CVE-2026-17150 affects IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. The vulnerability arises from insufficient input validation of uploaded custom module content, allowing a remote authenticated attacker to execute arbitrary code and access sensitive information across tenants.
CVE-2026-69128 is a path traversal vulnerability in Chartbrew versions 5.2.2 through before 5.2.3. It arises from the AI SQL blocklist failing to block certain PostgreSQL filesystem functions, especially when used with double-quoted identifiers. This allows users with Owner or Admin privileges and AI features enabled to bypass the blocklist and execute server-side file functions via PostgreSQL. The vulnerability is fixed in version 5.2.3.
CVE-2026-113663 is an OS command injection vulnerability in the open-source AgentOS project ag2. Versions from 0.13.2 up to but not including 1.1.1 are affected. The vulnerability arises because the ShellAdapter filtering mechanism fails to block newline and carriage-return characters, allowing an attacker to inject additional shell commands. This can lead to arbitrary command execution with the privileges of the agent process, impacting confidentiality, integrity, and availability. The issue is fixed in ag2 version 1.1.1.
The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attributes, allowing values that point to hosts or schemes not permitted by allowMediaSchemes() or allowMediaHosts() to bypass it, so that browsers load images from disallowed hosts in Symfony versions 6.1.x prior to 6.4.50, 7.x prior to 7.4.23, and 8.x prior to 8.1.11.The srcset attribute on img and source elements and the imagesrcset attribute on link elements are allowed by the sanitizer, but their URL candidates are never validated, so their values are kept verbatim while the same URL in src is dropped. The fixes for CVE-2026-45753 and CVE-2026-48761 extended the same attribute list but did not cover these two attributes. For example, with allowMediaSchemes(['https']) and allowMediaHosts(['trusted.example']), <img srcset="https://evil.example/a.png 1x"> survives sanitization, and the browser fetches the selected candidate as it would fetch src. Candidates with a scheme forbidden by the configuration, such as http, are kept as well.
Any application that sanitizes untrusted HTML and relies on the media schemes and hosts allowlists to restrict where images can be loaded from is affected. A single crafted value is enough to make the browser of a user viewing the sanitized content send a request to an attacker-controlled host, which can be used to track viewers or log their IP addresses. No authentication is needed if the application accepts HTML from unauthenticated users.
CVE-2026-118517 is a vulnerability in the Symfony HtmlSanitizer component's UrlSanitizer that causes it to parse URLs differently from browsers. This discrepancy allows bypassing host allow-list checks for URLs without a well-formed authority, leading to untrusted hosts being referenced in sanitized output. The issue affects Symfony versions 6.1.x prior to 6.4.50, 7.x prior to 7.4.23, and 8.x prior to 8.1.11. The default configuration is not affected.
CVE-2026-123125 is a vulnerability in the Symfony Validator component's IpValidator that causes incomplete classification of internal IP addresses in certain filtered modes of the Ip constraint. This flaw allows some internal addresses to be incorrectly accepted as public, potentially enabling Server-Side Request Forgery (SSRF) attacks. The issue affects Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to 7.4.23, and 8.x prior to 8.1.11. The vulnerability arises because the PHP filter flags used do not cover shared address space or certain IPv6 address types that embed internal IPv4 addresses. Applications relying on this validation to block internal addresses before making server-side requests may be exposed to SSRF.
CVE-2026-96196 is a high-severity vulnerability in Microsoft Edge (Chromium-based) caused by an incomplete list of disallowed inputs. This flaw allows an unauthorized attacker to bypass a security feature over a network. The issue affects versions from 1.0.0.0 up to but not including 156.0.4314.50. Microsoft has released an official fix in version 156.0.4314.50 to address this vulnerability.
CVE-2026-117530 is a vulnerability in JetBrains Junie CLI versions before 26.8.17 where incomplete validation of allowlisted commands allowed command execution. This flaw was fixed in version 26.8.17. The vulnerability has a CVSS score of 6.7, indicating a medium severity impact with high confidentiality, integrity, and availability consequences but requiring local attack vector with high attack complexity and low privileges.
CVE-2026-85787 is a vulnerability in the SQL validation component of Amazon awslabs postgres-mcp-server versions prior to 1.1.7. It allows an unauthenticated actor to modify data beyond the intended read-only scope by injecting crafted SQL through content submitted by an authenticated user. The issue is fixed in version 1.1.7. Mitigation includes upgrading to version 1.1.7 or later and running the MCP server with a minimal-privilege Postgres role to enforce database-level access controls.
An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a crafted script.
AWS fixed this issue service-side. No customer action is required.
Authlib versions from 1.3.1 up to but not including 1.9.0 contain a vulnerability in the OctKey.import_key() function where asymmetric-key markers are only checked at the first byte. Due to acceptance of leading whitespace, comments, or byte-order marks in PEM loaders, an attacker can exploit this to use public-key bytes as an HMAC secret, allowing forgery of HS256 tokens with arbitrary claims. This bypasses the previous remediation for CVE-2024-37568. The issue is fixed in version 1.9.0.
CVE-2026-114729 is a vulnerability in Roundcube Webmail versions before 1.6.20 and 1.7.5 that allows bypassing the remote content blocker via the SVG SMIL 'by' attribute. This flaw causes remote content to be loaded without user consent, potentially disclosing the client IP address and confirming message opening.
CVE-2026-114728 is a vulnerability in Roundcube Webmail before versions 1.6.20 and 1.7.5 that allows remote content blocking to be bypassed due to incomplete handling of CSS escape sequences in FuncIRI attributes. This flaw enables loading remote content from HTML messages without user consent. The issue was fixed by normalizing CSS escapes and inspecting additional attributes to block remote content properly.
Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options in production through OmnipayFactory::get_supported_providers(), but CreateSessionRequest validates only that the submitted provider is an OmnipayProviderType and does not enforce OmnipayProviderType::isAllowed(). A buyer, including a guest when webshop_allow_guest_checkout is enabled, can submit Dummy directly and complete the test gateway flow without a real payment. When webshop_auto_fulfill_enabled is enabled, OrderCompletedListener::fullfillOrder() can then release the purchasable item. The issue requires access to the Supporter or Pro webshop and an enabled purchasable item. Testing bypassed the closed-source license middleware, so whether the real license layer performs additional payment-provider validation remains unverified. The payment finalize status check itself is not the root cause. This issue is fixed in version 7.7.0.
CVE-2026-102087 is a vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It involves an incomplete blacklist of disallowed inputs that allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS) by crashing the rpd process. The crash occurs when a specific, valid, optional, non-transitive BGP update is received during BGP traffic engineering, causing the rpd to restart and temporarily disrupt traffic until routing reconverges. This vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to certain fixed releases.
CVE-2026-108471 is a high-severity vulnerability in Microsoft Windows 10 Version 1809 involving an untrusted pointer dereference in the Virtualization-Based Security (VBS) Enclave. This flaw allows an authorized local attacker to elevate privileges. The vulnerability is fixed in Windows 10 Version 1809 build 17763.9376.
CVE-2026-84316 is an improper input validation vulnerability in 0xJacky's nginx-ui that allows authenticated users to bypass directive validation by placing blocked directives after a semicolon on the same line. This bypass affects all guarded write paths that call the validator, enabling injection of dangerous nginx directives such as js_import, load_module, and user root. On deployments with njs or perl modules enabled, this leads to code execution in the nginx worker process, potentially as root. The vulnerability requires authentication via node secret or user JWT and has been demonstrated on version 2.3.11 of the official Docker image. The issue stems from the validator splitting config content by newlines and only inspecting the first token per line, while nginx parses multiple directives separated by semicolons on the same line.
GNU Emacs versions before 31.2, including TRAMP through 2.8.2, contain a vulnerability that allows OS command injection via crafted filenames. This occurs because the tramp-user-regexp filter has an incomplete list of disallowed inputs, resulting from an incomplete fix for a previous vulnerability (CVE-2026-79992). The vulnerability has a high severity rating with a CVSS score of 7.8.
CVE-2026-107322 is a high-severity vulnerability in the Amazon Agent Plugins for the AWS databases-on-aws plugin before version 1.7.1. It involves an incomplete list of disallowed inputs that may allow a remote unauthenticated attacker to execute arbitrary operating system commands on the host running the helper by crafting a malicious database command value. The issue is fixed in version 1.7.1 and later.