Dagster's DuckDB, Snowflake, BigQuery, and DeltaLake I/O managers are vulnerable to SQL injection via dynamic partition keys. Users with the 'Add Dynamic Partitions' permission can inject arbitrary SQL that executes with the I/O manager's database credentials. This affects deployments using dynamic partitions; static or time-window partitions are not impacted. The vulnerability is most relevant where this permission is granted independently of broader database access. A fix is available in Dagster versions 0.29.1 and 1.13.1.
SmarterTools SmarterMail builds prior to 9560 have a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint. This flaw allows authenticated users to read arbitrary .json files on the system. Exploitation combined with weak encryption and hardcoded keys can expose stored passwords and 2FA secrets for all users. The vulnerability has a high severity with a CVSS score of 8.1.
MailEnable Enterprise Premium versions 10.55 and earlier have an improper authorization vulnerability in the WebAdmin mobile portal. This flaw allows attackers to bypass authentication by reusing AuthenticationToken cookies originally issued to low-privileged users. By obtaining a token from the WebMail login endpoint using the PersistentLogin parameter, attackers can replay it against the WebAdmin portal to perform administrative actions with high privileges.
A vulnerability in fohrloop dash-uploader versions 0.1.0 through 0.7.0a2 allows remote attackers to cause a denial of service by triggering an issue in the Upload function related to the max_file_size parameter. This affects components dash_uploader/httprequesthandler.py, dash_uploader/upload.py, and dash_uploader/configure_upload.py.
lwjson version 1.8.1 has an improper input validation vulnerability in its streaming JSON parser. The flaw lies in the end-of-string detection logic, which incorrectly handles escaped quote characters by only checking the immediately preceding character instead of counting consecutive backslashes. This causes valid JSON strings ending with an escaped backslash to never terminate parsing. A remote attacker can exploit this by sending crafted JSON data to cause the parser to hang indefinitely, resulting in a denial of service condition.
Beauty Parlour Management System version 1.1 contains a critical SQL injection vulnerability in the aptnumber parameter of the /appointment-detail.php endpoint. This flaw allows unauthenticated attackers to execute crafted SQL statements, potentially accessing sensitive database information and impacting confidentiality, integrity, and availability.
CVE-2026-29201 describes a vulnerability where insufficient input validation of the feature file name in the feature::LOADFEATUREFILE adminbin call allows an attacker to cause arbitrary file reads by passing a relative file path. This flaw could expose sensitive file contents to an attacker with limited privileges. The vulnerability has a medium severity rating with a CVSS score of 4.3.
A stack buffer overflow vulnerability exists in kosma minmea version 0.3.0 due to the minmea_scan functions copying NMEA field data into a caller-provided buffer without size checks. This flaw allows an attacker to cause a denial of service by crashing the application using minmea_scan with crafted untrusted input.
LINQPad Pro editions before version 5.52.01 contain an unsafe deserialization vulnerability in the LINQPad.AutoRefManager::PopulateFromCache() method. This flaw allows an attacker with limited privileges to execute arbitrary code. Public exploit code is available via Metasploit. The vulnerability has a CVSS 3.1 score of 7.3, indicating high severity.
NAVER MYBOX Explorer for Windows versions before 3.0.11.160 contain a vulnerability that allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by manipulating the registry due to improper privilege checks. This vulnerability has a high severity rating with a CVSS score of 7.8.
CVE-2026-43277 is a vulnerability in the Linux kernel's APEI/GHES subsystem where improper bounds checking of CPER records can lead to a kernel crash (OOPS). The issue arises because the kernel checks record size against a maximum limit but allocates memory based on a smaller size from the firmware, allowing a malicious or faulty firmware to trigger an out-of-bounds access. This can cause a kernel paging fault and system instability.
A vulnerability in the Linux kernel's RDMA ionic driver was fixed to prevent a potential NULL pointer dereference in the ionic_query_port() function. The issue arose because the function called ib_device_get_netdev() without verifying if the returned pointer was NULL, which could lead to a kernel crash. The fix involves checking the return value and returning an error code if the pointer is NULL.
A medium severity vulnerability in the Linux kernel's fsl-imx8mq-usb PHY driver was fixed by adding a missing platform_set_drvdata() call. This data is necessary for proper cleanup during driver removal. The flaw does not impact confidentiality or integrity but can cause availability issues.
CVE-2026-43260 is a vulnerability in the Linux kernel's bnxt_en driver related to improper handling of RSS context deletion. The issue arises because the driver conditionally deletes the RSS context VNIC in firmware only when the network interface is running, which can cause resource leaks when the interface is down. This leads to failures in creating new VNICs on subsequent interface opens, resulting in loss of active RSS contexts.
CVE-2026-43266 is a vulnerability in the Linux kernel's EFI/CPER handling for ARM processors. The flaw involves improper validation of the section_length field in the ARM processor CPER record, allowing the kernel to trust an excessively large section length. This can cause the kernel to read and dump data beyond the intended firmware memory area. The issue is fixed by adding logic to prevent reading past the buffer when ERR_INFO_NUM is too large, resulting in an error message instead of an invalid dump.
CVE-2026-43261 addresses a vulnerability in the Linux kernel related to the arm64 architecture. The TSV110 processor is susceptible to the Spectre-BHB (Branch History Buffer) side-channel attack. The Linux kernel has been updated to include software mitigation by adding the TSV110 processor's MIDR to the mitigation list.
CVE-2026-43265 is a medium-severity vulnerability in the Linux kernel's KVM x86 virtualization component. It involves improper handling of the -EBUSY error when checking nested events from the vcpu_block() function. This can lead to spurious userspace exits with KVM_EXIT_UNKNOWN and potentially cause the virtual machine to crash or become unstable. The issue arises because userspace can place a vCPU into an impossible blocking state with injected events, which the kernel did not properly handle. A fix has been implemented to ignore the -EBUSY error in this context to improve VM stability.
A vulnerability in the Linux kernel's rtw89 WiFi driver was identified where the beacon interval could be zero, leading to a division by zero error during beacon tracking. This issue was found during fuzz testing and fixed by setting a default beacon interval value of 100 TU when zero is detected. The flaw could cause a denial of service by impacting system stability.
CVE-2026-43276 is a use-after-free vulnerability in the Linux kernel's mana network driver. It occurs due to a double destruction of a workqueue during the PCI service rescan path, which can lead to system crashes. The issue arises when mana_gd_cleanup() destroys a workqueue and is called again without proper null checks, causing a second destruction attempt on an already freed resource.
A vulnerability in the Linux kernel's gfs2 filesystem component related to the fiemap operation could cause a page fault due to recursive glock acquisition when accessing memory-mapped fiemap buffers. This issue has been fixed by disabling page faults during iomap_fiemap() and manually faulting in the buffer if needed.