CVE-2026-123875 is a vulnerability in Node.js HTTP/2 that allows an unauthenticated client to crash the server by triggering a NULL pointer dereference. This occurs when the server uses stream.respondWithFile() or stream.respondWithFD() to serve files and the client cancels the request, causing improper teardown of a StreamPipe and process abortion. The flaw affects Node.js versions 22.x, 24.x, and 26.x prior to specific fixed releases.
Fider, a feedback portal for feature requests, has a Server-Side Request Forgery (SSRF) vulnerability in versions prior to 0.34.0. This flaw allows attackers with administrative privileges to make arbitrary HTTP requests from the server by exploiting insufficient validation of webhook URLs. The vulnerability enables potential access to internal network services or cloud metadata endpoints. The issue has been fixed in version 0.34.0.
Dell OpenManage Ansible Modules versions 2.1.2 through 10.0.3 have an improper certificate validation vulnerability in the iDRACRedfishAPI component. This flaw allows an unauthenticated remote attacker to potentially cause information exposure and unauthorized access. The vulnerability is tracked as CVE-2026-91873 and has a high severity rating with a CVSS score of 8.7. A fix is available starting from version 11.0.0.
CVE-2026-65840 is a critical authorization bypass vulnerability in Fider, a feedback portal software. In multi-tenant mode prior to version 0.36.0, an attacker can reuse an email verification key from one tenant to authenticate as the same email address on another tenant. This flaw breaks tenant isolation and enables unauthorized account takeover across tenants. Single-host mode deployments are not affected. The issue is fixed in version 0.36.0.
CVE-2026-123874 is a use-after-free vulnerability in Node.js HTTP/2 affecting versions 24.x (since 24.22.0) and 26.x (since 26.9.0). It allows an unauthenticated client to corrupt server memory when the server serves files using respondWithFile() or respondWithFD(). The flaw occurs because the server may free an Http2Stream object while a write request referencing it is still queued, leading to a dereference of a freed object. This vulnerability has a CVSS score of 7.5 and is rated high severity.
A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description (PPD) files. A remote, unauthenticated attacker can exploit this directory traversal flaw by submitting filenames containing path traversal sequences. This allows the attacker to upload or delete arbitrary files on the system, which can result in data corruption, denial of service, or arbitrary command execution.
Dell Ansible Storage for Unity versions prior to 1.2.13 contain an improper certificate validation vulnerability in the UnityRESTConnector component. This flaw allows an unauthenticated remote attacker to potentially cause information exposure and unauthorized access. The vulnerability has a high severity with a CVSS score of 8.7.
Dell Live Optics Collector versions prior to 27.3.13.330 have a vulnerability involving the generation of predictable initialization vectors (IVs) in CBC mode encryption. This flaw allows a low privileged local attacker to potentially expose sensitive information. The vulnerability is identified as CVE-2026-86363 and has a medium severity rating with a CVSS score of 5.5.
Dell Ansible Storage for PowerStore versions prior to 3.9.0 have an improper certificate validation vulnerability in the API client. This flaw allows an unauthenticated remote attacker to potentially gain unauthorized access and expose sensitive information. The vulnerability is rated high severity with a CVSS score of 7.4.
Dell Terraform for ObjectScale and Powerstore contains a vulnerability where sensitive information is inserted into log files. This affects versions prior to 1.1.1 for ObjectScale and versions 1.2.1 through 1.3.0 for PowerStore. A low privileged attacker with remote access could exploit this flaw to gain unauthorized access and cause information exposure.
Dell Ansible Storage for PowerFlex versions prior to 3.2.0 contain an improper certificate validation vulnerability in the API client component. This flaw allows an unauthenticated remote attacker to potentially cause information exposure and gain unauthorized access. The vulnerability has a high severity with a CVSS score of 7.4. No known exploits are reported in the wild, and no explicit patch information is provided in the input data.
A cross-site request forgery (CSRF) vulnerability exists in tracker-invocation.php in Revive Adserver version 6.0.8 and earlier. This flaw allows an attacker to modify a tracker's name, description, or advertiser assignment by leveraging an authenticated victim's permissions. The vulnerability arises from a leftover state-changing handler that processes request parameters without verifying a CSRF token. Exploitation requires victim interaction and the victim's session credentials to be included in the request. The issue is addressed in Revive Adserver 6.0.9 by removing the unused tracker-modification handler.
Dell Live Optics Collector versions prior to 27.3.8.317 contain a vulnerability involving the use of insufficiently random values. This flaw could be exploited by a low privileged attacker with local access to cause information exposure. The vulnerability is classified as medium severity with a CVSS score of 4.7.
Dell Ansible Storage for PowerStore versions prior to 3.9.0 contain a vulnerability where sensitive information can be inserted into log files. This flaw exists in the configuration module and could be exploited by a low privileged attacker with local access, potentially leading to exposure of sensitive data. The vulnerability has a medium severity with a CVSS score of 5.5.
Janus WebRTC Server versions 1.2.3 through 1.4.0 contain a directory traversal vulnerability. The server accepts a user-supplied media path for ondemand streams, validating only the file extension without canonicalization or directory allowlisting. This allows unauthenticated users to cause the server to open arbitrary local files and stream their content as RTP audio.
A spreadsheet formula injection vulnerability exists in Revive Adserver version 6.0.8 and earlier. An unauthenticated attacker can submit conversion values that are interpreted as formulas in exported XLS reports. When users open these reports in spreadsheet applications, the attacker-supplied formulas may be executed. The vulnerability allows formula execution but does not confirm information disclosure. The issue is fixed in version 6.0.9 by sanitizing conversion values before export.
Revive Adserver versions 6.0.8 and earlier contain a stored cross-site scripting (XSS) vulnerability in the maintenance-appendcode-check.php script. This flaw allows an authenticated manager to inject malicious JavaScript by storing a crafted tracker name that appears in the maintenance results page. When an administrator views this page, the injected script executes in their browser due to improper HTML encoding. The vulnerability is addressed in version 6.0.9 by properly encoding tracker names in the maintenance output.
Revive Adserver versions 6.0.8 and earlier contain an authorization bypass vulnerability in campaign-zone linking. This flaw allows an authenticated manager or trafficker with zone-linking permissions to link another agency's campaign to their own zone without proper ownership validation. Although foreign banners cannot be linked due to agency filtering, the unauthorized linking exposes the foreign campaign's name, type, and identifier. The issue is resolved in version 6.0.9 by adding campaign ownership validation.
A reflected cross-site scripting (XSS) vulnerability exists in the invocation-tag generation interface of Revive Adserver version 6.0.8 and earlier. This vulnerability allows an unauthenticated attacker to execute JavaScript in the browser of an authenticated user by tricking them into visiting a specially crafted URL. The issue arises when the Direct Selection feature is enabled, allowing attacker-controlled banner identifiers to be included in HTML form fields without proper encoding. Direct Selection is disabled by default. The vulnerability is fixed in version 6.0.9 by applying HTML encoding to banner identifier values in the invocation-option form fields.
Dell Terraform Provider for Dell PowerFlex contains an OS Command Injection vulnerability in the SDC host provisioning component. A high privileged remote attacker with access to the PowerFlex management plane could exploit this flaw to execute arbitrary OS commands on provisioned SDC hosts, potentially leading to full compromise of those hosts.