The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file formats. In versions 1.7.9 through 3.3.1, the app's public file endpoint performed no share authorization. Anyone who knows a share token could read the shared file's contents even when the link share was protected by a password. `PublicFileController` extended `OCP\AppFramework\Controller` and marked its routes `#[PublicPage]`. Nextcloud only enforces share passwords through `PublicShareMiddleware`, which returns early for any controller that is not an `OCP\AppFramework\PublicShareController` instance — so no password, expiry, or share-type check ran for these routes. `ShareFileService::loadLinkShare()` compounded this by treating any token that `getShareByToken()` matched as authorised. A share token is the part of the URL that people paste into chats, emails, and tickets. Password protection exists precisely for the case where holding the token should not by itself grant access, and that guarantee did not hold. Requests to `GET /ocs/v2.php/apps/threedviewer/public/file/{token}/{fileId}` returned `200` with the full file body for password-protected shares, with no password and no session. Nextcloud's own share page correctly redirected such requests to the password prompt. Scope is limited to files in the formats this app handles (STL, GLB/glTF, OBJ, STEP, IFC, and the other supported 3D types). Non-3D files in the same share are unaffected. Expired shares returned `500` rather than leaking contents. This issue is fixed in 3.3.2. `PublicFileController` now extends `PublicShareController` and implements `isValidToken()`, `isPasswordProtected()`, and `getPasswordHash()`, delegating password and token validation to the framework and gaining brute-force throttling. `ShareFileService::findValidLinkShare()` additionally rejects share types other than link and email, rejects expired shares, and treats a `ShareNotFound` from the share manager as "no share" instead of letting it surface as a 500. As a workaround, disable the 3D Viewer app (`occ app:disable threedviewer`), or avoid relying on passwords to protect link shares that contain 3D model files, until you can upgrade.
An integer overflow in the remote-control
screen processing component of TeamViewer clients (Full Client, Portable and Remote
Control App) prior to version 15.83 may allow a malicious remote host to cause
a denial of service or, depending on the platform, potentially execute
arbitrary code with the privileges of the viewer process. Exploitation requires
a user to establish a remote-control session to an attacker-controlled or
compromised host.
A race condition in the installation
process of TeamViewer Remote Management - Patch Management for Windows prior to
version 26.9.1 allows a local authenticated attacker with low privileges to
execute arbitrary code with elevated privileges by replacing the service
executable in an insufficiently protected temporary directory during Patch
Management activation.
Improper access control in the installer
staging directory used by TeamViewer Full Client and Host prior to version
15.82 for Windows during installation of Advanced Asset Management allows a
local authenticated user with low privileges to execute arbitrary commands as
SYSTEM. An attacker can place a crafted installer options file that is
processed by the Advanced Asset Management installer during service activation.
A DLL loading vulnerability in the
TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1
allows a local authenticated attacker with low privileges to execute arbitrary
code with elevated privileges. Exploitation requires user interaction.
Improper access control in the Patch
Management update mechanism of TeamViewer Full Client and Host for Windows
prior to version 15.82 allows a local authenticated attacker with low
privileges to supply a signed executable through a forged IPC response and
cause it to load a malicious DLL from a user-writable temporary directory.
Successful exploitation results in arbitrary code execution with NT
AUTHORITY\SYSTEM privileges.
Improper authentication in the
inter-process communication (IPC) mechanism of TeamViewer Remote Management
Monitoring for Windows prior to version 26.10.1 allows a local authenticated
attacker with low privileges to impersonate the IPC broker and cause the
Monitoring service to execute arbitrary code with NT AUTHORITY\SYSTEM
privileges, resulting in local privilege escalation.
An improper access control vulnerability in
the IPC communication between TeamViewer Full Client or Host prior to version
15.83 and the Remote Management Monitoring component prior to version 26.10.1
allows a local authenticated attacker with low privileges to execute scripts as
SYSTEM/root.
A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root.
An out-of-bounds write vulnerability in the
screen-image decoder of TeamViewer Full Client for Linux and macOS prior to
version 15.83 allows a remote attacker to execute arbitrary code by supplying
crafted screen-image data during a remote-control session. The vulnerability
can also be exploited by persuading a user to open a specially crafted
TeamViewer session recording (.tvs). Missing destination bounds checking in the
decoder allows crafted screen-image data to cause an out-of-bounds write to the
image buffer. Exploitation requires user interaction.
CVE-2026-117507 is a race condition vulnerability in the a2aproject a2a-java software up to version 1.2.0.Final. It affects the TaskManager.saveTaskEvent function and can be exploited remotely. The issue is resolved by upgrading to version 1.3.0.Final.
Pylint versions prior to 4.0.9 use pickle serialization for caching stats in the PYLINT_HOME directory. This allows an attacker with write access to the cache directory to craft malicious pickle files that execute arbitrary code when pylint loads the cache. The vulnerability is fixed in pylint 4.0.9, which stores the cache as JSON instead of pickle. Until upgrading, users should ensure PYLINT_HOME is not set to a shared or group-writable directory.
Satori versions from 0.0.27 up to but not including 0.33.5 improperly escape certain values in generated SVG output, allowing crafted input to be interpreted as SVG markup. This vulnerability can lead to unintended SVG rendering depending on how the SVG is consumed. A fix is available in version 0.33.5. No complete workaround exists other than upgrading; applications that cannot upgrade immediately should avoid rendering attacker-controlled content with Satori.
vLLM versions prior to 0.32.0 contain a resource exhaustion vulnerability in the P2P secondary tier management. An API client can submit many unique peer addresses that never establish connections, causing vLLM to retain sessions and ZeroMQ sockets indefinitely. This leads to exhaustion of the ZeroMQ context socket quota, raising a ZMQError that terminates the EngineCore and shuts down the API server. The vulnerability allows denial of service without requiring privileged access or internal listener connectivity. A fix is available in vLLM 0.32.0.
Rembg versions prior to 2.0.82 have an unauthenticated vulnerability in the /api/remove endpoint that allows attackers to inject malicious SAM models via the extras.sam_model parameter. This enables path traversal and placement of crafted ONNX models that read arbitrary local files and encode their contents into returned PNG images. The flaw allows disclosure of any file accessible by the rembg process, including sensitive files like /etc/passwd. The issue is fixed in version 2.0.82.
Twisted's DNS client UDP transport (twisted.names.dns.DNSDatagramProtocol) accepts DNS responses based solely on matching the 16-bit transaction ID without validating the source address. This allows an attacker able to send UDP packets to the resolver's port to inject forged DNS responses, enabling off-path DNS response spoofing or cache poisoning. The standard client mitigates this risk by using per-query random source ports, increasing entropy, but the missing source address validation remains a security gap. This affects all versions prior to 26.10.0rc1, where the issue is fixed.
CVE-2026-117506 is a medium severity vulnerability in a2aproject a2a-java up to version 1.2.0.Final. It affects the Push Notification Config Store component, specifically the InMemoryPushNotificationConfigStore.setInfo function. The vulnerability allows remote attackers to cause resource consumption through crafted manipulation. Upgrading to version 1.3.0.Final resolves the issue.
CVE-2026-103288 is an authorization bypass vulnerability in the Ghost blogging platform's comment like feature. It allows authenticated members to delete comment likes or dislikes they are not authorized to remove. This issue affects Ghost versions from 5.9.0 up to but not including 6.44.1. The vulnerability is fixed in version 6.44.1.
The MCP file tool in SiYuan note-taking software has an incomplete blocklist for sensitive paths compared to the HTTP file API it claims to align with. This discrepancy allows an authenticated Administrator-level MCP client to read sensitive files such as data/.siyuan/publishAccess.json, exposing plaintext passwords that protect publish-mode shared notebooks and documents. Other sensitive paths blocked by the HTTP API remain accessible via the MCP tool. This issue persists despite prior remediation for a related vulnerability and represents a scope restriction failure in the MCP tool's path resolution logic.
fpdf2 versions from 2.5.0 up to but not including 2.8.8 contain a vulnerability where nested SVG <use> references cause exponential growth in memory and CPU usage during PDF image processing. This can lead to resource exhaustion and process failure with a MemoryError. The issue arises from deep-copying referenced SVG graphics trees, allowing a crafted small SVG to consume excessive resources without external dependencies or special configurations.