A vulnerability exists in multiple Siemens SIMATIC products across all versions that improperly secure remote user authentication by relying on the deprecated NTLM protocol. This flaw allows unauthenticated remote attackers positioned as a man-in-the-middle to relay NTLM authentication and impersonate legitimate users. The impact depends on accessible services, such as SQL servers used by WinCC. The vulnerability has a high severity score of 7.5 CVSS v3.1.
7-Zip versions before 26.06 have a heap out-of-bounds write vulnerability in the LZX decoder. This flaw occurs when processing continuation CAB volumes that declare a smaller window, leading to memory corruption. An attacker can craft multi-volume CAB archives that exploit a stale _pos value to bypass bounds checks, potentially allowing arbitrary code execution when a victim extracts these archives.
Zoho Corporation ManageEngine DDI Central versions 6200 and below have a vulnerability that exposes LDAP bind passwords due to insufficient protection of the LDAP settings API. This flaw allows an attacker with low privileges to potentially access sensitive credentials. The vulnerability has a high severity rating with a CVSS score of 7.6.
ManageEngine DDI Central versions below 6201 have a SQL injection vulnerability in the handling of HA replication usernames. This flaw allows command execution with the privileges of the PostgreSQL service account.
Zoho Corporation ManageEngine DDI Central versions 6200 and below contain a server-side HTML/JavaScript injection vulnerability in the analytics PDF generation feature. This flaw can lead to local file disclosure. The vulnerability has a high severity with a CVSS score of 8.1.
ManageEngine DDI Central versions 6200 and below contain a vulnerability that allows Cisco IOS command injection via the DHCP pool name. This flaw enables attackers with limited privileges to execute arbitrary commands on managed Cisco routers. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating significant impact on confidentiality, integrity, and availability.
A vulnerability in meta-iot2050 versions 1.3.1 and later allows attackers who can modify the device's configuration file to execute arbitrary code. The flaw arises because parts of the configuration file are executed without proper validation, leading to potential full compromise of the device.
Samsung mTower has a vulnerability where it lacks proper access control for Trusted Application (TA) sessions. This flaw allows a Normal World application to open TA sessions, invoke their commands, or close existing sessions if their identifiers are known. The impact varies depending on which TA is affected. The vulnerability has a medium severity with a CVSS score of 5.3.
A vulnerability in libstdc++ causes a buffer overflow when a byte-by-byte write operation fails during file stream processing. This flaw can lead to denial of service or memory corruption if an attacker induces repeated write failures in a service that uses the vulnerable routines. Exploitation requires specific application designs and the ability to force repeated filesystem write errors while controlling individual character writes. Standard system utilities and privileged binaries are not affected. The vulnerability has a moderate impact rating and a CVSS score of 4.2.
A missing authorization vulnerability exists in TÜBİTAK BİLGEM Software Technologies Research Institute's eta-remote software versions from 0.0.2 up to but not including 0.0.3. This flaw allows unauthorized access to functionality that is not properly constrained by access control lists (ACLs). The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level with high confidentiality impact but no integrity or availability impact.
A Cross-Site Request Forgery (CSRF) vulnerability exists in Mendix Studio Pro 11 MCP Server versions >=11.15.0 <11.16.0 and >=11.12.6 <11.12.7. The server does not properly validate Content-Type and Origin headers on incoming HTTP requests, which could allow a malicious web page to trick a user's browser into sending unauthorized requests that execute unintended actions on the local MCP Server.
A vulnerability in GStreamer's gst-plugins-bad MPEG Program Stream demuxer and resindvd DVD-playback plugin allows an out-of-bounds read when parsing crafted MPEG Program Stream files. This can cause the application to crash, resulting in a denial of service. The flaw arises because the PES header parsers do not sufficiently check remaining data before reading timestamps and optional header fields. The vulnerability requires a user or media-processing pipeline to open a malicious file. No information disclosure or integrity impact has been demonstrated. Mitigations include disabling the affected MPEG Program Stream demuxer plugin until a fixed package is available.
CVE-2026-125707 is a moderate severity vulnerability in GStreamer's MXF demuxer where processing a crafted MXF file can cause an off-by-one out-of-bounds write past the end of a temporal offset array. This memory corruption may lead to application crashes. The vulnerability requires local processing of a malicious file and user interaction. No confirmed exploitation or code execution has been demonstrated.
A vulnerability exists in Mendix Studio Pro 11 versions from 11.15.0 up to but not including 11.16.0, and in version 11.12 from 11.12.6 up to but not including 11.12.7. The MCP Server component does not properly restrict its HTTP listener to the loopback interface, potentially exposing it to remote network access. This could allow an attacker with network access to interact with the MCP Server remotely, leading to high impact on confidentiality, integrity, and availability.
A vulnerability in GStreamer's gst-plugins-base RTCP SDES packet parser allows a remote sender to supply a malformed SDES entry with a declared length exceeding the packet size. This missing bounds validation can cause out-of-bounds reads, potentially crashing the application or exposing limited process memory. The flaw affects multiple Red Hat and Fedora versions, with fixes available in newer releases. Mitigations include disabling RTP/RTCP if unused or restricting RTCP ports to trusted peers, but no complete mitigation exists without patching.
A vulnerability in the payment integration with Adyen allows improper validation of payment status responses. An attacker can reuse a successful payment status from one transaction to fraudulently obtain multiple valid tickets for different payments.
Zoho Corporation ManageEngine DDI Central versions 6500 and below contain a vulnerability in the Linux Node Agent that allows unauthenticated updates of the GSS-TSIG keytab. This vulnerability does not impact confidentiality or integrity but results in a high-severity availability impact. No patch information is provided.
A vulnerability in ROS# versions prior to 2.3.1 allows improper escaping of text in message definition files. This flaw could enable an attacker who can supply a crafted message definition file to inject arbitrary code into the generated program. The vulnerability is identified as CVE-2026-109097 with a high severity score of 8.2.
Zoho Corporation ManageEngine DDI Central versions 6500 and below contain a Unicode-based command injection vulnerability in the Cisco IOS DHCP configuration functionality. This flaw allows cluster-scoped operators to inject specially crafted Unicode characters, potentially causing execution of unintended device commands. The vulnerability has a high severity score of 8.0 and affects confidentiality, integrity, and availability. No specific patched versions or vendor advisories are provided in the data.
A vulnerability in the GStreamer gst-plugins-bad MXF plugin allows crafted VANC data to cause out-of-bounds reads and incorrect buffer size calculations to cause out-of-bounds writes. This can lead to application crashes and denial of service when processing malicious MXF content. The flaw affects multiple Red Hat Enterprise Linux versions up to 10.3, with later versions not affected. No confidentiality or integrity impacts are established. Mitigation involves disabling the MXF plugin if not needed or restricting MXF inputs to trusted sources.