IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 contain a vulnerability where improper slug normalization can cause tool name collisions. This flaw allows a remote authenticated attacker to trigger a denial of service condition. The issue arises from the use of incorrectly resolved names or references within the application.
MongoDB Database Tools mongorestore inconsistently handles the system.buckets. prefix when validating collection names in an untrusted dump. A specially crafted collection name can bypass special-collection guards and operator namespace filters, causing a restore to create an unauthorized user-chosen database account, including an account with the root role. Exploitation requires an operator to restore unauthorized user-controlled data using credentials with sufficient user-management privileges on the destination deployment. Excluding the admin namespace alone does not prevent this behavior. This issue affects MongoDB Database Tools versions 100.4.0 through versions before 100.20.1.
Trail of Bits fickling versions up to 0.1.12 contain a vulnerability in the handling of pickle STACK_GLOBAL operands with dotted __qualname__ references. The vulnerability arises because fickling resolves such dotted attribute paths incorrectly, allowing an attacker to invoke a class method (optparse.Values.read_file) that executes arbitrary code when loading a crafted pickle. This flaw bypasses fickling's safety checks and is not mitigated by existing blocklists or heuristics. The optparse module is present in all current CPython 3.x versions and deprecated but not removed in Python 3.13.
CVE-2026-89313 is a vulnerability in Eclipse KeyPont - GOSE where the function JwksTrustStore.Get incorrectly returns the last key in the JWKS document when a requested key ID (kid) is not found, instead of signaling a 'not found' error. This leads to a potentially incorrect key being used. The issue affects versions from 0.7.5 up to 0.13.0-rc1 and from 0 up to 1.0.0-rc4. It has been fixed in version 1.0.0-rc4.
CVE-2026-14288 is a vulnerability in GitLab Enterprise Edition affecting versions from 17.4 up to but not including 19.3.6, 19.4 up to 19.4.3, and 19.5 up to 19.5.1. It allows an authenticated user to bypass a required merge request approval policy on protected branches due to improper access control during approval rule synchronization. The issue has been fixed in versions 19.3.6, 19.4.3, and 19.5.1.
A vulnerability in the tox-dev filelock Python package prior to version 4.2.1 allows a local user with rename permissions to cause the UnixFileLock to truncate a regular file renamed onto the lock path or hard-linked there under permissive conditions. Additionally, affected versions from 3.10.2 can change the file's mode when an explicit mode is requested. This issue is resolved in version 4.2.1.
CVE-2026-92262 is a critical vulnerability in MariaDB server affecting multiple versions from 10.6.1 up to but not including 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2. It involves the #mysql50# prefix bypassing normal table-name filesystem encoding, allowing attackers to access files using legacy unencoded names. This can lead to crashes, data corruption, data exfiltration, or remote code execution. The issue is fixed in the specified later versions.
CVE-2026-61844 is a vulnerability in FileRise, a self-hosted web-based file manager, affecting versions prior to 3.18.0. The issue arises from how FileRise flattens logical folder paths into metadata filenames, causing distinct folders to share one metadata file. This allows a low-privileged user with control over one colliding folder and read_own access to another folder to manipulate metadata, potentially gaining unauthorized read and edit access to files. The vulnerability is fixed in version 3.18.0.
OTRS suffers from a vulnerability where customer user identities are not enforced as unique across multiple configured CustomerUser backends. This allows an authenticated user with permission to create or modify customer users to create duplicate customer user records with the same email address in different backends. This can lead to customer-related information or email communications being associated with the wrong customer user. The vulnerability affects multiple OTRS versions prior to 2026.7.X and requires authenticated user permissions to exploit.
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched because both used an empty IP component. An attacker with CREATE USER could create the colliding principal and, when the original principal's database privileges were cached, exercise privileges assigned to the other account. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
CVE-2026-85491 affects Catalyst::Seal versions before 0.03 for Perl and involves an incomplete comparison vulnerability in the dispatch memoization mechanism. The memoization key uses only the request path, ignoring other factors like HTTP method, content type, scheme, or query parameters. This can cause authorization checks to be bypassed by replaying memoized dispatch results from different request contexts. The memo entries persist for the life of the process, allowing one request to disable or misroute subsequent requests, potentially skipping authorization checks. The vulnerability has a high severity with a CVSS score of 8.8.
CVE-2026-81383 is a vulnerability in Microsoft Visual Studio Code where the use of an incorrectly-resolved name or reference allows an unauthorized attacker to disclose information over a network. This flaw affects versions from 1.0.0 up to but not including 1.136.2. The issue has been addressed in version 1.136.2 with an official fix provided by Microsoft.
CVE-2026-47843 is a low-severity vulnerability in Spring Reactor Netty where, under certain conditions involving multiple clients with different DNS resolver configurations, the system may incorrectly reuse a previously configured DNS resolver. This affects specific versions of Reactor Netty including 1.3.0 through 1.3.6, 1.1.0 through 1.2.18, and 1.0.52 and earlier. The vulnerability is classified under CWE-706, indicating the use of an incorrectly-resolved name or reference. No official patch or remediation guidance has been provided yet.
CVE-2026-65816 is a critical vulnerability in Microsoft Azure Web Apps related to the use of incorrectly-resolved names or references in Azure Arc. This flaw allows an unauthorized attacker to elevate privileges over a network, potentially leading to complete compromise of confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 base score of 10.0, indicating maximum severity. Microsoft has issued an official fix for this vulnerability and manages remediation for this cloud-hosted service. No known exploits are currently reported in the wild.
CVE-2026-13097 is a critical privilege escalation vulnerability in FreeIPA on Red Hat Enterprise Linux 9. It is caused by improper enforcement of uniqueness constraints on Kerberos principal names in the 389-ds directory server. This flaw allows a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged principal, potentially leading to unauthorized acquisition of Kerberos service tickets and full domain compromise. Red Hat has released an update for FreeIPA in Red Hat Enterprise Linux 9.8 to address this issue.
A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass web filtering and access downstream resources that should be unreachable.
If an MX Series device is configured with web filtering, and an attacker sends a request with a specifically formatted URL, this request will get forwarded despite the system being configured to block it. In turn, an attacker can access downstream resources that are expected to be unreachable.
This issue affects Junos OS on MX Series:
* all versions before 23.2R2-S7,
* 23.4 versions before 23.4R2-S8,
* 24.2 versions before 24.2R2-S5,
* 24.4 versions before 24.4R2-S4,
* 25.2 versions before 25.2R2-S1,
* 25.4 versions before 25.4R1-S2, 25.4R2.
Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 2026.2.5 through 2026.2.11 allows an authenticated attacker with write access to a shared workspace to execute a PowerShell script in another user's context via a display name collision with an existing VPN script link.
Starlette is a lightweight ASGI framework/toolkit. Prior to 1.3.0, the HTTP request path is not validated before being used to reconstruct request.url. Because request.url is rebuilt by concatenating {scheme}://{host}{path} and re-parsing the result, a path that does not begin with / (for example @google.com) moves the authority boundary during re-parsing, so request.url.hostname and request.url.netloc become attacker-controlled. Code that reads request.url.hostname (rather than the Host header or scope) can therefore be misled into trusting an attacker-supplied host. This vulnerability is fixed in 1.3.0.
Use of an incorrectly resolved name or reference in the pinget backend
in Devolutions UniGetUI 2026.2.0 and earlier allows a WinGet community
catalog contributor to cause an installed application to be correlated
to an unrelated, attacker-controlled catalog package and to execute an
attacker-controlled installer via a crafted catalog package whose
normalized name is contained as a substring within the installed
application name when a user applies the proposed update.
Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response.