By year

Vulnerabilities disclosed in 2026

CVEs published in 2026 with SEC.co analysis.

8541 published vulnerabilities · page 82 of 86

• CVE-2026-46730MEDIUM 4.2

  Dell PowerProtect Data Domain contains an authorization flaw that allows a high-privileged local attacker to execute commands they shouldn't be able to run. The vulnerability affects multiple release branches spanning versions 7.7.1.0 through 8.7, and while it requires someone with elevated access and physical/local connectivity to the system, it could lead to unauthorized actions within the backup infrastructure.

• CVE-2026-48104MEDIUM 4.2

  7-Zip versions 9.18 through 26.00 contain a memory safety bug in the SquashFS archive handler that can crash the application or leak heap information when processing a specially crafted archive file. The vulnerability stems from uninitialized memory left in an internal index structure; an attacker can craft a SquashFS archive that causes the handler to read from these uninitialized slots and potentially dereference invalid pointers during directory parsing. The issue is triggered automatically when you open the malicious file—no user interaction beyond that is required. The impact is limited to denial of service and potential information disclosure; the attacker cannot modify files or escalate privileges.

• CVE-2026-48522MEDIUM 4.2

  PyJWT, a widely-used Python library for JSON Web Token handling, has a vulnerability in versions before 2.13.0 where it blindly accepts any URL scheme when fetching public key sets (JWKS). An attacker who can influence the URL used to fetch these keys—through JWT headers, configuration, or OAuth parameters—can trick the application into reading local files, attempting unusual protocol connections (FTP, data URIs), or in certain chained scenarios, forging valid tokens. The vulnerability requires specific conditions: the attacker must control the URL source, and token forgery scenarios require additional application-layer flaws like writable filesystem access.

• CVE-2026-48776MEDIUM 4.2

  A path traversal vulnerability in LangGraph Python SDK versions 0.3.14 and earlier allows authenticated users to manipulate resource identifiers in HTTP requests, potentially accessing or modifying resources they shouldn't have permission to reach. The vulnerability stems from unsafe construction of URL paths using caller-supplied identifiers without proper sanitization. An attacker with valid credentials could craft specially formatted identifier values containing URL path characters to bypass authorization checks, particularly in deployments where access control relies on URL-prefix validation rather than application-level authorization.

• CVE-2026-50179MEDIUM 4.2

  Actual, a personal finance application, has a vulnerability in how it exports financial data to CSV files. When users export transaction information, certain special characters at the beginning of field values—such as equals signs, plus signs, or @ symbols—are not properly sanitized. If a recipient opens the exported CSV file in Excel, LibreOffice Calc, or Google Sheets, these characters cause the spreadsheet application to interpret the data as formulas rather than plain text. An attacker who can influence transaction data (for example, through a compromised account or social engineering) could craft malicious formulas that extract sensitive financial information or display misleading values when the file is opened. This issue has been resolved in version 26.6.0.

• CVE-2026-52846MEDIUM 4.2

  Caddy's stripHTML template function, designed to remove HTML tags from user input, has a flaw that allows certain malformed HTML patterns to bypass its filtering logic. Specifically, malformed tags like <<>img src=x onerror=alert()> can slip through, potentially leaving executable scripts in the output if that output is later rendered as HTML in a browser. This creates a client-side XSS vulnerability when applications use stripHTML to sanitize untrusted content but then display the result unsafely. The flaw affects Caddy versions prior to 2.11.4.

• CVE-2026-53860MEDIUM 4.2

  OpenClaw versions before 2026.5.7 contain a flaw in the BlueBubbles feature that allows authenticated users to bypass sender identity verification. Instead of confirming the actual sender, the system can be tricked into matching allowlist rules based on conversation metadata—data that attackers can influence. This means an attacker with legitimate access could manipulate conversation identifiers to receive responses that should only go to authorized senders, effectively circumventing access controls meant to restrict agent functionality.

• CVE-2026-53862MEDIUM 4.2

  OpenClaw versions before 2026.5.12 allow attackers to replay bootstrap tokens used during device pairing setup. An attacker who intercepts or obtains a pending bootstrap token can reuse it to request broader permissions than the token's original scope allowed, effectively escalating their access during the pairing process. This vulnerability requires the attacker to have network access and for a user to interact with the malicious request, but it can lead to unauthorized authority being granted to a paired device.

• CVE-2026-54298MEDIUM 4.2

  Astro, a popular web framework, contains a vulnerability in how it processes HTML attributes during server-side rendering. When developers use the spread syntax to pass object properties as HTML attributes—a common pattern for dynamic content—Astro fails to escape keys coming from untrusted sources like APIs or user input. An attacker can craft malicious property names that become unescaped HTML attributes, allowing them to inject event handlers (onclick, onmousemove) or break out of the attribute context entirely to inject new HTML elements. This affects Astro versions before 6.4.6.

• CVE-2026-54319MEDIUM 4.2

  Daytona, a runtime platform for executing AI-generated code and agent workflows, contains a path-traversal vulnerability in versions prior to 0.186. When users specify a volume identifier to mount storage, the system failed to properly validate the path, potentially allowing an authenticated user to reference storage locations outside the intended directories. An attacker with valid credentials could craft a specially formatted volume reference to access or modify files beyond the sandbox's intended scope.

• CVE-2026-55669MEDIUM 4.2

  ZITADEL, an open-source identity management platform, has a flaw in how it validates JSON Web Tokens (JWTs) from external identity providers. When a user logs in via a third-party provider, ZITADEL checks that the token is genuinely signed and comes from a trusted issuer—but it fails to verify that the token was actually intended for ZITADEL. This means a valid token issued for a different application by the same trusted provider could be wrongly accepted. An authenticated user could potentially exploit this to access resources or information they shouldn't have access to. The vulnerability affects versions before 3.4.12 and 4.15.2 and is resolved in those versions and later.

• CVE-2026-55945MEDIUM 4.2

  Microsoft Edge (Chromium-based) contains a race condition that allows an authorized attacker with local access to disclose sensitive information. The vulnerability arises from improper synchronization when multiple threads or processes access a shared resource concurrently. An attacker must already have local user privileges and knowledge of specific timing conditions to exploit this vulnerability successfully.

• CVE-2026-57306MEDIUM 4.2

  A CSRF vulnerability in the Jenkins Zowe zDevOps Plugin allows an attacker with login access to Jenkins to trick an authenticated user into performing actions that connect to attacker-controlled systems. By exploiting this flaw, an attacker can force Jenkins to use stored credentials to establish connections to malicious endpoints, potentially exposing those credentials to capture. The vulnerability requires an attacker to already know or obtain valid credential IDs from Jenkins, limiting the immediate exposure scope but creating a clear escalation path for authenticated threats.

• CVE-2026-57307MEDIUM 4.2

  Jenkins Zowe zDevOps Plugin versions 1.1.3.50.ve350c9b_450b_1 and earlier contain a permission check vulnerability that allows users with basic read access to Jenkins to exploit credential handling flaws. An attacker with Overall/Read permission can leverage known credential IDs to connect to arbitrary URLs using those stored credentials, potentially exposing sensitive authentication material. This is a moderate-severity issue that requires authenticated access but poses a real insider threat risk in shared Jenkins environments.

• CVE-2026-58171MEDIUM 4.2

  Vibe-Trading versions before 0.1.10 contain a path traversal vulnerability in how it constructs directories for storing run data. An authenticated user can supply a specially crafted run identifier through the MCP swarm tools that tricks the application into reading or overwriting JSON configuration files outside the intended runs directory. This allows an attacker to access or modify run.json files at arbitrary locations on the filesystem, potentially exposing or corrupting application state.

• CVE-2026-59882MEDIUM 4.2

  A flaw in guzzlehttp/psr7 (a widely-used PHP HTTP message library) allows attackers to craft URIs with specially-formatted host components that bypass validation. The library's host validation function fails to catch authority delimiters, embedded ports, or malformed IPv6 brackets, creating a disconnect between what the library reports as the host and what the URI actually specifies. This mismatch can confuse security checks or routing logic that rely on the reported host value.

• CVE-2026-59995MEDIUM 4.2

  OpenSSH's SFTP client has a path traversal vulnerability affecting versions before 10.4. When a user downloads files from a server using the command "sftp server:/path ." (downloading to the current directory), an attacker controlling the SFTP server can craft malicious responses that cause files to be written outside the intended download location. This requires user interaction—specifically, the user must initiate the download command—and relies on the attacker operating a malicious SFTP server. The vulnerability allows file overwrite or creation in unintended directories, potentially compromising system integrity if critical files are targeted.

• CVE-2026-59996MEDIUM 4.2

  OpenSSH's scp command has a path traversal vulnerability that can cause files to be written to an unintended location when copying between two remote systems. If an attacker controls the source or destination in a remote-to-remote copy operation, they may be able to place a file in the parent directory of where it was supposed to go, potentially overwriting legitimate files or introducing malicious content into unexpected locations. This affects OpenSSH versions before 10.4.

• CVE-2026-59997MEDIUM 4.2

  OpenSSH's internal SFTP server has a parsing limitation where only the first 9 command-line arguments are processed. Any security-relevant parameters supplied as the 10th argument or beyond are silently ignored. This can lead to SFTP connections operating with weaker security properties than an administrator intended, since critical flags meant to restrict access or enforce specific protections would be overlooked during connection setup.

• CVE-2026-9986MEDIUM 4.2

  CVE-2026-9986 is a UI spoofing vulnerability in Google Chrome's OptimizationGuide component that could let an attacker deceive users about what they're seeing on a webpage. The vulnerability requires the attacker to have already compromised Chrome's rendering process—the engine that draws web content. While this limits the immediate attack scope, it represents a meaningful escalation risk for adversaries who have achieved code execution in that sandboxed component. The flaw stems from inadequate validation of user-supplied input before it's used to generate on-screen elements.

• CVE-2024-45636MEDIUM 4.1

  IBM Security QRadar EDR versions 3.12 through 3.12.24 contain a credential storage flaw where user passwords and authentication tokens are stored in plain text on disk. A local attacker with elevated system privileges can read these credentials directly, potentially gaining unauthorized access to QRadar EDR or downstream systems that those credentials protect. This is a local-only attack requiring existing high-level access to the affected system.

• CVE-2024-47263MEDIUM 4.1

  A path traversal flaw in Synology Hyper Backup's web API allows administrators who already have legitimate access to write files outside their intended directory. The vulnerability is constrained to non-sensitive file types, limiting immediate damage, but represents a control-boundary weakness that could enable privilege misuse or lateral movement in environments where admin accounts are compromised or where insider threat is a concern.

• CVE-2026-10052MEDIUM 4.1

  Quay's configuration tool contains a weakness in how it validates LDAP and SMTP settings. When a configuration editor supplies endpoints for these services, the tool connects to them without restricting which IP addresses or hostnames are allowed. An attacker with config editor privileges can abuse this to make the Quay container reach internal network resources, allowing them to map and discover the organization's internal infrastructure from inside the cluster's network position.

• CVE-2026-13323MEDIUM 4.1

  Open VSX Registry, the extension marketplace used by VS Code and compatible editors, has a vulnerability in how it serves user-uploaded HTML files. An attacker with a publisher account can upload a malicious HTML file disguised as part of an extension package. When an authenticated user visits that file's link, the browser treats it as belonging to the open-vsx.org website rather than a separate, untrusted origin. This allows the attacker to steal the user's session tokens, create permanent access tokens for future unauthorized access, and publish fake or malicious extension updates that would reach all downstream users of that extension across VS Code, VSCodium, Cursor, Windsurf, and other compatible editors—a classic supply chain attack vector.

• CVE-2026-13751MEDIUM 4.1

  Snowflake CLI versions before 3.19 contain a vulnerability that allows server-side request forgery (SSRF) when processing SQL files. The issue stems from the !source and !load directives in SQL statements, which can reference remote URLs. When a user processes attacker-controlled SQL content, the CLI retrieves these URLs without adequate restrictions, potentially causing the victim's system to make unexpected outbound requests to internal networks or execute remote SQL code within the user's session. Exploitation requires the attacker to trick a user into processing a malicious SQL file, and impact is limited by the permissions available to that user.

• CVE-2026-37700MEDIUM 4.1

  MaxSite CMS version 109.2 contains a cross-site scripting (XSS) vulnerability in its backend file upload feature that allows authenticated attackers to inject malicious scripts. When an administrator performs a file upload through the admin page endpoint, an attacker with login credentials could craft a request that executes JavaScript in the victim's browser, potentially exposing sensitive information displayed during the upload process.

• CVE-2026-42401MEDIUM 4.1

  CVE-2026-42401 is a stored HTML injection vulnerability in Kibana that allows an attacker with write access to an Elasticsearch index to inject malicious markup. When other users view the affected Kibana dashboard or visualization, the injected code is not properly sanitized before rendering in their browser. This can enable unauthorized UI changes and cause the victim's browser to make unintended outbound network requests on their behalf.

• CVE-2026-46692MEDIUM 4.1

  ImageMagick, a widely-used image manipulation tool, contains a heap buffer overwrite vulnerability in its distributed cache service. An attacker with local access to the cache service can trigger the flaw to crash the service, causing a denial of service. The vulnerability affects ImageMagick versions before 6.9.13-48 (legacy branch) and 7.1.2-23 (current branch). While the attack requires local connectivity to the cache daemon and elevated privileges, the impact is confined to availability—not confidentiality or integrity.

• CVE-2026-46693MEDIUM 4.1

  ImageMagick, a widely-used open-source image manipulation suite, contains a race condition vulnerability in its distributed cache service. An attacker with local access to a system running the magick -distribute-cache service can exploit a timing window to hijack a file descriptor belonging to the server process, potentially gaining unauthorized read access to sensitive data the server is handling. This is a local privilege escalation scenario requiring both network access to the cache service and precise timing to trigger.

• CVE-2026-46771MEDIUM 4.1

  CVE-2026-46771 is a localized privilege-escalation vulnerability in Oracle Application Development Framework (ADF) that allows a highly privileged attacker already logged into the infrastructure to access sensitive application data. The attacker must be an administrative user on the machine running ADF, and even then exploiting it requires specific conditions to be met. The primary risk is unauthorized disclosure of data within ADF systems—the vulnerability does not enable attackers to modify or delete data, nor does it allow takeover of the ADF service itself.

• CVE-2026-47165MEDIUM 4.1

  ImageMagick, a widely-used open-source image manipulation tool, contained a flaw in how its distributed pixel cache system authenticated connections. The distributed pixel cache feature, which allows ImageMagick instances to share pixel data across systems, did not require proper authentication before versions 6.9.13-48 and 7.1.2-23. An attacker with high privileges on the same system could potentially read sensitive pixel data—such as confidential images being processed—without authorization. This is a local-only issue affecting system administrators and environments where multiple users or services share the same ImageMagick installation.

• CVE-2026-4983MEDIUM 4.1

  Open VSX Registry, an extension marketplace used by developers, has a vulnerability where it fails to properly secure SVG image files that extensions upload as icons. When someone views the icon directly, malicious code embedded in the SVG can execute in their browser. The impact depends on how the registry is hosted: if it uses its own servers, an attacker can steal session tokens and impersonate users; if it relies on external cloud storage like Amazon S3, the risk is lower but attackers can still create convincing fake login pages to harvest credentials.

• CVE-2026-56272MEDIUM 4.1

  Flowise versions before 3.0.13 use weak password hashing configuration that makes user account credentials significantly easier to crack if a database is compromised. The application relies on bcrypt with only 5 salt rounds (32 iterations), whereas security best practices call for at least 10 rounds. This 30x speed advantage in cracking attempts means attackers with GPU hardware can recover plaintext passwords from stolen hashes much faster than intended.

• CVE-2026-56354MEDIUM 4.1

  n8n, a popular workflow automation platform, contains vulnerabilities in its Form Node that allow authenticated users to inject malicious content. Specifically, two issues exist: unsanitized HTML in description fields can enable stored cross-site scripting (XSS) attacks, and overly permissive iframe sandbox settings can be exploited for phishing redirects. An attacker with workflow creation permissions could craft a malicious form that, when viewed by end users, executes scripts in their browsers or redirects them to attacker-controlled sites. The vulnerability affects versions before 1.123.24 in the 1.x branch and before 2.10.4 and 2.12.0 in the 2.x branch.

• CVE-2019-25723MEDIUM 4.0

  Dräger Perseus A500 ventilators running software versions 2.00 through 2.02 are vulnerable to a denial-of-service attack. An attacker on the network can send malformed data through the Medibus medical interface to crash the device's processor, forcing a warm restart. During this restart—which lasts several seconds—ventilation pressure drops to ambient level, temporarily interrupting therapy delivery before the device recovers. This is a network-accessible vulnerability with no authentication required, making it a genuine concern for clinical environments.

• CVE-2019-25734MEDIUM 4.0

  Contact Form by WD version 1.13.1 has a security flaw that combines two weaknesses: a cross-site request forgery (CSRF) vulnerability and local file inclusion (LFI). An unauthenticated attacker can craft a malicious web form that, when visited by an admin, tricks the admin's browser into loading arbitrary files from the server using directory traversal sequences. This bypasses the normal authentication checks on certain WordPress AJAX actions, potentially exposing sensitive files.

• CVE-2021-4479MEDIUM 4.0

  Dräger Atlan A350 patient monitoring devices running firmware versions 1.00 through 1.01 are vulnerable to a denial-of-service attack delivered through the Medibus network interface. An attacker can send malformed data packets that the device fails to validate properly, causing the internal processor to become overloaded. Over several hours, this degradation manifests as loss of data transmission capability, delays in displaying vital sign curves, and discrepancies between measured airway pressure and displayed values—conditions that could compromise clinical decision-making in critical care settings.

• CVE-2026-10099MEDIUM 4.0

  XX-Net V5.16.6 has a flaw in how it processes WebSocket communications that causes data corruption. When a client sends WebSocket frames without proper masking, the server incorrectly interprets the first 4 bytes of the message as a mask key (even when masking wasn't used), then mangles the rest of the data by applying the wrong decryption. This results in corrupted data being processed by the application. The vulnerability affects local attack scenarios and has medium severity.

• CVE-2026-10998MEDIUM 4.0

  CVE-2026-10998 is a memory safety issue in Google Chrome's media handling code that allows an attacker positioned on the same local network to read data from memory locations they shouldn't have access to. The vulnerability exists in Chrome versions before 149.0.7827.53. An attacker would need to send specially crafted network traffic to trigger an out-of-bounds read, which could potentially expose sensitive information resident in the browser's memory. This is a local-network-only threat, meaning the attacker must be on your network segment to exploit it.

• CVE-2026-13199MEDIUM 4.0

  Raspberry Pi 5 and Compute Module 5 devices use firmware stored on an EEPROM chip that should generate random values to protect the Linux kernel's memory layout and seed the system's random number generator. However, this firmware is producing predictable values instead. This means the kernel loads at the same memory address every time a device boots, and across different devices—information an attacker could use to craft exploits more reliably. The weak random seed may also cause the system to take longer to boot while gathering entropy from other sources.

• CVE-2026-28581MEDIUM 4.0

  A logic error in Android's call processing code allows an application to initiate emergency calls without proper authorization checks. The vulnerability stems from inadequate validation in the CallIntentProcessor when determining the initiating user, potentially enabling an app to trigger emergency dialing functionality that should be restricted. No user interaction is required for exploitation, and the issue affects multiple Android versions.

• CVE-2026-41714MEDIUM 4.0

  Spring AMQP applications that connect to RabbitMQ brokers using AMQPS URIs without explicitly enabling SSL validation are vulnerable to man-in-the-middle attacks. While the connection appears encrypted, the application skips critical TLS certificate and hostname verification steps, allowing an attacker to intercept credentials and sensitive message data. This occurs when developers configure RabbitConnectionFactoryBean with an amqps:// URI but omit the setUseSSL(true) call, creating a false sense of security.

• CVE-2026-45536MEDIUM 4.0

  Netty, a widely-used Java network framework, has a file descriptor leak in its Unix domain socket implementation when handling multi-fd messages. When a peer sends a crafted control message carrying multiple file descriptors via SCM_RIGHTS, Netty's receiver allocates a fixed buffer that happens to fit the kernel's response exactly. The code then performs a validation check that fails due to the unexpected message format, causing the installed file descriptors to never be closed. Applications using DomainSocketChannel with FILE_DESCRIPTORS read mode—a non-default opt-in feature—can leak two file descriptors per malicious message received from a peer on the same host. This degrades availability by exhausting the process's file descriptor limit.

• CVE-2026-46559MEDIUM 4.0

  ImageMagick, a widely used open-source image editing tool, contains a flaw in how it validates JP2 (JPEG 2000) image files. When processing certain malformed JP2 files, the software writes a single byte of data beyond the boundaries of an allocated memory region. While limited to overwriting one byte, this heap buffer overflow could cause the application to crash or, in specific configurations, enable an attacker to influence program behavior. The issue affects ImageMagick versions before 6.9.13-48 and 7.1.2-23.

• CVE-2026-53464MEDIUM 4.0

  ImageMagick versions before 7.1.2-25 leak a small amount of memory when the wand option parser receives invalid input. An attacker with local access could trigger this repeatedly to consume system memory and degrade performance or cause denial of service. The issue is low-impact but present in all affected versions.

• CVE-2026-53945MEDIUM 4.0

  Ghost, a popular Node.js-based content management system, contains a vulnerability in how it validates target addresses before making outbound HTTP requests. Between versions 6.0.9 and 6.21.0, an attacker can exploit DNS rebinding techniques to trick the Ghost server into connecting to internal network resources that should be off-limits. This bypass affects features within Ghost that fetch external content, potentially allowing unauthorized access to sensitive internal systems. The issue is resolved in version 6.21.1.

• CVE-2026-55688MEDIUM 4.0

  AsyncHttpClient (AHC), a widely-used Java library for handling HTTP requests, contains a cookie injection vulnerability in versions 2.0.0–2.15.x and 3.0.0.Beta1–3.0.10. The flaw allows a malicious server to plant cookies intended for unrelated domains into the client's cookie store. When the affected application later communicates with the legitimate domain, it unwittingly sends the attacker-injected cookie. This attack succeeds only when a single AHC instance handles connections to both an attacker-controlled server and a trusted destination—a common pattern in applications that pool HTTP clients across multiple hosts.

• CVE-2026-56357MEDIUM 4.0

  n8n's GitHub Webhook Trigger node accepts webhook requests without verifying their authenticity, allowing attackers to forge webhook events if they know the webhook URL. An attacker could send spoofed GitHub webhook payloads directly to a workflow, potentially triggering unintended automation actions. This is a signature verification bypass rather than a complete authentication failure, meaning the vulnerability requires knowledge of the specific webhook URL but does not require credentials or sophisticated network access.

• CVE-2026-56360MEDIUM 4.0

  n8n workflow automation platform versions before 1.123.18 and 2.6.2 contain a webhook signature verification flaw in the Zendesk integration node. The vulnerability allows attackers to send unauthenticated requests to known webhook URLs, injecting arbitrary data into workflows. While the attack requires knowledge of a specific webhook endpoint URL and cannot directly compromise confidentiality or availability, it creates a path for data tampering and unauthorized workflow execution within an organization's automation infrastructure.

• CVE-2026-57053MEDIUM 4.0

  GNU libidn, a widely-used library for handling internationalized domain names, contains a flaw in its ToUnicode conversion APIs that can read uninitialized memory from your system. This occurs when the library processes certain domain name conversions, potentially exposing sensitive data that happened to be in memory. The vulnerability affects libidn versions before 1.44; the newer libidn2 implementation does not have this issue. While the attack requires local access and specific conditions to trigger, the combination of memory disclosure and potential data corruption makes it a meaningful security concern for systems that process untrusted international domain names.

• CVE-2026-12386LOW 3.9

  CVE-2026-12386 is a low-severity buffer overflow vulnerability in Pardus Pen, a software tool from Turkey's TUBITAK BILGEM Research Institute. The flaw stems from improper null termination handling in the application, which can allow a local attacker with user privileges to cause a buffer overflow. An attacker would need interactive access and user-level permissions to exploit this issue, limiting its real-world impact to environments where such access is already granted. The vulnerability affects Pardus Pen versions up to and including 4.1.5, with a fix available in version 4.2.1 and later.

• CVE-2026-15028LOW 3.9

  A security flaw in libarchive allows an attacker to cause a heap overflow by crafting a specially designed tar archive file. The vulnerability exists in how the library handles PAX extended headers, specifically a malformed SUN.holesdata attribute used for sparse files. When a victim opens such a file, it can crash the system (denial of service) or potentially allow the attacker to execute arbitrary code. However, the vulnerability requires local access and user interaction, which limits its immediate threat scope.

• CVE-2026-30963LOW 3.9

  Capsule is a Kubernetes framework that uses webhooks to prevent tenant administrators from hijacking namespaces—essentially taking control of cluster resources they shouldn't own. The framework checks most update requests, but it misses two specific APIs (namespace/status and namespace/finalize subresources) that can also change namespace ownership markers. Before version 0.13.0, a tenant admin with permission to use these subresources could bypass the webhook protection and seize a namespace. Version 0.13.0 patches this gap by ensuring the webhook intercepts both subresource types.

• CVE-2026-45642LOW 3.9

  CVE-2026-45642 affects Microsoft's Azure Attestation and Device Health Attestation services, which are used to verify the integrity and trustworthiness of devices and systems. The vulnerability stems from inadequate validation of user-supplied input, allowing an attacker who already has physical access and elevated privileges on a target system to spoof attestation results. This means an attacker could make a compromised or malicious device appear legitimate to systems that rely on attestation checks. The attack requires both physical proximity to the device and administrative-level access, significantly limiting real-world exposure.

• CVE-2026-55592LOW 3.9

  Dashy, a self-hosted dashboard application, contains a vulnerability in its workspace feature that allows attackers to inject malicious links. When a logged-in user clicks a specially crafted workspace link, it can execute JavaScript code within the user's browser session. This code runs with the same permissions as the Dashy application itself, potentially exposing sensitive data or allowing unauthorized actions. The vulnerability has been patched in version 4.3.7.

• CVE-2025-12656LOW 3.8

  The WPvivid Backup & Migration plugin for WordPress contains a vulnerability that allows administrators to inadvertently (or maliciously) delete arbitrary directories from the server. The flaw lies in insufficient validation of file paths when canceling a staging site, meaning an authenticated admin could specify any folder path and have it removed. This is restricted to high-privilege accounts, but the impact—permanent data loss—is serious for affected organizations.

• CVE-2026-0934LOW 3.8

  GitLab EE contains a flaw in how it enforces CI/CD visibility settings on protected environment configurations. An authenticated user with a custom role—even one granted limited permissions—can bypass CI/CD visibility controls to view, create, or delete protected environment settings that should be hidden from them. This affects specific version ranges and requires the attacker to already have some level of authentication and role assignment within the GitLab instance.

• CVE-2026-10299LOW 3.8

  CVE-2026-10299 is a resource identifier control vulnerability in code-projects Online Hospital Management System version 1.0. An authenticated attacker with high-level privileges can manipulate the 'delid' parameter in the viewdoctortimings.php file to cause unintended modifications or deletion of data. While the flaw requires administrative or high-privilege access and carries a low CVSS score, the availability of public exploit code warrants attention in environments running this system.

• CVE-2026-13322LOW 3.8

  A memory exhaustion vulnerability exists in KubeVirt's downward metrics virtio-serial server. When a guest VM has this device enabled, a local attacker can repeatedly write data without line breaks, forcing the virt-handler process to allocate unbounded memory until the process crashes. This requires prior VM access and affects deployments where the downward metrics feature is configured.

• CVE-2026-15326LOW 3.8

  Halo (up to version 2.24.2) contains a path traversal vulnerability in its theme installation functionality. An authenticated administrator with high privileges can manipulate the theme metadata name parameter to write files outside the intended theme directory, potentially overwriting or placing malicious files in unexpected locations on the server. This requires administrative-level access to exploit and does not directly compromise confidentiality, but could lead to integrity and availability issues.

• CVE-2026-40510LOW 3.8

  OpenSC, a widely-used open-source smart card library, contains a stack buffer overflow flaw in how it processes the Key History Object from PIV (Personal Identity Verification) cards. An attacker with physical access to a system could craft a malicious smart card or USB device that returns an oversized URL field—exceeding 118 bytes—triggering memory corruption. This vulnerability requires the attacker to be physically present at the machine and involves user interaction, limiting its reach but posing a real concern in environments where untrusted hardware may be connected.

• CVE-2026-40528LOW 3.8

  OpenSC, a widely-used open-source library for working with smart cards and cryptographic tokens, contains a buffer overflow vulnerability in its profile configuration parser. When OpenSC's pkcs15-init tool processes a maliciously crafted configuration file, it can be tricked into copying more data than a buffer can hold, corrupting memory. An attacker would need local access to supply the malicious file and convince a user to run the initialization tool, but successful exploitation could allow memory corruption and potential code execution.

• CVE-2026-42148LOW 3.8

  Coolify, a self-hosted platform for managing servers and applications, contains a command injection vulnerability in its development helper image build function. An attacker with administrative access who can modify the helper version setting and trigger a build can execute arbitrary commands on the underlying server. The vulnerability is limited to development environments and requires elevated privileges and user interaction, significantly constraining real-world impact. The issue was patched in version 4.0.0-beta.474.

• CVE-2026-42546LOW 3.8

  OP-TEE, a security component that protects sensitive operations on Arm-based processors, contains a memory leak in its cleanup logic. When the system processes certain types of shared memory requests from the regular Linux kernel, it fails to properly release internal memory references. This causes memory to gradually accumulate and become unusable, eventually forcing the system to restart. The vulnerability only affects systems using non-FF-A configurations with non-contiguous shared memory support and requires local access to trigger.

• CVE-2026-45683LOW 3.8

  OpenTelemetry eBPF Instrumentation versions prior to 0.9.0 contain a memory disclosure vulnerability in the Java TLS monitoring probe. The vulnerability stems from incorrect kernel memory access calls that allow a local attacker to read sensitive kernel memory and exfiltrate it through the instrumentation telemetry pipeline. This is a localized information disclosure risk that requires local process-level access to exploit.

• CVE-2026-53763LOW 3.8

  OP-TEE, an open-source trusted execution environment for ARM processors, contains an integer overflow bug in its AES-GCM cryptographic implementation. When processing large amounts of encrypted data or authentication metadata—specifically over 512 megabytes—the flaw causes the authentication tag to be calculated incorrectly. This means encrypted messages could pass validation checks even if they were modified or corrupted in transit. The vulnerability affects all versions from 3.0.0 through 4.10.x; version 4.11.0 and later contain the fix.

• CVE-2026-53809LOW 3.8

  OpenClaw versions prior to 2026.4.25 contain a policy bypass flaw that weakens access controls for bundled development tools. When an attacker has local access to a system running the embedded runner feature, they can use provider aliases (alternative names for tool repositories) to bypass intended restrictions on which tools they're allowed to use. The vulnerability is context-specific—it only affects configurations where this feature is explicitly enabled—but it does allow unauthorized tool selection outside policy boundaries.

• CVE-2026-56212LOW 3.8

  Capgo versions before 12.128.2 contain a flaw in how they enforce two-factor authentication policies. A team or organization administrator can mandate that all team members use two-factor authentication, but the system doesn't check whether the administrator themselves has 2FA enabled first. This creates a gap where security policy enforcement becomes inconsistent and opens the door to administrative misuse—an admin could lock team members out of their accounts by enforcing a security requirement they haven't met themselves.

• CVE-2026-59269LOW 3.8

  CVE-2026-59269 is a privilege escalation vulnerability in Pinniped's Kubernetes authentication system. An attacker with high privileges can manipulate Active Directory group names to trick the Pinniped Supervisor into granting elevated permissions in Kubernetes clusters. The attack requires several specific conditions to align: the supervisor must use Active Directory for authentication, group name filtering must be disabled, the attacker must be able to edit AD group records they belong to, and they must know a valid AD password. This is a narrow but real risk for organizations using Pinniped with misconfigured Active Directory integration.

• CVE-2026-6816LOW 3.8

  Drupal's TFA Basic Plugins module contains a flaw that allows administrators with user management permissions to access or create recovery codes intended for other users. This bypasses the expected access controls around two-factor authentication recovery mechanisms. The vulnerability is restricted to versions 7.x-1.0 through 7.x-1.2, and exploitation requires administrative privileges, limiting its immediate threat to environments where admin accounts are already compromised or where trust boundaries have been violated.

• CVE-2026-8074LOW 3.8

  Mattermost has a permission enforcement gap in its user status management API. A User Manager with write access to user management—but explicitly without access to manage integrations or bots—can deactivate bot accounts by directly calling the user active status endpoint. This should not be possible; the API should reject such requests from users lacking bot management permissions. The vulnerability affects Mattermost Server versions 11.7.0 and earlier in the 11.7.x branch, and 10.11.17 and earlier in the 10.11.x branch.

• CVE-2026-8823LOW 3.8

  Mattermost has a permission validation flaw affecting versions 11.7.0 and 10.11.x up to 10.11.17. When an administrator with limited privileges attempts to demote a user to guest status, the system fails to properly verify whether the target is a bot account. This oversight allows a lower-privileged admin to degrade arbitrary bot accounts—including those managed by higher-privileged administrators—through the standard user demotion API. The impact is confined to integrity and availability concerns within the messaging platform.

• CVE-2025-0824LOW 3.7

  Hitachi Virtual Storage Platform One Block storage systems lack proper validation controls during firmware updates. An authenticated user with local UI access could potentially apply a malicious or tampered firmware image, leading to integrity compromise or system unavailability. The vulnerability requires specific user interaction and elevated authentication, limiting immediate exposure but creating a meaningful risk in environments where firmware management is not strictly governed.

• CVE-2025-52609LOW 3.7

  HCL iControl is missing HTTP security headers that would instruct modern web browsers to block cross-site scripting (XSS) attacks. Without these headers—such as Content-Security-Policy or X-XSS-Protection—the application relies on older browser XSS filters that are inconsistently implemented and increasingly deprecated. An attacker could craft malicious input that, when processed by iControl, gets reflected in responses without proper sanitization, potentially allowing script execution in users' browsers.

• CVE-2026-10169LOW 3.7

  A weakness in the password recovery feature of OUSL-GROUP-BrinaryBrains School Student Management System allows an attacker to manipulate the email parameter in the forgot password function, potentially leading to unauthorized password resets or account takeover. The vulnerability exists in the Login.php controller's ajax_forgot_password endpoint. While exploitable remotely, the attack requires specific conditions and is considered of low severity. Exploit code is publicly available, increasing risk of opportunistic attacks.

• CVE-2026-10216LOW 3.7

  A vulnerability has been discovered in unitedbyai droidclaw version 0.5.3 and earlier that weakens authentication security on the claim endpoint. The flaw allows attackers to bypass rate limiting or account lockout protections during login attempts, potentially enabling brute-force attacks to guess user credentials. While a public exploit exists, the attack requires specific conditions and technical skill to execute successfully. The vendor has been notified but has not yet released a fix.

• CVE-2026-10300LOW 3.7

  SGLang version 0.5.10.post1 contains a vulnerability in its inference HTTP endpoint that can be triggered by manipulating the lora_path argument. When an attacker provides a specially crafted lora_path value, the system reaches an assertion condition that causes the service to become unavailable. This is a remote vulnerability requiring network access, though the attack is complex to execute and not trivial to exploit in practice.

• CVE-2026-10636LOW 3.7

  Zephyr's IPv4 IGMP implementation contains a use-after-free vulnerability in its packet handling logic. After sending an IGMP message, the code attempts to read network interface information from a packet that may have already been freed and returned to memory pools by the network driver or stack. This can happen because the packet's last reference is released during transmission, but the code still tries to access it afterward. The issue is reachable by sending IGMP membership queries to the multicast address 224.0.0.1, or through local multicast operations, without requiring authentication. The practical result is typically unpredictable system behavior, potential crashes, or corruption of network statistics counters.

• CVE-2026-10657LOW 3.7

  Zephyr's mDNS query handling contains a buffer over-read flaw in its DNS resolver. When checking whether a hostname ends with '.local', the code reads a fixed 7 bytes from the suffix position without verifying the string is long enough. Hostnames ending in shorter suffixes like .org, .com, .io, or a trailing dot cause the comparison to read past the string's null terminator into adjacent memory. On systems with strict memory boundaries (guard pages, memory-domain protections, or address sanitizers), this over-read triggers a crash, resulting in denial of service. The vulnerability only affects devices with mDNS resolver enabled and requires the ability to influence hostname input through configuration, parsed URLs, or application interfaces.

• CVE-2026-11525LOW 3.7

  Undici, a Node.js HTTP client library, incorrectly parses the SameSite attribute in Set-Cookie headers. Instead of validating that the attribute is exactly 'Strict', 'Lax', or 'None' as the HTTP specification requires, undici accepts any value containing one of those words as a substring and silently converts it to the closest match. This means a server sending a malformed cookie like 'SameSite=NoneOfYourBusiness' will be treated as 'None'—the least restrictive setting—potentially weakening the security properties applications expect from SameSite enforcement.

• CVE-2026-11555LOW 3.7

  A privilege escalation vulnerability exists in D-Link's DGS-1100-08PD switch running firmware version 1.00.006. The issue resides in how the web interface processes the /etc/boa.conf configuration file, potentially allowing an attacker to modify system settings in ways that bypass normal access restrictions. While a public exploit exists, successful exploitation requires significant technical skill and specific conditions to align. The impact is limited to integrity violations—an attacker cannot read sensitive data or crash the device, only make unauthorized configuration changes.

• CVE-2026-11956LOW 3.7

  A flaw in TwiN gatus 5.36.0's OIDC session cookie handler can result in session cookies being created without the secure attribute. This means cookies could be transmitted over unencrypted HTTP connections, exposing them to interception. An attacker would need to manipulate the application's session management flow, a process requiring significant technical effort and complex conditions to exploit. While not currently listed on CISA's Known Exploited Vulnerabilities catalog, the issue warrants attention for any deployment handling sensitive authentication flows.

• CVE-2026-12590LOW 3.7

  body-parser, a widely used Node.js middleware for parsing incoming request bodies, contains a flaw in how it validates the 'limit' configuration option. When administrators accidentally configure the limit parameter with an invalid value—such as an unparseable string or NaN—the parser silently fails to enforce size restrictions instead of raising an alarm. This means requests of any size will be accepted and processed, potentially consuming massive amounts of memory and CPU and causing the application to become unresponsive. The vulnerability affects versions before 1.20.6 (in the 1.x line) and before 2.3.0 (in the 2.x line).

• CVE-2026-13482LOW 3.7

  SkyPilot, an open-source infrastructure orchestration tool, contains a cryptographic weakness in how it handles user identification. Specifically, the user ID encoding function in the User ID Handler uses an insufficiently strong hashing method. While the vulnerability requires specific conditions to exploit and carries low risk overall, the public availability of exploit details means organizations running affected versions should plan to upgrade.

• CVE-2026-13490LOW 3.7

  A vulnerability in GLPI (Groupe Linux des Professionnels Informatiques), a popular open-source IT asset and helpdesk management system, allows an attacker to bypass authorization controls when viewing document files. By manipulating the document ID parameter in the document retrieval function, an unauthenticated attacker can potentially access files they should not be permitted to view. The issue affects versions 11.0.5, 11.0.6, and 11.0.7. While the attack is difficult to execute and requires specific conditions, it could expose sensitive documentation stored within GLPI instances.

• CVE-2026-13491LOW 3.7

  A denial-of-service vulnerability exists in xiaozhi-esp32 versions up to 2.2.6 within the MQTT protocol handler. By manipulating the session_id parameter sent to the Application::GetInstance function, a remote attacker can trigger a crash or service interruption. While the vulnerability is now public and exploits exist, successful exploitation requires specific conditions and technical knowledge, making opportunistic attacks less likely. The vulnerability carries a CVSS 3.1 score of 3.7 (Low severity).

• CVE-2026-13510LOW 3.7

  SimStudioAI's password protection mechanism in versions up to 0.6.92 uses weak cryptographic hashing, allowing attackers to potentially recover or manipulate password data. While the attack requires specific conditions and has high complexity, a public exploit exists, making this a meaningful concern for organizations using affected versions. The vulnerability affects confidentiality but not integrity or availability.

• CVE-2026-13587LOW 3.7

  A heap-based buffer overflow vulnerability exists in PcapPlusPlus version 25.05, specifically in the LightPcapNg parser component. An attacker can manipulate a packet length parameter during parsing to trigger memory corruption on systems processing crafted pcapng files. While exploits are publicly available, the attack requires significant complexity and special conditions to execute successfully. The vulnerability carries a low CVSS severity rating due to limited direct impact potential.

• CVE-2026-13758LOW 3.7

  CryptX is a Perl cryptography library that implements authenticated encryption (AEAD) modes for securing data. A timing vulnerability exists in how the library verifies authentication tags when decrypting data in streaming mode. Instead of using a constant-time comparison, the library's decrypt_done() function compares tags byte-by-byte in a way that leaks information through execution time—it returns faster when more bytes match. An attacker with precise timing measurements could exploit this to forge valid authenticated messages by testing candidate tags and observing which ones take longest to reject, effectively reading the correct tag one byte at a time. This affects GCM, CCM, ChaCha20Poly1305, EAX, and OCB modes, though the single-shot decryption functions remain unaffected.

• CVE-2026-14738LOW 3.7

  A weakness in the vision feature caching mechanism of exo-explore (up to version 1.0.71) uses an insufficiently strong hashing algorithm to generate cache keys. This allows an attacker positioned on the network to potentially derive or predict cache identifiers, potentially exposing cached image data to unauthorized disclosure. The attack requires significant technical effort and specialized knowledge to execute, and no active exploitation in the wild has been widely documented, though proof-of-concept code has been published.

• CVE-2026-14935LOW 3.7

  GStreamer's WebRTC component contains a logic bug that inverts a security check for DTLS certificate fingerprints in WebRTC signaling. Instead of requiring remote peers to provide a fingerprint attribute (and accepting only those with valid ones), the code does the opposite: it accepts offers without fingerprints while rejecting those that include them. An attacker positioned to intercept WebRTC setup traffic could exploit this to bypass certificate pinning protections, potentially enabling man-in-the-middle attacks on media streams even when both endpoints intended to use DTLS encryption.

• CVE-2026-15041LOW 3.7

  389 Directory Server contains a timing-based information disclosure vulnerability in its PBKDF2-SHA256 password hashing implementation. Instead of using a constant-time comparison function, the server uses standard memcmp() to verify password hashes during LDAP authentication. While an attacker could theoretically measure minute timing differences across many bind attempts to extract partial hash information, the practical difficulty is extremely high due to PBKDF2's intentional computational overhead. This is a low-severity issue affecting authentication security rather than availability or integrity.

• CVE-2026-24761LOW 3.7

  CVE-2026-24761 is an authorization flaw in Kiteworks Secure Data Forms that allows authenticated users to view metadata belonging to other users. Because the system doesn't properly verify who owns a resource before allowing access, a legitimate user can craft requests to retrieve information about files and documents they shouldn't see. The vulnerability requires an attacker to already have valid credentials and involves a higher complexity of exploitation, which limits its risk profile. This affects Kiteworks versions before 9.3.0.

• CVE-2026-40011LOW 3.7

  CVE-2026-40011 is a low-severity vulnerability in which an attacker can send numerous crafted DNS queries to trigger the insertion of a malformed dynamic block. This results in invalid data being written to the Prometheus monitoring endpoint, causing the scraper to reject it until the block expires. The attack requires specific network conditions and does not enable data theft or system compromise, but does degrade visibility into system health during the attack window.

• CVE-2026-40208LOW 3.7

  CVE-2026-40208 is a low-severity denial-of-service vulnerability affecting DNS over HTTPS version 3 (DoH3) implementations. An attacker can craft specially malformed DoH3 GET requests containing invalid DATA frames to slow down or temporarily disrupt query processing. The attack requires network access and specific conditions to be met, but does not compromise data confidentiality or integrity.

• CVE-2026-41000LOW 3.7

  Spring Web Services has a flaw in how it manages replay protection for SOAP messages. When security administrators configure protection against replay attacks—where an attacker re-uses old, valid authentication tokens or timestamps—the system doesn't always enforce those protections correctly. An attacker could potentially replay old username tokens, timestamps, or certain SAML assertions to bypass authentication, even though the operator believed replay protection was active. This is a configuration gap: the replay cache exists but isn't consistently connected to the validation logic that needs it.

• CVE-2026-41694LOW 3.7

  Spring Security's SAML module decrypts encrypted SAML messages without first verifying they contain a valid digital signature. An attacker can craft malicious SAML responses or logout messages, send them to a vulnerable application, and observe how the application behaves when decrypting attacker-controlled data. By analyzing these responses, an attacker could potentially extract encryption keys or other sensitive information that the application decrypts. This is a low-severity issue because exploitation requires specific conditions and yields limited information exposure.

• CVE-2026-41848LOW 3.7

  Spring Framework's AntPathMatcher component is susceptible to a Regular Expression Denial of Service (ReDoS) attack. If an attacker can control or influence URL path patterns processed by the matcher, they can craft a malicious pattern that causes excessive CPU consumption, potentially degrading application performance or availability. This vulnerability affects multiple actively supported versions of Spring Framework spanning several release lines.

• CVE-2026-41852LOW 3.7

  Spring Expression Language (SpEL) in VMware Spring Framework contains a flaw that allows attackers to invoke arbitrary methods with zero arguments even in contexts designed to restrict or prevent such actions. An attacker with network access could exploit this to trigger unintended application logic, potentially leading to denial of service or information disclosure depending on available methods and application design. This affects multiple versions across the 5.3, 6.1, 6.2, and 7.0 release branches.

• CVE-2026-42004LOW 3.7

  DNSdist, a DNS load balancer and traffic filter, has a vulnerability where attackers can bypass its filtering rules by crafting a specially formed EDNS OPT record. The vulnerability exists because DNSdist ignores the malicious OPT record during its filtering checks, but then rewrites it as a valid OPT record when adding EDNS Client Subnet information. This rewritten record is then passed to backend DNS servers, which see options that DNSdist's filters never evaluated. An attacker would need specific network conditions to exploit this, and the impact is limited to information integrity—no confidentiality or availability risk.