Eclipse Kura versions 5.1.0 through 5.6.2 contain an authorization flaw in the Configuration REST API v2. Authenticated users with the rest.configuration permission can access and modify UserAdmin persistence configurations without holding the required kura.admin permission. This allows reading unsalted SHA-256 password hashes, modifying identities and permissions, and restoring configuration snapshots, enabling privilege escalation to full administrative rights. The vulnerability is fixed in version 5.6.3.
Apache TomEE's embedded OpenEJB HTTP server does not properly isolate HTTP sessions between multiple web applications hosted on it. This allows a remote attacker to reuse a session established in one web application in another, potentially causing one application to trust session state set by another. This issue affects deployments running several web applications on the embedded HTTP server. Users are advised to block untrusted network access to the embedded HTTP server or migrate to TomEE distributions based on Tomcat.
Apache Airflow's Task SDK secret cache built its keys from the team name and secret id with unescaped `_` delimiters, so different (team, secret id) pairs could collide. In multi-team deployments a Dag author could read another team's Variable or Connection value by crafting a colliding secret id. Only deployments with both `core.multi_team = True` and `secrets.use_cache = True` are affected.
Users are advised to upgrade to apache-airflow 3.4.0 or later. Deployments that cannot upgrade can set `secrets.use_cache = False`.
Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.18.6, a process inside a sandbox could send MSGID_FILE_SET_ATTRIBUTES or MSGID_FILE_SET_SHORT_NAME to SbieSvc and cause the SYSTEM service to open and modify an existing file outside the sandbox. The direct primitive changes file attributes, timestamps, writeability, or 8.3 short names; a short-name redirection can additionally contribute to SYSTEM code execution when a privileged process resolves an attacker-controlled short-name path in a location SbieSvc can open. This vulnerability is fixed in 1.18.6.
CVE-2026-120308 is a critical path traversal vulnerability in the beam-cloud Beta9 gateway that allows a tenant to read and write arbitrary files on the worker's filesystem. This occurs because the gateway improperly validates volume identifiers, enabling parent-directory traversal and unauthorized access to other tenants' volumes. The issue affects gateway versions before 0.1.776 and worker versions before 0.1.756. The vulnerability has been fixed by validating volume identifiers and mount paths, rejecting unauthorized volumes.
CVE-2026-115522 is a vulnerability in Google Agent Development Kit (ADK) for Python that allows an application to access artifacts of another application if both share a FileArtifactService root directory and use the same user_id. This occurs because the service omitted the application name when constructing on-disk paths, leading to exposure of resources across application boundaries. The issue affects versions 1.19.0 before 1.39.1 and 2.0.0a1 before 2.7.0. The vulnerability was fixed in versions 1.39.1 and 2.7.0 by enforcing per-application path scoping and removing legacy fallback paths.
CVE-2026-57144 is a high-severity vulnerability in MervinPraison's PraisonAI multi-agent teams system affecting versions from 4.5.110 up to but not including 4.6.61. The issue arises when the SandlockSandbox fallback mechanism activates on systems where the Landlock security module is unavailable. Instead of enforcing filesystem and network restrictions, the fallback SubprocessSandbox does not enforce these boundaries, allowing sandboxed code to access unauthorized files and open network connections despite restrictions. This flaw has been fixed in version 4.6.61.
filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock path and pass it to SQLite without rejecting a final symbolic link, allowing another local user who can create names in the lock directory to redirect database creation and locking or split mutual exclusion between targets. This issue is fixed in version 4.0.9.
CVE-2025-10149 is a vulnerability in WSO2 Identity Server as Key Manager where the SCIM endpoint insufficiently validates authorization for federated users when local and federated users share the same username. This flaw allows a malicious federated user to perform arbitrary operations on local user accounts, potentially leading to account takeover. The issue affects multiple versions prior to specific fixed releases. The vulnerability has a high severity rating with a CVSS score of 8.2.
vLLM versions prior to 0.30.0 contain an improper input validation vulnerability in the /inference/v1/generate endpoint. This flaw allows crafted inputs in several fields to cause termination of the shared EngineCore, poison or retrieve cross-request encoder-cache state, and alter replayed transport semantics. The issue is resolved in version 0.30.0.
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.83.0 until 2.131.0, the KServeV2OcrModel class defined in docling/models/stages/ocr/kserve_v2_ocr_model.py sends page images to its configured endpoint without checking the pipeline_options.enable_remote_services setting, even when the caller sets that policy control to false. The StandardPdfPipeline._make_ocr_model method also fails to pass the flag into the OCR factory, allowing remote OCR processing in configurations that rely on remote services being disabled. The destination is configured by the caller rather than selected by an attacker. This issue is fixed in 2.131.0.
Newell Brands DYMO ID versions 1.5.1.71 up to but not including 1.6.0 contain a vulnerability where the plugin Modules directory is resolved relative to the process working directory. This allows an attacker to place a malicious job file and DLL in the same folder, causing code execution at the victim's privilege level when the job file is opened. The issue is fixed in version 1.6.0.
CVE-2026-102125 is a high-severity vulnerability in Kiteworks Core where the sandbox used for document conversion does not fully isolate the code running inside it. This allows code executing within the sandbox to escape confinement and operate with the privileges of the service account running the application. Exploitation could enable an attacker to read or modify application data and configuration or disrupt the service on the affected appliance.
CVE-2026-96812 is a high-severity vulnerability in Google gVisor affecting Linux platforms with CUSE enabled. It allows a local attacker with container image deployment privileges to achieve root code execution on the host by improperly exposing a /dev/cuse character device node from a container to the host. This exposure enables the attacker to register a host device and exploit unrestricted ioctl handling to overwrite root udev helper memory.
When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a result, a trusted malicious PDF could potentially access sensitive content from other documents within the same process and transmit it externally.
The Z80Ultra (NX741J) product contains a vulnerability where non-privileged programs can retrieve the Wi-Fi MAC address by querying the read-only field factory_mac_address in the Settings.Secure database.
CVE-2026-54495 is a vulnerability in open-feature-operator versions 0.9.2 and earlier that allows a tenant with permission to create a controller-owned workload to reference feature flag sources in other namespaces. This cross-namespace reference can lead to exposure of environment variable values, bearer tokens, sync URIs, and ConfigMaps from other tenants in multi-tenant Kubernetes clusters where namespaces serve as trust boundaries. Single-tenant clusters are not affected, and secretKeyRef and configMapKeyRef values remain namespace-local.
CVE-2026-54504 is a vulnerability in andrea9293's mcp-documentation-server versions 1.13.0 up to but not including 1.13.1. The server's Web UI binds its document-management API to all network interfaces without authentication, allowing network-reachable attackers to access, modify, and delete documents without credentials. This issue is fixed in version 1.13.1.
mport is the MidnightBSD Package Manager. Prior to 2.7.8, package installation lacked a preflight check for incoming non-directory assets that already existed on disk. The affected logic across libmport/check_preconditions.c, libmport/install_primative.c, and libmport/mport_private.h did not apply MPORT_PRECHECK_FILE_CONFLICTS, so a crafted or conflicting package could overwrite a file owned by another package or unmanaged by mport. The check is bypassed only when the operator explicitly enables mport->force. Privileged installation without that override could compromise local filesystem integrity and package database consistency. This issue is fixed in version 2.7.8.
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service was configured to listen on all network interfaces, which may expose the service to unintended network access.