Semantic MediaWiki versions from 3.0.0 up to but not including 7.3.1 contain an algorithmic complexity vulnerability in the TermParser::normalize_compact_form() function. This flaw allows unauthenticated attackers to cause quadratic CPU consumption by submitting long search terms with many distinct in:(...) or has:(...) expressions to Special:Search when the extended search engine is enabled. This can exhaust PHP search workers, leading to denial of service conditions.
In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands (`edgelet provision` and `edgelet config cert` on supported releases; `iofog-agent provision` and `iofog-agent cert` on older releases) that run over SSH on a remote agent host and via a local shell. A party who can change that API response can include shell metacharacters and cause the operator's CLI to run additional commands on the agent host when the operator deploys or attaches an agent. This is fixed in version 3.9.2.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7, including specific LTS releases, contain an improper privilege management vulnerability. This flaw allows a high privileged attacker with local access to potentially elevate their privileges. The vulnerability is identified as CWE-269 and has a CVSS 3.1 score of 6.3, indicating a medium severity level. Fixed versions are available starting from 7.13.1.90, 8.3.1.50, 8.6.1.30, and 8.9.0.0 or later.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Kulga Software and Telecommunications Limited Company Kulga News Software allows Reflected XSS.
This issue affects Kulga News Software: from v26.7.4 before v26.10.0.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 and several LTS releases contain an improper privilege management vulnerability (CWE-269). A high privileged attacker with remote access could exploit this flaw to elevate privileges. The vulnerability has a CVSS score of 6.7, indicating a medium severity level. Fixed versions are available starting from 8.9.0.0, 8.6.1.30, 8.3.1.50, and 7.13.1.90 depending on the release branch.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 and several LTS releases contain an improper access control vulnerability (CWE-284) that could allow an unauthenticated remote attacker to cause a denial of service. The vulnerability affects multiple feature and LTS release versions. A fix is available in versions 8.9.0.0 or later and specific later LTS releases.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 and certain LTS releases contain a stack-based buffer overflow vulnerability (CWE-121). This flaw can be exploited by a high privileged attacker with remote access to cause a denial of service condition. The vulnerability does not impact confidentiality or integrity but affects availability. Fixed versions are available starting from 8.9.0.0, 8.6.1.30, 8.3.1.50, and 7.13.1.90 depending on the release line.
Dell PowerProtect Data Domain versions 7.7.1.0 through LTS 2026, LTS2024 versions 7.13.1.0 through 7.13.1.80, LTS2025 versions 8.3.1.0 through 8.3.1.40, and LTS2026 versions 8.6.1.0 through 8.6.1.20 contain a stack-based buffer overflow vulnerability. This flaw could be exploited by a highly privileged remote attacker to cause a denial of service condition. The vulnerability does not impact confidentiality or integrity but affects availability. Fixed versions are available starting from 7.13.1.90, 8.3.1.50, 8.6.1.30, and 8.9.0.0 or later.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 and specific LTS releases contain a Server-Side Request Forgery (SSRF) vulnerability. This flaw allows an unauthenticated remote attacker to potentially perform SSRF attacks. The vulnerability is rated medium severity with a CVSS score of 5.8. Fixed versions are available starting from 7.13.1.90, 8.3.1.50, 8.6.1.30, and 8.9.0.0 depending on the release line.
CVE-2026-117341 is a vulnerability in Octopus Deploy's Octopus Server where creating a user invitation causes the invitation code to be written to the audit event log. If the invitation is linked to a space, users with appropriate permissions in that space can read the invitation code from the audit log. Exploiting this vulnerability by redeeming the unclaimed invitation could allow privilege escalation depending on the permissions assigned to the invited user. The issue affects versions from 2019.0.0 up to but not including 2026.2.13438, and from 2026.3.0 up to but not including 2026.3.15829. Fixed versions are 2026.2.13438 and 2026.3.15829. The CVSS 4.0 score is 7.7, indicating high severity.
CVE-2026-116870 is a vulnerability in Octopus Deploy's Octopus Server where OIDC token issuer validation was inconsistently performed. This flaw could allow a token from a non-legitimate issuer to be accepted as if it belonged to a legitimate trusted service account. Exploitation requires a service account with at least one OIDC identity configured and some knowledge or guess of that identity's details. The issue affects multiple versions of Octopus Server prior to fixed releases in 2026.1.11781, 2026.2.13438, and 2026.3.15816. The vulnerability has a high severity CVSS score of 8.7. No known exploits in the wild have been reported.
SemanticMediaWiki versions from 3.1.0 up to but not including 7.3.1 contain a reflected cross-site scripting (XSS) vulnerability. This flaw allows unauthenticated attackers to inject malicious markup via the search parameter in the extended Special:Search profile. The vulnerability arises because the ProfileForm::profile_sheet function inserts unescaped user input into a pre element, enabling script execution in the context of the wiki origin. The issue is fixed in version 7.3.1.
Semantic MediaWiki versions from 3.0.0 up to but not including 7.3.0 have a missing authorization vulnerability in the api.php smwtask module. This flaw allows unauthenticated attackers to perform admin-only maintenance tasks by leveraging the public anonymous CSRF token. Exploitation can lead to reading internal store statistics, enqueuing jobs such as smw.entityIdDisposer, and executing queued jobs, which may degrade performance and alter semantic data. The vulnerability is fixed in version 7.3.0.
SemanticMediaWiki versions from 2.5.0 up to but not including 7.3.1 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows users with page-edit rights to inject malicious script via Code-typed property values. The vulnerability arises because the CodeStringValueFormatter renders annotated JSON values containing HTML markup unescaped on the Special:Browse page, enabling JavaScript execution in the browsers of users viewing the page. The issue is fixed in version 7.3.1.
SemanticMediaWiki versions from 3.2.0 up to but not including 7.3.1 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows users with the smw-schemaedit permission to inject malicious script code via the canonical_name property of a property group schema. The injected script is rendered unescaped in Special:Browse headings by GroupFormatter, leading to JavaScript execution in the browsers of users viewing those pages, including administrators.
Semantic MediaWiki versions from 3.0.0 up to but not including 7.3.1 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows users with page-edit rights to inject malicious HTML via Keyword-typed property values that are rendered without proper escaping on the Special:Browse page. Exploitation can lead to execution of arbitrary JavaScript in the context of other users' sessions, including administrators, potentially allowing token theft and unauthorized actions. The vulnerability is fixed in version 7.3.1.
Semantic MediaWiki versions from 2.5.0 up to but not including 7.3.1 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows users with page-edit rights to inject malicious scripts via External identifier property values. The vulnerability arises because the ExternalIdentifierValue renders markup payloads unescaped on the Special:Browse page, enabling script execution in the browsers of users viewing the page, including administrators. The issue is fixed in version 7.3.1.
Semantic MediaWiki versions from 3.1.0 up to but not including 7.3.1 contain a reflected cross-site scripting (XSS) vulnerability in the Special:SMWAdmin ID lookup feature. This flaw allows unauthenticated attackers to inject malicious markup via the unescaped id parameter. By tricking an smw-admin administrator into clicking a crafted link, attackers can bypass the auto-satisfied edit-token check and execute scripts within the administrator's session, potentially performing privileged actions.
SemanticMediaWiki versions from 5.0.0 up to but not including 7.3.1 contain a stored cross-site scripting (XSS) vulnerability in the ext.smw.tooltip.tippy.js component. This flaw arises because data-* attributes are rendered via innerHTML with allowHTML enabled, allowing editors to insert malicious JavaScript in specific span elements. When users, including administrators, hover over these elements, the malicious script executes. The vulnerability is fixed in version 7.3.1.