CVE-2026-122192 is a vulnerability in Firecracker versions 0.23.0 through 1.16.1 that allows a root user in a guest VM to read or modify memory of the Firecracker process on the host. This occurs when restoring VMs from snapshots using the File memory backend with a balloon or virtio-mem device, due to a failed memory remapping operation that leaves stale host virtual address references. The issue is fixed in Firecracker versions 1.16.2 and 1.17.0 and later. AWS Lambda and other AWS services are not affected. No customer action is required for AWS-managed services.
Readest versions prior to 0.11.10 contain an authorization bypass vulnerability in the Stripe payment API endpoint. The application accepted a client-controlled sessionId without verifying ownership, allowing authenticated free users to replay valid paid session identifiers to upgrade additional accounts without payment. This flaw was fixed in version 0.11.10.
CVE-2026-57565 is a path traversal vulnerability in the Readest ebook reader prior to version 0.11.10. The flaw allows an authenticated attacker to craft a file name that includes path traversal sequences, enabling them to overwrite or poison another user's stored book object and corrupt associated metadata. This occurs due to improper validation of file names and URL normalization in the R2 backend. The issue is fixed in version 0.11.10.
CVE-2026-122019 is an authorization bypass vulnerability in 6amTech 6valley version 16.0. It affects the existingAccountCheck function in the /api/v1/auth/existing-account-check endpoint within the Social Login Flow component. The vulnerability arises from manipulation of the user_response argument, allowing an attacker to bypass authorization remotely. Public exploit code is available for this vulnerability.
CVE-2026-57566 is a critical server-side request forgery (SSRF) vulnerability in readest versions prior to 0.11.10. The unauthenticated /api/opds/proxy route allowed attackers to supply arbitrary URLs that the server would fetch without proper restrictions or validation. This enabled attackers to use the service as an open proxy to access internal network resources, including cloud metadata services on self-hosted deployments. Cloudflare Workers deployments mitigate internal network impact by restricting access to private and link-local addresses, but the fetch-and-reflect behavior remains unauthenticated. The issue is fixed in version 0.11.10.
Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC CNI before 1.22.3) might allow an authenticated adjacent user to bypass NetworkPolicy ingress enforcement on co-located pods via eBPF conntrack map poisoning using crafted AF_PACKET frames.
To remediate this issue, users should upgrade to Amazon VPC CNI Managed Add-on v1.22.3 or later (which includes Network Policy Agent v1.3.7).
CVE-2026-57567 is a path traversal vulnerability in the readest ebook reader affecting desktop Tauri builds prior to version 0.11.10. The flaw allows JavaScript running in the privileged application origin to read or write arbitrary files on the filesystem by exploiting insufficient validation of file paths in the download_file and upload_file commands. This can lead to exposure of sensitive data such as keys and tokens, or overwriting of trusted files. The issue is fixed in readest version 0.11.10.
CVE-2026-115473 is an out-of-bounds read vulnerability in the cesanta mongoose embedded web server and network library. Versions prior to 7.22 improperly read bytes from path buffers without verifying sufficient length, leading to one-byte heap out-of-bounds reads. This can be triggered by unauthenticated remote requests to specific HTTP handlers with crafted short paths. On systems without memory protection, this could expose adjacent memory bytes or affect path acceptance, and instrumented builds may crash. The issue is fixed in version 7.22.
CVE-2026-55367 is a resource exhaustion vulnerability in the h2o HTTP server affecting deployments that enable proxy.connect-udp and accept CONNECT-UDP requests. A client can send an incomplete CONNECT-UDP Capsule with a large declared length, causing the server to buffer data without limits and potentially exhaust memory, leading to denial of service. The issue is fixed in commit 4212ce114506a073505fd389db16ad2ba4e582a0.
CVE-2026-55368 is a high-severity out-of-bounds write vulnerability in the h2o HTTP server's access-log formatter. The flaw occurs when certain custom access-log formats are configured, allowing writes past the log-line buffer. This can cause server crashes or potentially other undefined behavior due to a one-byte null byte overwrite. The vulnerability is fixed in a specific commit identified by the vendor.
CVE-2026-103002 is an authorization bypass vulnerability in GPUStack versions 2.2.0 through 2.2.1. The cluster_apiserver_proxy component forwarded authenticated non-administrator requests to Kubernetes clusters without proper resource-level authorization checks, using a worker's Kubernetes ServiceAccount credentials. This allowed attackers to read sensitive data, modify workloads, or delete resources within the permissions of that ServiceAccount. Exploitation requires a Kubernetes cluster with a reachable worker and attacker-controlled workloads, potentially leading to code execution. The issue is fixed in GPUStack version 2.2.2.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD store potentially sensitive information in log files accessible to local users. This exposure could lead to unauthorized disclosure of sensitive data.
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain a vulnerability that allows a remote attacker to cause a denial of service via an out-of-bounds read.
Jan versions from 0.8.5 up to but not including 0.8.8 contain a vulnerability in the agent-tools gate.rs component that allows attackers to bypass workspace guards. This flaw enables writing files outside the intended workspace via dangling symlinks, potentially allowing attackers to create or modify sensitive files such as ~/.ssh/authorized_keys on the host system by supplying a malicious repository and using prompt injection.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD are vulnerable to an XML external entity (XXE) injection vulnerability. This flaw allows a remote attacker with low privileges to exploit XML processing to disclose sensitive information or cause memory resource consumption. The vulnerability has a high severity rating with a CVSS score of 7.1. No public exploits or patches are currently documented in the provided data.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD Managed File Transfer contain a vulnerability involving improper restriction of XML external entity (XXE) references during command queue processing. This flaw could allow an authenticated attacker to access sensitive information or cause a denial of service. The vulnerability is tracked as CVE-2026-13271 and has a high severity with a CVSS score of 8.1. No public exploits or patch information are provided in the data.
IBM MQ versions 9.4.0.0 through 9.4.0.26, 9.4.1.0 through 9.4.5.3, and 10.0.0.1 through 10.0.0.5 contain a vulnerability where improper validation of message header structure length fields could allow an authenticated attacker to obtain sensitive information or cause a denial of service.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD contain a vulnerability that allows an authenticated attacker to execute arbitrary code by injecting malicious environment variables through transfer request metadata.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD are vulnerable to an XML external entity (XXE) injection vulnerability. This flaw allows a remote attacker with limited privileges to exploit XML processing to expose sensitive information or cause memory resource consumption. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity. No public exploits or known exploitation in the wild have been reported. Patch status is not confirmed as no patch or remediation details are provided.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD contain a vulnerability that allows an authenticated user with command queue access to execute arbitrary code by injecting malicious arguments into Ant script commands. This vulnerability is tracked as CVE-2026-12356 and has a CVSS v3.1 base score of 7.5, indicating high severity.