2026

An eval() injection vulnerability in the get_list function in modules/meta_parser.py in lllyasviel Fooocus 2.1.854 throu

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repos

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentiall

A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0. An authenticated user fr

An issue in cleverange_auth v.0.1.10 allows a remote attacker to cause a denial of service via the account_verification

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can caus

Memos versions 0.26.0 through 0.30.0 fail to revoke refresh tokens when a user changes their password, allowing attacker

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution throug

appium-mcp-server through 0.1.61 fails to validate or normalize file paths in the write_file and write_files_batch tools

Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentia

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could pote

Incorrect access control in the setElinkQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated a

A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Lan

The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is

A flaw was found in rpm. A local attacker could supply a specially crafted `.gem` filename containing RPM macro syntax.

A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/c

A flaw has been found in Chanjet CRM up to 20260707. This issue affects some unknown processing of the file jxf_dump_tab

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges cou