CVE-2026-18596 is an authentication bypass vulnerability in Synology DiskStation Manager (DSM) versions before 7.3.2-86009-5 and 7.4.1-90080-1. It affects the OTP mechanism, allowing remote attackers with valid user credentials to bypass authentication via an alternate path or channel. Exploitation can lead to arbitrary file read/write and denial-of-service conditions.
CVE-2026-74857 is a high-severity vulnerability in Synology DiskStation Manager (DSM) affecting versions before 7.3.2-86009-5 and 7.4.1-90080-1. It involves a missing critical step in the authentication process of the Auth API, allowing remote authenticated users to read or write arbitrary files and perform denial-of-service attacks.
Red Hat has issued a security advisory for nginx version 1.24 addressing two vulnerabilities in the ngx_http_core_module. The first is a heap-based buffer overflow triggered via alias with rewrite referencing $request_filename (CVE-2026-15176). The second is another unspecified vulnerability in the same module (CVE-2026-97205). These issues affect Red Hat Enterprise Linux 9.8 Extended Update Support and related variants. The advisory rates the update as important and provides updated packages to remediate the vulnerabilities.
CVE-2026-18792 is a vulnerability in Synology DiskStation Manager (DSM) prior to versions 7.3.2-86009-5 and 7.4.1-90080-1. It involves improper limitation of a pathname to a restricted directory in the Sharing API, allowing remote authenticated users to read or write arbitrary files and perform denial-of-service attacks.
CVE-2026-13672 is an authorization bypass vulnerability in Synology DiskStation Manager (DSM) versions before 7.3.2-86009-5 and 7.4.1-90080-1. It involves a flaw in the SSOAuth component where a user-controlled key allows remote authenticated users to read or write arbitrary files and perform denial-of-service attacks. The vulnerability has a high severity with a CVSS score of 8.8.
A heap-based buffer overflow vulnerability exists in Ashlar-Vellum Cobalt when parsing LI files. This flaw allows remote attackers to execute arbitrary code if a user opens a malicious file or visits a malicious page. Exploitation requires user interaction. The vulnerability arises from improper validation of the length of user-supplied data before copying it to a heap buffer.
CVE-2026-122044 is an authentication bypass vulnerability in the Philips Hue Bridge Pro HTTP service, which listens on TCP port 443 by default. This flaw allows network-adjacent attackers to bypass authentication without needing credentials due to a failure in applying a protection mechanism. The vulnerability has a high severity score of 8.8 and impacts confidentiality, integrity, and availability.
A stack-based buffer overflow vulnerability exists in Ashlar-Vellum Cobalt XE file parsing. This flaw allows remote attackers to execute arbitrary code if a user opens a crafted malicious file or visits a malicious page. The vulnerability arises from improper validation of user-supplied data length before copying to a stack buffer.
A use-after-free vulnerability in Ashlar-Vellum Cobalt XE file parsing allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The flaw arises from improper validation of object existence before operations during XE file parsing.
A heap-based buffer overflow vulnerability exists in Ashlar-Vellum Cobalt's AR file parsing functionality. This flaw allows remote attackers to execute arbitrary code if a user opens a malicious file or visits a malicious page. Exploitation requires user interaction. The vulnerability arises from improper validation of user-supplied data length before copying it to a heap buffer.
A use-after-free vulnerability exists in Ashlar-Vellum Cobalt XE file parsing that allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The flaw arises from improper validation of object existence before operations, enabling code execution in the context of the current process.
CVE-2026-13269 is a denial-of-service vulnerability in Quest NetVault Backup caused by a numeric truncation error in the StnzCreateKey function. This flaw allows remote attackers to cause a denial-of-service without requiring authentication by exploiting improper validation of user-supplied data.
CVE-2026-13270 is an integer underflow vulnerability in the nvpmgr service of Quest NetVault Backup. This flaw allows unauthenticated remote attackers to cause a denial-of-service (DoS) by sending specially crafted data to the service listening on UDP port 20031. The vulnerability arises from improper validation of user input leading to an integer underflow before buffer allocation.
A vulnerability in ToolJet versions up to 3.20.256-lts and 3.21.93-beta affects the onboarding signup endpoint. The flaw exists in the activateUserWithPassword function, where manipulation of the email argument can bypass authentication. This vulnerability can be exploited remotely. Public exploit code has been disclosed. Upgrading to version 3.21.94-beta resolves the issue.
A use-after-free vulnerability in Trimble SketchUp's SKP file parsing allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The flaw arises from improper validation of object existence before operations, leading to code execution in the context of the current process.
A SQL Injection vulnerability in the Philips Hue Bridge Pro allows network-adjacent attackers to execute arbitrary code with root privileges. Exploitation requires authentication, but the authentication mechanism can be bypassed. The flaw is in the HTTP service on TCP port 443 due to improper validation of user input used in SQL queries.
CVE-2026-118631 is a vulnerability in Philips Hue Bridge Pro affecting the factory data service that listens on TCP port 5001. It allows a local attacker with low-privileged code execution within a container to perform argument injection, leading to restricted file write capabilities. The flaw arises from improper validation of user-supplied strings before executing system calls, enabling modification of files under the service account context. The vulnerability has a low CVSS score of 3.8 and does not have known exploits in the wild.
Data::Dump::Streamer versions before 3.00 for Perl contain a code injection vulnerability via unescaped regular expression patterns in the _dump_qr function. This occurs because certain characters in regex patterns are not properly escaped, allowing embedded code to execute when the dumped data is later evaluated. An attacker supplying a crafted regex pattern that is compiled, dumped, and restored with eval or do can execute arbitrary Perl code.
A Cross-Site Scripting (XSS) vulnerability exists in ExpressTech Quiz And Survey Master (quiz-master-next) up to version 11.3.0 due to improper neutralization of script-related HTML tags. This flaw allows an attacker to inject code that could be executed in the context of a user's browser. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity with network attack vector, low attack complexity, no privileges or user interaction required, and limited confidentiality impact.