Seanime v3.7.0 to v3.10.3 contains an argument injection vulnerability reachable through improper authorization, allowing unauthenticated LAN or Tailnet clients to bypass the privileged mediastream settings guard by setting transcodeHwAccel to custom and supplying attacker-controlled decodeFlags and encodeFlags via the transcodeHwAccelCustomSettings field, which are appended verbatim to the ffmpeg argument vector. Attackers can trigger execution via the mediastream request and HLS playlist endpoints to achieve arbitrary file write and file truncation on the host as the user running seanime, with the injected input options also enabling potential arbitrary local file read and outbound data exfiltration through ffmpeg's protocol handlers.

CVE Database V5

CVE-2026-111728: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') in 5rahim Seanime

An untrusted search path vulnerability in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code by supplying and opening crafted executable files instead of legitimate content. This vulnerability enables code execution through manipulation of the search path used by the application.

The vulnerability identified as CVE-2026-95182 involves an untrusted search path in DeepSeek Harness (dsh) at commit c291e796. Attackers can exploit this flaw by providing and opening malicious executable files that the application mistakenly trusts and executes, leading to arbitrary code execution. No CVSS score or patch information is provided, and there is no indication of known exploits in the wild.

An untrusted search path vulnerability in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code by supplying and opening crafted executable files instead of legitimate content. This vulnerability enables code execution through manipulation of the search path used by the a

CVE-2026-95182: n/a

Thermo Fisher Torrent Suite Software contains a path traversal vulnerability (CWE-22) that allows an authenticated attacker to read arbitrary files on the Torrent Server accessible to the web service account. The vulnerability affects versions from 0 up to and including 5.18. The CVSS 3.1 score is 6.5, indicating a medium severity. No patch or vendor advisory information is provided, and no known exploits are reported in the wild.

CVE-2026-107777 is a path traversal vulnerability in Thermo Fisher Torrent Suite Software. An authenticated attacker can exploit this flaw to read arbitrary files on the server that the web service account has access to. This vulnerability affects all versions from 0 through 5.18 inclusive. The CVSS 3.1 base score is 6.5, with attack vector network, low attack complexity, requiring privileges, no user interaction, and impacts confidentiality but not integrity or availability.

Thermo Fisher Torrent Suite Software contains a path traversal vulnerability (CWE-22) that allows an authenticated attacker to read arbitrary files on the Torrent Server accessible to the web service account. The vulnerability affects versions from 0 up to and including 5.18. The CVSS 3.1 score is 6

CVE-2026-107777: CWE-22 in Thermo Fisher Torrent Suite Software

dcm4chee-arc-light

CVE-2026-105667 is a vulnerability in J4Care's dcm4chee-arc-light version 5.35.1 where the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sender. This allows a remote attacker to reassign medical studies and workflow records from one patient to another. The archive's unmerge function does not revert these changes, potentially causing persistent data integrity issues.

The vulnerability arises from the HL7 listener in dcm4chee-arc-light (version 5.35.1) accepting ADT^A40 patient-merge messages without verifying the identity of the sending application. This lack of authentication (CWE-306) enables a remote attacker to reassign studies and related workflow records between patient identities. The archive's unmerge operation does not reverse these reassignments, leading to potential data integrity and workflow disruption.

CVE-2026-105667 is a vulnerability in J4Care's dcm4chee-arc-light version 5.35.1 where the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sender. This allows a remote attacker to reassign medical studies and workflow records from one patient to another. The archive's 

CVE-2026-105667: CWE-306 in J4Care dcm4chee-arc-light

ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) authorizes the request only by comparing the target role's level with the caller's minimum level. The application neither validates the granted menu set nor prevents a caller from modifying its own role. A logged-in non-admin user whose role holds the delegated `roles:edit` permission can submit its own role id together with an arbitrary list of menu ids.

CVE-2026-106705: n/a

Description

CVSS v3.1

Technical Details

Community Reviews

Actions

External Links

Need more coverage?

Latest Threats

Check if your credentials are on the dark web

Lead Pen Test Professional