Briefs

A misconfiguration vulnerability in Dovecot (CVE-2026-24031) allows authentication bypass and user enumeration when the `auth_username_chars` setting is cleared, potentially leading to unauthorized access to mailboxes.

An integer overflow vulnerability in the GIMP file-pvr plug-in allows heap-based buffer overflow via malicious .pvr files, potentially leading to arbitrary code execution or application crashes.

An integer overflow vulnerability (CVE-2026-102834) in JavaCV's IPCameraFrameGrabber allows a network attacker to cause a permanent CPU-spinning denial-of-service by sending a crafted HTTP Content-Length header.

The lopdf Rust library is vulnerable to stack exhaustion via unbounded recursion when parsing deeply nested PDF objects, allowing unauthenticated attackers to cause a denial-of-service via SIGABRT.

A nil-pointer dereference vulnerability (CVE-2026-100349) in kin-openapi causes a process crash when validating response headers that declare 'content' instead of 'schema'.

An authorization flaw in the Arcane user management API allows users with the 'users:update' permission to overwrite administrative credentials and hijack global administrator accounts.

The Claude Agent SDK for Python fails to validate the resume option, enabling an argument injection attack that allows arbitrary command execution via unauthorized MCP server configurations.

LMCache versions 0.3.9 through 0.5.5 are vulnerable to unauthenticated remote code execution due to insecure pickle deserialization within the multiprocess ZeroMQ transport layer.

IBM i versions 7.3 through 7.6 contain an improper data sanitization vulnerability in the HTTP Server Administration interface that allows remote authenticated attackers to execute arbitrary code or exfiltrate sensitive data.

CVE-2026-59963 allows an authenticated user to bypass object-level authorization and access, share, or exfiltrate private recipes via utility API endpoints.

Authenticated users can exploit a blind Server-Side Request Forgery vulnerability in Tandoor Recipes versions prior to 2.6.10 by manipulating AI provider URL inputs to map internal network resources.

An authenticated OS command injection vulnerability (CVE-2026-102608) in ZoneMinder versions prior to 1.38.3 allows remote code execution via unsanitized monitor names during event export operations.

An unauthenticated remote code execution vulnerability (CVE-2023-4634) in the WordPress Media Library Assistant plugin versions before 3.10 allows attackers to leverage Imagick processing for arbitrary code execution.

An unauthenticated arbitrary file read vulnerability (CVE-2025-10952) in the ml-logger stream_handler allows remote attackers to enumerate and exfiltrate sensitive files from the host filesystem.

LingGuo-Drama through commit 8a6924a is vulnerable to an Insecure Direct Object Reference (IDOR) flaw allowing unauthorized access, modification, and deletion of user projects.

Netcore NR256CN routers up to version 1.5.140116 are vulnerable to a pre-authentication stack buffer overflow in the Boa web server's user_ok() function, allowing remote code execution or denial-of-service.

99AI versions 4.3.0 and earlier contain a missing authentication vulnerability in the /api/chatLog/exportExcel endpoint, enabling unauthenticated attackers to exfiltrate sensitive user chat logs.

ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to access private knowledge bases by enumerating sequential ID values.

OtterMind Nubase versions through 0.1.4 are vulnerable to an authentication bypass in the storage API, allowing unauthenticated attackers to read and delete private objects.

Authenticated users can exploit an SQL injection vulnerability in the WebVella ERP EQL query API to exfiltrate sensitive data from user and role tables.

An IDOR vulnerability in Shaiwz data-platform-open allows authenticated users to access, enumerate, and modify foreign workspace datasources by manipulating numeric IDs in API requests.

WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows unauthorized tenants to escalate privileges and access sensitive financial data by forging the unsigned X-USERINFO header.

Magistrala through version 1.0.0 contains an authorization bypass flaw allowing authenticated workspace members to perform unauthorized certificate operations across different tenants.

Authenticated low-privileged users can exploit missing authorization checks in EFAK 5.1.0 and earlier to escalate privileges and perform administrative actions on managed Kafka clusters.

APIPark versions through 1.9.7-beta are vulnerable to an authorization bypass allowing authenticated team managers to manipulate team IDs to access, modify, or delete resources belonging to other teams.

Course-tencent-cloud through version 2.0.1 contains an authentication bypass vulnerability allowing attackers to brute force 6-digit verification codes due to a lack of rate limiting or invalidation.

An insecure direct object reference vulnerability in Cube-studio versions through 2026.09.01 allows authenticated users to perform unauthorized administrative actions on notebooks and services via sequential ID manipulation.

Chaskiq version 2.0.3 and earlier contains a server-side request forgery vulnerability in the createUrlUpload GraphQL mutation, allowing unauthenticated attackers to access internal resources including cloud metadata services.

ChronoFrame versions 1.0.0 and earlier are vulnerable to a missing authentication flaw in API handlers, allowing unauthenticated attackers to reconfigure instance storage and site settings.

FastapiAdmin versions through 3.0 contain an authentication bypass vulnerability allowing unauthenticated attackers to obtain superuser sessions via unprotected auto-login endpoints.