libmspack versions up to 0.11alpha have an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor. This flaw allows an attacker to craft a malicious MS-ZIP CAB file that causes the decompressor to leak up to 32 KiB of stale heap memory in the extracted output. The vulnerability arises from unchecked back-reference distances in the decompression process.
Dell OpenManage Enterprise versions prior to 4.8.0 contain an authentication bypass vulnerability that allows an unauthenticated attacker with adjacent network access to spoof authentication and potentially steal sessions.
Tcpflow versions up to 1.6.1 contain an out-of-bounds read vulnerability. This flaw allows unauthenticated attackers to read process memory by sending specially crafted IPv4 or IPv6 TCP packets with forged IP payload lengths. Exploitation can lead to leakage of adjacent memory into reconstructed flow files or cause tcpflow to crash.
Miaomiaowu versions before 0.9.3 have an insecure direct object reference (IDOR) vulnerability in the /api/user/proxy-provider-configs endpoint. This flaw allows authenticated users to access other users' proxy provider configurations by iterating the global auto-increment external_subscription_id parameter. The exposed data includes override scripts, filter rules, custom request headers, and health-check URLs. The vulnerability has a CVSS 3.1 base score of 4.3, indicating medium severity.
Dell OpenManage Enterprise versions prior to 4.8.0 contain an OS Command Injection vulnerability due to improper neutralization of special elements. This flaw allows a low privileged attacker with remote access to potentially execute arbitrary commands on the affected system. The vulnerability has a high severity rating with a CVSS score of 8.8.
OpenDeepWiki versions up to 2.0.6 have a vulnerability due to a hard-coded JWT signing key. This flaw allows unauthenticated attackers to forge administrator tokens by using the publicly known Jwt:SecretKey found in appsettings.json. Exploiting this, attackers can create HS256 bearer tokens with admin privileges, enabling full control over administrative API endpoints including user, role, repository, settings, and API key management.
AxonHub versions up to 1.0.0-beta11 have a privilege escalation vulnerability that allows project users with certain API key permissions to create service_account API keys with system-level scopes without proper validation. This flaw enables attackers holding write_api_keys to mint keys with read_channels scope and query administrative GraphQL endpoints to access all channel configurations, including sensitive details like base URLs and model lists.
AFFLIB versions through 3.7.22 have a heap out-of-bounds write vulnerability in the af_get_page() function. This flaw occurs when attackers supply crafted AFF images with mismatched page and sector sizes, specifically setting a page size larger than and not a multiple of the sector size. This causes a sector zero-fill loop to write beyond the allocated buffer, potentially crashing forensic tools that use AFFLIB.
Dell OpenManage Enterprise versions prior to 4.8.0 contain a vulnerability involving the use of a hard-coded cryptographic key. This flaw allows a low privileged attacker with local access to potentially disclose sensitive information. The vulnerability is identified as CVE-2026-91912 and has a high severity rating with a CVSS score of 7.3.
CVE-2026-86715 is a vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc.'s Vatos DLP product that involves the plaintext storage of passwords. This flaw affects versions from 1.1.176 up to but not including 1.1.243. The vulnerability allows the use of known domain credentials, potentially leading to high confidentiality and integrity impacts without affecting availability.
UNIT3D versions through 9.2.0 have a missing authorization vulnerability in the PlaylistZipController::show function. This flaw allows authenticated users to download private playlists belonging to other members by enumerating sequential playlist IDs at the /playlist-zips/{playlist} endpoint. The vulnerability leads to unauthorized disclosure of private collection membership information.
ArcadeDB versions from 26.8.1 up to but not including 26.10.2 contain a server-side request forgery (SSRF) vulnerability. Authenticated users with the updateDatabaseSettings permission can disable the LOAD CSV IP block list by altering the database settings. This allows attackers to clear the blocked IP ranges and issue LOAD CSV requests that can access cloud metadata and internal network services.
ArcadeDB versions prior to 26.10.2 have an improper authorization vulnerability that allows users whose access has been revoked to continue accessing the database through existing open connections using Postgres, Bolt, MongoDB, or Redis wire protocols. This occurs because the system retains a stale ServerSecurityUser executor, enabling continued read and write operations even after user deletion, grant removal, or password changes.
MONAI versions from 1.6.0 up to but not including 1.6.1 contain a remote code execution vulnerability in the Auto3DSeg algo_from_json() function. This flaw allows attackers to execute arbitrary Python code by supplying a crafted algo_object.json file within a work directory. Exploitation involves shipping a malicious algorithm_templates module and specifying a _target_ name that is imported and instantiated during calls to AutoRunner or import_bundle_algo_history, leading to code execution under default configurations.
Traefik versions from 3.2.0 up to but not including 3.7.15 contain a data race vulnerability in the experimental FastProxy feature. This flaw allows unauthenticated attackers to crash the Traefik process by exploiting HTTP/1 protocol upgrades, such as repeatedly opening and aborting upgraded connections like WebSocket. The attack corrupts an unsynchronized shared bufio.Reader, causing an unrecovered panic that terminates the service.
Traefik versions 3.7.11 through 3.7.14 contain an authorization bypass vulnerability in the Kubernetes Ingress NGINX provider. This flaw allows users with permission to create Ingress resources to bypass cross-namespace checks on the auth-tls-secret annotation when a cached client TLS authentication option is reused. Exploiting this, an attacker can reference a CA secret from another namespace already used by a different Ingress, enforcing it on their own routes and determining its existence without accessing the secret's contents.
ArcadeDB versions from 21.12.1 up to but not including 26.10.2 have an authorization bypass vulnerability. This flaw allows users with only readRecord privileges to replace the shared GraphQL schema via the read-only query endpoint. By sending a crafted GraphQL type definition with a malicious @sql directive to the /api/v1/query/{database} endpoint, attackers can alter query results returned to other users, including administrators.
A stack-based buffer overflow vulnerability exists in GIMP's PSD plug-in image resource header loader due to incorrect handling of destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a crash and potentially allow arbitrary code execution with the privileges of the user running GIMP. Exploitation requires user interaction to open or trigger parsing of a malicious PSD file. Mitigation includes avoiding untrusted PSD files and removing GIMP if not needed.
The Kirki plugin for WordPress versions prior to 6.2.5 contains a vulnerability that allows unauthenticated attackers to bypass reCAPTCHA verification on frontend forms. By omitting the g-recaptcha-token field in POST requests, attackers can submit forms without valid reCAPTCHA validation. This leads to unlimited form submissions triggering notifications, webhooks, and writes to the submissions table without completing the intended verification.
A vulnerability in the Ickle query parser of Infinispan allows an authenticated user with BULK_READ permission to submit a query with deeply nested predicates that causes recursive parsing to exhaust the Java thread stack, resulting in an uncaught StackOverflowError. This can lead to a denial of service by impacting availability.