Skip to content

cveboard RSS feed

Everything on file

Tuesday, October 20
- CISA KEV CVE-2026-96656 Plex Media Server External Control of File Name or Path Vulnerability CISA due Oct 23, 2026
- CISA KEV CVE-2026-96655 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability CISA due Nov 3, 2026
- CISA KEV CVE-2026-96654 Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability CISA due Oct 23, 2026
- CISA KEV CVE-2026-96652 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability CISA due Nov 3, 2026
- CISA KEV CVE-2026-110936 Siemens Software Center Uncontrolled Search Path Element Vulnerability CISA due Nov 3, 2026
- CISA KEV CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability CISA due Oct 23, 2026
- HIBP Assurance Retraite data breach 70,372 accounts
Sunday, October 18
- HIBP Gîtes de France data breach 117,574 accounts
Friday, October 16
- CISA KEV CVE-2026-102764 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability CISA due Oct 19, 2026
- CISA KEV CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability CISA due Oct 19, 2026
Thursday, October 15
- CISA KEV CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability CISA due Oct 18, 2026
Wednesday, October 14
- CISA KEV CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability CISA due Oct 17, 2026
- CISA KEV CVE-2026-105134 Ahsay AhsayCBS Command Injection Vulnerability CISA due Oct 17, 2026
- CISA KEV CVE-2026-105133 Ahsay AhsayCBS Improper Authentication Vulnerability CISA due Oct 17, 2026
- CISA KEV CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CISA due Oct 17, 2026
- HIBP Crunchbase data breach 559,908 accounts
Tuesday, October 13
- CISA KEV CVE-2026-96951 Microsoft Windows Command Injection Vulnerability CISA due Oct 16, 2026
- CISA KEV CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability CISA due Oct 16, 2026
Monday, October 12
- HIBP Sharecare data breach 318,185 accounts
Friday, October 9
- GitHub CVE-2026-68582 Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA) Critical, go · 20:42 UTC
- GitHub CVE-2026-107806 Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite Critical, go · 20:45 UTC
- HIBP Neogen data breach 435,963 accounts
Thursday, October 8
- CISA KEV CVE-2023-22894 Strapi Cleartext Storage of Sensitive Information Vulnerability CISA due Oct 11, 2026
- CISA KEV CVE-2021-3199 ONLYOFFICE Docs Server Path Traversal Vulnerability CISA due Oct 11, 2026
- CISA KEV CVE-2016-3081 Apache Struts Command Injection Vulnerability CISA due Oct 11, 2026
- CISA KEV CVE-2015-5477 ISC BIND Data Processing Errors Vulnerability CISA due Oct 11, 2026
- CISA KEV CVE-2015-3306 ProFTPD Improper Access Control Vulnerability CISA due Oct 11, 2026
- GitHub CVE-2026-61447 PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets Critical, pip · 16:44 UTC
- GitHub CVE-2026-61445 PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls Critical, pip · 22:00 UTC
- GitHub CVE-2026-107722 fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion Critical, npm · 22:02 UTC
- GitHub CVE-2026-106446 Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937) Critical, npm · 17:52 UTC
- GitHub CVE-2026-107282 AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host Critical, maven · 16:30 UTC
- GitHub CVE-2026-107726 Hazelcast allows arbitrary member memory access by low-privileged client Critical, maven · 22:10 UTC
Wednesday, October 7
- GitHub CVE-2026-105857 Payload Form Builder has an RCE issue Critical, npm · 20:28 UTC
- GitHub CVE-2026-93605 vm2 contains a sandbox escape vulnerability Critical, npm · 18:05 UTC
- GitHub CVE-2026-106102 Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead() Critical, npm · 16:14 UTC
- GitHub CVE-2026-105697 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration Critical, pip · 20:36 UTC
- GitHub CVE-2026-105859 Payload: Unauthorized update to collection documents Critical, npm · 20:28 UTC
- GitHub CVE-2026-62252 Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login Critical, go · 16:12 UTC
- GitHub CVE-2026-62253 Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default) Critical, go · 16:11 UTC
- GitHub CVE-2026-106501 Backstage: Sensitive information exposure in Scaffolder Critical, npm · 17:59 UTC
- GitHub CVE-2026-73483 Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium Critical, npm · 16:17 UTC
- GitHub CVE-2026-105863 Payload authentication token field handling issue Critical, npm · 20:28 UTC
- GitHub CVE-2026-62176 PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation Critical, pip · 16:05 UTC
- GitHub CVE-2026-73487 Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass Critical, npm · 16:17 UTC
- HIBP CyrusOne data breach 373,460 accounts
- HIBP Double Counter data breach 274,922 accounts
- HIBP Angel One data breach 6,765,054 accounts
Tuesday, October 6
- GitHub CVE-2026-10561 Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation Critical, pip · 13:38 UTC
- GitHub CVE-2026-105845 Payload: SQL Injection in SQLite and Postgres Critical, npm · 16:09 UTC
- GitHub CVE-2026-105851 Payload: Field access control bypass on auth collections Critical, npm · 16:17 UTC
- GitHub CVE-2026-105844 Payload: Prototype pollution in Payload Import Export plugin Critical, npm · 16:09 UTC
- GitHub CVE-2026-102422 shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token Critical, npm · 13:40 UTC
- GitHub CVE-2026-105794 MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL Critical, nuget · 15:33 UTC
Monday, October 5
- GitHub CVE-2026-92955 vm2: Sandbox Escape (NodeVM) Critical, npm · 22:47 UTC
- GitHub CVE-2026-92946 vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE Critical, npm · 22:34 UTC
- GitHub CVE-2026-92947 vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool Critical, npm · 22:34 UTC
- GitHub CVE-2026-92956 vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass Critical, npm · 22:34 UTC
- GitHub CVE-2026-104846 Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw) Critical, npm · 23:40 UTC
- GitHub CVE-2026-8505 Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass Critical, pip · 22:31 UTC
- GitHub CVE-2026-100721 vm2: NodeVM custom resolution bypasses external path boundaries Critical, npm · 23:24 UTC
- GitHub CVE-2026-104848 Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution Critical, npm · 22:50 UTC
- GitHub CVE-2026-104849 Tinypool: Prototype Pollution Gadget to RCE in run() options Critical, npm · 22:49 UTC
- GitHub CVE-2026-92934 vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit Critical, npm · 22:38 UTC
- GitHub CVE-2026-103922 Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path Critical, npm, swift · 22:53 UTC
- GitHub CVE-2026-92953 vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix Critical, npm · 22:45 UTC
- GitHub CVE-2026-102829 simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection Critical, npm · 23:48 UTC
- GitHub CVE-2026-102828 simple-git unsafe-operation guard does not block trailer command configuration Critical, npm · 23:48 UTC
- GitHub CVE-2026-92954 vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process Critical, npm · 22:45 UTC
- GitHub CVE-2026-90711 proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet Critical, npm · 23:30 UTC
- GitHub CVE-2026-9205 Langflow: Weak Fernet Key via random.seed() Critical, pip · 22:31 UTC
Sunday, October 4
- CISA KEV CVE-2026-88779 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CISA due Oct 7, 2026
Friday, October 2
- CISA KEV CVE-2026-102490 Zammad GmbH Zammad Improper Privilege Management Vulnerability CISA due Oct 5, 2026
- CISA KEV CVE-2026-102489 Zammad GmbH Zammad Session Fixation Vulnerability CISA due Oct 5, 2026
- GitHub GHSA-v2f8-6655-7grj Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chain Critical, pip · 22:44 UTC
- GitHub GHSA-jqmf-mx4f-hfr6 Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF Critical, pip · 22:44 UTC
- GitHub CVE-2026-73802 gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled Critical, go · 23:18 UTC
- GitHub CVE-2026-10032 @a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions Critical, npm · 22:55 UTC
- GitHub GHSA-gg6r-gp4c-89hp Trigger.dev: V1 coordinator default-secret unauth Socket.IO Critical, npm · 22:39 UTC
Thursday, October 1
- CISA KEV CVE-2026-104286 Fortinet FortiMail Path Traversal Vulnerability CISA due Oct 4, 2026
- GitHub CVE-2026-92940 vm2 exposes host HTTPS credentials and TLS traffic through globalAgent Critical, npm · 15:38 UTC
- GitHub CVE-2026-92937 vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection Critical, npm · 15:32 UTC
- GitHub CVE-2026-92941 vm2 NodeVM can replace the host process TLS trust store Critical, npm · 15:27 UTC
- GitHub CVE-2026-69085 SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking Critical, go · 14:38 UTC
- GitHub CVE-2026-92948 vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape Critical, npm · 15:41 UTC
- GitHub CVE-2026-92951 vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package Critical, npm · 15:37 UTC
- GitHub CVE-2026-92957 vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process Critical, npm · 15:36 UTC
- GitHub CVE-2026-92938 vm2 allows a sandboxed plugin to execute native code through `node:sqlite` Critical, npm · 15:29 UTC
- GitHub CVE-2026-92939 vm2 crypto builtin loads attacker native code through setEngine Critical, npm · 15:28 UTC
- GitHub CVE-2026-92944 vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector Critical, npm · 15:28 UTC
- GitHub CVE-2026-102992 piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env Critical, npm · 15:03 UTC
- GitHub CVE-2026-92935 vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE Critical, npm · 15:34 UTC
Wednesday, September 30
- CISA KEV CVE-2026-76504 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability CISA due Oct 3, 2026
- GitHub GHSA-vcvr-r3jv-pc5j Next.js: Remote Code Execution in next/og ImageResponse Critical, npm · 14:48 UTC
Tuesday, September 29
- CISA KEV CVE-2026-86950 Apple Multiple Products Out-of-Bounds Write Vulnerability CISA due Oct 13, 2026
- GitHub CVE-2026-101894 @xhmikosr/decompress: Path traversal via symlink chain Critical, npm · 23:49 UTC
- GitHub CVE-2026-102268 PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard Critical, pip · 23:17 UTC
Sunday, September 27
- CISA KEV CVE-2026-88772 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CISA due Sep 30, 2026
- CISA KEV CVE-2026-88771 Citrix NetScaler Improper Input Validation Vulnerability CISA due Sep 30, 2026
Friday, September 25
- CISA KEV CVE-2026-87902 WordPress Core Remote File Inclusion Vulnerability CISA due Sep 28, 2026
- CISA KEV CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability CISA due Sep 28, 2026
- CISA KEV CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerability CISA due Sep 28, 2026
- GitHub CVE-2026-92161 FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider Critical, composer · 15:55 UTC
Thursday, September 24
- CISA KEV CVE-2026-71362 Adobe Commerce and Magento Incorrect Authorization Vulnerability CISA due Sep 27, 2026
- CISA KEV CVE-2026-5430 WSO2 Multiple Products Path Traversal Vulnerability CISA due Sep 27, 2026
- GitHub CVE-2026-61732 Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context Critical, pip · 19:17 UTC
- GitHub CVE-2026-59167 SunEditor: Critical XSS vulnerability - sanitizer bypass Critical, npm · 14:57 UTC
- GitHub CVE-2026-61742 DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution Critical, npm · 19:36 UTC
- GitHub CVE-2026-61741 http4s-scala-xml has an XML External Entity (XXE) processing issue Critical, maven · 19:35 UTC
- GitHub CVE-2026-61604 ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass Critical, go · 19:22 UTC
Wednesday, September 23
- GitHub CVE-2026-77602 OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites) Critical, rubygems · 18:57 UTC
- GitHub CVE-2026-57149 plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection Critical, pip · 13:55 UTC