Search: 10.4-5

CVE-2026-118274 is a medium severity vulnerability in the a2ui-project a2ui component up to version 0.10.6. It affects an unknown functionality within the Binder component's generic-binder.ts file, leading to resource consumption. The vulnerability can be exploited remotely without user interaction and requires low privileges. A patch identified by commit c97f4a02d3fea33ce3e9de5cf3fd0e3b8f3a4f0e is available to fix the issue.

CVE-2026-118273 is a medium severity vulnerability in a2ui-project's a2ui component up to version 0.10.6. The flaw exists in the DataModel.set function of the file renderers/web_core/src/v0_9/state/data-model.ts and can be exploited remotely to cause resource consumption. Exploit code has been published. A patch identified by commit 82789191ce551f4d7a095d273773fb24bd764c9d is available to remediate this issue.

GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality. This flaw arises from improper use of a user-controlled key, allowing an authenticated attacker to access page contents and comments without having the necessary read permissions. The vulnerability affects versions from 3.2.10 through 8.0.6. The CVSS score is 4.2, indicating a medium severity level.

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function DataContext.dispatchExpressionError of the file renderers/web_core/src/v0_9/rendering/data-context.ts of the component Error Handler. Performing a manipulation results in information exposure through error message. It is possible to initiate the attack remotely. The exploit is now public and may be used. The patch is named 8f149a1c7b0ce1fa8e93ac3adfa5fda960faeb01. It is suggested to install a patch to address this issue.

CVE-2026-118271 is a medium severity vulnerability in a2ui-project a2ui versions 0.10.0 through 0.10.6. It involves resource consumption caused by manipulation of an unknown function in the data-context Resolver component. The vulnerability can be exploited remotely without user interaction or privileges. Public exploit code has been disclosed. A patch identified by commit eb314e14fabd29cfb4a74e1202afc4fe2081efa2 is available to remediate the issue.

CVE-2026-110879 is a critical deserialization vulnerability in FasterXML jackson-databind affecting versions from 2.10.0 up to but not including fixed releases 2.18.12, 2.21.8, 2.22.4, 3.1.8, and 3.2.4. The flaw allows attacker-controlled classes inside generic type arguments to bypass validation, enabling deserialization of malicious payloads. This can lead to arbitrary code execution, notably when combined with Spring on the classpath and attacker-controlled XML input.

CVE-2026-57199 is an out-of-bounds write vulnerability in the Asterisk telephony toolkit affecting the app_sms.c component. It occurs when SMS lengths controlled externally are copied into fixed-size buffers without proper bounds checking, potentially allowing memory corruption or crashes. The vulnerability affects versions prior to 20.20.1, 21.12.3, 22.10.1, 23.4.1, and certain Certified Asterisk releases. The issue requires explicit use of the SMS dialplan application and improper validation of input data. Fixed versions are available.

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, the `PostgreSQL` and `TDS/MSSQL` Channel Event Log backends `cel_pgsql` and `cel_tds` may permit arbitrary SQL execution when untrusted data is set in the CEL `eventtype` column by the `CELGenUserEvent` dialplan application. The `cel_pgsql` or `cel_tds` backend must be loaded and configured, and the administrator must call `CELGenUserEvent` in the dialplan without ensuring that only valid data is passed to the application. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.

CVE-2026-57192 is a medium severity vulnerability in Asterisk's Codec2 decoder that allows an authenticated attacker to cause a heap buffer overflow via an out-of-bounds write. The flaw arises from a floor/ceil sample-count mismatch when the codec_codec2 module is loaded and Codec2 is configured on the endpoint. Exploitation requires SIP authentication and establishing a call using Codec2 with crafted audio packets. Fixed versions include Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1, and Certified Asterisk 20.7-cert11, 22.8-cert3.

Asterisk is an open source private branch exchange and telephony toolkit. From 21.0.0-pre1 until Asterisk 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3, the `chan_ooh323` `Q.931 party-number parser` lacks the `CVE-2022-37325` fix because that fix was never forward-ported from Asterisk 20 to later versions. Malformed Q.931 elements in an `OOH323 request` can therefore crash Asterisk. This issue affects Asterisk versions greater than 20. The `chan_ooh323` addon channel driver must be explicitly compiled and installed, which is not the default, and its port must be publicly reachable. This issue is fixed in Asterisk 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3.

CVE-2026-57200 is a path traversal vulnerability in Asterisk affecting versions prior to 20.20.1, 21.12.3, 22.10.1, 23.4.1, and Certified Asterisk 22.8-cert3. An authenticated attacker with read-only Asterisk REST Interface (ARI) credentials may exploit this to perform write operations via REST-over-WebSocket, leading to arbitrary module path loading and potential remote code execution. The vulnerability requires the Asterisk HTTP server to be enabled and reachable, which is disabled and bound to localhost by default. This issue has been fixed in the specified versions.

CVE-2026-57195 is a high-severity vulnerability in Asterisk's Manager Interface (AMI) that allows an unauthenticated attacker to cause a denial of service via a NULL pointer dereference. This occurs when Digest Authentication is used over HTTP and the HTTP server, AMI, and AMI HTTP access are all enabled. The HTTP server binds to 127.0.0.1 by default, limiting exposure. The issue is fixed in Asterisk versions 20.20.1, 21.12.3, 22.10.1, 23.4.1, and Certified Asterisk 20.7-cert11 and 22.8-cert3.

A denial of service vulnerability exists in the X.Org X11 libXi runtime library due to an out-of-bounds read in the XI2 class parser (CVE-2026-93543). This issue affects Red Hat Enterprise Linux 10 across multiple architectures. Red Hat has released a security update to address this moderate severity flaw.

CVE-2026-116684 is an authorization vulnerability in the Model Context Protocol Python SDK affecting versions from 1.10.0 up to but not including 1.30.0, and from 2.0.0 up to but not including 2.2.0. The flaw occurs when server-side bearer authentication configured with AuthSettings and token_verifier accepts a valid token issued for a different service due to lack of independent audience (aud) validation. This allows an attacker holding a token for one resource to authenticate to a different MCP server and gain unauthorized access. The issue is fixed in versions 1.30.0 and 2.2.0.

EPICS Base versions 7.0.10 and earlier contain a vulnerability due to insufficient validation of element or length values in network messages. This flaw can cause the application to read beyond the bounds of an allocated buffer, potentially leading to denial of service and exposure of adjacent memory contents.

EPICS Base versions 7.0.10 and earlier contain a vulnerability due to insufficient validation of element or length values in network messages. This flaw can cause the application to read beyond allocated buffer boundaries, potentially leading to denial of service and exposure of adjacent memory contents.

EPICS Base versions 7.0.10 and earlier contain a vulnerability due to improper validation of message length values during protocol parsing. This flaw can cause an integer overflow leading to an out-of-bounds memory write. Exploiting this vulnerability may result in process instability or denial of service conditions.