Nuxt versions from 4.6.0 up to but not including 4.6.2 contain a route parameter confusion vulnerability in the getRouterParam and getRouterParams functions. This flaw allows attackers to send paths with encoded question marks (%3F) to obtain parameter values different from those matched by the h3 router. As a result, attackers can craft requests where authorization checks rely on the Nuxt helper value, while resource selection uses event.context.params, potentially granting unauthorized access to resources.
A critical stack-based buffer overflow vulnerability exists in the Linksys E8450 firmware version 1.2.00.360516. The flaw is in the strcpy function handling the hidden_timezone argument in /www/cgi-bin/portal.cgi, allowing remote attackers to execute code. The vendor has not responded to disclosure attempts, and no patch is currently available.
A critical vulnerability exists in WAVLINK WN536AX6-A version V260507 in the WireGuard component. The flaw is an OS command injection via the wireguard_cli_group handler function in /protocol.csp, triggered by manipulation of group_id or group_name arguments. This vulnerability can be exploited remotely without authentication and has a maximum CVSS score of 10. Public exploit code has been disclosed, increasing the risk of exploitation. The vendor was notified early, but no patch information is currently available.
A deserialization vulnerability exists in jxxghp MoviePilot versions up to 3.1.2 in the WorkflowExecutor.restore_context function of the Workflow Fork Endpoint component. This vulnerability can be exploited remotely and has been publicly disclosed. Upgrading to version 3.1.3 resolves the issue.
CVE-2026-120282 is a critical vulnerability in WAVLINK WN536AX6-A version V260507 affecting the host_black function in /protocol.csp. It allows remote OS command injection via manipulation of the mac argument. The vulnerability has a high CVSS score of 9.9 and has been publicly disclosed with exploit code available. No patch information is currently provided.
CVE-2026-120322 is a critical path traversal vulnerability in Termix-SSH Termix up to version 2.9.2. It involves improper handling of the destPath argument in the /plugin-api/file-manager/transferToHost endpoint, allowing remote attackers to traverse directories. The vulnerability has a high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. The issue was mitigated by removing the vulnerable shortcut in the standalone File Manager plugin v1.0.0 and core v26.10.0. No official vendor response or patch is currently available.
A vulnerability in Sanluan PublicCMS versions 4.x, 5.x, and 6.x affects the TradeRefundService.updateAmound function in the publiccms-trade component. Manipulating the refundId argument can lead to an authorization bypass, allowing remote attackers to exploit this flaw. The vulnerability has a CVSS score of 6.3 (medium severity) and public exploit code is available. The vendor has not responded to disclosure attempts, and no patch or remediation guidance is currently provided.
CVE-2026-120337 is a use-after-free vulnerability in VStarcam O-KAM SuperIPCam version 1.3.3.32. It affects the function FUN_005a2d44 in the P2P Session Teardown component of SuperIPCam.exe. The flaw can be exploited remotely without authentication. Public exploit code has been disclosed, but the vendor has not responded or issued a fix. The vulnerability has a medium severity rating with a CVSS 4.0 score of 6.9.
Multiple security vulnerabilities have been identified and fixed in the libxml2 library used in Red Hat Enterprise Linux 8.4. These include stack and heap-based buffer overflows, use-after-free conditions, integer overflow leading to data integrity issues, arbitrary code execution, denial of service, information disclosure, and SSRF. The issues affect various components such as xmllint, xmlcatalog, xmlSnprintfElements, xmlXPtrEval, and Python bindings. Red Hat has released an important security update addressing these vulnerabilities.
Red Hat Identity Management (IdM) has multiple critical security vulnerabilities affecting authentication, authorization, and LDAP operations. These include unauthenticated denial of service via unbounded request body reads, privilege escalation through krbCanonicalName manipulation, unauthorized LDAP writes via trust relationships, cross-site scripting allowing arbitrary code execution, and unauthorized access to administrator credentials. The vulnerabilities impact FreeIPA components and trust relationships in IdM. Red Hat has issued security updates addressing these issues for Red Hat Enterprise Linux 8.4 variants.
A denial of service vulnerability exists in the perl-XML-LibXML module due to truncated UTF-8 sequences in XML node names. This module provides a Perl interface to the GNOME libxml2 library for XML parsing and manipulation. The vulnerability is identified as CVE-2026-8177 and affects Red Hat Enterprise Linux 8.4 variants. Red Hat has issued a security update to address this issue.
CVE-2026-120336 is a stack-based buffer overflow vulnerability in the VStarcam O-KAM Client version 1.3.3.32. The flaw exists in the function FUN_10003EA0 within the DevDll_925.dll library. This vulnerability can be exploited remotely without authentication. Public exploit code is available, but no vendor response or patch has been provided.
This Red Hat Security Advisory addresses multiple security vulnerabilities in Mozilla Thunderbird and Firefox components, including denial of service, privilege escalation, information disclosure, use-after-free, sandbox escapes, mitigation bypasses, spoofing, race conditions, integer overflows, and other issues. The update also includes bug fixes and enhancements such as the Thunderbird ESR 153 rebase. The advisory rates the security impact as Important and covers Red Hat Enterprise Linux 9 and its Extended Update Support variants.
A vulnerability has been found in deepset-ai farm up to 0.8.0. Affected is the function WordEmbedding_LM.load of the file farm/modeling/language_model.py of the component Model Package Loader. The manipulation of the argument embeddings_filename leads to path traversal. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
The Core Temp kernel driver by ALCPU has a vulnerability due to an exposed IOCTL interface that lacks sufficient access control. This could potentially allow unauthorized interactions with the driver.
CVE-2026-120334 is a path traversal vulnerability in deepset-ai farm versions up to 0.8.0. It affects the EmbeddingTokenizer.from_pretrained function in the farm/modeling/tokenization.py file. Manipulating the vocab_filename argument can allow an attacker to perform path traversal remotely. The vulnerability affects unsupported versions of the product. Exploit code has been published, but no active exploitation in the wild is confirmed.
A memory corruption vulnerability exists in libkcapi due to uncanceled asynchronous I/O (AIO) requests on error in its one-shot AIO path. libkcapi is a user-space library that interfaces with the Linux kernel crypto API via netlink, allowing unprivileged processes to access kernel cryptographic services. This vulnerability is identified as CVE-2026-71226 and has been rated as having moderate security impact by Red Hat. An update addressing this issue is available for Red Hat Enterprise Linux 8.8 variants.
Two denial of service vulnerabilities have been identified in the jackson-databind component of the Jackson Data Processor used in Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. The first (CVE-2026-68497) involves CPU exhaustion via unbounded numeric parsing, and the second (CVE-2026-91777) involves denial of service through quadratic forward-reference completion. These issues could allow an attacker to cause resource exhaustion leading to service disruption.
Multiple heap buffer overflow vulnerabilities have been identified in the libsoup HTTP client and server library for GNOME, affecting WebSocket handling and permessage-deflate buffer growth. These vulnerabilities could lead to memory corruption issues. Red Hat has issued an important security advisory with updates for Red Hat Enterprise Linux 9.2 to address these flaws.
A denial of service vulnerability (CVE-2026-94286) exists in the X.Org X11 libXtst runtime library due to an out-of-bounds read in the RECORD reply parser. This flaw can cause the affected application to crash or become unresponsive. Red Hat has issued an important security update addressing this issue in Red Hat Enterprise Linux 9.2 and related variants.