CVE-2026-95664 is an Expression Language Injection vulnerability in the Apache Camel AWS2-s3 component affecting versions from 4.8.0 before 4.18.5 and from 4.19.0 before 4.22.2. The issue arises because the key used by the aws2-s3 producer is taken from a message header and evaluated as a Simple language expression if it contains certain markers, allowing untrusted input to be executed. This can lead to unauthorized access to JVM system properties, environment variables, and invocation of methods on beans, potentially exposing sensitive information. The vulnerability is fixed in versions 4.18.5 and 4.22.2. Users are advised to upgrade to these versions or 4.23.0 or later. Workarounds include removing or validating the CamelAwsS3Key header to prevent untrusted expressions from being evaluated.
CVE-2026-95663 is an insufficient session expiration vulnerability in the Apache Camel Keycloak component affecting versions from 4.16.0 before 4.18.5 and from 4.19.0 before 4.22.2. When token introspection is enabled, the component caches token introspection results without respecting the token's expiration time, allowing expired tokens to be accepted for up to the cache's time-to-live. This can permit continued use of recently expired tokens for a short window, but does not allow token forgery or privilege escalation. The issue is fixed in Apache Camel versions 4.18.5 and 4.22.2.
CVE-2026-95629 is a path traversal vulnerability in the Apache Camel Docling component affecting versions from 4.15.0 before 4.18.5 and from 4.19.0 before 4.22.2. The issue arises because the CamelDoclingOutputFilePath header value is passed verbatim to the external docling tool's --output flag without proper normalization or directory confinement, allowing an attacker able to set this header to write conversion output files to arbitrary writable directories. The vulnerability is fixed in Apache Camel versions 4.18.5 and 4.22.2 with the introduction of an outputBaseDirectory option to restrict output paths. Users are advised to upgrade to these fixed versions and configure the new option if the header can be influenced externally. For those unable to upgrade immediately, mitigating controls include sanitizing or removing the header from external inputs and ensuring header filtering is applied.
CVE-2026-95628 is a path traversal vulnerability in the Apache Camel Docling component affecting versions from 4.15.0 before 4.18.5 and from 4.19.0 before 4.22.2. The flaw allows absolute paths to bypass path safety checks, enabling an attacker who can control custom arguments to point the docling process to arbitrary directories accessible by the Camel process. This undermines the intended directory restriction and can lead to unauthorized access or impact on the system. The issue is fixed in Apache Camel versions 4.18.5 and 4.22.2, with earlier unsupported versions requiring upgrade to a supported release. Mitigations include avoiding use of externally sourced custom arguments and filtering headers that carry these arguments.
A NULL pointer dereference vulnerability exists in RT-Labs AB SOEM versions 2.0.0 and earlier. This flaw allows a malicious device to crash the master system by sending a specific sequence of two messages. The issue arises because the software clears an internal pointer upon receiving an error response but continues processing, leading to use of the cleared pointer if another message arrives before timeout. The vulnerability is fixed in version 2.0.1.
CVE-2026-82945 is an out-of-bounds write vulnerability in RT-Labs AB SOEM versions 2.0.0 and earlier. The issue occurs during device configuration when a malicious device provides more configuration blocks than the fixed-size array can hold, causing memory corruption. This can disrupt subsequent operations of the software. The vulnerability is fixed in version 2.0.1.
CVE-2026-82944 is a high-severity vulnerability in RT-Labs AB SOEM affecting versions before 2.0.1. It involves an out-of-bounds write during multi-segment data transfers, where a malicious device can overflow memory buffers by sending more data segments than initially declared. This flaw can lead to arbitrary code execution.
CVE-2026-82943 is an out-of-bounds read vulnerability in RT-Labs AB SOEM affecting versions before 2.0.1. The flaw allows a malicious device to cause the master to read memory beyond intended buffers by sending crafted messages with unvalidated length values. This can lead to unauthorized disclosure of up to 64KB of the master's memory. The issue is fixed in version 2.0.1.
CVE-2026-116372 is an improper input validation vulnerability in the MISP misp-guard security filtering proxy. The vulnerability arises because misp-guard only explicitly filters HTTP 200 responses, allowing other 2xx status codes like 201, 203, and 206 to bypass filtering. This enables a malicious or compromised feed endpoint to deliver unfiltered, potentially malicious content to the MISP instance. Exploitation requires control over a configured feed endpoint, with no additional authentication or user interaction needed.
CVE-2026-116235 is a critical CRLF injection vulnerability in Oray Pugongying X5 Pro version 7.6.1 affecting the L2TP Authentication component. The flaw allows remote attackers to manipulate the Username argument to inject carriage return and line feed characters. Exploit code has been published, but there is no vendor response or patch available.
CVE-2026-112828 is a missing authorization vulnerability in Meow Apps AI Engine versions prior to 3.8.7. It allows exploitation due to incorrectly configured access control security levels, potentially leading to unauthorized actions with limited privileges. The issue is fixed in version 3.8.7.
CVE-2026-111841 is a Cross-Site Request Forgery (CSRF) vulnerability in the Aman FunnelKit Automations WordPress plugin (wp-marketing-automations). It affects versions from initial releases up to 3.8.5.2. The vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user. A fix is available in version 3.8.6.
CVE-2026-110376 is a missing authorization vulnerability in the VillaTheme DEPART plugin for WooCommerce, affecting versions prior to 1.1.0. The flaw allows exploitation of incorrectly configured access control, potentially leading to unauthorized actions. The issue is fixed in version 1.1.0.
CVE-2026-101259 is a vulnerability in the Apache Camel CoAP component affecting versions from 4.0.0 before 4.18.5 and from 4.19.0 before 4.22.2. It allows generation of error messages containing sensitive internal information such as class names, file paths, host names, and connection details. This occurs when the CoAP consumer fails to build its response after route completion and returns detailed exception messages in a 5.00 Internal Server Error response. The issue is fixed in Apache Camel versions 4.18.5, 4.22.2, and later 4.23.0. Users are advised to upgrade to these fixed versions to prevent sensitive information disclosure.
CVE-2026-70388 is an integer underflow vulnerability in RT-Labs AB SOEM affecting versions before 2.0.1. A malicious device on the network can send crafted messages that cause the master to write outside allocated memory boundaries due to improper validation of message length arithmetic. This memory corruption can potentially lead to arbitrary code execution on the master system. The issue is fixed in version 2.0.1.
CVE-2026-116234 is a critical CRLF injection vulnerability in Oray Pugongying X5 Pro version 7.6.1. It affects an unknown function related to the IPsec Policy Handler component via manipulation of the 'secproto' argument in the /etc/ipsec.conf file. The vulnerability can be exploited remotely, and public exploit code is available. The vendor has not responded to the disclosure, and no patch information is provided.
CVE-2026-116233 is a critical security vulnerability in Oray Pugongying X5 Pro version 7.6.1 involving CRLF injection through manipulation of the rent_time argument in the Dnsmasq component. This vulnerability can be exploited remotely and has publicly disclosed exploit code. The vendor has not responded to the disclosure and no patch information is available.
Multiple cross-site scripting (XSS) vulnerabilities exist in OPNsense firewall versions up to and including 26.7.1_1. These flaws allow a low-privileged attacker to execute arbitrary JavaScript in the context of another user who visits a crafted page or clicks a malicious link. The vulnerabilities have a medium severity rating with a CVSS 4.0 score of 5.6.
CVE-2026-97873 is a vulnerability in Bouncy Castle for Java before versions 1.86 and 2.73.13. It involves the legacy PBES1 and PKCS#12 password-based encryption (PBE) schemes running key derivation with an iteration count taken from untrusted input without proper limits. This allows an attacker to specify an arbitrary amount of computational work, potentially causing resource exhaustion. The issue is addressed by bounding the iteration count with a configurable maximum and rejecting out-of-range values.
CVE-2026-97662 is an argument injection vulnerability in the diff scan operation of AWS security-agent-mcp-server versions 0.1.1 up to but not including 0.2.0. This flaw allows context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host system outside the intended workspace by supplying a crafted reference value. The issue is fixed in version 0.2.0.