An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... TO PROGRAM statement into content that is processed when an authenticated user interacts with the MCP server in its default read-only mode.
To remediate this issue, users should upgrade to version 1.1.7 or later.
CVE-2026-85788 is a medium severity vulnerability in AWS Labs MySQL MCP Server where an incomplete list of disallowed inputs in the mutable SQL detector allows certain SQL inline comments to bypass read-only enforcement. This can enable context-dependent actors to reach file-read and file-write SQL sinks. The issue is fixed in version 1.0.23.
CVE-2026-79696 is a critical code injection vulnerability in Google Cloud Agent Development Kit (ADK) for Python versions 2.0.0 through 2.6.0. It affects environments including Python (OSS), Cloud Run, and GKE where pytest is installed. The flaw allows an unauthenticated remote attacker to execute arbitrary code by using a crafted test session replay. A fix is available in version 2.7.0.
CVE-2026-69624 is a vulnerability in Microsoft Windows 10 Version 1607 and related versions where Active Directory Certificate Services (AD CS) has an incomplete list of disallowed inputs. This flaw allows an authorized attacker with network access to perform tampering. The issue affects multiple Windows versions and has been assigned a CVSS score of 6.5, indicating medium severity. Official fixes have been released for all affected versions.
CVE-2026-70334 is a high-severity vulnerability in Microsoft Visual Studio Code where an incomplete list of disallowed inputs allows a local unauthorized attacker to bypass a security feature. This flaw affects versions from 1.0.0 up to but not including 1.136.2. The issue has been officially fixed in version 1.136.2.
AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability.
CVE-2026-85787 is a high-severity vulnerability in Amazon's awslabs postgres-mcp-server before version 1.1.7. It involves an incomplete list of disallowed inputs in the SQL validation component, which may allow an unauthenticated attacker to modify data beyond intended read-only permissions by injecting crafted SQL when an authenticated user interacts with the server. The issue is fixed in version 1.1.7.
In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did not verify whether script execution had been administratively disabled. An account holding script-execution permission could continue to run previously-created scripts even after an administrator set nexus.scripts.allowCreation=false, undermining the expectation that this setting fully blocks script execution.
SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.4, 3.3.5, and 4.1.0, the opt-in removeScripts plugin, named removeScriptElement in versions 2 and 3, incompletely filters executable links in plugins/removeScripts.js and lib/svgo/tools.js. The plugin does not recognize namespace-prefixed SVG anchor elements such as svg:a with href or namespaced *:href values, and it does not remove ASCII tab, line-feed, or carriage-return characters before checking URL schemes. Browsers remove those characters before parsing a scheme, allowing an executable link to pass the plugin's check. When an application processes attacker-controlled SVG input and serves the result in an active browser context, a victim who activates the surviving link can execute script in the SVG's origin, expose data, modify content, or perform actions as the victim. This issue is fixed in versions 2.8.4, 3.3.5, and 4.1.0.
CVE-2026-84218 is a vulnerability in Red Hat AMQ Broker 7 related to Jolokia's JSR-160 proxy functionality. It involves insufficient validation of client-controlled JMX service URLs, allowing bypass of an existing denylist. This flaw permits the use of alternative valid JMX service URL forms, such as ldaps:// schemes or LDAP URLs with non-empty JMX host components, which can lead to server-side request forgery (SSRF), credential forwarding, and potentially remote code execution.
CVE-2026-56547 is a low severity vulnerability in HCLSoftware Traveler affecting versions prior to 14.5.1.1. It involves improper input validation in the Apple profile generation process for Mail, Calendar, and Contacts synchronization. The profile requires embedding the Logon Name and Mail Address, which cannot be changed later. The vulnerability allows an attacker to submit values that are reflected back in the Apple profile without verifying that these values match the authenticated user's Domino directory entry. However, the profile is not usable without additional information, limiting the attack to the attacker's own device.
Compliance-trestle versions before 3.12.4 and from 4.0.0 up to 4.0.3 contain a vulnerability in the URLSecurityValidator that allows bypassing its blocklist for certain IP address formats. This enables attackers to cause the tool to fetch resources from restricted internal network endpoints, including loopback, link-local, cloud metadata, and local services. The issue is fixed in versions 3.12.4 and 4.1.0.
CVE-2026-65083 is a critical vulnerability in NVIDIA OpenShell for Linux involving an incomplete list of disallowed inputs in its sandbox provisioning API. This flaw could allow an attacker to execute code, escalate privileges, disclose information, tamper with data, or cause denial of service. The vulnerability has a high CVSS score of 9.9, indicating severe impact. No affected versions or patch information are currently provided. No known exploits in the wild have been reported.
CVE-2026-62676 is a vulnerability in omnigent-ai's omnigent v0.1.0 and earlier versions before 0.3.0. The issue lies in the shared shell-command parser which fails open, allowing unrecognized commands to bypass critical policy checks. This can enable an agent intended to be confined to push code or secrets to attacker-controlled repositories, push to protected branches, or escape workspace confinement. The vulnerability stems from the parser returning 'None' (interpreted as allow) for unrecognized commands, rather than denying them.
The Limit Login Attempts Reloaded WordPress plugin versions before 3.3.5 contains an incomplete blacklist vulnerability. The plugin's username denylist does not perform case-insensitive comparisons and does not consider the account's email address. This allows an account that an administrator intended to block from logging in to bypass the restriction and authenticate successfully.
CVE-2026-68921 is a cross-site scripting (XSS) vulnerability in the DiceBear avatar library versions prior to 9.4.3. The issue arises because certain options like rotate, fontSize, and fontWeight are interpolated into SVG attributes without proper XML escaping, allowing attackers to inject arbitrary SVG markup. Exploitation requires an application to pass untrusted input into these options, which are normally controlled by developers. The vulnerability is fixed in version 9.4.3.
A Cross-site Scripting (XSS) vulnerability exists in the lxml Python library prior to version 6.1.1. The issue arises because link attributes in lxml.html.defs.link_attrs were missing the xlink:href attribute, enabling URL bypass attacks in embedded SVG, MathML, and similar content. This vulnerability was addressed in lxml version 6.1.1 and lxml_html_clean 0.4.5.
Gotenberg versions 8.32.0 and earlier contain a vulnerability in the IsPublicIP function that fails to reject certain IPv6 transition prefixes, allowing crafted DNS AAAA records to bypass private IP restrictions. This can enable unauthenticated attackers to access internal cloud metadata services and potentially expose cloud credentials via the Chromium URL conversion route. The issue requires specific network configurations such as dual-stack or NAT64-enabled environments. The vulnerability is fixed in version 8.33.0.
SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.3, 3.3.4, and 4.0.2, the removeScripts plugin, named removeScriptElement in versions 1 through 3, can leave executable content in optimized SVGs because it does not remove namespaced or prefixed script elements such as <svg:script> and, in versions 3 and 4, matches JavaScript URIs case sensitively. Applications that process untrusted SVG input with this plugin enabled and serve the result can allow scripts to execute when another user opens the SVG, exposing local storage or cookies. This issue is fixed in versions 2.8.3, 3.3.4, and 4.0.2.