Devolutions Server versions 2026.3.12.0 and earlier store sensitive user account information, specifically TOTP shared secrets, in cleartext within the database. This vulnerability allows an attacker with read access to the database or its backups to obtain these unencrypted security keys.
Dell OS Recovery tool versions prior to 2.4.4 contain an unquoted search path vulnerability (CWE-428) that allows an unauthenticated local attacker to execute arbitrary commands. This vulnerability is fixed in version 2.4.4.
Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.
A security flaw has been discovered in Headless CMS Plugin up to 2.0.4 on WordPress. This affects the function get_required_post_data of the file /wp-json/rae/v1/post of the component REST API. The manipulation of the argument post_id/post_slug results in information disclosure. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
A server-side request forgery (SSRF) vulnerability exists in the Jira ticketing filter lookup feature of Devolutions Server versions 2026.2.22.0 and earlier. This flaw allows an authenticated user with low privileges to retrieve stored Jira service account credentials by supplying a malicious server address in the request. The vulnerability is fixed in version 2026.2.23.0.
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. From 1.14.0 until 1.15.0, loading an attacker-supplied lemmatizer checkpoint can execute arbitrary code because stanza/models/lemma/trainer.py stores pos_dict as gzip-compressed pickle bytes and Trainer.load passes the decompressed stream to unrestricted pickle.loads. The outer torch.load call uses weights_only=True, but the nested bytes are treated as a primitive and are not inspected by that allowlist. The path is reachable during pipeline construction through a caller-influenced lemma_model_path, before inference begins. This issue is fixed in version 1.15.0.
TinyUSB before 0.20.1 contains an integer underflow vulnerability in the HID host report descriptor parser tuh_hid_parse_report_descriptor() in src/class/hid/hid_host.c that allows a malicious USB device to trigger an out-of-bounds read by subtracting an item size from the remaining descriptor length without validating the item fits within the remaining buffer. Attackers can present a crafted USB device with a truncated report descriptor causing the uint16_t desc_len value to underflow, resulting in out-of-bounds memory reads and denial of service on the host system.
CVE-2026-120959 is a low-severity vulnerability in the MongoDB Atlas SQL ODBC Driver involving an out-of-bounds write due to improper memory handling. This flaw allows a malicious party who can influence query return values to cause data to be written outside the bounds of a buffer allocated by the client application, potentially leading to unintended memory modification or client process termination. Exploitation requires a specific application behavior requesting multiple result rows simultaneously. The issue affects versions from 1.3.0 up to but not including 3.0.1, where it has been fixed.
CVE-2026-120952 is an out-of-bounds write vulnerability in the MongoDB Atlas SQL ODBC Driver. It occurs when a value of a specific database type is retrieved into a fixed-width client-side target, and the driver copies a longer textual representation without proper bounds checking. This can lead to memory corruption in the application using the driver and cause unexpected termination. The vulnerability affects versions from 0.0.1 up to but not including 3.0.1. A fix is available starting with version 3.0.1.
CVE-2026-121502 is a SQL injection vulnerability in the mathurvishal CloudClassroom-PHP-Project. It occurs via the deleteid argument in an unknown function within the facultydetails.php file. The vulnerability can be exploited remotely without authentication. Public exploit code is available. The product uses a rolling release model, so specific affected versions are not provided. The vendor did not respond to disclosure attempts.
TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class helper mtp_container_get_string() in src/class/mtp/mtp.h that allows a malicious USB host to corrupt adjacent memory by supplying a crafted MTP string with an unbounded character count. Attackers can exploit the unchecked memcpy operation copying up to 510 bytes into a fixed-size destination buffer to achieve code execution or cause a denial of service on the TinyUSB MTP device.
A critical improper authorization vulnerability (CVE-2026-95860) exists in node-opcua versions from 2.42.0 up to but not including 2.180.0. The issue arises because namespace-level default role permissions configured via setDefaultRolePermissions are not enforced for nodes lacking explicit per-node RolePermissions. This allows anonymous clients to write variables or invoke methods despite restrictive namespace defaults. The flaw is fixed in version 2.180.0.
CVE-2026-88968 is a high-severity vulnerability in anthropics claude-code versions prior to 2.1.251. The Edit tool improperly validates target paths and symlinks without binding to the underlying directory inode or file descriptor. On macOS, this allows attacker-controlled code running inside the Bash sandbox to replace a parent directory with a symlink after validation, leading to the Edit tool overwriting files outside the intended workspace. Exploitation requires code execution within the sandbox, such as from malicious repositories or dependency scripts. The issue is fixed in version 2.1.251.
Anthropic's Claude Desktop application for Windows versions prior to 1.8089.0 contains an uncontrolled search path element vulnerability. The application invokes git.exe without specifying an absolute path, allowing an attacker to place a malicious git.exe in the current working directory of a project. This can lead to execution of the malicious executable with the user's privileges when opening an attacker-controlled or shared repository. The vulnerability is fixed in version 1.8089.0.
CVE-2026-95730 is a buffer overflow vulnerability in HPE Networking Virtual Intranet Access (VIA) that allows an authenticated low-privileged local user to cause a denial of service. Exploiting this flaw disrupts normal system operation but does not impact confidentiality or integrity. The vulnerability affects versions up to and including 4.7.8. No public exploits or patches are currently reported.
CVE-2026-95729 is a medium-severity vulnerability in Hewlett Packard Enterprise's Virtual Intranet Access (VIA) product. It allows an authenticated attacker to disclose sensitive information. The vulnerability does not affect system integrity or availability but compromises confidentiality. It affects VIA versions from 0.0.0 up to and including 4.7.8. No public exploits or patches are currently documented.
CVE-2026-95728 is a local privilege escalation vulnerability in the Virtual Intranet Access (VIA) client for Linux. It involves an arbitrary file write flaw that allows a local attacker with low privileges to escalate their privileges on the affected system. The vulnerability affects VIA client versions from 0.0.0 up to and including 4.7.8. The CVSS v3.1 base score is 7.1, indicating high severity. No public exploits or in-the-wild exploitation have been reported. The vendor has not provided explicit patch or remediation information in the available data.
CVE-2026-95727 is an authenticated command injection vulnerability in Hewlett Packard Enterprise's Virtual Intranet Access (VIA) product. An authenticated administrative user could exploit this flaw to execute arbitrary commands with elevated privileges on the underlying operating system. The vulnerability affects versions from 0.0.0 up to and including 4.7.8. It has a high severity rating with a CVSS score of 7.2. No public exploits or patches are currently documented.
CVE-2026-95726 is a buffer overflow vulnerability in Hewlett Packard Enterprise's Virtual Intranet Access (VIA) product. It allows an unauthenticated remote attacker to cause a denial of service by interrupting the normal operation of the affected client software. The vulnerability affects versions from 0.0.0 up to and including 4.7.8. No confidentiality or integrity impact is indicated, but availability is severely impacted. The CVSS v3.1 base score is 7.5, indicating high severity.