CVE-2026-6647 is a vulnerability in WSO2 Identity Server affecting deployments with a case-insensitive user store and a case-sensitive identity database. This mismatch causes OAuth token revocation to fail for usernames with mixed-case characters, allowing tokens to remain valid when they should be revoked. An attacker with a valid token for such a username can continue unauthorized actions until token expiry, bypassing intended access controls. The issue affects versions 7.2.0 up to but not including 7.2.0.21 and 7.0.385 up to but not including 7.0.385.17. Fixes are available in versions 7.2.0.21 and 7.0.385.17. The CVSS 3.1 score is 7.4 (high severity).
Coder versions before 2.29.21, 2.30.0 before 2.34.12, 2.35.0 before 2.35.9, 2.36.0 before 2.36.7, and 2.37.0 before 2.37.4 contain a vulnerability where the audience claim of Google Compute Engine (GCE) instance-identity JWTs is not validated at the POST /api/v2/workspaceagents/google-instance-identity endpoint. This allows attackers who obtain a valid identity token for a different relying party to replay it and obtain a workspace agent's session token, which remains valid until the next workspace build.
SiYuan versions 3.8.7 through 3.8.8 contain a path traversal vulnerability due to improper normalization of Windows GLOBALROOT device-namespace aliases. This flaw allows attackers with high privileges to bypass path restrictions and copy sensitive files such as API tokens and TLS private keys into publicly accessible directories.
A local privilege escalation vulnerability exists in the Alpine iLX-F511 Fiv.System due to an exposed dangerous method in the Fiv service. An attacker with the ability to execute low-privileged code can exploit this flaw to escalate privileges to root and execute arbitrary code. The vulnerability is identified as CVE-2026-118602 and has a high severity rating with a CVSS score of 7.8.
Stage File Proxy is a Drupal module designed to fetch production files on development servers. It is not intended for use on production sites. A vulnerability exists due to insufficient validation of file URLs during fallback retrieval, leading to a cross-site scripting (XSS) vulnerability. Exploitation requires the module to be enabled on the target site and the attacker to have the ability to upload a malicious file to the configured origin server. Fixed versions 3.1.7 and 4.0.1 address this issue.
CVE-2026-116795 is a vulnerability in the le0pard re2js JavaScript regular expression engine versions 2.2.0 through 2.8.6. When LOOKBEHINDS are enabled and repeated matching functions like matcher().find(), matchAll(), split(), or matcher().replaceAll() are used, the engine can perform quadratic work due to inefficient algorithmic complexity. This causes excessive rescanning of input, potentially allowing attacker-controlled input to monopolize a single-threaded worker and cause denial of service. The issue is fixed in version 2.8.7.
CVE-2026-88858 is a vulnerability in Grafana OSS where a user with Viewer role can crash the server by submitting a crafted server-side math expression that causes uncontrolled recursion. Additionally, a user with permission to provision alert rules can make the outage persist across server restarts. The vulnerability affects multiple versions of Grafana OSS from 7.4.0 through 13.2.4 in various subranges.
CVE-2026-118603 is a stack-based buffer overflow vulnerability in the vCard parsing functionality of Alpine iLX-F511 version 7.0.0000. It allows a network-adjacent attacker to execute arbitrary code with root privileges if the target connects to a malicious Bluetooth device. The flaw arises from improper validation of user-supplied vCard data before copying it to a fixed-length stack buffer, leading to potential remote code execution. Exploitation requires user interaction in the form of connecting to a malicious Bluetooth device. The vulnerability is rated high severity with a CVSS score of 8. No patch or official fix information is currently provided.
CVE-2026-118601 is a vulnerability in Alpine iLX-F511 devices where hard-coded credentials in the SSH service allow network-adjacent attackers to execute arbitrary code without authentication. The flaw enables code execution with the privileges of the telechips user. The vulnerability affects version 7.0.000 of the product and has a medium severity rating with a CVSS score of 6.3.
CVE-2026-100105 is an incorrect authorization vulnerability in Grafana Enterprise that allows a user with permission to edit contact points, but not their protected fields, to modify protected settings by switching an integration to a legacy schema version. This can expose stored credentials and redirect alert notifications. The vulnerability affects multiple versions of Grafana Enterprise from 12.4.0 through 13.2.4. It has a high severity with a CVSS score of 7.7.
CVE-2026-106079 is an OS Command Injection vulnerability in the AccessManager component of Juniper Networks Session Smart Router and Session Smart Conductor. It allows an attacker with configuration write privileges to execute arbitrary commands as root via the YANG configuration interface. The vulnerability affects multiple versions prior to fixed releases 7.0.5, 7.1.7, and 7.2.3. The CVSS v3.1 score is 8.8, indicating high severity.
CVE-2026-103411 is an Integer Underflow vulnerability in the DhcpMessageDecoder component of Juniper Networks Session Smart Router. It allows an attacker with local network access to cause information disclosure and denial of service by sending a malicious DHCP reply. The vulnerability affects multiple versions prior to fixed releases 7.0.5, 7.1.7, and 7.2.3. The CVSS score is 7.1, indicating a high severity impact.
CVE-2026-103410 is an integer overflow vulnerability in the DPI certificate scanner of Juniper Networks Session Smart Router. This flaw allows an unauthenticated remote attacker to cause a denial of service by sending a specially crafted TLS server certificate. The vulnerability affects multiple versions of the product prior to fixed releases. A fix is available in versions 7.0.5, 7.1.7, and 7.2.3.
CVE-2026-103409 is a critical vulnerability in Juniper Networks Session Smart Router that allows unauthenticated network attackers to gain administrative privileges by exploiting a missing authentication check on a critical function. This issue affects devices prior to onboarding to Mist/Conductor and is fixed in versions 7.0.5, 7.1.7, and 7.2.3.
CVE-2026-103408 is a stack-based buffer overflow vulnerability in the DHCP client of Juniper Networks Session Smart Router. It allows an unauthenticated attacker on the local network to execute remote code by sending a malicious DHCP reply. The vulnerability affects multiple versions prior to fixed releases 7.0.5, 7.1.7, and 7.2.3. It has a high severity with a CVSS score of 8.8.
CVE-2026-103407 is a path traversal vulnerability in Juniper Networks Session Smart Router and Session Smart Conductor's ConfigDirector component. It allows an authenticated REST user to read, overwrite, or delete arbitrary certificate and key files on the host filesystem via the certificate and private-key REST API. The vulnerability affects multiple versions prior to fixed releases 7.0.5, 7.1.7, and 7.2.3. The CVSS score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-103406 is a critical OS command injection vulnerability in the AutomatedProvisioner component of Juniper Networks Session Smart Conductor. It allows a remote attacker to execute arbitrary commands with root privileges by sending a specially crafted salt minion ID. The vulnerability affects multiple versions prior to fixed releases 7.0.5, 7.1.7, and 7.2.3. The flaw has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.
CVE-2026-103405 is an injection vulnerability in the web server component of Juniper Networks Session Smart Router and Session Smart Conductor. It allows an attacker to inject arbitrary HTTP headers through unsanitized request body parameters. The flaw is classified as CWE-74, indicating improper neutralization of special elements in output used by a downstream component. This vulnerability affects multiple versions prior to fixed releases 7.0.5, 7.1.7, and 7.2.3. The CVSS 3.1 base score is 5.8, reflecting a medium severity with network attack vector, low attack complexity, no privileges or user interaction required, and a scope change. No known exploits are reported in the wild.