CVE-2026-111095 is a stored cross-site scripting (XSS) vulnerability in JetBrains TeamCity affecting versions before 2026.2, including 2026.1.4 and 2025.11.8. The vulnerability exists in the classic project overview feature, allowing malicious scripts to be stored and potentially executed. It has a high severity with a CVSS score of 8.0. No explicit patch links are provided in the input data.
CVE-2026-111094 is a high-severity vulnerability in JetBrains TeamCity that allows remote code execution due to a whitelist bypass in the build messages protocol. It affects versions prior to 2026.2, 2026.1.4, and 2025.11.8. The vulnerability is categorized under CWE-502 (Deserialization of Untrusted Data).
CVE-2026-111093 is a path traversal vulnerability in JetBrains Datalore versions before 2026.2.1. It allows unauthenticated attackers to read arbitrary files via the report blob endpoint. The vulnerability has a high severity with a CVSS score of 7.5, indicating network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality only.
CVE-2026-111092 is a vulnerability in JetBrains YouTrack that affects versions before 2026.2.19575 and specific 2026.3.x builds (16075, 16397, 16402). It allows a project administrator to execute cross-project issue commands via mail rules, which is a privilege escalation issue related to improper authorization (CWE-862). The vulnerability has a medium severity with a CVSS score of 6.5.
CVE-2026-111091 is a high-severity vulnerability in JetBrains Junie CLI versions before 26.8.3. It allows code execution through an untrusted project's MCP server configuration. The vulnerability is identified as CWE-829, which involves inclusion of untrusted code. The CVSS 3.1 base score is 7.8, indicating significant impact on confidentiality, integrity, and availability. No known exploits are reported in the wild. The issue is fixed in version 26.8.3.
kin-openapi versions from 0.136.0 up to but not including 0.143.0 contain a vulnerability where the openapi3filter component improperly handles OpenAPI 3.1 array schemas missing the 'items' keyword. This leads to a nil-pointer panic during request or response validation when decoding certain content types. The issue does not affect OpenAPI 3.0 documents. The vulnerability is fixed in version 0.143.0.
CVE-2026-105474 is a critical server-side template injection vulnerability in WebPros SolusVM 2 up to version 2.0.0-44576. It allows remote authenticated users to execute arbitrary code with root privileges on the affected system. The vulnerability stems from improper neutralization of special elements used in the template engine. The CVSS 4.0 base score is 9.4, indicating a high severity with network attack vector, low attack complexity, and no user interaction required.
CVE-2026-45452 is a high-severity vulnerability in Unitronics UniStream Pro (B10 and C10 models) and UniLogic software versions prior to 1.41.329. It involves the use of externally-controlled format strings, which can lead to severe impacts on confidentiality, integrity, and availability. The vulnerability allows an attacker with low privileges and no user interaction to potentially execute arbitrary code or cause denial of service.
CVE-2026-71490 is an incorrect authorization vulnerability in OPNsense core versions prior to 26.1.11. It stems from improper handling of directly assigned comma-separated privilege values in the hasPrivilege() function, allowing users with both write and user-config-readonly privileges to bypass read-only restrictions. This enables unauthorized configuration changes via MVC APIs protected by throwReadOnly(). The vulnerability does not affect group privileges due to different parsing logic. The issue is fixed in version 26.1.11.
CVE-2026-45451 is an improper authentication vulnerability affecting Unitronics UniStream Pro (B10/C10) and UniLogic versions prior to 1.41.329. This flaw allows an attacker with limited privileges to bypass authentication controls, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. The vulnerability has a high severity rating with a CVSS score of 8.3. No official patch or remediation details are provided in the available data.
CVE-2026-63442 is a vulnerability in the OPNsense core firewall and routing platform prior to version 26.1.11. It involves improper output neutralization for logs, allowing unauthenticated attackers to inject carriage-return and line-feed characters into the WebGUI login username field. This injection manipulates syslog-ng log processing to forge authentication events, enabling attackers to block legitimate IP addresses by adding them to the sshlockout PF table or bypass password-guessing lockout mechanisms. The issue is fixed in version 26.1.11.
CVE-2026-45450 is a high-severity vulnerability in Unitronics UniStream Pro (B10 / C10) and UniLogic versions prior to 1.41.329. It involves improper restriction of operations within the bounds of a memory buffer, classified as CWE-119. This flaw could allow an attacker with low privileges and no user interaction to achieve high impact on confidentiality and integrity, and low impact on availability.
CVE-2026-58390 is a cross-site scripting (XSS) vulnerability in the OPNsense core firewall platform prior to version 26.1.11. It affects the OpenVPN connection-status dashboard widget and view, where a client common_name is inserted into HTML attributes without proper quote-safe encoding. Exploitation requires an OpenVPN server configured with username-as-common-name and RADIUS or LDAP authentication, plus the ability to provision or self-register a username containing a double quote. An authenticated client can inject script that executes in an administrator's session when viewing the dashboard or connection-status page. The vulnerability allows reading config.xml, invoking privileged APIs, resetting the root password, and obtaining root command execution. This issue is fixed in version 26.1.11.
A cross-site scripting (XSS) vulnerability exists in OPNsense core prior to version 26.1.11. The vulnerability occurs because the certificate description field in the SSL Certificate selector does not properly escape HTML metacharacters, allowing a user with the page-system-certmanager privilege to inject markup. This markup executes when another user with access opens the System Settings Administration page. The issue is fixed in version 26.1.11.
CVE-2026-109449 is a high-severity vulnerability in the Symfony ExpressionLanguage component affecting versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9. The parser does not limit the depth of its node tree, allowing expressions with extremely deep nesting to cause uncontrolled recursion. This can crash the PHP process when freeing the node tree. Applications that validate user-supplied expressions using #[Assert\ExpressionSyntax] or parse untrusted expressions are vulnerable to denial-of-service via a single crafted request.
CVE-2026-45449 is an OS Command Injection vulnerability in Unitronics UniStream Pro and UniLogic software. It affects Unitronics UniStream Pro versions B10 and C10, and UniLogic versions prior to 1.41.329. This vulnerability allows improper neutralization of special elements used in OS commands, potentially enabling an attacker with limited privileges to execute arbitrary commands. The CVSS score is 8.3, indicating a high severity impact with high confidentiality and integrity impact and low availability impact.
CVE-2026-58392 is a cross-site scripting (XSS) vulnerability in the OPNsense core firewall and routing platform. The issue occurs on the NTP GPS page prior to version 26.1.11, where user-supplied input is improperly neutralized, allowing stored XSS. An attacker with page-services-ntp-gps privilege can inject malicious scripts that execute in the context of other users viewing the GPS page, potentially enabling theft of CSRF tokens and execution of authenticated actions. This vulnerability is fixed in version 26.1.11.
CVE-2026-58395 is an XPath Injection vulnerability in the OPNsense core firewall and routing platform prior to version 26.1.11. It allows a user with certain module privileges to send crafted tokens to delete endpoints, causing XPath expressions to expose configuration data across multiple modules without modifying the configuration. The issue is fixed in version 26.1.11.
A path traversal vulnerability (CWE-22) exists in OPNsense core prior to version 26.1.11. The OpenVPN Client Specific Override common_name field improperly accepts path traversal sequences, allowing an authenticated user with Client Specific Override privileges to cause OpenVPN configuration files to be written outside the intended directory. This occurs because the value is concatenated into a file path without normalization or basename checks. Exploitation requires triggering a matching OpenVPN client-connect or authentication event. The vulnerability is fixed in version 26.1.11.
CVE-2026-57155 is a critical path traversal vulnerability in the OPNsense core firewall and routing platform prior to version 26.1.11. It arises from improper validation of a CSV country_code value used in constructing output filenames during GeoIP alias imports. An attacker with Firewall Alias Edit privileges can exploit this to write arbitrary files as root, potentially leading to full firewall compromise via cron job execution. The issue is fixed in version 26.1.11.