Live feed · cooey

2026-07-14 NVD CVE

CVE-2026-54995: Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unautho HIGH

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

2026-07-14 NVD CVE

CVE-2026-50330: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac HIGH

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.

2026-07-14 NVD CVE

CVE-2026-49181: Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthor HIGH

Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.

2026-07-14 NVD CVE

CVE-2026-47984: Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul HIGH

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized...

adobe-commercecve-2026-47984exploitincorrect-authorizationno-user-interactionnvd-cvereads-accessessecurity-bypass

2026-07-14 NVD CVE

CVE-2026-59836: A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 HIGH

A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information disclosure via...

certificate-validationcve-2026-59836endpoint-securityforticlientemfortinetimproper-certificate-validationinformation-disclosurenetwork-security

2026-07-14 NVD CVE

CVE-2026-50439: Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized HIGH

Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

2026-07-12 NVD CVE

CVE-2026-10666: parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for string HIGH

parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c.d:port") copies the port substring into a fixed 17-byte stack buffer (char ipaddr[NET_IPV4_ADDR_LEN + 1]) using a...

2026-07-09 NVD CVE

CVE-2026-59216: Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI plat HIGH

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, get_event_call delivered execute:python and execute:tool Socket.IO events to a client-supplied session_id after...

ai-platformauthentication-bypasscisacode-executioncve-2026-59216dodnist-800-171nvd-cve

2026-07-09 NVD CVE

CVE-2026-53963: Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 20 HIGH

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a malicious second factor name on an attacker-controlled account was not escaped in the delete confirmation...

2026-07-09 NVD CVE

CVE-2026-59214: Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI plat HIGH

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, Open WebUI runs client-side Python with Pyodide in a same-origin web worker, allowing stored chat payloads that...

ai-platformauthenticate-requestsclient-side-pythoncve-2026-59214cybersecuritydata-exposureendpoint-securitynvd-cve

2026-07-09 NVD CVE

CVE-2026-58459: gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injecti HIGH

gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by...

arbitrary-shell-command-executionbackticks-payloadscommand-escapingcommand-injectioncommit-4c06658cve-2026-58459gnuplotgpsd

2026-07-08 NVD CVE

CVE-2026-3144: IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could a HIGH

IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to gain unauthorized access to the application before the system enforces a credential update.

api-connectcredentials-managementcve-2026-3144cybersecuritydata-exposuredefault-credentialsdefense-industrial-baseibm

2026-07-08 NVD CVE

CVE-2026-58192: Appium is a cross-platform automation framework for all kinds of apps, built on HIGH

Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 1.1.6, the Appium storage plugin exposes POST /storage/delete, whose handler passes the...

2026-07-08 NVD CVE

CVE-2026-60002: ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its h HIGH

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

clients-sidescve-2026-60002cybersecuritydefense-industrial-basedfar-252-204-7012freehost-keyinformation-security

2026-07-08 NVD CVE

CVE-2026-29009: U-Boot through 2026.04-rc3 contains a buffer overflow vulnerability in nfs_readl HIGH

U-Boot through 2026.04-rc3 contains a buffer overflow vulnerability in nfs_readlink_reply() (net/nfs-common.c) when CONFIG_CMD_NFS is enabled, allowing a malicious or compromised NFS server to overflow the 2048-byte...

2026-07-07 NVD CVE

CVE-2026-13020: A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal HIGH

A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes. A remote, unauthorized attacker may assume ownership of a user’s...

account-compromiseadministrator-privilegesarcgicve-2026-13020cybersecurityemail-serveresriinformation-security

2026-07-04 NVD CVE

CVE-2026-14535: In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImports HIGH

In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it inspects, regardless of whether the...

2026-07-03 NVD CVE

CVE-2026-57983: Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized HIGH

Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

2026-07-02 NVD CVE

CVE-2026-54408: A malicious actor with access to the network could exploit an Improper Access Co HIGH

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming.

2026-07-02 NVD CVE

CVE-2026-59092: JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypas HIGH

JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that allows unauthenticated remote attackers to access sensitive debug and metrics endpoints by exploiting improper...

2026-06-30 NVD CVE

CVE-2026-13449: IBM Business Automation Manager Open Editions 9.0.0 through 9.4.2 is vulnerable HIGH

IBM Business Automation Manager Open Editions 9.0.0 through 9.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose...

2026-06-30 NVD CVE

CVE-2026-10560: IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing authentication vulnerabi HIGH

IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing authentication vulnerability in /api/v1/build_public_tmp/ endpoints that allows an unauthenticated attacker to read build event data or cancel jobs using a...

2026-06-30 NVD CVE

CVE-2026-58016: A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new HIGH

A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a <node> element...

2026-06-30 NVD CVE

CVE-2026-11541: IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Serv HIGH

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulnerability.

2026-06-30 NVD CVE

CVE-2026-11546: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected HIGH

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerability with the adminCenter-1.0 feature enabled.

2026-06-30 NVD CVE

CVE-2026-11714: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected HIGH

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerability with the apiDiscovery-1.0 feature enabled.

2026-06-30 NVD CVE

CVE-2026-13772: IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language eng HIGH

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language engine resolves attacker-supplied class names via Class.forName() and invokes their constructors with no allow-list at three distinct sinks...

2026-06-26 NVD CVE

CVE-2026-31928: The DMP-5000 devices are shipped with a default administrative web account with HIGH

The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts...

2026-06-26 NVD CVE

CVE-2026-12411: Broken Access Control in the devLXDInstancePatchHandler component of Canonical L HIGH

Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's custom storage volume via a crafted device PATCH request over...

2026-06-22 NVD CVE

CVE-2026-9072: IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - HIGH

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with the WebSphere WebServer Plug-in component - are vulnerable to remote code execution and denial of...

2026-06-21 NVD CVE

CVE-2026-12773: A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the HIGH

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py of the component MCP Proxy....

2026-06-18 NVD CVE

CVE-2026-55203: HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vul HIGH

HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers. When contentLength is 65535...

2026-06-12 NVD CVE

CVE-2026-47691: Netty is a network application framework for development of protocol servers and HIGH

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's `DnsResolveContext` insufficiently validates the bailiwick of NS...

2026-06-12 NVD CVE

CVE-2026-50085: The Aqara Board service (op-test.aqara.com) accepts arbitrary MQTT command paylo HIGH

The Aqara Board service (op-test.aqara.com) accepts arbitrary MQTT command payloads, and forwards them to the platfom's HiveMQ broker without authentication. This is an instance of "CWE-306: Missing Authentication...

2026-06-12 NVD CVE

CVE-2026-45674: Netty is a network application framework for development of protocol servers and HIGH

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME...

2026-06-11 NVD CVE

CVE-2026-41699: Spring for GraphQL applications are vulnerable to Unsafe Deserialization when pr HIGH

Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. An attacker can craft a malicious GraphQL request that can lead to Remote Code Execution when the...

2026-06-09 NVD CVE

CVE-2026-46749: A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update HIGH

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application uses a password hashing implementation with a static, hardcoded salt shared across all users and...

2026-06-09 NVD CVE

CVE-2026-41855: In an untrusted JMS environment, org.springframework.jms.support.converter.Mappi HIGH

In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and org.springframework.jms.support.converter.JacksonJsonMessageConverter allow arbitrary class...

2026-06-09 NVD CVE

CVE-2026-47931: ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Inpu HIGH

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high...

2026-06-09 NVD CVE

CVE-2026-47932: ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limi HIGH

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the...