Author name: UNDERCODE

A Remote Code Execution (RCE) vulnerability exists in LibreNMS versions prior to 24.10.0, which is identified as CVE-2024-51092. The vulnerability

Intro This critical vulnerability is a second-order SQL injection, specifically a UNION-based attack, identified as CVE-2026-54348. It resides in Froxlor’s

How the MONAI OS Command Injection Vulnerability Works The MONAI (Medical Open Network for AI) library is vulnerable to OS

How CVE-2026-71322 Works Netflix Lemur is a TLS certificate management framework that provides API endpoints for certificate operations, including export

CVE-2026-64600, dubbed “RefluXFS,” is a local privilege escalation vulnerability in the Linux kernel’s XFS filesystem. Discovered by Qualys Threat Research

CVE-2026-46731 is an authentication bypass vulnerability identified in Dell Display and Peripheral Manager (DDPM) for Windows. The vulnerability stems from

CVE-2026-70330 is a heap-based buffer overflow vulnerability identified in the Windows DNS component. This flaw enables an authorized attacker to

CVE-2026-59916 is a vulnerability identified in Dell Display and Peripheral Manager (DDPM) for Windows. The core of this issue lies

CVE-2026-11707 is a critical cross-site scripting (XSS) vulnerability affecting IBM Tivoli System Automation Application Manager version 4.1 and IBM WebSphere

CVE-2026-61899 is a critical information disclosure vulnerability identified in the Apache Tapestry web framework. The flaw resides in the `tapestry-core`

CVE-2026-64141 is a high-severity null pointer dereference vulnerability in the Linux kernel’s ksmbd module, which implements the SMB2 server protocol.

CVE-2026-64139 is a memory leak vulnerability in the Linux kernel’s ksmbd subsystem, which is an open-source in-kernel SMB server implementation.

The vulnerability resides in the `McpContext.validatePath()` method of the chrome-devtools-mcp server, which enforces workspace root restrictions. The function uses `path.resolve()`

CVE-2026-69414, also known as “ShieldBreak,” is a critical elevation of privilege vulnerability in the Microsoft Malware Protection Engine (MsMpEng) of

CVE-2026-50523 is a command injection vulnerability identified in Microsoft PowerShell, published on August 14, 2026, and last modified on August

CVE-2026-19483 is an information disclosure vulnerability identified in IBM Storage Scale (formerly IBM Spectrum Scale) and its Management GUI component.

An issue in DigestAuthProvider.verify: the `uri` parameter in the client’s `Authorization: Digest …` response was not checked against the actual

CVE-2026-73633, also tracked as Apache Struts S2-072, is an uncontrolled resource consumption vulnerability (CWE-400) affecting the JSON plugin of Apache

When MLflow is deployed with the built-in basic-auth plugin (–app-name basic-auth), any authenticated user can inject arbitrary dataset records into

The `_validate_source_run` and `_validate_source_model` functions in `mlflow/server/handlers.py` are designed to verify that a model version’s source path resides within the

CVE-2026-59917 is an Improper Access Control vulnerability identified in Dell Display and Peripheral Manager (DDPM) for Windows. The flaw resides

CVE-2026-64140 is a null pointer dereference vulnerability in the Linux kernel’s ksmbd module, which implements SMB2/SMB3 server functionality. The flaw

CVE-2026-64117 是 Linux 内核 mac80211 无线子系统中的一个高危释放后使用（Use-After-Free, UAF）漏洞。该漏洞源于 mesh 网络数据包处理过程中，对共享内存结构 `skb->cb` 的不当管理。 在 Linux 内核的无线帧处理流程中，skb->cb 控制缓冲区承担双重角色：在快速接收路径中，ieee80211_invoke_fast_rx() 函数通过 `IEEE80211_SKB_RXCB(skb)` 读取 RX 状态信息；而在

CVE-2026-53659 is a high-severity denial-of-service (DoS) vulnerability affecting the http4k Kotlin HTTP toolkit. The flaw resides in `ServerFilters.GZip` and RequestFilters.GunZip—filters

CVE-2026-11383 is a cross-site scripting (XSS) vulnerability affecting IBM Tivoli System Automation Application Manager (TSAAM) version 4.1 and IBM WebSphere

CVE-2026-56677 is a Server-Side Request Forgery (SSRF) vulnerability identified in the 9Router dashboard, specifically within the `/api/auth/oidc/test` endpoint. The core

CVE-2026-34181 is an authentication bypass vulnerability in the `go-pkcs12` library (software.sslmate.com/src/go-pkcs12), which affects versions 0.6.0 through 0.7.1. The issue stems

How CVE-2026-59914 Works CVE-2026-59914 is an Authentication Bypass by Spoofing vulnerability affecting Dell Display and Peripheral Manager (DDPM) on Windows

CVE-2026-66271 is an Unrestricted Upload of File with Dangerous Type vulnerability identified in Dell Wyse Management Suite (WMS) versions prior

How CVE-2026-54147 Works An issue exists in DigestAuthProvider.verify: the configured algorithm parameter is silently ignored—every verification uses MD5 regardless of

Terragrunt is vulnerable to an arbitrary file deletion flaw when downloading external modules. If a remote module contains a maliciously

CVE-2026-17616 is a vulnerability affecting IBM Security Verify Access and IBM Verify Identity Access products. The issue resides in the

The `bufferAllocLimit` defense, originally introduced in vm2 v3.11.0 to mitigate GHSA-6785-pvv7-mvg7, can be completely bypassed using ArrayBuffer, SharedArrayBuffer, or any

In the Linux kernel, a vulnerability has been identified within the Input/Output Memory Management Unit (IOMMU) subsystem that specifically manifests

IBM i 7.6、7.5、7.4 及 7.3 版本存在一个越界读取（Out-of-Bounds Read）漏洞，允许远程攻击者在无需任何认证的情况下获取敏感信息。该漏洞被收录为 CVE-2026-16853，其根源在于 IBM i 操作系统在处理特定网络请求时，未能正确验证内存访问边界。 从技术层面分析，该漏洞属于内存损坏类缺陷，具体分类为 CWE-125：越界读取。攻击者可以通过向目标 IBM i 系统发送特制的网络数据包，触发系统在分配的内存缓冲区之外进行读取操作。由于 IBM i 的 NetServer

CVE-2026-64148 is a vulnerability in the Linux kernel’s PDS Core component, specifically within the `pdsc_devcmd_wait()` function. This function is responsible

CVE-2026-18096 is an unpatched local denial-of-service vulnerability affecting IBM Db2 version 12.1.5 on Linux, UNIX, and Windows platforms, including the

IBM Security Verify Access 10.0 through 10.0.9.2, IBM Verify Identity Access 11.0 through 11.0.3, and IBM Verify Identity Access Container

The vulnerability resides in the `handleException()` function within lib/setup-sandbox.js. This function is responsible for recursively sanitizing error objects that cross

The vulnerabilities addressed in Etherpad PR 7906 encompass a set of six distinct weaknesses affecting versions prior to 3.3.0. These

CVE-2026-16896 is a vulnerability in IBM i that allows a local authenticated attacker to gain unauthorized access to files. The

The `bufferAllocLimit` option was introduced in vm2 version 3.11.0 as a mitigation for GHSA-6785-pvv7-mvg7 (CVE-2026-44004). It caps host-side Buffer allocations

sqlparse, a non-validating SQL parser for Python, implements hard limits (MAX_GROUPING_DEPTH=100, MAX_GROUPING_TOKENS=10000) designed to cap parsing work on attacker-controlled SQL.

TLS hostname verification is a critical security control that ensures a client is communicating with the intended server and not

CVE-2026-16867 is a critical vulnerability affecting IBM i operating system versions 7.3, 7.4, 7.5, and 7.6. The flaw resides in

In the Linux kernel, a vulnerability has been identified in the drm/msm (Mobile Station Module) graphics driver, specifically within the

CVE-2026-18499 is a privilege escalation vulnerability affecting IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.8. The vulnerability manifests when

The vulnerability arises from a flawed regex in sqlparse/keywords.py:33, which uses a backreference `(\1)` to match closing dollar-quote delimiters in

Intro CVE-2026-59894 is a code injection vulnerability in the Python `sqlparse` library, a popular non-validating SQL parser. The issue exists

io.netty.handler.codec.sctp.SctpMessageCompletionHandler is responsible for reassembling fragmented SCTP messages in Netty’s SCTP transport. When an SCTP message arrives in fragments, the

VM2 is an open source VM/sandbox for Node.js. Prior to version 3.11.6, `lib/bridge.js` and `lib/setup-sandbox.js` fail to block stacked indirection

CVE-2026-64150 是 Linux 内核 netfilter 子系统 nft_inner 模块中的一个中等严重性漏洞，根源在于错误处理路径中锁操作与中断状态恢复的顺序颠倒。该漏洞于 2026 年 7 月 19 日公开，影响内核版本 6.16 及以上。 在 Linux 内核的 netfilter

CVE-2026-53409 is a high-severity local privilege escalation vulnerability affecting Zoom Rooms for Windows versions prior to 7.1.0. The root cause

Technical CVE-2026-71491 is a quadratic complexity Denial of Service (DoS) vulnerability in the Python SQL parsing library sqlparse, affecting all

A time-of-check to time-of-use (TOCTOU) race condition is a class of vulnerability that arises from the gap between when a

Fix: PR 7905 (ether/etherpad). `getHTMLFromAtext` in `src/node/utils/ExportHtml.ts` interpolates values from the `exportHtmlAdditionalTagsWithData` plugin hook into `span data-=”“` without HTML-attribute escaping.

The uniget CLI contains a command injection vulnerability in `hooks.go` at line 199, where the `strings.Split(editor, ” “)` function naively

The vulnerability exists in Glances’ `as_dict_secure()` function, located in glances/config.py. This function was explicitly designed to provide a sanitised copy

Netty is an asynchronous, event-driven network application framework widely used to build high-performance web applications and microservices. A vulnerability exists

Vulnerability Technical Deep-Dive CVE-2026-13460 is a high-severity vulnerability affecting the IBM Storage Scale (formerly IBM Spectrum Scale) Management GUI. The

New API is an LLM gateway and AI asset management system. Prior to version 1.0.0-rc.16, the application contains a race

How CVE-2026-68517 Works Glances is an open-source, cross-platform system monitoring tool that exposes a RESTful API for retrieving real-time metrics.

The vulnerability resides in the hook filename handling logic within the uniget CLI tool. Specifically, the `hooks.go` file, at lines

CVE-2025-62593 is a critical remote code execution vulnerability affecting Ray, a distributed AI/ML compute framework, in versions prior to 2.52.0.

CVE-2026-32608 describes a command injection vulnerability in Glances, a cross-platform system monitoring tool. The vulnerability arises from an incomplete fix

CVE-2026-64151 is a vulnerability in the Linux kernel’s Input-Output Memory Management Unit (IOMMU) subsystem, specifically within the iommupt driver implementation.

CVE-2026-13365 is a cross-site request forgery (CSRF) vulnerability affecting IBM Planning Analytics Local versions 2.0.0 through 2.1.22. CSRF is an

The vulnerability in Glances (<=4.5.5) stems from a flaw in the action system where an administrator configures shell commands to

Technical Deep Dive The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111.c) implements frame reassembly for OPEN Alliance (OA) SPI mode by

CVE-2026-10534 is a critical buffer overflow vulnerability identified in IBM Db2, affecting versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5.

The vulnerability arises from a logic error in the implementation of a security patch for a previous command injection flaw,

In Glances 4.5.5, the `–disable-config-exec` flag was extended (GHSA-3vwc-qwhc-3mj7) to stop `secure_popen()` from interpreting the shell operators &&, |, and

CVE-2026-64866 is a missing authorization vulnerability identified in QuantumNous New API, an LLM gateway and AI asset management system. The

Technical CVE-2026-64149 is a vulnerability in the Linux kernel’s DMA mapping subsystem, specifically within the `dma_map_resource()` function. This issue arises

The vm2 sandbox module for Node.js, when configured with `builtin: [”]` (the documented “full builtins” pattern), allows untrusted code to

Vulnerability New API is a large language model (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version

Apache Airflow’s secrets masker is designed to hide sensitive values—such as passwords, API keys, and tokens—when they are displayed in

CVE-2026-27790 is a low-severity vulnerability identified in Gallagher Command Centre’s T20 Readers component. The weakness is classified as CWE-248: Uncaught

CVE-2026-70307 is a use-after-free (UAF) vulnerability identified in the Windows Ancillary Function Driver (AFD) for WinSock. AFD.sys is a core

CVE-2026-27844 is a vulnerability affecting the diagnostic web interface of Gallagher Controller 6000 and Controller 7000 devices within the Command

CVE-2026-62816 is a critical heap-based buffer overflow vulnerability identified in the Microsoft Windows Reliable Multicast Transport Driver (RMCAST). The RMCAST

CVE-2026-58651 is a high-severity vulnerability identified in Microsoft Office Word. The core of the issue is a heap-based buffer overflow,

Vulnerability Deep Dive CVE-2026-65790 is a heap-based buffer overflow vulnerability identified in the Microsoft Windows Message Queuing (MSMQ) service. The

CVE-2026-59124 is a critical vulnerability identified in Microsoft High Performance Computing (HPC) Pack. The flaw stems from the deserialization of

CVE-2026-65662 is a medium-severity vulnerability in the Windows Graphics Device Interface (GDI) component. The flaw resides in an out-of-bounds read

CVE-2025-47147 is a medium-severity vulnerability identified in the Gallagher Command Centre Mobile Client for Android and iOS platforms. The flaw

CVE-2026-58076 details a critical deserialization vulnerability in Apache Airflow. The flaw resides within the serialization layer used to reconstruct exception

CVE-2026-65787 is a heap-based buffer overflow vulnerability discovered in the Microsoft Windows Desktop Window Manager (DWM) component. DWM is the

CVE-2026-65814 is a heap-based buffer overflow vulnerability discovered in the Windows Storage Port Driver (storport.sys), a core kernel-mode driver responsible

CVE-2026-62815 is a critical use-after-free vulnerability in Microsoft QUIC, Microsoft’s implementation of the QUIC transport protocol. QUIC is a modern

CVE-2026-62819 is a critical Remote Code Execution vulnerability identified in the Windows Routing and Remote Access Service (RRAS). This service

CVE-2026-65788 is a use-after-free (UAF) vulnerability in Microsoft’s Desktop Window Manager (DWM) that allows an authenticated local attacker to elevate

CVE-2026-65786 is a high-severity heap-based buffer overflow vulnerability discovered in the Microsoft Windows Desktop Window Manager (DWM). DWM is a

How CVE-2026-66799 Works CVE-2026-66799 is a critical heap-based buffer overflow vulnerability identified in the Windows Key Guard component of Microsoft

How CVE-2026-10740 Works s2n-quic is a Rust implementation of the QUIC protocol. An unauthenticated user can attempt to exhaust server

The token-optimizer-mcp is an MCP (Model Context Protocol) server that provides tools for token optimization. Among its tools is the

The vulnerability exists because the `/api/session-summary` and `/api/session-events` endpoints in the token-optimizer-mcp dashboard server lack authentication and fail to sanitize

This vulnerability resides in the default configuration of OpenAM Community Edition. The core issue is an Insecure Default Initialization of

mchange-commons-java 是一个提供共享工具类的 Java 库，常用于 c3p0 连接池等项目。在 0.6.0 版本之前，其 JNDI ObjectFactory 实现（com.mchange.v2.naming.JavaBeanObjectFactory）会构造任意类的对象并初始化 “JavaBean” 风格的属性。这种初始化方式对某些类而言是不安全的：例如，将 Swing `JEditorPane` 的 `contentType` 属性设置为 text/html，并将其 `text`

How CVE-2026-53658 Works Hyperledger Fabric Certificate Authority (CA) is a core component of the Hyperledger Fabric blockchain framework, responsible for