CVE-2026-97715 is a high-severity vulnerability in Absolute Security Secure Access affecting versions prior to 14.60. It involves the client registration process where authenticated attackers can send malformed data to cause a persistent denial of service. The vulnerability has a CVSS 4.0 base score of 7.1. No known exploits are reported in the wild, and no official patch links are provided in the input data.
CVE-2026-107176 is a vulnerability in Red Hat OpenShift Container Platform 4's cluster-samples-operator. The RBAC role coreos-pull-secret-reader in the openshift-config namespace grants broad permissions on all Secret resources without limiting access to specific resource names. This over-permission allows an attacker who compromises the samples-operator pod or its service account token to read all secrets in the namespace, including sensitive credentials.
CVE-2026-107161 is a heap-based buffer overflow vulnerability in the Cyrus SASL DIGEST-MD5 plugin on Red Hat Enterprise Linux 10. The flaw occurs because the add_to_challenge() function miscalculates buffer size when quoting special characters, leading to an out-of-bounds write. This can be triggered by a malicious or on-path DIGEST-MD5 or HTTP Digest server sending a crafted challenge, potentially causing client application crashes.
CVE-2026-97714 is a high-severity vulnerability in the authentication sub-system of Absolute Security Secure Access servers prior to version 14.60. It allows attackers to send a malformed response during authentication, resulting in a persistent denial of service condition. No known exploits are reported in the wild. The vulnerability affects versions from initial releases up to but not including 14.60.
This analysis discusses a new class of denial-of-service attacks called 'denial of wallet' attacks targeting AI token usage in cybersecurity operations centers (SOCs). Attackers can inflate the cost and latency of AI-driven security processes by injecting malicious prompts into data sources processed by AI agents. This can exhaust budgets or trigger security filters, causing silent failures or degraded investigation quality without immediate alerts. The risk includes disruption of AI-based SOC workflows and increased operational costs. Mitigations include strict token usage limits, filtering untrusted data, limiting agent permissions, and using on-premise AI models to reduce reliance on costly cloud APIs.
CVE-2026-107225 is an improper input validation vulnerability in the Go library excelize versions 2.8.0 through 2.11.0. The vulnerability arises because the GetStyle function's predicates only check upper bounds for style-table indices, allowing negative indices to be used. When a crafted styles.xml file contains negative fillId, borderId, or fontId values, these negative values bypass the upper-bound checks and cause negative slice indexing, leading to a panic during cell styling reads. No fix is currently available for this issue.
CVE-2026-107224 is an integer overflow vulnerability in the qax-os excelize library affecting versions from 2.1.0 through 2.11.0. It arises from improper handling of Zip64 uncompressed sizes that, when set to values with the high bit set, cast to negative int64 values. This bypasses unzip size guards and leads to a panic due to a negative capacity passed to Go's make function, causing a runtime error and crashing the calling goroutine. The vulnerability can be triggered by a crafted 159-byte archive without authentication.
CVE-2026-107223 is a high-severity vulnerability in the qax-os excelize Go library for handling Microsoft Excel spreadsheets. Versions from 2.1.0 through 2.11.0 are affected. The flaw arises because the library's flatCols function expands column ranges without validating the Min and Max column indices against the worksheet's column limit. An attacker can craft a worksheet with an excessively large column max attribute, causing the library to allocate excessive memory and CPU during column mutation operations, potentially leading to out-of-memory conditions. No official fix or patch is currently available.
CVE-2026-103371 is a vulnerability in Apache Geode versions 2.0.0 up to but not including 2.0.3. It involves the insertion of sensitive information into log files via the Web Management interface. This issue has a high severity rating with a CVSS score of 7.5. The vulnerability does not affect confidentiality, integrity, or availability beyond the exposure of sensitive data in logs. Users are advised to upgrade to Apache Geode version 2.0.3, which addresses this issue.
CVE-2026-107222 is a medium severity vulnerability in the qax-os excelize Go library versions 2.7.0 through 2.11.0. It involves improper validation of array indexes during conditional-format extraction, which can cause out-of-range indexing or nil dereferences when processing malformed worksheet rules. This can lead to a panic that terminates an unprotected process. No fixed version is currently available.
CVE-2026-107221 is an out-of-bounds write vulnerability in the qax-os excelize library affecting versions from 2.0.0 up to and including 2.11.0. The flaw occurs in the checkRow function when processing spreadsheet rows with cells that are not sorted by column in the XML, causing an index out of range panic and process crash. This affects worksheet API calls such as GetCellValue, GetCellFormula, CalcCellValue, GetMergeCells, and SetCellValue. The vulnerability leads to an unauthenticated denial of service via a deterministic panic. A fix involves correcting the sizing of internal data structures to handle unordered cells properly.
CVE-2026-107220 is an out-of-bounds read vulnerability in the qax-os excelize Go library versions 2.7.1 through 2.11.0. The issue occurs when processing a crafted worksheet containing an empty mergeCell ref, leading to an empty cached rectangle slice being passed without length checks. This causes an out-of-bounds slice access in cellInRange, resulting in a panic during cell operations. No fix is currently available.
CVE-2026-107219 is an uncontrolled resource consumption vulnerability in the qax-os excelize library. The vulnerability arises because the library processes the spinCount parameter from an encrypted file's EncryptionInfo stream without bounds, causing excessive CPU usage during key derivation. This leads to a denial of service by making file opening operations take an excessive amount of time. The vulnerability affects versions from 2.3.1 through 2.11.0. It impacts availability only and does not affect confidentiality or integrity. Legitimate files use a much lower spinCount, so normal usage is not impacted significantly.
A reflected Cross-site Scripting (XSS) vulnerability exists in Everest Forms through version 3.6.1 due to improper neutralization of input during web page generation. This vulnerability allows an attacker to inject malicious scripts that can execute in the context of a user's browser session.
Gophish versions through 0.12.1 have stored and reflected cross-site scripting (XSS) vulnerabilities. These flaws allow attackers who control or intercept SMTP server error messages to inject malicious scripts. The injected scripts can execute when administrators view campaign results or send test emails, potentially leading to theft of API keys.
MISP has a validation flaw in its object synchronization logic where objects created without a description are rejected by receiving instances during synchronization. This causes the receiving instance to silently drop the object and its attributes, resulting in loss of threat-intelligence data. The issue occurs when multiple MISP instances synchronize and an authorized user creates an object without a description. It is not exploitable externally but can cause unintended data loss within the sync topology. The affected versions are those prior to 2.5.48.
Gophish versions 0.11.0 through 0.12.1 have a server-side request forgery (SSRF) vulnerability that allows authenticated low-privileged users to send POST requests to /api/import/site and access loopback and private network hosts. This vulnerability enables attackers to submit internal URLs that bypass the default dialer deny list, potentially allowing them to read service responses and enumerate internal hosts and ports via error messages. The vulnerability has a medium severity with a CVSS score of 4.3.
Gophish versions through 0.12.1 have an insecure direct object reference vulnerability that allows authenticated users to take over other users' groups, templates, landing pages, and sending profiles by supplying another user's sequential ID in certain API POST requests. This can lead to unauthorized reassignment of objects and exposure of recipient lists.
LMCache versions through 0.5.5 have a missing authentication vulnerability in the multiprocess coordinator. This flaw allows remote unauthenticated attackers to access the HTTP fleet control API, which listens on all interfaces by default. Attackers can manipulate instances, quotas, events, and enumerate keys, potentially disrupting caching operations and exposing placement metadata.
MISP has a race condition vulnerability in its email-based one-time password (OTP) login flow. When two HTTP requests with the same valid OTP are submitted concurrently, both can authenticate successfully, violating the OTP's one-time-use guarantee. This occurs because OTP validation and deletion are not atomic operations, allowing a second request to reuse the OTP before it is deleted. This affects MISP versions prior to 2.5.48 and requires that email OTP login is enabled and the attacker has a valid OTP. The vulnerability weakens authentication controls and may allow unauthorized access if the OTP is intercepted or shared.