CVE-2026-70379 affects WolfVision Cynap Pro and Cynap Core Pro devices with the vSolution Matrix feature enabled. These devices may expose current screen content via an unauthenticated, unencrypted RTSP/RTP stream accessible to hosts on the same network segment. This allows unauthorized viewing or capture of presentation content if network access controls are insufficient. The vulnerability is fixed in version 1.78a.
CVE-2026-116461 is a medium-severity vulnerability in Omega Solution Restro POS up to version 20261026. It involves business logic errors triggered by manipulation of the productUnitSalePrice argument in the /sale-invoice/ component. The vulnerability can be exploited remotely without user interaction and requires low privileges. The vendor has not responded to the disclosure, and no patch or mitigation guidance is currently available. Public exploit details have been disclosed.
HashiCorp Consul and Consul Enterprise versions 1.17.0 up to 2.0.4 contain an authorization bypass vulnerability in the agent's service mesh leaf certificate API. This flaw allows attackers without valid ACL tokens to retrieve cached service leaf certificates and their private keys. The vulnerability is fixed in Consul Community Edition 2.1.0 and Consul Enterprise versions 2.1.0 and 1.21.19.
A memory allocation vulnerability exists in ONNX versions prior to 1.22.0 where unpacking certain tensor types can lead to excessive memory allocation. This occurs because the unpacking functions resize arrays based on attacker-controlled dimensions without verifying the actual encoded data size, potentially causing memory exhaustion. The issue is fixed in version 1.22.0.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows Stored XSS.This issue affects Gallery PhotoBlocks: from n/a through 1.3.7.
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in VillaTheme Photo Reviews for WooCommerce woo-photo-reviews allows Leveraging Race Conditions.This issue affects Photo Reviews for WooCommerce: from n/a through 1.2.31.
A signed to unsigned conversion error in ONNX versions from 1.4.0 up to but not including 1.22.0 affects the ScanInferenceFunction and related functions. This flaw allows a missing or negative num_scan_inputs attribute to cause a null pointer dereference or an oversized allocation, potentially disrupting shape inference. The issue is fixed in version 1.22.0.
Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coupons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Coupons for WooCommerce: from n/a through 1.3.14.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Typing Text – Give your texts many typing effects text-typing allows Stored XSS.This issue affects Typing Text – Give your texts many typing effects: from n/a through 2.2.0.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Button Block button-block allows Stored XSS.This issue affects Button Block: from n/a through 1.2.7.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Content Slider Block content-slider-block allows Stored XSS.This issue affects Content Slider Block: from n/a through 3.2.1.
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.2.1 until 1.22.0, ConvTranspose shape inference processes a weight tensor with fewer than three dimensions without a kernel_shape attribute by deriving an empty effective_kernel_shape and indexing it for the input's spatial dimensions. The flaw affects convTransposeShapeInference_opset11() and the current inference path, and an untrusted model that can pass onnx.checker.check_model() can crash onnx.shape_inference.infer_shapes(), causing denial of service without demonstrated confidentiality or integrity impact. This issue is fixed in version 1.22.0.
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, RNNShapeInference_opset1_to_6() processes malformed RNN and LSTM nodes from opsets 1 through 6 and GRU nodes from opsets 3 through 6 without verifying that the first input has rank three. The function accesses dim(0) and dim(1) on an undersized protobuf shape, which can read outside the intended repeated field and terminate an application when onnx.shape_inference.infer_shapes() processes an untrusted model that can pass onnx.checker.check_model(). This issue is fixed in version 1.22.0.
vLLM versions from 0.16.0 up to but not including 0.32.0 contain a vulnerability in the /v1/responses endpoint that allows an authenticated user to supply a malicious template in chat_template_kwargs[chat_template]. This bypasses the intended trust policy and can lead to uncontrolled CPU or memory consumption during Jinja template rendering. The issue is resolved in version 0.32.0.
vLLM versions prior to 0.32.0 have a permissive cross-origin resource sharing (CORS) policy that allows any origin by default. This misconfiguration enables a malicious web page to interact with an unauthenticated vLLM server running on localhost, internal networks, or VPNs, potentially consuming GPU resources and reading responses. The issue is fixed in version 0.32.0.
nforwardauth is a forward auth service that allows the use of a single authentication middleware for multiple sites. Versions prior to 1.5.1 accept an unvalidated `r` query parameter on the `/login` endpoint and use them as the post-authentication redirect destination. An unauthenticated attacker can create a legitimate `nforwardauth` login URL that redirects a victim to an attacker-controlled website after the victim successfully authenticates. This issue may facilitate phishing and other social-engineering attacks by abusing the trust associated with the legitimate authentication domain. This vulnerability does not provide an unauthenticated ForwardAuth bypass. Version 1.5.1 contains a patch.
vLLM versions prior to 0.32.0 contain an off-by-one error in token ID validation that can cause a CUDA device-side assertion failure and engine termination when processing certain pre-tokenized prompts. This vulnerability is fixed in version 0.32.0.
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-controlled image bytes to Pillow through Image.open(BytesIO(data)) without restricting decoder selection, and the MIME label does not constrain the selected format. Image-capable request paths through parse_image() and fetch_image() can therefore dispatch an EPS payload to host components. A host with Ghostscript affected by CVE-2024-29510 can execute commands with the vLLM process's privileges, while environments using Pillow 12.0.0 through 12.2.0 can trigger CVE-2026-59203 and exhaust media-loading workers. Deployments without the applicable vulnerable dependency are not affected by that corresponding impact. This issue is fixed in version 0.32.0.
A security vulnerability has been detected in Bdtask Garage 24 Garage Management Software 1.0. This issue affects some unknown processing of the file /edit_profile of the component Profile. The manipulation of the argument first_name/last_name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-102649 is a critical vulnerability in padok-team's burrito Kubernetes operator prior to version 0.13.0. It allows unauthenticated attackers to forge GitHub and GitLab webhook events if the webhookSecret is omitted or empty in TerraformRepository credentials. This can lead to unauthorized creation or deletion of TerraformPullRequest resources with attacker-controlled parameters. The flaw enables unauthorized terraform plan operations on affected layers and disclosure of plan results in pull request comments. Auto-apply is disabled, so forced terraform apply is not possible. The issue is fixed in burrito version 0.13.0.