CVE-2026-55537 is a high-severity TOCTOU race condition vulnerability in MervinPraison PraisonAI prior to version 4.6.58. The issue arises because JobSubmitRequest.validate_webhook_url() improperly accepts webhook URLs when DNS resolution raises a socket.gaierror exception, which it silently passes. Later, JobExecutor._send_webhook() performs a fresh DNS lookup, allowing an attacker to redirect requests to internal services by changing DNS responses between the two checks. This vulnerability is fixed in PraisonAI version 4.6.58.
CVE-2026-9728 is a race condition vulnerability in the Zephyr project's userspace syscall verifier for the mbox_send() system call. The flaw allows a time-of-check/time-of-use (TOCTOU) race where a malicious userspace thread can replace a pointer after validation but before use, causing the kernel to read from an attacker-controlled supervisor address. This can lead to disclosure of kernel memory or denial of service due to a faulting kernel read. The vulnerability affects Zephyr version 3.0.0 and requires userspace support (CONFIG_USERSPACE).
CVE-2026-16935 is a high-severity vulnerability in IBM AIX versions 7.2 and 7.3, and IBM PowerVM VIOS 4.1. It involves a time-of-check to time-of-use (TOCTOU) race condition that could allow a local attacker to gain elevated privileges. The vulnerability does not have confirmed exploits in the wild as of the publication date. The CVSS 3.1 base score is 7.8, indicating significant impact on confidentiality, integrity, and availability if exploited.
CVE-2026-64846 is a vulnerability in the Nix package manager prior to version 2.35.0. It involves a time-of-check/time-of-use (TOCTOU) race condition related to symbolic link handling during the LocalStore restore path when using the recursive-nix experimental feature. This race condition can allow the Nix process or nix-daemon to create or truncate an empty file outside the build sandbox with the daemon user's permissions. The vulnerability does not allow arbitrary content writes and requires winning the race. The issue is fixed in version 2.35.0.
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use (TOCTOU) race condition.
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use (TOCTOU) race condition.
CVE-2026-16838 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a time-of-check to time-of-use (TOCTOU) race condition that could allow a local attacker to overwrite critical files and access sensitive information.
Time-of-check Time-of-use (TOCTOU) Race Condition in ZenHive mpp allows an unauthenticated remote client to redeem one confirmed on-chain payment for multiple paid-resource accesses.
The type="hash" credential path in MPP.Methods.Tempo.verify/2 guards against replay with a non-atomic check-then-mark sequence: check_hash_unused/2 reads the dedup store, an eth_getTransactionReceipt round trip verifies the payment on chain, and only then does mark_hash_used/2 write the mark. Concurrent requests carrying the same settled payment hash all pass the read before any of them writes, so each is issued a receipt. The store's atomic check_and_mark/2 primitive is available and used by the type="transaction" path, but the hash path calls plain get and put even when the configured store implements it. Exploitation requires a dedup store to be configured; the default nil store is stateless and documented as offering no replay protection at all.
This issue affects mpp: from 0.2.0 before 0.6.1.
Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media (SPI NOR or NAND, EMMC or SD).
The code reads the header of the next-stage loader twice. The header contains hashes of the executable modules and is signed with a private key, the public part of which is verified against the SHA256 digest blown in the OTP.
The first read is only partial and contains only the hashes of the executable modules. The second is complete, including the header signature.
Although the header is verified based on the fully read data, the authenticity of the executable modules is checked against the partial data from the first read.
An attacker with physical access to a device containing RK3588s SoC can easily modify the next-stage loader data on-the-fly using a low-cost SD-card or SPI NOR/NAND or EMMC emulator. Even a simple ultra low-cost circuit comprising two memory chips (containing the same data but different headers - the original and the modified one) and a multiplexer can be used to carry out an attack.
This can lead to arbitrary code execution with the highest privileges available (EL3). This issue affects RK3588s: RK3588s SoC BootROM (secure) 350B20210512V100 and possibly others.
As remediation apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable https://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html
CVE-2026-16819 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves a time-of-check to time-of-use (TOCTOU) race condition that could allow a local attacker to cause denial of service and compromise data integrity.
Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
Dell Command Update (DCU) versions prior to 5.7.1 contain a Time-of-check Time-of-use (TOCTOU) race condition vulnerability. This flaw allows a low privileged local attacker to potentially elevate their privileges. The vulnerability is identified as CWE-367 and has a high severity rating with a CVSS score of 7.3. It requires local access and user interaction to exploit. No official patch information is provided in the input data.
CVE-2026-49415 is a race condition vulnerability in FreeBSD affecting certain RELEASE versions. It occurs during the execve(2) call of a SUID binary, where the new virtual address space is installed before the process credentials are updated. This timing window allows a local unprivileged user running as the same user to access and modify the target process's memory via procfs or linprocfs before credential elevation, potentially leading to full system control.
A time-of-check to time-of-use (TOCTOU) race condition vulnerability exists in Netflix's Lemur TLS certificate management tool prior to version 1.9.3. The vulnerability involves the _validate_revocation_url function, which fails to properly validate HTTP redirect targets during CRL and OCSP URL checks, allowing attacker-controlled URLs to redirect to internal or sensitive network addresses. This can lead to blind internal requests triggered by certificate uploads. The issue is fixed in Lemur version 1.9.3 by disabling redirects and pinning validated addresses.
n8n is an open source workflow automation platform. Prior to 1.123.64, 2.29.8, and 2.30.1, the Git node clone operation allows an authenticated workflow user to swap a validated directory for a symlink before cloning, planting a crafted repository in the community node directory that loads as a custom JavaScript node after restart and executes arbitrary code on the server. This issue is fixed in versions 1.123.64, 2.29.8, and 2.30.1.
ContextForge is an AI gateway, registry, and proxy that provides centralized discovery, guardrails, and management for MCP, A2A, and REST or gRPC APIs. Prior to 1.0.3, the /admin/gateways/test call site in mcpgateway/admin.py calls validate_gateway_test_url() in mcpgateway/common/validators.py to resolve and reject private, loopback, link-local, and cloud-metadata addresses, but ResilientHttpClient later resolves the original hostname again without binding the validated address. When MCPGATEWAY_ADMIN_API_ENABLED is enabled, an attacker with a database-backed role containing explicit gateways.read permission can use DNS rebinding to return a public address during validation and a private or metadata address during connection, bypassing ssrf_blocked_networks and ssrf_dns_fail_closed because those controls apply only to the validation-time result. The endpoint's allow_admin_bypass=False setting means a bootstrap-only virtual platform-admin identity without a database role is not sufficient. Successful exploitation can reach internal services and cloud metadata, expose cloud credentials, access internal APIs, or probe internal network ports. This issue is fixed in version 1.0.3.
CVE-2026-16967 is a high-severity vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6. It involves a time-of-check to time-of-use (TOCTOU) race condition related to symbolic links, which could allow a remote authenticated attacker to gain unauthorized access to system objects. The vulnerability has a CVSS score of 8.5, indicating significant impact on confidentiality, integrity, and availability. No official patch or remediation guidance has been provided yet.
CVE-2026-16896 is a high-severity vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6. It involves a time-of-check to time-of-use (TOCTOU) race condition that could allow a local authenticated attacker to gain unauthorized access to files. The vulnerability does not have a confirmed patch or remediation level as of the published date. No known exploits are reported in the wild.
A symlink race condition vulnerability exists in rsync versions up to 3.4.4, allowing attackers who can manipulate symlinks in the sender's scanned directory tree to cause file enumeration and transfer outside the intended module root. This affects both daemon-mode and non-daemon sender-side scanning.
CVE-2026-53800 is a symlink race condition vulnerability in rsync versions up to 3.4.4 affecting the --remove-source-files feature. It allows an attacker who can create symbolic links to cause arbitrary file deletion by replacing a source file with a symlink between the file transfer and the removal step. This can result in unintended deletion of files pointed to by the symlink target instead of the intended source files.