CVE-2026-76655 is a high severity stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop SNMP Trap Multiplexer. This flaw may allow remote code execution without requiring privileges or user interaction. The vulnerability impacts availability but does not affect confidentiality or integrity according to the CVSS vector. No affected versions or patch information are provided.
CVE-2026-73798 is a high-severity vulnerability in Hewlett Packard Enterprise's HPE NonStop DNS 9.2.3 Non Secure Version. It involves a misinterpretation of input (CWE-115) that can lead to a denial of service (DoS) condition. The vulnerability does not impact confidentiality but can affect integrity and availability. There is no explicit information on patches or fixes available at this time.
CVE-2026-73797 is a medium severity vulnerability in Hewlett Packard Enterprise's HPE NonStop TSQLFIL product. It involves undefined behavior that may cause address space corruption when a specific API is called. The vulnerability does not impact confidentiality but can affect integrity and availability. No affected versions or patch information are provided.
CVE-2026-85298 is an Incorrect Authorization vulnerability in Google Cloud Application Integration's AuthConfig validation and integration execution runtime. It affects versions prior to 2026-08-27 and allows an authenticated user to escalate privileges and impersonate a service account within the project. The vulnerability was patched on August 27, 2026, and no customer action is required.
CVE-2026-73796 is a medium severity vulnerability in Hewlett Packard Enterprise's HPE NonStop TSQLEXE component. It involves a CWE-564 SQL injection flaw that may cause an application crash when processing a crafted SQL query. The vulnerability does not impact confidentiality but can affect integrity and availability. No affected versions or patch information are provided.
CVE-2026-108072 is a vulnerability in TSplus Remote Access version 19.20.3.10 caused by incorrect default permissions on shared login scripts (autostart1.tscr) in the shared themes directory. This misconfiguration allows users with valid sessions but insufficient privileges to modify these scripts. An attacker could exploit this to execute arbitrary commands under another user's security context upon login, potentially enabling lateral movement or privilege escalation depending on the targeted user's privileges.
CVE-2026-108071 is a high-severity authentication bypass vulnerability in TSplus Remote Access version 19.20.3.10. The flaw exists in the multi-factor authentication (MFA) mechanism, where the second-factor verification result is not properly enforced. An attacker with valid first-factor credentials can bypass the second-factor check and gain unauthorized access to protected applications and resources.
CVE-2026-105067 is a high severity SQL Injection vulnerability in Webnus Modern Events Calendar Lite. It allows an attacker with limited privileges to perform blind SQL injection attacks, potentially leading to high confidentiality impact and limited availability impact. The vulnerability affects versions from initial releases up to but not including 7.37.0. No explicit patch or vendor advisory is provided in the input data.
CVE-2026-103358 is a code injection vulnerability in the VillaTheme Email Template Customizer for WooCommerce plugin. It affects versions from the initial release up to and including 1.3.4. The vulnerability allows an attacker to inject code remotely without requiring privileges or user interaction. This can lead to high confidentiality impact but does not affect integrity or availability. No official patch or remediation information is provided in the input data.
CVE-2026-107431 is a missing authorization vulnerability in Crocoblock JetFormBuilder affecting versions from initial releases up to 3.6.6. This flaw allows unauthorized users to exploit incorrectly configured access control security levels, potentially causing denial of service. The vulnerability has a high severity rating with a CVSS score of 7.5. No official patch or remediation details are provided in the available data.
CVE-2026-101341 is a high-severity stack-based buffer overflow vulnerability in NLnet Labs NSD affecting versions 4.10.0 up to but not including 4.15.3. The flaw arises because tokens of text in RDATA, such as in TXT records under 32 bytes, are not properly checked against the reserved space, allowing out-of-bounds stack writes. This can overwrite a callback function pointer that NSD calls immediately after parsing. The vulnerability requires feeding specially crafted zone files directly to NSD, such as those from an operator-controlled provisioning system, rather than those written out by NSD itself.
CVE-2026-101339 is a high-severity stack-based buffer overflow vulnerability in NLnet Labs NSD affecting versions from 4.10.0 up to but not including 4.15.3. It occurs when a HIP resource record with a near-limit RDATA size and an additional dname RDATA field (HIP Rendezvous server) is processed, allowing up to 191 bytes of attacker-controlled data to overwrite the stack. This vulnerability requires feeding a specially crafted zone file directly to NSD, such as from an operator-controlled provisioning system. Zone files written out by NSD itself are not vulnerable to this formatting issue.
CVE-2026-101338 is a high-severity stack-based buffer overflow vulnerability in NLnet Labs NSD affecting versions from 4.10.0 up to but not including 4.15.3. The flaw occurs when a SVCB or HTTPS resource record (RR) fills the wire format RDATA to its limit, allowing an additional ECH parameter to overwrite the stack. This can lead to the base64 decoder writing attacker-controlled data of unlimited size, potentially causing memory corruption. Zone files written out by NSD itself are not affected, but zone files fed directly to NSD, such as those from operator-controlled provisioning systems, can trigger the vulnerability.
CVE-2026-101337 is a high-severity stack-based buffer overflow vulnerability in NLnet Labs NSD affecting versions from 4.10.0 up to but not including 4.15.3. The flaw occurs when base64 data is split into pieces of 3 characters or less, causing incorrect token calculations that result in zero bytes and allow an attacker to overwrite the stack with up to 64K of controlled data. This vulnerability requires feeding a specially crafted zone file directly to NSD, such as from an operator-controlled provisioning system, rather than zone files generated by NSD itself.
US law enforcement arrested two individuals involved in a multi-year scheme facilitating North Korean IT workers to fraudulently obtain remote employment at US companies by using laptop farms. The suspects housed and configured laptops issued by victim companies to make IT workers appear as if they were working from the US, using fake IDs and VPN/proxy infrastructure to mask their real locations. The operation disrupted 40 locations in Texas, seizing 187 laptops and related equipment. The scheme generated over $3 million in fraudulent revenue and targeted over 70 US companies across multiple sectors. The FBI warns that IT workers use facilitators to evade detection and recommends an 'identity in depth' approach for detection and mitigation.
CVE-2026-104795 is a high-severity vulnerability in Red Hat OpenShift Container Platform 4.21 where the insights-runtime-extractor DaemonSet runs with unnecessary privileges. It executes workload-controlled binaries with retained root privileges, allowing an attacker who can schedule a pod to escalate privileges to full root on the node. This occurs because the process changes only the effective UID, leaving real and saved UIDs at 0, and executes the workload's own binary with root privileges in the host namespace. A fix is available in OpenShift Container Platform 4.21.39.
CVE-2026-108070 is a high-severity vulnerability in TSplus Remote Access version 19.20.3.10. It involves improper access control in the web server component, allowing unauthenticated remote attackers to bypass intended access restrictions and access internal resources by manipulating paths through the /socket.io/JWN/ endpoint.
Recent Windows updates may cause Remote Desktop connection failures for non-admin users when the "Administrator protection" security feature is enabled. Microsoft has confirmed this issue but no specific vulnerability or exploit details are provided.
This is a promotional post seeking testers for an open-source tool designed to ingest multiple vulnerability feeds and prioritize CVEs based on exploitation risk and other factors. The tool aims to help users rank vulnerabilities for remediation efforts more effectively. It is currently implemented as a Cloudflare worker with plans for a Docker version.
CVE-2026-103905 is a vulnerability in the JTL-Shop administration backend where the plugin safe mode toggle can be accessed without authentication. This allows an unauthenticated remote attacker to enable or disable the shop's plugin safe mode, effectively deactivating all installed plugins including payment and shipping integrations. The vulnerability leads to a denial of service affecting the entire shop. It requires only a single request and can be automated against multiple installations.