CVE-2026-106512 is a high-severity vulnerability in the MISP sachertortephp component where the CakeResponse::download() method improperly sanitizes filenames used in the Content-Disposition HTTP header. This flaw allows an authenticated user to craft filenames that inject HTTP header content, leading to stored cross-site scripting (XSS) when other users view affected pages. The vulnerability arises from two injection vectors: control characters causing header omission and double-quote characters enabling header parameter injection. Exploitation can result in session hijacking, data exfiltration, and unauthorized actions within the application context.
CVE-2026-34498 is an improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows that allows OS command injection. It affects versions prior to 6.0.0.66394. The vulnerability has a medium severity with a CVSS 4.0 score of 5.1. No patch or official fix information is provided in the available data.
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior.
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. A per-request backend mismatch can re-raise a grammar compilation exception, padding produced by the ngram_gpu speculative-decoding mode can pass a negative token to guidance validation, and the Rust frontend can admit empty structured-output values that the Python frontend rejects, allowing ordinary constrained-generation requests to terminate the shared engine. This issue is fixed in version 0.30.0.
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, OpenAI-compatible request models accept a non-empty cache_salt value without enforcing the character and length restrictions required by the IPCCacheServerKey consumer in LMCache-MP. On deployments using the LMCache-MP connector, a salt that contains a forbidden character or exceeds the permitted length can raise an uncaught ValueError during scheduler cache lookup, causing EngineCore to terminate and denying service to all concurrent users. This issue is fixed in version 0.30.0.
vLLM versions prior to 0.30.0 contain an improper input validation vulnerability in the /inference/v1/generate endpoint. This flaw allows crafted inputs in several fields to cause termination of the shared EngineCore, poison or retrieve cross-request encoder-cache state, and alter replayed transport semantics. The issue is resolved in version 0.30.0.
DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required to exploit this vulnerability.
The specific flaw exists within the Configuration → Services → Music on Hold functionality of the web portal listening on TCP port 443. The application is intended to allow users to upload WAV audio files but fails to properly validate the uploaded file type. An attacker can exploit this behavior to upload a malicious shared object (.so) instead of a WAV file. When the uploaded file is subsequently processed by the affected component, attacker-controlled code is loaded and executed in the context of the affected process. This can result in remote code execution and potentially full compromise of the underlying Linux system.
CVE-2026-63569 is a critical improper input validation vulnerability in the DHAgreement.CalculateAgreement method of Legion of the Bouncy Castle Inc.'s bc-csharp library before version 2.7.0. It allows an attacker who can intercept or act as a peer in the Diffie-Hellman key agreement to force the local party to compute a known agreed value, bypassing key authentication. Additionally, the attacker can learn partial information about the local static private key and potentially recover it entirely in certain group conditions. This flaw arises from missing range and subgroup-membership checks on ephemeral values used in the key agreement. Only applications directly invoking DHAgreement are affected. The issue is fixed in version 2.7.0.
CVE-2026-47547 is an improper input validation vulnerability in the NVIDIA GeForce GPU Display Driver firmware for Windows and Linux. Exploitation could allow attackers with high privileges to execute code, cause denial of service, escalate privileges, disclose information, or tamper with data. The vulnerability has a CVSS score of 6.7, indicating medium severity. No specific affected versions or patch information is provided.
CVE-2026-47546 is a vulnerability in the NVIDIA GeForce GPU Display Driver firmware for Windows and Linux. It involves improper input validation, which could be exploited by an attacker with high privileges. Successful exploitation may result in code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS score of 6.7, indicating a medium severity level. No specific affected versions or patches are provided in the available data.
CVE-2026-47543 is a vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux involving improper input validation in the kernel mode layer. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS score of 6.7, indicating medium severity. No specific affected versions or patch information is provided.
CVE-2026-47542 is a vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux involving improper input validation in the kernel mode layer. Exploitation could allow attackers with high privileges to execute code, cause denial of service, escalate privileges, disclose information, or tamper with data. The CVSS score is 6.7, indicating medium severity. No specific affected versions or patch information are provided.
CVE-2026-47522 is a vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves improper input validation in the kernel mode layer. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS score of 6.7, indicating medium severity. No specific affected versions or patch information are provided.
Apache WSS4J versions prior to 4.0.2, 3.0.6, and 2.4.4 improperly validate attacker-controlled derived-key lengths and offsets. This flaw allows the use of cryptographically weak keys or causes excessive CPU and memory consumption when processing crafted WS-Security messages. The issue is fixed by enforcing minimum and maximum key lengths and offset limits. Users should upgrade to fixed versions to mitigate the risk.
CVE-2026-93995 is an improper input validation vulnerability in Apache MINA SSHD's sshd-git component, affecting versions up to 2.19.0 and 3.0.0-M1 through 3.0.0-M5. The flaw allows authenticated SSH clients to remotely execute git commands with insufficient restrictions on the 'git archive' command's '-o' option, potentially leading to unauthorized file writes on the server. This issue was a follow-up to CVE-2026-58624, where the previous fix did not fully address the single-argument '-o=file.zip' usage. The vulnerability is fixed in versions 2.20.0 and 3.0.0-M6.
CVE-2026-102823 is an improper input validation vulnerability in the Eugeny russh Rust SSH client and server library. Versions prior to 0.63.1 do not verify that channel lifecycle events received from an SSH server correspond to channels the client actually opened and established. This allows a malicious SSH server to send events for predicted or invalid channel identifiers, potentially causing application panics or corrupting command completion and exit-code tracking. The issue is fixed in version 0.63.1.
Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-engine uses inherited object properties when looking up attacker-controlled session IDs in clustered deployments. Special property names such as __proto__ or constructor can resolve through the object prototype chain instead of identifying an actual connected client, causing the Node.js process to crash and resulting in denial of service. Applications that do not use @socket.io/cluster-engine are not affected. This issue is fixed in version 0.1.1.