CVE-2026-96437 is a high-severity vulnerability in Kong Gateway Enterprise's ai-azure-content-safety plugin. The flaw causes the plugin to skip inspection of request bodies that exceed the in-memory buffer size, allowing potentially unsafe prompts to bypass content-safety checks. This issue affects multiple versions of Kong Gateway Enterprise prior to their respective fixed releases.
vault-java-driver, a Java client for HashiCorp Vault, silently disables TLS certificate and hostname verification in three states where the caller asked for verification: an SslConfig passed to VaultConfig without calling build(), an SslConfig restored by Java deserialization, and VAULT_SSL_VERIFY set to a truthy value other than "true", such as 1, yes or on. In each case SslConfig.isVerify() returns false and the driver installs a trust-all SSLContext. An attacker on the network path to the Vault server can then read the Vault token and secrets in transit and forge responses. This issue affects io.github.jopenlibs:vault-java-driver 5.2.0 through 6.2.3. It is fixed in 7.0.0.
Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.18.6, a process inside a sandbox could send MSGID_FILE_SET_ATTRIBUTES or MSGID_FILE_SET_SHORT_NAME to SbieSvc and cause the SYSTEM service to open and modify an existing file outside the sandbox. The direct primitive changes file attributes, timestamps, writeability, or 8.3 short names; a short-name redirection can additionally contribute to SYSTEM code execution when a privileged process resolves an attacker-controlled short-name path in a location SbieSvc can open. This vulnerability is fixed in 1.18.6.
node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.42.0 until 2.180.0, namespace-level access control configured through setDefaultRolePermissions is not honored by the runtime enforcement path for nodes without explicit per-node RolePermissions. SessionContext.getApplicableRolePermissions reads a missing or null DefaultRolePermissions metadata value instead of the configured namespace field, and the null result is treated permissively. An anonymous network client can consequently write variables with CurrentWrite access or call bound methods when an operator configured a restrictive namespace default and relied on inheritance. Servers with no declared policy, nodes with explicit per-node permissions, and correctly bound programmatic namespace metadata are outside the authorization-bypass case. This issue is fixed in version 2.180.0.
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.
CVE-2026-110985 is a critical vulnerability in Apache Kafka brokers using SASL/OAUTHBEARER authentication with the default JWT validator configuration. If the sasl.oauthbearer.jwks.endpoint.url is not set and no custom verification key resolver is configured, the broker falls back to a validator that does not verify JWT signatures, algorithms, or issuers. This allows unauthenticated remote attackers to forge tokens with any principal, including superusers, gaining full cluster access. The issue affects specific Kafka versions prior to fixed releases. From Kafka 4.2.2, 4.3.1, and 4.4.0 onward, brokers fail to start if misconfigured, preventing insecure operation.
CVE-2026-108142 is a critical vulnerability in Veeam Backup and Replication affecting versions 13.0 up to but not including 13.0.3 and 13.1 up to but not including 13.1.2. It allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service due to a failing open authorization mechanism (CWE-636). This flaw has a high CVSS 4.0 score of 9.1, indicating severe impact if exploited. The issue has been fixed in versions 13.0.3 and 13.1.2.
Apache Pulsar versions from 1.22.0-incubating before 4.0.14 and from 4.1.0 before 4.2.5 have a vulnerability where the encryption_required namespace policy can be bypassed if topic initialization fails. In such cases, the broker disables the encryption requirement for the topic and loads it successfully, allowing authenticated producers to publish unencrypted messages despite the namespace policy. This issue is fixed in versions 4.0.14 and 4.2.5.
CVE-2026-114479 is a vulnerability in Progressive Robot Ltd's hMailServer versions 6.0.0 through 6.3.6. The issue arises when the virus scanning feature is enabled with the action set to remove attachments and deliver the text part of the message. If a message consists of a single non-text part (such as a program, archive, or signed S/MIME message), the server fails to remove the infected content and delivers it unchanged to the recipient's mailbox. This occurs because the server does not securely handle messages without a text part, resulting in infected content bypassing the intended attachment-stripping action.
CVE-2026-74048 is a failing open vulnerability in Apache Tomcat related to the OpenSSLLifecycleListener configured for FIPS mode. If FIPS activation fails, Tomcat logs an error but continues operating in non-FIPS mode using JSSE, potentially weakening cryptographic security. This affects Apache Tomcat versions 9.0.92 through 9.0.122, 10.1.22 through 10.1.60, and 11.0.0-M14 through 11.0.26. Upgrading to versions 9.0.123, 10.1.61, or 11.0.27 resolves the issue.
CVE-2026-103502 is an improper certificate validation vulnerability in the hexpm hex_core library affecting versions from 0.1.0 up to but not including 0.20.0. The issue arises because hex_core's default HTTP adapter on Erlang/OTP 24 and OTP 25 (when the OS CA certificates cannot be loaded) does not verify server certificates properly, allowing an attacker who can intercept HTTPS connections to impersonate hex.pm or related repositories. The vulnerability stems from fallback behavior that disables certificate verification without clear documentation or warnings. hex_core 0.11.0 introduced secure SSL defaults for OTP 25+, but earlier versions and certain OTP configurations remain vulnerable. The CVSS 4.0 score is 5.9 (medium severity).
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain a vulnerability where the system does not fail securely, also known as 'failing open'. This flaw could allow a low privileged remote attacker to bypass protection mechanisms. The vulnerability has a medium severity with a CVSS score of 6.8, impacting confidentiality and integrity but not availability. No official patch or remediation details are provided in the available data.
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, InitializePolicies() starts the sumatrapdfrestrict.ini path with gPolicyRestrictions set to Perm::All and only ORs permission bits, so the INI file never revokes permissions. Deploying SumatraPDF with this INI file, including a malformed file or zero-valued permission settings, can silently bypass configured disk, network, printing, registry, clipboard, preference, and fullscreen restrictions. The -restrict command-line path works correctly and is not affected. No fixed version is available as of this review.
CVE-2026-101998 is a medium severity vulnerability in Docker Sandboxes where the system may fail open when handling protected proxy responses. This occurs if a response-body read returns data along with an error, potentially causing sensitive bytes to be forwarded unmasked. This flaw could allow code running inside an authorized sandbox to access host-managed OAuth tokens or an Anthropic API key that should remain protected outside the sandbox.
Progressive Robot hMailServer 6.0.0 through 6.3.5 fails open when applying DANE (RFC 7672) to outbound SMTP delivery. The server's validating DNSSEC resolver treated a TLSA or MX lookup that did not complete (no answer, SERVFAIL, a malformed reply), an answer without the requested records and without an NSEC/NSEC3 proof of their absence, and an answer whose records carried no applicable RRSIG as if the recipient domain were unsigned, and from 6.2.19 it also delivered to mail exchangers taken from an unvalidated MX lookup that the DNSSEC-validated MX record set did not name. An attacker who can drop, forge or strip DNS answers on the path to the server's resolver, at the resolver, or between the resolver and the recipient domain's name servers, and who holds an active position on the SMTP path, can thereby disable DANE for a DNSSEC-signed recipient domain and cause messages to be delivered in cleartext or to a host of the attacker's choosing with an arbitrary certificate, where they can be read and modified.
P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server.
DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to version 0.22.6, setting `readonly = true` on the `execute_sql` tool does not make the connection read-only. The connectors are written to set PostgreSQL `default_transaction_read_only=on` (and open SQLite in `readOnly` mode), but that code is gated on a config value that is never populated, so it never runs. The only thing left enforcing read-only is a classifier that inspects the first keyword of each statement. Any `SELECT` that writes or has side effects through a function call passes it. With an ordinary role this allows sequence tampering; with a privileged role it allows writing arbitrary files on the server (`lo_export`), reading arbitrary host files (`pg_read_file`), and remote code execution (`dblink` + `COPY ... TO PROGRAM`). The HTTP transport is unauthenticated and binds to `0.0.0.0` by default, so this is reachable by any network caller of `/mcp`. Version 0.22.6 patches the issue.
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when a configured authenticator or authorizator class cannot be loaded, Server.initializeAuthenticator and Server.initializeAuthorizatorPolicy treat the failure as though no custom class was configured and fall back to AcceptAllAuthenticator or PermitAllAuthorizatorPolicy. A misspelled class name, missing dependency, constructor failure, or classpath problem can therefore start the broker with authentication or authorization disabled even though the operator configured those controls. This issue is fixed in version 0.18.1.
CVE-2026-95676 is a high-severity vulnerability in WatchGuard AuthPoint Authentication Gateway versions 4.2.2 up to but not including 7.5.1. It involves a missing or improper authentication check in the LDAP Sync first-factor authentication process, allowing a remote attacker to bypass single-factor password verification under non-default operating conditions. However, additional authentication factors remain enforced, limiting the overall impact.