CVE-2026-108330 is an information disclosure vulnerability in the Tanium Endpoint Configuration Toolset Solution's Threat Response Client Extension. It involves an out-of-bounds read that could potentially expose sensitive information. The issue affects multiple versions prior to fixed releases. Tanium has addressed this vulnerability in versions 1.71.25, 1.59.50, 1.51.60, 1.21.1673, 1.20.2271, 1.19.2213, 1.18.2732, and 1.17.802. The CVSS score is 3.6, indicating a low severity impact with limited confidentiality loss and no integrity or availability impact.
CVE-2026-116863 is a critical Cross-Site Request Forgery (CSRF) vulnerability affecting Tribulant Software's Newsletters plugin (versions up to 4.18.2). This flaw allows attackers to perform unauthorized actions on behalf of authenticated users. The vulnerability impacts confidentiality, integrity, and availability of the affected system.
A vulnerability in the MongoDB Python driver (PyMongo) affects the C extension's BSON decoder when processing malformed Regex elements. This flaw allows an out-of-bounds read past the end of the caller's buffer, potentially causing a process crash via an uncatchable SIGSEGV signal. The issue impacts applications decoding untrusted BSON from mmap or array buffers, which lack NUL termination. The vulnerability affects all PyMongo releases from 3.9.0 up to but not including 4.18.3 when the C extension is loaded. The issue is fixed in version 4.18.3, where malformed Regex elements raise an InvalidBSON exception on all buffer types.
A critical vulnerability in better-auth versions from 1.4.0-beta.18 up to but not including 1.7.7 allows an unauthenticated attacker to use the OAuth state value as a Magic Link token to sign in as any user by knowing only their email address. This bypasses email verification and OAuth provider authentication, granting full session access. The flaw affects configurations using Magic Link with default or hashed token storage combined with social or Generic OAuth sign-in and database-backed OAuth state storage. The issue is fixed in version 1.7.7.
Red Hat OpenShift Container Platform 4.18.59 includes multiple security fixes addressing vulnerabilities in kernel components, OpenSSH, OpenSSL, PCRE2, glib, and other libraries. These vulnerabilities range from privilege escalation, use-after-free, out-of-bounds write, to security bypass and forged message acceptance. Users of OpenShift Container Platform 4.18 are advised to upgrade to this release to mitigate these critical security issues.
Red Hat OpenShift Container Platform 4.18.59 includes a security update addressing a denial of service vulnerability in the Go HTTP/2 implementation. The flaw (CVE-2026-33814) involves malformed SETTINGS_MAX_FRAME_SIZE frames that can cause service disruption. Users of OpenShift Container Platform 4.18 are advised to upgrade to the updated packages and container images provided by Red Hat. Detailed upgrade instructions are available from Red Hat's official documentation.
A leaked SquareML access key potentially exposed personal and health information of 238,000 Denver Health Medical Plan members. The key was publicly accessible from June 27, 2025, until it was revoked on August 18, 2026. The compromised account was read-only, limiting the ability to alter or export data. The exposed data includes names, dates of birth, demographic details, health metrics, and hospital admission information, but excludes Social Security numbers and financial data. There is no evidence that the data was accessed or misused, only that it may have been.
Umbraco CMS versions before 17.7.2 and 18.2.2 contain an authentication bypass vulnerability via an open redirect flaw. This allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by manipulating the Host header. Exploitation involves sending signed-in users authorization links with response_mode=form_post to capture authorization codes, which attackers then redeem using HTTP Basic client credentials. Successful exploitation can hijack back-office sessions and execute code through Razor templates.
REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site scripting vulnerability because rex_media_service moves uploaded SVG files into the public media folder before sanitizing them. Authenticated users with mediapool upload rights can race the sanitizer or exhaust memory limits to leave script-laden SVGs publicly served, executing scripts in victims' backend sessions.
CVE-2026-113715 is a low-severity vulnerability in virtualenv's venv creator configuration readback. The issue arises because virtualenv reads the standard library's pyvenv.cfg file using splitlines(), which treats certain Unicode line boundary characters (e.g., U+2028) as line breaks. An attacker controlling the destination path passed to the venv creator can inject configuration keys by including such characters, causing virtualenv to merge malicious keys into its configuration. This can alter the environment's home path and enable inclusion of system site packages, weakening isolation. The vulnerability affects virtualenv versions from 1.9.3 up to but not including 1.18.1_2. A fix is available in version 1.18.1_2 that rejects line-boundary characters before creation and rebuilds the configuration safely.
Transmission versions before 4.1.3 have a permissive CORS vulnerability in the handle_request() function of rpc-server.cc. This flaw exposes the X-Transmission-Session-Id anti-CSRF token to any web origin, allowing malicious web pages to read and reuse the token. Exploitation can lead to unauthorized RPC calls that execute script-torrent-done, change download directories, or delete torrents and data.
A double free vulnerability exists in libyal libmsiecf through version 20260525 in the function libmsiecf_url_values_read_data(). This flaw allows attackers to corrupt heap memory by supplying a crafted MSIE cache index.dat file with an oversized unknown_offset in a partial URL record. The vulnerability can cause forensic tools processing such files to crash. The CVSS 3.1 base score is 5.5, indicating a medium severity impact primarily affecting availability.
Libpff versions up to 20260926 contain a heap out-of-bounds read vulnerability in the function libpff_table_read_values_array. This occurs because the values_array_size of a 7c column definition is not properly checked against the remaining buffer bytes. An attacker can exploit this by supplying a crafted PST, OST, or PAB file, causing applications to read adjacent heap memory or crash.
libpff versions up to 20260926 contain an off-by-one bounds check vulnerability in the function libpff_table_read_6c_record_entries. This flaw allows attackers to trigger a heap out-of-bounds read by supplying crafted 6c table record entries in PST, OST, or PAB files. Applications using libpff, such as pffexport or pypff, may read adjacent heap memory or crash when processing malicious files.
libfvde versions through 20260923 contain a heap out-of-bounds read vulnerability in the function libfvde_encrypted_metadata_read_type_0x001a(). This flaw is caused by an unbounded strlen operation on embedded XML plist data. An attacker can exploit this by supplying a crafted FileVault 2 volume with non-NUL-terminated plist data, leading to a read beyond the allocated heap buffer during libfvde_volume_open() execution. The vulnerability has a low severity score and does not impact confidentiality or integrity but may affect availability.
libfvde versions up to 20260923 contain a heap out-of-bounds read vulnerability in the function libfvde_encrypted_metadata_read_type_0x0024(). This occurs because the size xml_plist_data_size is not validated against the source metadata block, allowing crafted FileVault 2 Core Storage volumes to cause out-of-bounds reads and crash the application.
gbsplay versions up to 0.0.103 contain a heap out-of-bounds read vulnerability in the vgm_open() function within gbs.c. This flaw occurs because the function processes the VGM command stream without proper bounds checking, allowing specially crafted VGM files with wait opcodes and missing 0x66 terminators to trigger reads beyond the heap buffer, causing the player to crash.