InternLM LMDeploy through 0.17.0 contains a reachable assertion vulnerability in the DistServe decode migration loop that allows unauthenticated attackers to terminate the inference engine. Attackers can submit a migration_request with an empty remote_block_ids list to trigger an AssertionError that crashes the engine loop and causes subsequent inference requests to fail.
Insufficient Session Expiration vulnerability in team-alembic AshAuthentication and AshAuthentication Phoenix allows a revoked session to remain fully authenticated.
A resource configured with session_identifier :jti and require_token_presence_for_authentication? disabled stores its session value as <jti>:<subject>. The jti is there so that signing out can revoke that one session. Neither reader consults it: AshAuthentication.Plug.Helpers.authenticate_resource_from_session/4 and AshAuthentication.Phoenix.LiveSession.on_mount/4 both split the value with split_identifier/2, discard the jti and pass the bare subject to AshAuthentication.subject_to_user/3, which reloads the record. The token-presence branch of each function does check its token, calling AshAuthentication.TokenResource.Actions.get_token/3 with the jti and the purpose user. Because the revocation record is never read, neither its revoked state nor its expiry constrains the session, so a session captured before sign-out keeps working.
This issue affects ash_authentication: from 4.9.1 before 4.15.0 and from 5.0.0-rc.0 before 5.0.0-rc.14; ash_authentication_phoenix: from 2.10.0 before 2.17.4 and from 3.0.0-rc.0 before 3.0.0-rc.11.
Use of HTTP Request With Sensitive Query String vulnerability in team-alembic AshAuthenticationPhoenix allows someone able to read access logs, proxy logs or browser history to recover a single-use sign-in token and authenticate as its owner.
After a successful password sign-in, AshAuthentication.Phoenix.Components.Password.SignInForm builds the sign_in_with_token path with the freshly issued user.__metadata__.token as a query parameter and redirects the browser to it with a GET. The token therefore travels in the request line, where web servers, reverse proxies, request telemetry and the browser's own history record it, all of which outlive the request and are ordinarily less protected than session storage. The redirect destination is restricted to a local path, so this is not an open redirect; the exposure is the retention of a live credential.
This issue affects ash_authentication_phoenix: from 1.7.0 before 2.17.4 and from 3.0.0-rc.0 before 3.0.0-rc.11; ash_authentication: from 3.10.5 before 4.15.0 and from 5.0.0-rc.0 before 5.0.0-rc.14.
joi (npm package `joi`, hapi.js) versions >=17.2.0 <17.13.7 and >=18.0.0 <18.2.6 are vulnerable to regular expression denial of service in the `Joi.string().isoDate()` validation rule. One of the regular expressions the rule applies to the input is unanchored, so a valid ISO date followed by a long run of fractional-second digits causes the regex engine to restart its search from every position in the string, yielding time proportional to the square of the input length (about 1.4 s for 64 KB of digits and about 22 s for 256 KB). A remote attacker who can supply a string to an isoDate validation can stall the application with a single request. Fixed in 17.13.7 and 18.2.6; as a workaround, cap the length of the string before it reaches joi.
phpList versions prior to 3.6.17 contain a vulnerability where the mass subscriber removal form handler does not properly validate cross-site request forgery (CSRF) tokens. This flaw allows attackers to trick logged-in administrators into visiting malicious pages that can silently delete and blacklist subscriber addresses without proper authentication checks.
CVE-2026-92527 is a server-side request forgery (SSRF) vulnerability in chatwoot versions 4.17.0 and 4.17.1. It affects an unknown function within the Shopify OAuth component in the callbacks_controller.rb file. The vulnerability allows remote attackers to induce the server to make unintended requests. The issue was publicly disclosed and reported to the project, but no response or fix has been provided yet. The CVSS 4.0 score rates this vulnerability as medium severity.
Two critical unauthenticated remote code execution (RCE) vulnerabilities affect The Events Calendar WordPress plugin versions before 6.17.3.1 and 6.17.4.1. These flaws allow attackers to execute arbitrary code and potentially take over affected WordPress sites. The first vulnerability (CVE-2026-78159) involves unauthenticated code injection via insufficient validation, patched in version 6.17.3.1. The second (CVE-2026-78006) is an unauthenticated PHP object injection exploitable if event comments are enabled, fixed in version 6.17.4.1. Approximately 240,000 sites using vulnerable versions may be exposed, though exploitation requires comments to be enabled. Both vulnerabilities lead to full site compromise if exploited.
CVE-2026-89906 is a high-severity vulnerability in the Linux kernel affecting the LoongArch architecture's BPF jump offset calculation in tail calls. The flaw stems from using a stale code stride for jump distance calculation, which can cause incorrect branch offsets and potentially lead to kernel soft lockups during extra JIT passes. The issue has been fixed by recalculating the offset directly on the absolute target and adding a guard to prevent false aborts during size estimation. Multiple Linux kernel versions prior to 6.17 are affected.
A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface (All versions < V4.17). Affected devices do not properly validate input received from backend services.
This could allow an unauthenticated remote attacker to force the device into protection mode, which results in losing remote connectivity functions (Web Access).
A vulnerability (CVE-2026-83408) exists in Oracle GraalVM for JDK's compiler component affecting specific versions of Oracle GraalVM for JDK 17, 21, and 25. This vulnerability allows an unauthenticated attacker with network access via HTTP to potentially take over the affected Oracle GraalVM instances. The CVSS 3.1 base score is 8.1, indicating high confidentiality, integrity, and availability impacts. Oracle has released security patches as part of its Critical Security Patch Update (CSPU) for September 2026 to address this and other vulnerabilities. Users are strongly advised to apply these patches promptly to mitigate the risk.
A vulnerability exists in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI) affecting supported versions 17.0 through 26.7. This vulnerability allows a low privileged attacker with network access via SOAP to gain unauthorized access to critical data and perform unauthorized update, insert, or delete operations on some accessible data. The CVSS 3.1 base score is 7.1, indicating a high severity issue with significant confidentiality and integrity impacts. Oracle has released security patches addressing this vulnerability as part of their September 2026 Critical Security Patch Update.
A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0 through 26.7. This vulnerability is difficult to exploit but allows a low privileged attacker with network access via HTTP to potentially take over the Siebel CRM Deployment. The CVSS 3.1 base score is 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes numerous security fixes across multiple products including Siebel Applications.
A critical vulnerability (CVE-2026-83229) exists in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Siebel Management Console component. The vulnerability affects supported versions from 17.0 through 26.7. It allows a high privileged attacker with network access via HTTP to compromise the Siebel CRM Deployment, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 9.1. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for this and many other vulnerabilities across Oracle products.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
A high-severity vulnerability (CVE-2026-83208) exists in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Migration component. It affects supported versions from 17.0 through 26.7. The flaw allows a low-privileged attacker with network access to exploit SQL-based vectors to compromise the Siebel CRM Deployment, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes numerous security fixes across multiple products. Oracle strongly recommends applying these patches promptly to mitigate the risk.
A vulnerability exists in the Workflow component of Oracle Siebel CRM Development product versions 17.0 through 26.7. This flaw allows a low privileged attacker with network access via HTTP to potentially take over the Siebel CRM Development environment. The vulnerability has a high CVSS 3.1 base score of 8.8, indicating significant impacts on confidentiality, integrity, and availability.
A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM (Server Infrastructure component) affecting supported versions 17.0 through 26.7. This vulnerability allows a low privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment, potentially resulting in full takeover. The CVSS 3.1 base score is 7.8, indicating high severity with impacts to confidentiality, integrity, and availability.
A high-severity vulnerability (CVE-2026-83212) exists in the Siebel Apps - Self Service product of Oracle Siebel CRM, specifically in the Helpdesk/Training component. The vulnerability affects supported versions from 17.0 through 26.7. It allows a low-privileged attacker with network access via HTTP to potentially take over the Siebel Apps - Self Service. The CVSS 3.1 base score is 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 that addresses this and many other vulnerabilities across multiple products, including Siebel Applications. Oracle strongly recommends applying the available patches promptly to mitigate the risk.