2026

Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0

A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --allow-fs-wr

The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE (EtherTy

OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-

The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 mu

The ISO Presentation layer contains a flaw in the handling of specific parameters during normal mode negotiation. A mis

The MMS server connection handler contains a flaw in its processing of BER-encoded request data. When an MMS confirmed

An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to t

The MMS BER decoder contains a flaw in decoding fixed-width BER fields (boolean/integer): an attacker-supplied length v

The MMS BER decoder contains a boundary-handling flaw in the processing of certain fields within confirmed-request mess

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cau

A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an authenticated attack

A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationO

A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBu

The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment. When parsing certain

SFTPGo prior to 2.7.4 contains a permission bypass vulnerability that allows authenticated users to circumvent per-direc

A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and th

A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp

RapidRAW before 1.6.0 does not validate the lutPath field in preset files before passing it to File::open() in lut_proce

An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to r

Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore driv

Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, Kamaji derives a TenantControlPlane dat

The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 cert

TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2

An incomplete fix for CVE-2026-15352 in the NASA core Flight System (cFS) Health and Safety (HS) application leaves a s

The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that exposes a debug interface granting full

LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn ships def

LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn's lazyc2.

Sylius Mollie Plugin provides Mollie payment integration for Sylius applications. Prior to 2.2.8, 3.2.4, and 3.3.1, Syli

Sylius Mollie Plugin provides Mollie payment integration for Sylius applications. Prior to 2.2.8, 3.2.4, and 3.3.1, Syli

re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2's String.prototype.match

Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.

OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated remote attack

AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. In versions 8.0.0-next.0 through

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the b

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the b

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the b

Outstatic CMS <= 2.1.9 contains a hardcoded JWT signing secret. When the OST_TOKEN_SECRET environment variable is not se

An issue in dnsmgr v.2.15 and before allows a local attacker to execute arbitrary code via the ping function of the Chec

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1.

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1.

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType.

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edit_type.php endpoint via the Paramete

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenue_report.php via th

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /delete_members.php?id=1.

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /memberProfile.php?id=1.

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /delete_membership.php?id=1.