2026

An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be

A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a

An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusua

An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google

ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacke

Exterro FTK Imager before 8.3 contains an XML external entity (XXE) injection vulnerability that allows attackers to rea

A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet co

A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user,

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recor

Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools wit

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools wit

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools wit

pymonocypher uses cython to wrap the Monocypher C library. Prior to version 4.0.2.8, the argon2i_32 implementation does

Note Mark is an open-source note-taking application. Prior to version 0.19.5, GET /api/books/{bookID}/notes is an unauth

Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment (PoC+) consensus algori

A persistent unsafe URL injection vulnerability exists in the MISP dashboard ButtonWidget configuration. Dashboard widge

MISP contains a reflected Cross-Site Scripting (XSS) vulnerability in the event attribute filtering query builder. The t

MISP contains an authorization flaw in the OnDemand correlation engine where correlations were calculated solely from ma

MISP contains an improper TLS certificate validation vulnerability in CurlClient. The CurlClient::$verifyPeer property w

MISP contains an authentication bypass vulnerability in its LDAP and LinOTP authentication components due to insufficien

vhr fails to validate user authorization in the PUT /hr/info endpoint, allowing authenticated users to modify arbitrary

Kill Bill through 0.24.21 fails to enforce permission annotations on several AdminResource endpoints including getQueueE

CRMEB contains an authentication bypass vulnerability in the verifyAuth() method of SystemRoleServices.php that returns

Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endp

Oppia's AdminRoleHandler GET endpoint in core/controllers/admin.py is decorated with open_access, allowing any registere

Eclipse aeriOS Self-orchestrator versions prior to 1.2.1 contain a path traversal vulnerability in the REST API. User-co

Taipy configures its socket.io server with wildcard CORS origin and credential flag enabled, allowing any web page to es

vhr through commit 03abbd3 fails to verify that the account ID in PUT /hr/pass requests belongs to the authenticated cal

CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attac

Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to r

Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to interna

Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails t

CRMEB through 6.0.0 fails to validate message ownership in the edit_message handler of MessageSystemController.php, allo

DbGate fails to validate jslid parameters in the jsldata controller, allowing authenticated users to read and write arbi

A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::upload

ntopng is a web-based network traffic monitoring application. In versions 6.7.0 through 6.7.260717, two REST v2 endpoint

Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a fai

A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor wh

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes

A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its `field.cattle.io

A flaw was found in Rancher Manager. The GlobalRole controller derived the target ClusterRole name from the user-settabl

A flaw was found in Rancher Manager. The /v3/users update path did not enforce immutability of a User resource's `userna

Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements use

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inje

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status: Monitoring privilege to inject

Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements use

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/form

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/f