2026

A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the com

A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of t

A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsM

A vulnerability was detected in ag-ui-protocol ag-ui up to 2026-09-23. This affects an unknown part of the file SseParse

DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrow_hashref us

DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to S

An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execu

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untr

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access t

XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference. The wrapper function XS

fast-mcp-telegram is a Telegram MCP Server. Prior to version 30.1, the send_message/send_message_to_phone MCP tools acce

Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU

Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions. Prior to version 1.3.0, a

The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(input, output)

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticate

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the funct

A security vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x. Impacted is an unknown function in the library en

A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloade

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menu_nat_more_asp o

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte bey

Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code in

Missing Authentication for Critical Function (CWE-306) in the product cache revalidation Server Action (src/app/actions.

A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters

Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the acco

An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripti

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the Id

Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows a

A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects the function startsWith of the

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function i

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the

A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component boa_temp

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /set_ntp_server_

WarehousePG (WHPG) 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability (CWE-862) in the built-in

A privilege mismatch was found in Fleet. When a bundle requested namespace labels or annotations through the namespaceLa

A vulnerability was discovered in Fleet's Git webhook receiver (the gitjob webhook service). When a webhook secret is no

A cross-tenant authorization issue was discovered in SUSE Rancher Fleet. During agent-initiated cluster registration, cl

Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface W

Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface W

Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface W

Dell Live Optics Collector, versions prior to 27.2.13.310, contain(s) a Use of Hard-coded Password vulnerability. A low

Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which co

A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and acces

A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the

A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa o

Incorrect authorization in the custom storage volume creation endpoint in Canonical LXD versions 5.0.0 and later (fixed

A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push acce

Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Cons

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software, Teleco

Use of default credentials vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign