Live feed · cooey

2026-07-14 NVD CVE

CVE-2026-62643: In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascadin HIGH

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to...

2026-07-14 NVD CVE

CVE-2026-50694: Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unau HIGH

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

2026-07-14 NVD CVE

CVE-2026-49164: Heap-based buffer overflow in Active Directory Domain Services allows an unautho HIGH

Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

2026-07-14 NVD CVE

CVE-2026-46634: Twig is a template language for PHP. From 3.9.0 until 3.26.0, template_from_stri CRITICAL

Twig is a template language for PHP. From 3.9.0 until 3.26.0, template_from_string() compiles an inner template under a synthesized __string_template__<hash> name that can fall outside a SourcePolicyInterface sandbox...

2026-07-14 NVD CVE

CVE-2026-46633: Twig is a template language for PHP. Prior to 3.26.0, Compiler::string() does no CRITICAL

Twig is a template language for PHP. Prior to 3.26.0, Compiler::string() does not escape single quotes when a template name from a {% use %} tag is placed inside a PHP single-quoted string literal, allowing a crafted...

2026-07-14 NVD CVE

CVE-2026-48320: ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. HIGH

ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control...

coldfusioncross-site-scriptingcve-2026-48320elevated-accessmalicious-scriptsnvd-cvereflecteds-xsssession-control

2026-07-14 NVD CVE

CVE-2026-47988: Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul HIGH

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized...

adobe-commercecve-2026-47988exploitincorrect-authorizationno-user-interactionnvd-cvereads-accessessecurity-bypass

2026-07-14 NVD CVE

CVE-2026-47984: Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul HIGH

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized...

adobe-commercecve-2026-47984exploitincorrect-authorizationno-user-interactionnvd-cvereads-accessessecurity-bypass

2026-07-14 NVD CVE

CVE-2026-47767: Symfony is a PHP framework for web and console applications and a set of reusabl CRITICAL

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.46 until 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the CVE-2024-50340 fix gated runtime argv parsing on...

applications-securitycode-executioncve-2024-50340cve-2026-47767debug-modeenvironment-variablesnvd-cvephp

2026-07-14 NVD CVE

CVE-2026-45069: Symfony is a PHP framework for web and console applications and a set of reusabl CRITICAL

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, OidcTokenHandler::verifyClaims() registered audience (aud), issuer (iss), and...

audience-checkauthenticationclaim-verificationcve-2026-45069expiry-checksissuer-checksjwtnvd-cve

2026-07-14 NVD CVE

CVE-2026-45063: Symfony is a PHP framework for web and console applications and a set of reusabl CRITICAL

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, X509Authenticator extracts the user identifier from...

attackerauthenticationcertificatecve-2026-45063distinguished-namesemail-addressfixnvd-cve

2026-07-14 NVD CVE

CVE-2026-48334: Illustrator is affected by an Improper Input Validation vulnerability that could CRITICAL

Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

adobearbitrary-code-executioncve-2026-48334illustratorimproper-input-validationmalicious-filesnvd-cvesecurity

2026-07-14 NVD CVE

CVE-2026-48327: ColdFusion is affected by an Incorrect Authorization vulnerability that could re CRITICAL

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope...

arbitrary-code-executioncoldfusioncve-2026-48327exploitincorrect-authorizationnvd-cvesecurityvulnerability

2026-07-14 NVD CVE

CVE-2026-48325: ColdFusion is affected by a Missing Authentication for Critical Function vulnera CRITICAL

ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require...

arbitrary-code-executioncoldfusioncritical-functionscve-2026-48325exploitmissing-authenticationnvd-cvesecurity

2026-07-14 NVD CVE

CVE-2026-48324: ColdFusion is affected by an Improper Neutralization of Special Elements used in CRITICAL

ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user....

arbitrary-code-executioncoldfusioncve-2026-48324exploitationimproper-neutralizationnvd-cvescope-changesspecial-elements

2026-07-14 NVD CVE

CVE-2026-48322: ColdFusion is affected by an Improper Control of Generation of Code ('Code Injec CRITICAL

ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does...

arbitrary-code-executioncode-injectioncoldfusioncve-2026-48322exploitnvd-cvescope-changessecurity

2026-07-14 NVD CVE

CVE-2026-48321: ColdFusion is affected by an Incorrect Authorization vulnerability that could re CRITICAL

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized read and write access. Exploitation of...

coldfusioncve-2026-48321exploitincorrect-authorizationnvd-cveprivileges-escalationsecurityunauthorized-access

2026-07-14 NVD CVE

CVE-2026-48319: ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted D CRITICAL

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation...

arbitrary-code-executioncode-executioncoldfusioncoldfusion-vulnerabilitiescve-2026-48319directories-traversalexploitnvd-cve

2026-07-14 NVD CVE

CVE-2026-48318: ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted D CRITICAL

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to...

access-controlarbitrary-file-readscoldfusioncve-2026-48318directories-traversalexploitfile-system-readnvd-cve

2026-07-14 NVD CVE

CVE-2026-48284: ColdFusion is affected by an Improper Input Validation vulnerability that could CRITICAL

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction....

arbitrary-code-executioncoldfusioncve-2026-48284exploitimproper-input-validationinput-validationnvd-cvesecurity

2026-07-14 NVD CVE

CVE-2026-48359: Adobe Experience Manager is affected by an Improper Restriction of XML External CRITICAL

Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution in the context of the current user. A...

adobe-experience-managersarbitrary-code-executioncve-2026-48359elevated-accessno-user-interaction-requiresnvd-cvesensitive-file-readingsession-control

2026-07-14 NVD CVE

CVE-2026-48358: Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnera CRITICAL

Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require...

adobe-commercearbitrary-code-executioncode-executioncve-2026-48358improper-encodingimproper-escapingnvd-cvesecurities-risks

2026-07-14 NVD CVE

CVE-2026-48356: Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type CRITICAL

Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this...

adobe-commercearbitrary-code-executioncve-2026-48356elevated-accessmalicious-scriptsnvd-cvesession-controlunrestricted-uploads

2026-07-14 NVD CVE

CVE-2026-48259: Adobe Experience Manager is affected by a Server-Side Request Forgery (SSRF) vul CRITICAL

Adobe Experience Manager is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could leverage...

adobe-experience-managersarbitrary-code-executioncve-2026-48259elevated-accessno-user-interaction-requiresnvd-cveservers-sides-requests-forgerysession-control

2026-07-14 NVD CVE

CVE-2026-56190: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to CRITICAL

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.

code-executioncode-execution-vulnerabilitycve-2026-56190networks-attacksnetworks-vulnerabilitiesnvd-cverdpremote-desktop-protocol

2026-07-14 NVD CVE

CVE-2026-50518: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacke CRITICAL

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

buffer-overflowcode-executioncve-2026-50518dhcp-serverheap-based-buffer-overflownetworks-attacksnetworks-vulnerabilitiesnvd-cve

2026-07-14 NVD CVE

CVE-2026-50380: Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to ex CRITICAL

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

buffer-overflowcode-executioncve-2026-50380exploitgdiheap-based-buffer-overflownetworks-attacksnvd-cve

2026-07-14 NVD CVE

CVE-2026-56164: Missing authentication for critical function in Microsoft Office SharePoint allo MEDIUM ◈ 2 sources · orig. NVD CVE

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

authentication-bypasscisa-kevcritical-functionscve-2026-56164microsoftmissing-authenticationnetwork-securityprivileges-escalation

2026-07-13 NVD CVE

CVE-2026-57830: The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbitrar CRITICAL

The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbitrary file deletion.

arbitrary-file-deletioncve-2026-57830extensionfile-deletionhelixes-ultimatesjoomlanvd-cvesecurity

2026-07-13 NVD CVE

CVE-2026-40469: Integer overflow vulnerability has been found in "builtin.c" program file of gaw CRITICAL

Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It...

32-bit-buildcrashes-vulnerabilitiescve-2026-40469do-subgawkheap-overflowinteger-overflownvd-cve

2026-07-13 NVD CVE

CVE-2026-40468: Integer overflow vulnerability has been found in "builtin.c" program file of gaw CRITICAL

Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and...

cisacmmc-level-2cve-2026-40468dodfedramp-authorizationgawkheap-metadatainteger-overflow

2026-07-13 NVD CVE

CVE-2026-62327: 9Router through version 0.4.41 contain an unauthenticated information disclosure CRITICAL

9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability that allows remote attackers to retrieve plaintext API keys for all connected AI provider accounts by sending a single...

9routerai-provider-accountapi-key-exposurebilling-fraudcompliance-riskcve-2026-62327information-leakagemissing-authentication-middleware

2026-07-13 NVD CVE

CVE-2026-59801: 9Router through version 0.4.41 contains an unauthenticated access vulnerability CRITICAL

9Router through version 0.4.41 contains an unauthenticated access vulnerability that allows remote attackers to interact with provider management API endpoints by sending requests without any credentials due to...

9routerapi-endpointapi-keyauthentication-middlewarecompliance-riskcredentials-exposurecve-2026-59801denial

2026-07-13 NVD CVE

CVE-2026-61500: Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the CRITICAL

Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs of the same generator to unauthenticated clients during login. A remote...

administrative-accessauthenticationconfigurations-featurescve-2026-61500login-responsesnon-cryptographic-generatornvd-cverejetto

2026-07-13 NVD CVE

CVE-2026-61498: Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerabi CRITICAL

Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gen_graphs.php endpoint that allows remote unauthenticated attackers to execute arbitrary commands by supplying...

cmmc-level-2command-injectioncve-2026-61498graph-generationinput-sanitizationnist-800-171nvd-cveos-command-execution

2026-07-13 NVD CVE

CVE-2026-4769: Certain devices in the WAGO System I/O Field series activate an internal diagnos CRITICAL

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without...

cisacmmc-level-2cve-2026-4769defense-industrial-basedevices-compromisefedramp-authorizationincident-responseinternal-diagnostic

2026-07-13 NVD CVE

CVE-2026-13221: Perl versions through 5.43.9 produce silently incorrect regular expression match CRITICAL

Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk. When such branches are...

access-controlcve-2026-13221false-negativefalse-positivesfilteringnvd-cveoverflowperl

2026-07-12 NVD CVE

CVE-2026-15511: A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected CRITICAL

A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vulnerability is the function system_wl_upload_pic_file of the file /usr/bin/webmgnt of the component FastCGI Backend. This...

cf-wr631axcomfastcommand-injectioncve-2026-15511fastcgi-backendsfile-path-manipulationnvd-cveos-command-injection

2026-07-12 NVD CVE

CVE-2026-56271: Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded CRITICAL

Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets ('auth_token', 'refresh_token') and default audience and issuer values ('AUDIENCE', 'ISSUER') in the enterprise...

api-securityauthentication-bypassauthentication-middlewarecve-2026-56271default-credentialsflowisehardcoded-secretimpersonation

2026-07-12 NVD CVE

CVE-2026-56260: Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Dock CRITICAL

Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The output_path parameter accepts arbitrary filesystem paths without validation,...

api-serverarbitrary-file-writecrawl4aicve-2026-56260denialdockerdocker-apusendpoint-security