C (2026-05-13)

<code>Improper input in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code with system pri.
</code>

C (2026-05-13)

<code>Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger pri functions.
</code>

C (2026-07-10)

<code>Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.
</code>

C (2026-07-10)

<code>Improper export of android application components in Bixby prior to 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby pri.
</code>

C (2026-02-10)

<code>Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate pri locally.
</code>

C (2026-03-02)

<code>Memory corruption while using alignments for memory allocation.
</code>

C (2026-01-01)

C (2026-01-02)

<code>Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication controls. The issue allows any unauthenticated user to access sensitive user con data, transaction histories, and perform destructi including message deletion. This affects endpoints handling personal data and system operations that should require proper authorization. 1.7.0.dev45 contains a patch.
</code>

C (2026-02-10)

<code>Improper authentication in Windows Storage allows an authorized attacker to elevate pri locally.
</code>

C (2026-01-26)

<code>Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.
</code>

C (2026-02-10)

<code>Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
</code>

C (2026-02-10)

<code>Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
</code>

C (2026-02-10)

<code>Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network.
</code>

C (2026-02-10)

<code>Improper pri management in Windows Remote Desktop allows an authorized attacker to elevate pri locally.
</code>

C (2026-02-20)

<code>The was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction.
</code>

C (2026-03-05)

<code>A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading to remote code execution.
</code>

C (2026-01-20)

C (2026-03-30)

C (2026-01-07)

C (2026-01-08)

C (2026-01-08)

<code>n8n is an open source workflow automation platform. In 0.121.2 and below, an authenticated attacker may be able to execute malicious code using the n8n service. This could result in full compromise and can impact both self-hosted and n8n Cloud instances. This issue is fixed in 1.121.3. Administrators can reduce exposure by disabling the Git node and limiting access for untrusted users, but upgrading to the latest is recommended.
</code>

C (2026-02-25)

<code>An Incorrect Permission Assignment for Critical Resource in the On-Box Anomaly detection framework of Juniper Networks Junos OS E on PTX Series allows an unauthenticated, network-based attacker to execute code as root.\n\nThe On-Box Anomaly detection framework should only be reachable by other internal processes over the internal routing instance, but not over an externally exposed port. With the ability to access and manipulate the service to execute code as root a remote attacker can take complete control of the device.\nPlease note that this service is enabled by default as no specific configuration is required.\n\nThis issue affects Junos OS E on PTX Series:\n\n\n\n * 25.4 before 25.4R1-S1-EVO, 25.4R2-EVO.\n\n\n\n\nThis issue does not affect Junos OS E before 25.4R1-EVO.\n\nThis issue does not affect Junos OS.
</code>

C (2026-01-20)

<code> in the Oracle product of Oracle (component: Core). Supported that are affected are 7.1.14 and 7.2.4. Easily exploitable allows high pri attacker with logon to the infrastructure where Oracle executes to compromise Oracle . While the is in Oracle , attacks may significantly impact additional products (scope change). Successful attacks of this can result in takeover of Oracle . CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and A impacts). C: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
</code>

C (2026-01-20)

<code> in the Oracle HTTP Server, Oracle Weblogic Ser Plug-in product of Oracle Fusion Middleware (component: Weblogic Ser Plug-in for Apache HTTP Server, Weblogic Ser Plug-in for IIS). Supported that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Ser Plug-in. While the is in Oracle HTTP Server, Oracle Weblogic Ser Plug-in, attacks may significantly impact additional products (scope change). Successful attacks of this can result in unauthorized creation, deletion or modification access to critical data or all Oracle HTTP Server, Oracle Weblogic Ser Plug-in accessible data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server, Oracle Weblogic Ser Plug-in accessible data. Note: Affected for Weblogic Ser Plug-in for IIS is 12.2.1.4.0 only. CVSS 3.1 Base Score 10.0 (Confidentiality and Integrity impacts). C: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N).
</code>

C (2026-01-20)

<code> in the Oracle FLEXCUBE Uni Banking product of Oracle Financial Services Applications (component: Relationship Pricing). Supported that are affected are 14.0.0.0.0-14.8.0.0.0. Easily exploitable allows low pri attacker with network access via HTTP to compromise Oracle FLEXCUBE Uni Banking. Successful attacks of this can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Uni Banking accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). C: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
</code>

C (2026-01-20)

<code> in the Oracle product of Oracle (component: Core). Supported that are affected are 7.1.14 and 7.2.4. Easily exploitable allows unauthenticated attacker with logon to the infrastructure where Oracle executes to compromise Oracle . While the is in Oracle , attacks may significantly impact additional products (scope change). Successful attacks of this can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle . Note: This applies to Windows VMs only. CVSS 3.1 Base Score 7.1 (A impacts). C: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).
</code>

C (2026-03-17)

<code> in the Oracle Edge Cloud Infrastructure Designer and Toolkit product of Oracle Open Source Projects (component: Desktop). The supported that is affected is 0.3.0. Easily exploitable allows unauthenticated attacker with network access via HTTP to compromise Oracle Edge Cloud Infrastructure Designer and Toolkit. Successful attacks of this can result in takeover of Oracle Edge Cloud Infrastructure Designer and Toolkit. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and A impacts). C: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
</code>

C (2026-04-21)

<code> in the MySQL Ser of Oracle MySQL (component: Server: Information Schema). Supported that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable allows high pri attacker with network access protocols to compromise MySQL Server. Successful attacks of this can result in unauthorized read access to a subset of MySQL Ser data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). C: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).
</code>

C (2026-04-21)

<code> in the MySQL Ser of Oracle MySQL (component: Server: Optimizer). Supported that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable allows high pri attacker with network access protocols to compromise MySQL Server. Successful attacks of this can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (A impacts). C: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
</code>

C (2026-04-21)

<code> in the Oracle Java SE, Oracle Graal Edition product of Oracle Java SE (component: Hotspot). Supported that are affected are Oracle Java SE: 8u481 and 8u481-b50; Oracle Graal Edition: 21.3.17. Difficult to exploit allows low pri attacker with logon to the infrastructure where Oracle Java SE, Oracle Graal Edition executes to compromise Oracle Java SE, Oracle Graal Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle Graal Edition accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle Graal Edition. Note: This applies to Ja, typically in clients running sandboxed Java Web Start applications or sandboxed Ja, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Ja for security. This does not apply to Ja, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 6.0 (Integrity and A impacts). C: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H).
</code>

C (2026-04-21)

<code> in the MySQL Ser of Oracle MySQL (component: InnoDB). Supported that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable allows high pri attacker with network access protocols to compromise MySQL Server. Successful attacks of this can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (A impacts). C: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
</code>

C (2026-04-21)

<code> in the MySQL Ser of Oracle MySQL (component: Server: Optimizer). Supported that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable allows high pri attacker with network access protocols to compromise MySQL Server. Successful attacks of this can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (A impacts). C: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
</code>

C (2026-04-21)

<code> in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Employee Snapshot). The supported that is affected is 9.2. Easily exploitable allows low pri attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human Resources. Successful attacks require human interaction from a person other than the attacker and while the is in PeopleSoft Enterprise HCM Human Resources, attacks may significantly impact additional products (scope change). Successful attacks of this can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Human Resources accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). C: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).
</code>

C (2026-04-21)

<code> in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Graal Edition product of Oracle Java SE (component: Security). Supported that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and 21.0.10; Oracle Graal Edition: 21.3.17. Difficult to exploit allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle Graal Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle Graal Edition. Successful attacks of this can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle Graal Edition accessible data. Note: This can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This also applies to Ja, typically in clients running sandboxed Java Web Start applications or sandboxed Ja, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Ja for security. CVSS 3.1 Base Score 2.9 (Confidentiality impacts). C: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
</code>

C (2026-04-21)

<code> in Oracle Java SE (component: Libraries). The supported that is affected is Oracle Java SE: 25.0.1. Difficult to exploit allows unauthenticated attacker with network access protocols to compromise Oracle Java SE. Successful attacks of this can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This applies to Ja, typically in clients running sandboxed Java Web Start applications or sandboxed Ja, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Ja for security. This does not apply to Ja, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts). C: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
</code>

C (2026-04-21)

<code> in the MySQL Ser of Oracle MySQL (component: Server: Optimizer). Supported that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable allows low pri attacker with network access protocols to compromise MySQL Server. Successful attacks of this can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (A impacts). C: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
</code>

C (2026-04-21)

<code> in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this can result in unauthorized access to critical data or complete access to all Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). C: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
</code>

C (2026-04-21)

<code> in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch). Supported that are affected are 12.2.3-12.2.15. Difficult to exploit allows high pri attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks require human interaction from a person other than the attacker and while the is in Oracle Applications DBA, attacks may significantly impact additional products (scope change). Successful attacks of this can result in takeover of Oracle Applications DBA. CVSS 3.1 Base Score 7.6 (Confidentiality, Integrity and A impacts). C: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H).
</code>

C

C (2026-04-21)

<code> in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Graal Edition product of Oracle Java SE (component: JGSS). Supported that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and 21.0.10; Oracle Graal Edition: 21.3.17. Difficult to exploit allows unauthenticated attacker with network access protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle Graal Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle Graal Edition accessible data. Note: This applies to Ja, typically in clients running sandboxed Java Web Start applications or sandboxed Ja, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Ja for security. This does not apply to Ja, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts). C: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).
</code>

C (2026-04-21)

<code> in the Oracle User Management product of Oracle E-Business Suite (component: Workflow and Business Events). Supported that are affected are 12.2.7-12.2.15. Easily exploitable allows high pri attacker with network access via HTTP to compromise Oracle User Management. Successful attacks of this can result in unauthorized update, insert or delete access to some of Oracle User Management accessible data as well as unauthorized read access to a subset of Oracle User Management accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality and Integrity impacts). C: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).
</code>

C (2026-04-21)

<code> in the MySQL Ser of Oracle MySQL (component: Server: Information Schema). Supported that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable allows low pri attacker with network access protocols to compromise MySQL Server. Successful attacks of this can result in unauthorized read access to a subset of MySQL Ser data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). C: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
</code>

C (2026-04-21)

<code> in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Graal Edition product of Oracle Java SE (component: JAXP). Supported that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and 21.0.10; Oracle Graal Edition: 21.3.17. Easily exploitable allows unauthenticated attacker with network access protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle Graal Edition. Successful attacks of this can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle Graal Edition accessible data. Note: This can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This also applies to Ja, typically in clients running sandboxed Java Web Start applications or sandboxed Ja, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Ja for security. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). C: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
</code>

C (2026-04-21)

<code> in the MySQL Ser of Oracle MySQL (component: Server: Optimizer). Supported that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable allows low pri attacker with network access protocols to compromise MySQL Server. Successful attacks of this can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (A impacts). C: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
</code>

C (2026-04-21)

<code> in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Graal Edition product of Oracle Java SE (component: Libraries). Supported that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and 21.0.10; Oracle Graal Edition: 21.3.17. Difficult to exploit allows unauthenticated attacker with network access protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle Graal Edition. Successful attacks of this can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle Graal Edition. Note: This can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This also applies to Ja, typically in clients running sandboxed Java Web Start applications or sandboxed Ja, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Ja for security. CVSS 3.1 Base Score 3.7 (A impacts). C: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
</code>

C (2026-04-21)

<code> in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft (component: Person Search). The supported that is affected is 9.2. Easily exploitable allows low pri attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Shared Components. Successful attacks require human interaction from a person other than the attacker and while the is in PeopleSoft Enterprise HCM Shared Components, attacks may significantly impact additional products (scope change). Successful attacks of this can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Shared Components accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Shared Components accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). C: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).
</code>

C

C (2026-01-10)

<code>CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to 1.4.3, the cryptography_encrypt() function allocates multiple buffers for HTTP requests and JSON parsing that are ne on any code path. Each call leaks approximately 400 bytes of memory. Sustained traffic can gradually exhaust a memory. This issue has been patched in 1.4.3.
</code>

C (2026-02-04)

<code>AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.46, the AutoGPT platform's Stagehand integration blocks log API keys and authentication secrets in plaintext using logger.info() statements. This occurs in three separate block implementations (StagehandObser, StagehandActBlock, and StagehandExtractBlock) where the code explicitly calls api_key.get_secret_value() and logs the result. This issue has been patched in autogpt-platform-beta-v0.6.46.
</code>

C (2026-01-07)

<code>Bio-Formats up to and including 8.3.0 perform unsafe Ja of attacker-controlled memoization cache files (.bfmemo) during image processing. The loci.formats.Memoizer class automatically loads and deserializes memo files associated with images without , integrity checks, or trust enforcement. An attacker who can supply a crafted .bfmemo file alongside an image can trigger deserialization of untrusted data, which may result in denial of service, logic manipulation, or potentially remote code execution in en where suitable gadget chains are present on the classpath.
</code>

C (2026-01-12)

<code>Enhancesoft osTicket 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read in the ticket PDF export functionality. A remote attacker can submit a ticket containing crafted rich-text HTML that includes PHP filter expressions which are insufficiently sanitized before being processed by the mPDF PDF generator during export. When the attacker exports the ticket to PDF, the generated PDF can embed the contents of attacker-selected files from the ser as bitmap images, allowing disclosure of sensiti files in the context of the osTicket application user. This issue is exploitable in default configurations where guests may create tickets and access ticket status, or where self-registration is enabled.
</code>

C (2026-02-02)

<code>A command injection may be exploited after the admin's authentication in the configuration module on TP-Link Archer BE230 v1.2 and Archer AX73 v2. Successful exploitation could allow an attacker to gain full administrati of the device, resulting in severe compromise of configuration integrity, network security, and service a.\n\n\nThis C one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.\n\n\nThis issue affects Archer BE230 v1.2 &lt; 1.2.4 Build 20251218 rel.70420 and Archer AX73 v2 &lt; 1.3.1\nBuild 20260430.
</code>

C (2026-01-08)

<code>The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to 4.2, an arbitrary file upload in the theme import functionality enables an attacker with administrati to upload arbitrary files on the server's file system. The main cause of the issue is that no or sanitization of the file's present inside the zip archive. This leads to remote code execution on the web server. 4.2 patches the issue.
</code>

C (2026-01-28)

C (2026-02-24)

<code>All of InSAT MasterSCADA BUK-TS are susceptible to OS command injection through a field in its MMadmServ web interface. Malicious users that use the endpoint are potentially able to cause remote code execution.
</code>

C (2026-03-19)

<code>A malicious actor with access to the network could exploit a Path Tra found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account.
</code>

C (2026-05-14)

C (2026-04-14)

<code>October is a Content Management System (CMS) and web platform. prior to 3.7.13 and 4.0.0 through 4.1.4 contain a sandbox bypass in the optional Twig safe mode feature (CMS_SAFE_MODE). Certain methods on the collect() helper were not properly restricted, allowing authenticated users with template editing permissions to bypass sandbox protections. Exploitation requires authenticated backend access with CMS template editing permissions and only affects installations with CMS_SAFE_MODE enabled (disabled by default). This issue has been fixed in 3.7.13 and 4.1.5. To workaround this issue, users can disable CMS_SAFE_MODE if untrusted template editing is not required, and restrict CMS template editing permissions to fully trusted administrators only.
</code>

C (2026-05-14)

C (2026-03-27)

<code>In Spring AI, a SpEL injection exists in Simple when a user-supplied value is used as a filter expression key. A malicious actor could exploit this to execute arbitrary code. Only applications that use Simple and pass user-supplied input as a filter expression key are affected.\nThis issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.
</code>

C (2026-04-22)

<code> in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN , which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user.\nThis issue affects Spring Security: from 7.0.0 through 7.0.4.
</code>

C (2026-01-10)

<code>ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI. Prior to 3.39.2 and 4.0.5, an attacker can inject special characters into HTTP query parameters to add arbitrary configuration to the config.ini file. This can lead to security setting tampering or modification of application behavior. This issue has been patched in 3.39.2 and 4.0.5.
</code>

C (2026-02-02)

<code>vLLM is an inference and serving engine for large language models (LLMs). From 0.8.3 to before 0.14.1, when an invalid image is sent to vLLM's multimodal endpoint, PIL throws an error. vLLM returns this error to the client, leaking a heap address. With this leak, we reduce ASLR from 4 billion guesses to ~8 guesses. This can be chained a heap o with JPEG2000 decoder in OpenC to achie code execution. This is fixed in 0.14.1.
</code>

C (2026-01-12)

<code>or type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification. Prior to 7.18.0, the MCP ser logic relies on string manipulation that incorporates the summary field from the OpenAPI specification without proper or escaping. This allows an attacker to &quot;break out&quot; of the string literal and inject arbitrary code. This is fixed in 7.18.0.
</code>

C (2026-01-12)

<code>Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.93, the server uses the Origin value from the request headers as the email link baseUrl without . If an attacker controls the Origin, password reset / email links in emails can be generated pointing to the attacker’s domain, causing authentication tokens to be exposed and potentially leading to account takeover. This is fixed in 1.93.
</code>

C (2026-01-12)

<code>Termix is a web-based ser platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 to 1.9.0, Stored Cross-Site Scripting (XSS) exists in the Termix File Manager component. The application fails to sanitize SVG file content before rendering it. This allows an attacker who has compromised a managed SSH server to plant a malicious file, which, when pre by the Termix user, executes arbitrary Ja in the context of the application. The is located in src/ui/desktop/apps/file-manager/components/File.tsx. This is fixed in 1.10.0.
</code>

C (2026-01-21)

C (2026-01-21)

<code>Saleor is an e-commerce platform. Starting in 3.0.0 and prior to 3.20.108, 3.21.43, and 3.22.27, Saleor was allowing users to modify rich text fields with HTML without running any backend HTML cleaners thus allowing malicious actors to perform stored XSS attacks on dashboards and storefronts. Malicious staff members could craft script injections to target other staff members, possibly stealing their access and/or refresh tokens. This issue has been patched in 3.22.27, 3.21.43, and 3.20.108. In case of inability to upgrade straight away, a possible workaround is to use client-side cleaner.
</code>

C (2026-01-13)

<code>go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A node can be forced to shutdown/crash using a specially crafted message. This is fixed in 1.16.8.
</code>

C (2026-01-13)

<code>Eigent is a multi-agent Workforce. A critical security in the CI workflow (.github/workflows/ci.yml) allows arbitrary code execution from fork pull requests with repository write permissions. The workflow uses pull_request_target trigger combined with checkout of untrusted PR code. An attacker can exploit this to steal credentials, post comments, push code, or create releases.
</code>

C (2026-07-03)

<code>Gitea up to and including 1.26.2 ha SSRF protection in webhook and migration allow-list filtering.
</code>

C (2026-01-25)

<code>In the Linux kernel, the following has been resolved:\n\nmacvlan: fix possible UAF in mac()\n\nAdd RCU protection on (struct mac)-&gt;vlan.\n\nWhenerce() is called, we must clear\nentry-&gt;vlan pointer before RCU grace period starts.\n\nThis allows mac() to skip o queued for freeing.\n\nNote that mac are already RCU protected, as they\nare embedded in a standard netde(ndev)).\n\nhttps: //lore.kernel.org//T/#u
</code>

C (2026-01-25)

<code>In the Linux kernel, the following has been resolved:\n\nlib/buildid: use __kernel_read() for sleepable context\n\nPrevent a &quot;BUG: unable to handle kernel NULL pointer dereference in\nfilemap_read_folio&quot;.\n\nFor the sleepable context, convert freader to use __kernel_read() instead\nof direct page cache access (). This simplifies the\nfaultable code path by using the standard kernel file reading interface\nwhich handles all the complexity of reading file data.\n\nAt the moment we are not changing the code for non-sleepable context which\nuses filemap_get_folio() and only succeeds if the target folios are\nalready in memory and up-to-date. The reason is to keep the patch simple\nand easier to backport to stable kernels.\n\nSyzbot repro does not crash the kernel anymore and the selftests run\nsuccessfully.\n\nIn the follow up we will make __kernel_read() with IOCB_NOWAIT work for\nnon-sleepable contexts. In addition, I would like to replace the\nsecretmem check with a more generic approach and will add fstest for the\nbuildid code.
</code>

C (2026-01-25)

<code>In the Linux kernel, the following has been resolved:\n\nip6_tunnel: use skb_() in __ip6_tnl_rcv()\n\nBlamed commit did not take care of VLAN encapsulations\nas spotted by syzbot [1].\n\nUse skb_() instead of pskb_inet_may_pull().\n\n[1]\n BUG: KMSAN: uninit-value in __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline]\n BUG: KMSAN: uninit-value in INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline]\n BUG: KMSAN: uninit-value in IP6_ECN_decapsulate+0x7a8/0x1fa0 include/net/inet_ecn.h:321\n __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline]\n INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline]\n IP6_ECN_decapsulate+0x7a8/0x1fa0 include/net/inet_ecn.h:321\n ip6ip6_dscp_ecn_decapsulate+0x16f/0x1b0 net/ipv6/ip6_tunnel.c:729\n __ip6_tnl_rc/0x1b50 net/ipv6/ip6_tunnel.c:860\n ip6_tnl_rcv+0xc3/0x100 net/ipv6/ip6_tunnel.c:903\n gre_rc/0x1b90 net/ipv6/ip6_gre.c:-1\n ip6_protocol_deli+0x1c89/0x2c60 net/ipv6/ip6_input.c:438\n ip6_input_finish+0x1f4/0x4a0 net/ipv6/ip6_input.c:489\n NF_HOOK include/linux/netfilter.h:318 [inline]\n ip6_input+0x9c/0x330 net/ipv6/ip6_input.c:500\n ip6_mc_input+0x7ca/0xc10 net/ipv6/ip6_input.c:590\n dst_input include/net/dst.h:474 [inline]\n ip6_rc+0x958/0x990 net/ipv6/ip6_input.c:79\n NF_HOOK include/linux/netfilter.h:318 [inline]\n ip+0xf1/0x3c0 net/ipv6/ip6_input.c:311\n __netif_recei net/core/dev.c:6139 [inline]\n __netif_recei+0x1df/0xac0 net/core/dev.c:6252\n netif_recei net/core/dev.c:6338 [inline]\n netif_recei+0x57/0x630 net/core/dev.c:6397\n tun_rx_batched+0x1df/0x980 drivers/net/tun.c:1485\n tun_get_user+0x5c0e/0x6c60 drivers/net/tun.c:1953\n tun_chr_write_iter+0x3e9/0x5c0 drivers/net/tun.c:1999\n new_sync_write fs/read_write.c:593 [inline]\n +0xbe2/0x15d0 fs/read_write.c:686\n ksys_write fs/read_write.c:738 [inline]\n __do_sys_write fs/read_write.c:749 [inline]\n __se_sys_write fs/read_write.c:746 [inline]\n __x64_sys_write+0x1fb/0x4d0 fs/read_write.c:746\n x64_sys_call+0x30ab/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:2\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nUninit was created at:\n slab_post_alloc_hook mm/slub.c:4960 [inline]\n slab_alloc_node mm/slub.c:5263 [inline]\n kmem_cache_alloc_node_noprof+0x9e7/0x17a0 mm/slub.c:5315\n kmalloc_reser/0x4b0 net/core/skbuff.c:586\n __alloc_skb+0x805/0x1040 net/core/skbuff.c:690\n alloc_skb include/linux/skbuff.h:1383 [inline]\n alloc_skb_with_frags+0xc5/0xa60 net/core/skbuff.c:6712\n sock_alloc_send_pskb+0xacc/0xc60 net/core/sock.c:2995\n tun_alloc_skb drivers/net/tun.c:1461 [inline]\n tun_get_user+0x1142/0x6c60 drivers/net/tun.c:1794\n tun_chr_write_iter+0x3e9/0x5c0 drivers/net/tun.c:1999\n new_sync_write fs/read_write.c:593 [inline]\n +0xbe2/0x15d0 fs/read_write.c:686\n ksys_write fs/read_write.c:738 [inline]\n __do_sys_write fs/read_write.c:749 [inline]\n __se_sys_write fs/read_write.c:746 [inline]\n __x64_sys_write+0x1fb/0x4d0 fs/read_write.c:746\n x64_sys_call+0x30ab/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:2\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nCPU: 0 UID: 0 PID: 6465 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(none)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
</code>

C (2026-01-25)

<code>In the Linux kernel, the following has been resolved:\n\ndst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()\n\nsyzbot was able to crash the kernel in rt6_uncached_list_flush_dev()\nin an interesting way [1]\n\nCrash happens in list_del_init()/INIT_LIST_HEAD() while writing\nlist-&gt;pre the prior write on list-&gt;next went well.\n\nstatic inline void INIT_LIST_HEAD(struct list_head *list)\n{\n</code>

C (2026-01-25)

<code>In the Linux kernel, the following has been resolved:\n\nx86/fpu: Clear XSTATE_BV[i] in guest XSA whenever XFD[i]=1\n\nWhen loading guest XSA , and when updating XFD in\nresponse to a guest WRMSR, clear XFD-disabled features in the saved (or to\nbe restored) XSTATE_BV to ensure K't attempt to load state for\nfeatures that are disabled via the guest's XFD. Because the kernel\nexecutes XRSTOR with the guest's XFD, saving XSTATE_BV[i]=1 with XFD[i]=1\nwill cause XRSTOR to #NM and panic the kernel.\n\nE.g. if fpu_update_guest_xfd() sets XFD without clearing XSTATE_BV:\n\n ------------[ cut here ]------------\n WARNING: arch/x86/kernel/traps.c:1524 at exc_de+0x101/0x110, CPU#29: amx_test/848\n Modules linked in: k k\n CPU: 29 UID: 1000 PID: 848 Comm: amx_test Not tainted 6.19.0-rc2-ffa07f7fd437-x86_amx_nm_xfd_non_init-vm #171 NONE\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015\n RIP: 0010:exc_de+0x101/0x110\n Call Trace:\n &lt;TASK&gt;\n asm_exc_de+0x1a/0x20\n RIP: 0010:restore_fpregs_from_fpstate+0x36/0x90\n switch_fpu_return+0x4a/0xb0\n k+0x1245/0x1e40 [kvm]\n k+0x2c3/0x8f0 [kvm]\n __x64_sys_ioctl+0x8f/0xd0\n do_syscall_64+0x62/0x940\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n &lt;/TASK&gt;\n ---[ end trace 0000000000000000 ]---\n\nThis can happen if the guest executes WRMSR(MSR_IA32_XFD) to set XFD[18] = 1,\nand a host IRQ triggers kernel_fpu_begin() prior to the handler's\ncall to fpu_update_guest_xfd().\n\nand if userspace stuffs XSTATE_BV[i]=1 :\n\n ------------[ cut here ]------------\n WARNING: arch/x86/kernel/traps.c:1524 at exc_de+0x101/0x110, CPU#14: amx_test/867\n Modules linked in: k k\n CPU: 14 UID: 1000 PID: 867 Comm: amx_test Not tainted 6.19.0-rc2-2dace9faccd6-x86_amx_nm_xfd_non_init-vm #168 NONE\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015\n RIP: 0010:exc_de+0x101/0x110\n Call Trace:\n &lt;TASK&gt;\n asm_exc_de+0x1a/0x20\n RIP: 0010:restore_fpregs_from_fpstate+0x36/0x90\n fpu_swap_k+0x6b/0x120\n k+0x30/0x80 [kvm]\n k+0x85/0x1e40 [kvm]\n k+0x2c3/0x8f0 [kvm]\n __x64_sys_ioctl+0x8f/0xd0\n do_syscall_64+0x62/0x940\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n &lt;/TASK&gt;\n ---[ end trace 0000000000000000 ]---\n\nThe new behavior is consistent with the AMX architecture. Per Intel's SDM,\nXSA XSTATE_BV as '0' for components that are disabled via XFD\n(and non-compacted XSA the initial configuration of the state\ncomponent):\n\n If XSA, XSAVEOPT, or XSAVES is saving the state component i,\n the instruction does not generate #NM when XCR0[i] = IA32_XFD[i] = 1;\n instead, it operates as if XINUSE[i] = 0 (and the state component was\n in its initial state): it saves bit i of XSTATE_B of the XSAVE\n header as 0; in addition, XSA the initial configuration of the\n state component (the other instructions do not sa component i).\n\nAlternatively, K always do XRSTOR with XFD=0, e.g. by using\na constant XFD based on the set of enabled features when XSAVEing for\na struct fpu_guest. However, having XSTATE_BV[i]=1 for XFD-disabled\nfeatures can only happen in the abo case, or in similar\nscenarios in preemption on preemptible kernels, because\nfpu_swap_k()'s call to sa() saves the\noutgoing FPU state with the current XFD; and that is (on all but the\nfirst WRMSR to XFD) the guest XFD.\n\nTherefore, XFD can only go out of sync with XSTATE_BV in the abo case, or in similar scenarios in preemption on\npreemptible kernels, and it we can consider it (de facto) part of KVM\nABI that K returns XSTATE_BV[i]=0 for XFD-disabled features.\n\nMove clea\n---truncated---
</code>

C (2026-01-25)

<code>In the Linux kernel, the following has been resolved:\n\nASoC: tl: fix null pointer\n\nThe &quot;snd_soc_component&quot; in &quot;adcx140_priv&quot; was only used once but never\nset. It was only used for reaching &quot;dev&quot; which is already present in\n&quot;adcx140_priv&quot;.
</code>

C (2026-01-25)

<code>In the Linux kernel, the following has been resolved:\n\nblock: zero non-PI portion of auto integrity buffer\n\nThe auto-generated integrity buffer for writes needs to be fully\ninitialized before being passed to the underlying block device,\notherwise the uninitialized memory can be read back by userspace or\nanyone with physical access to the storage device. If protection\ninformation is generated, that portion of the integrity buffer is\nalready initialized. The integrity data is also zeroed if PI generation\nis disabled or the PI tuple size is 0. However, this misses\nthe case where PI is generated and the PI tuple size is nonzero, but the\nmetadata size is larger than the PI tuple. In this case, the remainder\n(&quot;opaque&quot;) of the metadata is left uninitialized.\nGeneralize the BLK_INTEGRITY_CSUM_NONE check to cover any case when the\nmetadata is larger than just the PI tuple.
</code>

C (2026-01-25)

<code>In the Linux kernel, the following has been resolved:\n\ndrm/: Fix KMS with 3D on HW 10\n\nHW 10 does not have GB Surfaces so there is no backing buffer for\nsurface backed FBs. This would result in a nullptr dereference and crash\nthe dri a black screen.
</code>

C (2026-01-25)

<code>In the Linux kernel, the following has been resolved:\n\nxhci: sideband: don't dereference freed ring when removing sideband endpoint\n\nxhci_sideband_remo() incorrecly assumes that the endpoint is\nrunning and has a valid transfer ring.\n\nLianqin reported a crash during suspend/wake-up stress testing, and\nfound the cause to be dereferencing a non-existing transfer ring\n'ep-&gt;ring' during xhci_sideband_remo().\n\nThe endpoint and its ring may be in unknown state if this function\nis called after xHCI was reinitialized in resume (lost power), or if\ndevice is being re-enumerated, disconnected or endpoint already dropped.\n\nFix this by both removing unnecessary ring access, and by checking\nep-&gt;ring exists before dereferencing it. Also make sure endpoint is\nrunning before attempting to stop it.\n\nRemove the xhci_initialize_ring_info() call during sideband endpoint\nremoval as is it only initializes ring structure enqueue, dequeue and\ncycle state to their starting without changing actual\nhardware enqueue, dequeue and cycle state. Leaving them out of sync\nis worse than leaving it as it is. The endpoint will get freed in after\nthis in most usecases.\n\nIf the (audio) class driver want's to reuse the endpoint after offload\nthen it is up to the class driver to ensure endpoint is properly set up.
</code>

C (2026-01-25)

<code>In the Linux kernel, the following has been resolved:\n\nipv6: Fix use-after-free in inet6_addr_del().\n\nsyzbot reported use-after-free of inet6_ifaddr in\ninet6_addr_del(). [0]\n\nThe cited commit accidentally mo() for\nmngtmpaddr before reading its ifp-&gt;flags for temporary\naddresses in inet6_addr_del().\n\nLet's mo() down to fix the UAF.\n\n[0]:\nBUG: KASAN: slab-use-after-free in inet6_addr_del.constprop.0+0x67a/0x6b0 net/ipv6/addrconf.c:3117\nRead of size 4 at addr ffff88807b89c86c by task syz.3.1618/9593\n\nCPU: 0 UID: 0 PID: 9593 Comm: syz.3.1618 Not tainted syzkaller #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025\nCall Trace:\n &lt;TASK&gt;\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_l/0x1f0 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0xcd/0x630 mm/kasan/report.c:482\n kasan_report+0xe0/0x110 mm/kasan/report.c:595\n inet6_addr_del.constprop.0+0x67a/0x6b0 net/ipv6/addrconf.c:3117\n addrconf_del_ifaddr+0x11e/0x190 net/ipv6/addrconf.c:3181\n inet6_ioctl+0x1e5/0x2b0 net/ipv6/af_inet6.c:582\n sock_do_ioctl+0x118/0x280 net/socket.c:1254\n sock_ioctl+0x227/0x6b0 net/socket.c:1375\n fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:597 [inline]\n __se_sys_ioctl fs/ioctl.c:583 [inline]\n __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f164cf8f749\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 &lt;48&gt; 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f164de64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 00007f164d1e5fa0 RCX: 00007f164cf8f749\nRDX: 00000 RSI: 0000000000008936 RDI: 0000000000000003\nRBP: 00007f164d013f91 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007f164d1e6038 R14: 00007f164d1e5fa0 R15: 00007ffde15c8288\n &lt;/TASK&gt;\n\nAllocated by task 9593:\n kasan_sa+0x33/0x60 mm/kasan/common.c:56\n kasan_sa+0x14/0x30 mm/kasan/common.c:77\n poison_kmalloc_redzone mm/kasan/common.c:397 [inline]\n __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:414\n kmalloc_noprof include/linux/slab.h:957 [inline]\n kzalloc_noprof include/linux/slab.h:1094 [inline]\n ip+0x4e3/0x2010 net/ipv6/addrconf.c:1120\n inet6_addr_add+0x256/0x9b0 net/ipv6/addrconf.c:3050\n addrconf_add_ifaddr+0x1fc/0x450 net/ipv6/addrconf.c:3160\n inet6_ioctl+0x103/0x2b0 net/ipv6/af_inet6.c:580\n sock_do_ioctl+0x118/0x280 net/socket.c:1254\n sock_ioctl+0x227/0x6b0 net/socket.c:1375\n fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:597 [inline]\n __se_sys_ioctl fs/ioctl.c:583 [inline]\n __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 6099:\n kasan_sa+0x33/0x60 mm/kasan/common.c:56\n kasan_sa+0x14/0x30 mm/kasan/common.c:77\n kasan_sa+0x3b/0x60 mm/kasan/generic.c:584\n poison_slab_object mm/kasan/common.c:252 [inline]\n __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:284\n kasan_slab_free include/linux/kasan.h:234 [inline]\n slab_free_hook mm/slub.c:2540 [inline]\n slab_free_freelist_hook mm/slub.c:2569 [inline]\n slab_free_bulk mm/slub.c:6696 [inline]\n kmem_cache_free_bulk mm/slub.c:7383 [inline]\n kmem_cache_free_bulk+0x2bf/0x680 mm/slub.c:7362\n kfree_bulk include/linux/slab.h:830 [inline]\n k+0x1b7/0x1e0 mm/slab_common.c:1523\n k mm/slab_common.c:1728 [inline]\n kfree_rcu_monitor+0x1d0/0x2f0 mm/slab_common.c:1801\n process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257\n process_scheduled_works kernel/workqu\n---truncated---
</code>

C (2026-02-13)

<code>In the Linux kernel, the following has been resolved:\n\nnetfilter: nf_tables: fix in genmask check in nft_map_catchall_activate()\n\nnft_map_catchall_activate() has an in element activity check\ncompared to its non-catchall counterpart nft_mapelem_activate() and\ncompared to what is logically required.\n\nnft_map_catchall_activate() is called from the abort path to re-activate\ncatchall map elements that were deactivated during a failed transaction.\nIt should skip elements that are already active (they don't need\nre-acti) and process elements that are inactive (they need to be\nrestored). Instead, the current code does the opposite: it skips inacti and processes active ones.\n\nCompare the non-catchall activate callback, which is correct:\n\n nft_mapelem_activate():\n if (nft_set_elem_active(ext, iter-&gt;genmask))\n return 0; /* skip acti inactive */\n\nWith the buggy catchall :\n\n nft_map_catchall_activate():\n if (!nft_set_elem_active(ext, genmask))\n continue; /* skip inacti active */\n\nThe consequence is that when a DELSET operation is aborted,\nnft_setelem_data_activate() is ne for the catchall element.\nFor NFT_GOTO elements, this means nft_data_hold() is ne to restore the chain-&gt;use reference count. Each abort cycle\npermanently decrements chain-&gt;use. Once chain-&gt;use reaches zero,\nDELCHAIN succeeds and frees the chain while catchall elements\nstill reference it, resulting in a use-after-free.\n\nThis is exploitable for local pri escalation from an unpri\nuser via user namespaces + nftables on distributions that enable\nCONFIG_USER_NS and CONFIG_NF_TABLES.\n\nFix by removing the negation so the check matches nft_mapelem_activate():\nskip acti, process inactive ones.
</code>

C (2026-03-26)

<code>In the Linux kernel, the following has been resolved:\n\nicmp: fix NULL pointer dereference in icmp_tag_()\n\nicmp_tag_() unconditionally dereferences the result of\nrcu_dereference(inet_protos[proto]) without checking for NULL.\nThe inet_protos[] array is sparse -- only about 15 of 256 protocol\nnumbers ha handlers. When ip_no_pmtu_disc is set to 3\n(hardened PMTU mode) and the kernel receives an ICMP Fragmentation\nNeeded error with a quoted inner IP header containing an unregistered\nprotocol number, the NULL dereference causes a kernel panic in\nsoftirq context.\n\n Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI\n KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]\n RIP: 0010:icmp_unreach (net/ipv4/icmp.c:1085 net/ipv4/icmp.c:1143)\n Call Trace:\n &lt;IRQ&gt;\n icmp_rcv (net/ipv4/icmp.c:1527)\n ip_protocol_deli (net/ipv4/ip_input.c:207)\n ip_local_deli (net/ipv4/ip_input.c:242)\n ip_local_deliver (net/ipv4/ip_input.c:262)\n ip_rcv (net/ipv4/ip_input.c:573)\n __netif_recei (net/core/dev.c:6164)\n process_backlog (net/core/dev.c:6628)\n handle_softirqs (kernel/softirq.c:561)\n &lt;/IRQ&gt;\n\nAdd a NULL check before accessing icmp_strict_tag_. If the\nprotocol has no registered handler, return false since it cannot\nperform strict tag .
</code>

C (2026-04-02)

<code>In the Linux kernel, the following has been resolved:\n\nfutex: Fix UaF between futex_key_to_node_opt() and ()\n\nDuring futex_key_to_node_opt() execution, vma-&gt; is read under\nspeculative mmap lock and RCU. Concurrently, mbind() may call\n() which frees the old mempolicy immediately ().\n\nThis creates a race where __futex_key_to_node() dereferences a freed\nmempolicy pointer, causing a use-after-free read of mpol-&gt;mode.\n\n[ 151.412631] BUG: KASAN: slab-use-after-free in __futex_key_to_node (kernel/futex/core.c:349)\n[ 151.414046] Read of size 2 at addr ffff888001c49634 by task e/87\n\n[ 151.415969] Call Trace:\n\n[ 151.416732] __asan_load2 (mm/kasan/generic.c:271)\n[ 151.416777] __futex_key_to_node (kernel/futex/core.c:349)\n[ 151.416822] get_futex_key (kernel/futex/core.c:374 kernel/futex/core.c:386 kernel/futex/core.c:593)\n\nFix by adding rcu to __mpol_put().
</code>

C (2026-04-02)

<code>In the Linux kernel, the following has been resolved:\n\nmm/mseal: update VMA end correctly on merge\n\nPre we stored the end of the current VMA in curr_end, and then upon\niterating to the next curr_start to curr_end to advance to the\nnext VMA.\n\nHowever, this doesn't take into account the fact that a be\nupdated due to a merge by (), which can result in curr_end\nbeing stale and thus, upon setting curr_start to curr_end, ending up with\nan incorrect curr_start on the next iteration.\n\nResolve the issue by setting curr_end to vma-&gt; unconditionally to\nensure this value remains updated should this occur.\n\nWhile we're here, eliminate this entire class of bug by simply setting\nconst curr_[start/end] to be clamped to the input range and VMAs, which\nalso happens to simplify the logic.
</code>

C (2026-05-05)

C (2026-03-16)

<code>Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to 1.23.3, it is possible to execute arbitrary PHP code from users that are allowed to create dropdowns. This issue has been patched in 1.23.3.
</code>

C (2026-02-18)

C (2026-01-21)

<code>Lara provides a real-time WebSocket communication backend for Lara. In 1.6.3 and below, Reverb passes data from the Redis channel directly into PHP’s unserialize() function without restricting which classes can be instantiated, which lea to Remote Code Execution. The exploitability of this is increased because Redis servers are commonly deployed without authentication, but only affects Lara when horizontal scaling is enabled (RE=true). This issue has been fixed in 1.7.0. As a workaround, require a strong password for Redis access and ensure the service is only accessible via a private network or local loopback, and/or set RE=false to bypass the logic entirely (if the en uses only one Reverb node).
</code>

C (2026-01-14)

<code>Incorrect Pri Assignment in Modular DS Modular DS modular-connector allows Pri Escalation.This issue affects Modular DS: from n/a through &lt;= 2.5.1.
</code>

C (2026-02-23)

<code>Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy Apache Camel Keycloak component. \n\nThe Camel-Keycloak KeycloakSecurityPolicy does not the iss (issuer) claim of JWT tokens against the configured realm. A token issued by one Keycloak realm is silently accepted by a policy configured for a completely different realm, breaking tenant isolation.\nThis issue affects Apache Camel: from 4.15.0 before 4.18.0.\n\nUsers are recommended to upgrade to 4.18.0, which fixes the issue.
</code>

C (2026-05-05)

<code>Redis is an in-memory data structure store. In all of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or can be disabled, which may lead to remote code execution. A workaround is to prevent users from executing Lua scripts or avoid using replicas where replica-read-only is disabled. This is patched in 8.6.3.
</code>

C (2026-07-07)

<code> CRM before 8.4.0 contains an authenticated file upload that allows low-pri users to achie code execution by uploading a .phar file containing arbitrary PHP code through the Documents module, bypassing the extension denylist in config.inc.php which omits the .phar extension. The uploaded file is stored with its original .phar extension under the web-accessible storage directory, and a misconfigured .htaccess using Apache 2.2 syntax is silently ignored on Apache 2.4 deployments, allowing unauthenticated HTTP requests to directly execute the uploaded PHP payload.
</code>

C (2026-07-07)

<code> CRM through 8.4.0 contains an authenticated remote code execution in the admin module import feature that allows administrator-le to upload arbitrary PHP files by submitting a crafted zip archi the ModuleManager import function, which extracts contents directly into the modules/ directory under the web root without file types beyond the manifest.xml descriptor. Attackers can place executable PHP files in the modules/ directory that become directly accessible via HTTP, bypassing 's authentication and authorization layer entirely since Apache resolves the path and invokes the PHP interpreter before the application routing layer is in, resulting in a persistent web shell independent of the originating session.
</code>

C (2026-01-16)

<code>WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an authenticated SQL Injection was identified in the Atendido_ocorrenciaControle endpoint via the id_memorando parameter. This flaw allows for full database exfiltration, exposure of sensitive PII, and potential arbitrary file reads in misconfigured en. This is fixed in 3.6.2.
</code>

C (2026-01-16)

<code>MCPJam inspector is the local-first de platform for MCP servers. 1.4.2 and earlier are to remote code execution (RCE) , which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. 1.4.3 contains a patch.
</code>