Author name: UNDERCODE

The vulnerability arises from a complete absence of object‑level permission validation within the page duplication workflow. When a staff user

CVE-2026-17173 is a vulnerability affecting IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. The core of the issue

CVE-2026-17182 is an authentication bypass vulnerability affecting IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. The flaw stems

The django-cms frontend-editing structure endpoint `GET //admin/cms/placeholder/object//structure//` did not perform an object-level authorization check for non-PageContent objects. Any authenticated, active

CVE-2026-74244 exposes a critical flaw in Red Hat Quay’s Stripe billing webhook handler, specifically within the `/webhooks/stripe` endpoint. This vulnerability

This vulnerability resides in Wagtail’s Admin API, specifically the `/api/v2/admin/pages//copy_for_translation/` endpoint, which is designed to facilitate content localisation workflows. Under

The vulnerability exists in Winter CMS versions prior to v1.2.14, specifically within the `Backend\Controllers\MyAccount` controller introduced in v1.2.13. This controller

CVE-2026-16914 is a security vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS (Virtual I/O

CVE-2026-16897 is a locally exploitable out-of-bounds write vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM

CVE-2026-16886 is a security vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as the IBM PowerVM Virtual I/O

IBM AIX 7.2、7.3 以及 IBM PowerVM VIOS 4.1 中存在一个严重的操作系统命令注入漏洞，被标识为 CVE-2026-16882。该漏洞源于软件对用户可控输入中特殊元素（如 |、&、; 等 shell 元字符）的不当中和（Improper Neutralization of Special Elements used in

CVE-2026-16865 is a high-severity OS command injection vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM

IBM AIX version 7.2, 7.3, and IBM PowerVM VIOS 4.1 are affected by a critical stack-based buffer overflow vulnerability identified

CVE-2026-16869 is a high-severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. The

CVE-2026-16894 is a critical stack-based buffer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM

IBM AIX 7.2、7.3 以及 IBM PowerVM VIOS 4.1 存在一个高危漏洞，允许本地攻击者通过 shell 元字符注入执行任意命令。该漏洞的根源在于系统未能正确净化和验证用户输入中的特殊字符，导致攻击者可以将恶意命令注入到原本合法的系统调用中。 具体而言，当受影响的 AIX 或 VIOS 系统处理来自本地用户的输入时，如果该输入被用于构造 shell 命令，且未对管道符（`|`）、重定向符（`>`、`

CVE-2026-16891 is an out-of-bounds read vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS version

A critical vulnerability, identified as CVE-2026-20349, has been discovered in the Remote Access SSL VPN service of Cisco Secure Firewall

CVE-2026-16873 is a local privilege escalation vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS

The core of this vulnerability resides in the Snort 3 Detection Engine, which is the primary intrusion prevention and packet

CVE-2026-16874 is a privilege escalation vulnerability affecting IBM AIX version 7.2, 7.3, and IBM PowerVM VIOS 4.1. The flaw resides

CVE-2026-16866 is an out-of-bounds read vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM Virtual I/O

CVE-2026-16885 is a critical stack-based buffer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM

CVE-2026-16877 is a stack-based buffer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS

CVE-2026-16883 is an out-of-bounds read vulnerability affecting IBM AIX 7.2, AIX 7.3, and IBM PowerVM VIOS 4.1. The flaw resides

CVE-2026-16901 is a high-severity memory corruption vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS

A vulnerability in the Cisco Unified Threat Defense (UTD) Snort Intrusion Prevention System (IPS) Engine for Cisco IOS XE Software

Intro: An unprivileged container can mount a denial-of-service attack against the entire container runtime of a host running Inspektor Gadget

CVE-2026-4793 is a vulnerability in Synology Assistant, a desktop utility for managing Synology NAS devices across a local network. The

A critical vulnerability has been discovered in the XAR file format parser of ClamAV, an open-source malware detection engine widely

MLflow is an open-source platform for managing machine learning, LLM, and agentic AI workflows. Prior to version 3.15.0, the unauthenticated

The vulnerability resides in the `symfony/ux-icons` package, a component of the Symfony UX JavaScript ecosystem that provides Twig helpers for

XWiki Platform is a generic wiki platform offering collaborative features and extensibility through various macros and APIs. One of its

How GHSA-qwgh-2vcv-g2f7 Works This vulnerability resides in the `block_buffer` crate, a foundational library used by many Rust cryptographic hashing implementations

Snipe-IT is a popular open-source IT asset and license management system. Prior to version 8.6.2, a stored DOM-based Cross-Site Scripting

The vulnerability resides in the HTTP client transport of the mcp/sdk package (version 0.5.0). The transport reads Server‑Sent‑Events (SSE) responses

The production media handler in next-tinacms-s3 allows an attacker to control the S3 object key via the `?key=` query parameter,

The Node.js Permission Model, introduced with the `–experimental-permission` flag, is designed to restrict access to file system, child processes, and

The vulnerability in mcp-searxng version 1.11.0 allows exposure of Basic Authentication credentials that are embedded in the SEARXNG_URL environment variable.

The vulnerability resides in the run-creation authorization flow of `langgraph-api` (versions prior to 0.10.0). Internally, the codebase employs a policy‑based

Snipe-IT is an open-source IT asset and license management system. Prior to version 8.6.3, the application contained a missing authorization

The vulnerability resides in the PSD (Photoshop Document) file format parser plugin bundled with GIMP. When processing a specially crafted

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive, and repeatable manner. Prior to

CVE-2026-59087 is a heap buffer overflow vulnerability discovered in the GIMP image manipulation program, specifically within its Seattle Filmworks (.sfw)

Vulnerability CVE-2026-53964 is a high-severity vulnerability identified in the Adfinis Document Merge Service. This security flaw enables a Remote Code

CVE-2026-63188 is a path traversal vulnerability (CWE-22) in the `@logto/tunnel` npm package, which is used to serve custom sign-in experience

Neo4j’s Bolt protocol implements a modern handshake decoder that fails to properly distinguish between an overlong capability bit mask and

libvips is a fast image processing library designed for efficiency and low memory usage. The `vipsload` operation in versions 8.18.0

A browser-mediated cross-origin request flaw exists within the Tina CMS development server (@tinacms/cli). The vulnerability allows an attacker-controlled website to

Grav is a popular flat-file content management system that relies on `.htaccess` rules to protect sensitive files from direct web

The vulnerability resides in MLflow’s webhook delivery mechanism, specifically within the unauthenticated `POST /api/2.0/mlflow/webhooks/{id}/test` endpoint. On a default MLflow Tracking

Multiple Cisco products incorporating the Snort 3 detection engine are affected by a vulnerability in the Visual Basic for Applications

Snipe-IT is an open-source IT asset/license management system. Prior to version 8.6.3, the application exposed a critical vulnerability that combined

A server-side template injection (SSTI) vulnerability exists in GeoServer that allows an authenticated administrator to upload FreeMarker templates containing malicious

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to

Intro: The GeoLens 1.2.4 release addresses a collection of security flaws that collectively permit both authenticated and anonymous users to

CVE-2026-59091 resides within the file format parsing engines of GIMP, specifically targeting the plugins responsible for Adobe Photoshop (PSD) and

A flaw was found in GIMP’s PAA (Paint Shop Pro Array) file format plugin. The vulnerability resides in the `decode_lzss()`

The vulnerability resides in mcp-searxng’s hardened-mode URL-reading feature, designed to block web_url_read from accessing private/internal network resources. While PR 79

The vulnerability identified as CVE-2026-2445 resides within multiple WSO2 enterprise products, including the Identity Server (IS) and API Manager (APIM).

A signed integer overflow vulnerability exists in GIMP’s `file-fli` plugin when processing FLI image files. The flaw resides in the

mtdowling/jmespath.php is a PHP library that implements JMESPath, a query language for JSON documents. A critical vulnerability exists in versions

CVE-2026-56685 is an OS command injection vulnerability identified in Dell ObjectScale, a software-defined object storage platform. The root cause is

How the Vulnerability Works Triton VM is a zero‑knowledge virtual machine that uses Algebraic Execution Tables (AET) and Arithmetic Intermediate

CVE-2026-14679 is a stack buffer overflow vulnerability discovered in PostgreSQL, one of the world’s most popular open-source relational database management

CVE-2026-54723 is a critical information disclosure vulnerability identified in devpi-server. The core of the issue lies in the replication protocol.

Summary The `NumpyReader` class in `monai/data/image_reader.py` unconditionally uses `np.load(name, allow_pickle=True)` at line 1276, enabling arbitrary code execution when loading a

CVE-2026-14676 is a critical heap buffer overflow vulnerability discovered in the PostgreSQL `pg_stat_statements` extension. This extension is commonly enabled for

CVE-2026-59911 is a medium-severity vulnerability identified in Dell ObjectScale, an object storage platform. The flaw resides in the `svc_tools` component,

CVE ID: CVE-2026-14677 How CVE-2026-14677 Works CVE-2026-14677 is an integer wraparound vulnerability affecting 32-bit builds of PostgreSQL’s procedural language extensions,

MineAdmin versions prior to 3.2.0-alpha.2 contain a path traversal vulnerability within the app-store plugin service. The root cause is the

The ACME client in Netflix Lemur, used to issue certificates from public Certificate Authorities like Let’s Encrypt and Google Public

CVE-2026-6471 is a high-severity missing authorization vulnerability in PostgreSQL’s logical decoding feature. Logical decoding is a core PostgreSQL mechanism that

The Froxlor AJAX endpoint (lib/ajax.php) is a standalone entry point that does not include the main application bootstrap (lib/init.php). While

The fix for GitHub Security Advisory (GHSA) `GHSA-v2wp-frmc-5q3v` introduced the `_validate_acme_url()` function to reject `acme_url` values not in the ACME_DIRECTORY_HOST_ALLOWLIST.

CVE-2026-21059 is a medium-severity vulnerability affecting Samsung Contacts on Samsung Mobile Devices running Android versions prior to the SMR Aug-2026

CVE-2026-71307 is an authorization bypass vulnerability in Netflix’s Lemur, a TLS certificate management tool. Prior to version 1.9.3, Lemur’s destination

The vulnerability resides in the `algo_from_pickle()` function within the `monai/auto3dseg/utils.py` file of the MONAI library. This function is designed to

How CVE-2026-55040 Works CVE-2026-55040 is a critical security feature bypass vulnerability in Microsoft SharePoint Server, stemming from weak authentication in

CVE-2026-59910 is an OS Command Injection vulnerability identified in Dell ObjectScale, a software-defined object storage platform. The vulnerability affects all

CVE-2026-54347 is a stored Cross-Site Scripting (XSS) vulnerability identified in Froxlor, an open-source server administration software. The flaw resides in

CVE-2026-33824 is a critical remote code execution vulnerability affecting the Windows Internet Key Exchange (IKE) Service Extensions. The vulnerability resides

How CVE-2026-59310 Works CVE-2026-59310 is a critical directory traversal vulnerability residing in the Syslog server component of VMware vCenter Server.

CVE-2025-58478 is a high-severity vulnerability affecting Samsung Android devices. The flaw resides in an undisclosed component within the Samsung Mobile

CVE-2026-56686 is an OS Command Injection vulnerability identified in Dell ObjectScale, a container-based object storage solution. The vulnerability stems from

CVE-2026-14673 is an untrusted search path vulnerability affecting the `amcheck` contrib module in PostgreSQL. The `amcheck` module provides functions that

Dell ObjectScale versions prior to 4.3.0.1 contain a Path Traversal vulnerability identified as CVE-2026-59909. This flaw, classified under CWE-35 (Path

How CVE-2026-56089 Works CVE-2026-56089 is a path traversal vulnerability identified in Dell ObjectScale, a software-defined object storage platform. The weakness

The vulnerability exists due to improper output escaping in the graph description configuration settings. The `graph_descr.` family of settings is

How CVE-2026-14681 Works This vulnerability resides in PostgreSQL’s GSSAPI (Generic Security Services Application Program Interface) support, specifically within the authentication

Netflix Lemur is an open-source TLS certificate management tool that handles certificate creation, storage, and automated rotation. Versions from 0.5.0

Froxlor is open source server administration software. Prior to version 2.3.8, the `DomainZones.add` API command in `lib/Froxlor/Api/Commands/DomainZones.php` accepts user-controlled DNS

CVE-2026-14678 is a buffer over-read vulnerability identified in the PostgreSQL relational database system. The flaw resides within the `pg_trgm` extension,

CVE-2026-56090 is a vulnerability affecting Dell ObjectScale, a cloud-native object storage solution from Dell Technologies. The flaw resides in how

The SSRF mitigation added for GHSA-54vg-pfh7-jq95 (_validate_revocation_url() in lemur/certificates/verify.py) can be bypassed. An operator-role user who uploads a certificate with

The tar extraction routines in `moby/go-archive` (Unpack, UnpackLayer, Untar/UntarUncompressed, and the `ApplyLayer` helpers) fail to confine filesystem operations to the

This vulnerability resides in PostgreSQL’s handling of the “internal” data type. In PostgreSQL, the “internal” type is a special pseudo-type

CVE-2026-71317 is an authorization bypass vulnerability in Netflix Lemur, a TLS certificate management tool. The flaw exists in the sub-Certificate

CVE‑2026‑65400 is a critical authentication bypass vulnerability in Apple macOS Screen Sharing, a built‑in remote desktop feature that uses the

CVE-2026-20971 is a high-severity use-after-free vulnerability discovered within Samsung’s KNOX security framework, specifically in the interaction between two kernel subsystems: