Threat database

CVE-2026-102826 is a command injection vulnerability in the simple-git library (git-js) prior to version 4.0.0. The vulnerability arises because the default blockUnsafeOperationsPlugin does not fully reject unsafe configuration includes supplied via customArgs to git.clone(), allowing attacker-controlled configuration files to be loaded. This can lead to execution of arbitrary commands with the privileges of the Node.js process running the application. The issue is fixed in version 4.0.0.

Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware version 3.4.0-B20201030. The flaw can be triggered via the /boafrm/formFilter route by manipulating the url request parameter when specific action flags are set. No patch or remediation information is currently available.

IBM Guardium Data Protection 12.2 contains a path traversal vulnerability in its Datasource REST component that allows an authenticated remote attacker to delete arbitrary files. This could lead to denial of service or compromise system integrity. The vulnerability has a high severity score of 8.1 (CVSS 3.1). No patch or remediation information is currently provided.

OpenClaw versions prior to 2026.9.4 have an authorization vulnerability in the mcp.app.view method. This flaw allows users with operator.read tokens to perform actions that require operator.write scope by obtaining and redeeming a standalone ticket. This enables unauthorized invocation of state-changing tools without proper authorization checks.

OpenClaw versions before 2026.9.5 have an authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation between sandboxed sessions. This flaw allows sandboxed or untrusted content to read files from other session sandboxes or shared workspace directories via media pipeline functions that do not properly restrict read access. The vulnerability has a CVSS score of 6.3, indicating medium severity.

CVE-2026-92231 is a high-severity cross-site scripting (XSS) vulnerability in Joomla! CMS affecting multiple version ranges. The flaw arises from improper neutralization of input during web page generation due to an XSS filter bypass caused by HTML5 entity decode mismatch. Specifically, the checkAttribute method normalizes attribute values without decoding HTML5 entities before testing for the "javascript:" scheme, enabling an XSS vector.

CVE-2026-92232 is a high-severity cross-site scripting (XSS) vulnerability in Joomla! CMS affecting multiple version ranges. The issue arises from the cleanAttribute method failing to properly sanitize HTML data URIs when injected with whitespace characters, allowing an attacker to bypass the XSS filter. This vulnerability affects Joomla! versions 1.5.0 through 5.4.8, 6.0.0 through 6.1.3, 1.0.0 through 3.0.6, and 4.0.0 through 4.1.0. The vulnerability has a CVSS 4.0 base score of 7.1, indicating high severity. No patch or remediation information is provided in the source data.

CVE-2026-92227 is a high-severity improper authentication vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. The flaw involves premature issuance of a rememberme cookie that allows bypassing multi-factor authentication (MFA). This vulnerability enables attackers to circumvent MFA protections without user interaction or privileges.

CVE-2026-92226 is a high-severity vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. It involves improper access control checks in various webservice edit tasks, allowing unauthorized users with certain privileges to perform edit actions on items that should not be editable.

A cross-site scripting (XSS) vulnerability exists in Joomla! CMS versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3 in the link toolbar layout. This vulnerability arises from improper escaping of inputs, allowing an attacker to inject malicious scripts during web page generation. The issue has a medium severity rating with a CVSS score of 5.9.

CVE-2026-92225 is a cross-site scripting (XSS) vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. The issue arises because the module list layout does not properly escape user-supplied input, allowing an attacker to inject malicious scripts. This vulnerability has a medium severity rating with a CVSS score of 5.9. No known exploits are reported in the wild, and no official patch information is provided in the input data.

CVE-2026-92223 is a medium severity vulnerability in Joomla! CMS versions 5.0.0 through 5.4.8 and 6.0.0 through 6.1.3. It involves improper access control that allows unauthorized users with certain privileges to update the workflow stage of content they should not have access to.

CVE-2026-92222 is a Server-Side Request Forgery (SSRF) vulnerability affecting Joomla! CMS versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. The issue arises from improper validation of URLs used in server-side requests within various core extensions. This flaw could allow an attacker with high privileges to induce the server to make unauthorized requests. The vulnerability has a high severity rating with a CVSS 4.0 score of 8.9.

CVE-2026-90918 is a cross-site scripting (XSS) vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. The issue arises from the mail template feature lacking proper escaping mechanisms, allowing injection of malicious scripts in HTML mail templates. This vulnerability has a medium severity rating with a CVSS score of 6.9.

CVE-2026-90917 is an improper access control vulnerability in Joomla! CMS versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. It allows unauthorized users to view content items from categories they should not have access to due to improper ACL checks in outputs for tagged items.

CVE-2026-90915 is a path traversal vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. It allows improper validation of cache group names during cache purge actions, enabling arbitrary directory deletions. The vulnerability has a high severity rating with a CVSS 4.0 score of 7. No known exploits are reported in the wild. Joomla! CMS is not a cloud service, and no patch information is provided in the source data.

A cross-site scripting (XSS) vulnerability exists in Joomla! CMS versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. The issue arises from improper escaping in the generic audio and video output layouts, allowing injection of malicious scripts during web page generation.

Ollama versions from 0.14.0 up to but not including 0.31.2 have an incorrect authorization vulnerability in the experimental agent mode Bash tool approval mechanism. This flaw allows attackers who can influence model output via prompt injection to append shell control operators to approved commands, enabling execution of additional shell commands without session approval. The vulnerability has a high severity with a CVSS score of 7.8.

A vulnerability in Joomla! CMS versions 1.5.0 through 5.4.8 and 6.0.0 through 6.1.3 allows unauthorized creation of guest-level user accounts via the profile.save controller. This occurs because the controller does not verify the login state of the user, enabling account creation on sites without active user registration.