Search: 16.5-2

A vulnerability in ImageMagick allows resource limits to be bypassed via the GD fallback mechanism during thumbnail generation. This flaw affects specific Ubuntu package versions of ImageMagick 6.7.7.10. The issue has a low severity with a CVSS score of 3.7, indicating limited impact primarily on availability. No known exploits are reported in the wild.

A medium severity vulnerability (CVE-2026-114722) in Roundcube allows a CSS scoping bypass in HTML messages using at-rules. This flaw could enable limited unauthorized information disclosure or modification via crafted HTML content. The issue affects multiple specific Roundcube versions. No known exploits are reported in the wild.

A vulnerability in Roundcube allows deprecated action aliases to bypass the disabled_actions setting. This issue could lead to limited unauthorized actions due to improper enforcement of disabled actions.

A high-severity vulnerability (CVE-2026-114720) in Roundcube allows IMAP command injection via CRLF characters in the _flag parameter of the mail/mark action. This flaw can lead to unauthorized modification of mail flags, impacting the integrity of mail data. The vulnerability affects multiple specific versions of Roundcube as listed. The CVSS score is 7.1, indicating a high impact on confidentiality and integrity but no impact on availability.

A Cross-Site Request Forgery (CSRF) validation bypass vulnerability exists in the mark-as-junk action of Roundcube. This flaw allows an attacker to perform unauthorized mark-as-junk actions without proper CSRF validation. The vulnerability has a low severity score and affects multiple specific versions of Roundcube.

A cross-site scripting (XSS) vulnerability exists in Roundcube due to improper handling of password driver error responses. This issue can lead to limited confidentiality and integrity impacts but does not affect availability. The vulnerability affects multiple specific versions of Roundcube. The CVSS score is 4.7, indicating a medium severity level.

A mail header injection vulnerability exists in Roundcube when forwarding a message as an attachment, specifically via the subject field. This flaw allows an attacker to inject malicious content into mail headers. The vulnerability has a medium severity rating with a CVSS score of 4.0. Multiple specific versions of Roundcube are affected. No public exploits or known active exploitation have been reported. The vulnerability has been publicly disclosed as of October 23, 2026.

A high-severity vulnerability (CVE-2026-114716) in Roundcube allows mail header injection via the media type in an inline image data URI. This flaw affects multiple specific versions of Roundcube and can lead to partial confidentiality loss and high integrity impact without availability impact. The vulnerability was published on October 23, 2026, and has a CVSS score of 8.5.

A vulnerability in Roundcube's Password Modoboa driver allows an attacker with limited privileges to change the password of another account. This issue affects multiple specific versions of Roundcube and has a medium severity rating with a CVSS score of 6.8. The vulnerability does not have known exploits in the wild and is not a cloud service.

Frappe Framework versions prior to 16.33.0 contain a blind SQL injection vulnerability in the get_events method of the frappe.desk.doctype.event.event module. This flaw allows authenticated attackers to inject crafted input into SQL queries, potentially extracting sensitive database information by inferring query results from application behavior. The issue is fixed in version 16.33.0.

The Grav Flex Objects plugin versions 1.4.0 through 1.4.16 contain an authorization bypass vulnerability. The issue arises because the API routes under /api/v1/flex-objects/pages only verify directory-level admin.pages permissions but do not enforce the more granular Pages API permissions such as api.pages.read/write or page-level permissions. This allows authenticated users with api.access and admin.pages or admin.configuration.pages permissions, but who are not super users, to read, modify, or delete pages they should not have access to.

A vulnerability in Roundcube involves unsafe use of a login name in the SquirrelMail import file path, potentially allowing unauthorized access to sensitive data. The issue affects multiple specific versions of Roundcube. The CVSS score is 5.3, indicating a medium severity vulnerability with network attack vector, high attack complexity, low privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact.

CVE-2026-76300 is a high-severity vulnerability affecting Splunk Enterprise versions prior to 9.4.16, 10.0.11, 10.2.8, and 10.4.4. It involves improper control of a resource throughout its lifetime, classified under CWE-664. The flaw can lead to significant confidentiality, integrity, and availability impacts. Affected versions have been fixed in the specified releases.

CVE-2026-76297 affects Splunk Enterprise versions prior to 10.4.4, 10.2.8, 10.0.11, and 9.4.16. It allows an unauthenticated attacker to trick a user with the edit_federated_providers capability into disabling all federated search providers via a REST API that improperly accepts GET requests for state-changing actions. Exploitation requires phishing the privileged user to initiate the malicious request in their browser. This can temporarily disrupt federated searches from retrieving remote data.

CVE-2026-76296 affects Splunk Enterprise versions prior to 10.4.4, 10.2.8, 10.0.11, and 9.4.16. It allows users without admin or power roles to create, move, edit, or delete sourcetype renaming configurations in apps they do not have permission to access when Splunk Web is enabled. This occurs because Splunk Web does not verify app permissions before performing these operations.

CVE-2026-76294 is a vulnerability in Splunk Enterprise versions prior to 10.4.4, 10.2.8, 10.0.11, and 9.4.16. It allows users without admin or power roles to move field extractions or transformations to apps they do not have read access to. This occurs because the REST API does not validate destination app access during these operations.

CVE-2026-76293 is a high-severity vulnerability in Splunk Enterprise versions prior to 10.4.3, 10.2.8, 10.0.11, and 9.4.16. It allows users with the edit_manager_xml capability to execute arbitrary operating system commands with the privileges of the Splunk Enterprise service account by opening a specially crafted configuration in the Splunk Web Manager. This occurs because the application evaluates user-controlled expressions in Manager XML without sufficient syntax restrictions. The issue is fixed in versions 10.4.3, 10.2.8, 10.0.11, and 9.4.16.

CVE-2026-76292 affects certain versions of Splunk Enterprise and Splunk Secure Gateway where low-privileged users without admin roles can read mobile alert notification data of other users. This occurs due to missing user-level authorization checks on read requests to the Splunk Secure Gateway App Key Value Store REST API endpoints. The issue is fixed in Splunk Enterprise versions 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions 3.10.12, 3.9.26, and 3.8.73.

CVE-2026-76291 affects Splunk Enterprise versions prior to 10.4.4, 10.2.8, 10.0.11, and 9.4.16. It allows users with the schedule_search capability to bypass safeguards in the scheduled search workflow and execute risky SPL commands. These commands can disclose or modify data or disrupt availability. The vulnerability arises because the search scheduler does not enforce SPL safeguards on scheduled searches. A fix is available in the specified patched versions.

CVE-2026-76289 is a denial-of-service vulnerability in Splunk Enterprise versions prior to 10.4.4, 10.2.8, 10.0.11, and 9.4.16. A user without admin or power roles can send crafted requests to the REST API endpoint for lookup table files, causing resource exhaustion that makes the instance unavailable to other users until it is restarted.