exploit

The vulnerability arises from a misconfiguration in the authentication middleware of the NVIDIA NIM service. In packages/server/src/utils/constants.ts, the path `’/api/v1/nvidia-nim’`

The vulnerability is an Insecure Direct Object Reference (IDOR) combined with a Business Logic Flaw in the `PUT /api/v1/loginmethod` endpoint

The vulnerability CVE-2026-26996 resides in the `minimatch` library, a utility for converting glob patterns (like .js) into JavaScript Regular Expressions.

How the mentioned CVE works The DisallowedRawHtml extension, used to process untrusted markdown, contains a critical flaw in its regex

A malformed `$regex` query parameter (e.g., [abc) causes the database to return a structured error object. This error object, rich

The vulnerability is a Mass Assignment issue in the `/api/v1/leads` endpoint of Flowise, stemming from the insecure use of `Object.assign()`

The vulnerability is a regression in Caddy’s `forward_auth` directive introduced by PR 6608 in November 2024. The `copy_headers` subdirective is

The vulnerability, identified as CVE-2026-1963, is an improper access control flaw found in WeKan versions up to 8.20. It resides

A critical vulnerability exists in the Natural Language Toolkit (NLTK) downloader component, affecting all versions prior to 3.9.3. The flaw

CVE-2026-26377 is a medium-severity Cross-Site Scripting (XSS) vulnerability residing in the “News” function of the Koha open-source library management system,

CVE-2025-66596 is a medium-severity vulnerability discovered in Yokogawa’s FAST/TOOLS industrial automation software. The flaw resides in how the application handles

The vulnerability allows an authenticated SSH user to perform Server-Side Request Forgery (SSRF) via the LFS import functionality. When importing

CVE-2025-66608 is a high-severity vulnerability found in Yokogawa Electric Corporation’s FAST/TOOLS industrial automation software. The core issue is that the

The vulnerability exists in SimStudio versions before 0.5.74 due to a missing authorization check in the OAuth token handling logic.

The vulnerability, CVE-2026-3431, is a critical missing authorization flaw in SimStudio versions before 0.5.74 . The issue resides within the

A vulnerability classified as CWE-209 exists in Yokogawa’s FAST/TOOLS industrial automation software . The flaw causes the application to generate

The vulnerability resides in the loop plugin of CoreDNS, which is designed to detect forwarding loops by performing a self-test

The vulnerability in Vikunja versions prior to 2.1.0 stems from two distinct logic errors in the password reset mechanism, allowing

The vulnerability is a stack overflow in the Tenda AC6V2.0 router’s `WifiWpsStart` function, specifically within the `/goform/WifiWpsStart` endpoint of firmware

The vulnerability is located in the `goform/formsetUsbUnload` handler of the Tenda AC15 router firmware version V15.03.05.18_multi. This handler is responsible

The vulnerability, CVE-2025-11143, resides in the URI parsing mechanism of Eclipse Jetty’s `HttpURI` class. The core issue is a discrepancy

The vulnerability resides in Zarf’s archive extraction code within src/pkg/archive/archive.go. When processing a Zarf package, three handler functions—defaultHandler (line 320),

The vulnerability CVE-2025-46108 resides in the `formTcpipSetup` function of the D-Link DIR-513 router running firmware version A1FW110. The device utilizes

The vulnerability resides in the Elliptic Curve Integrated Encryption Scheme (ECIES) implementation used by Geth for encrypted RLPx handshakes and

The vulnerability exists in the Go Ethereum (Geth) client’s peer-to-peer (p2p) connection handshake mechanism. During the handshake process, both parties

The CVE-2025-3600 vulnerability exists in the `@langchain/langgraph-checkpoint-redis` package, specifically within the `list()` methods of the `RedisSaver` and `ShallowRedisSaver` classes .

The vulnerability in `filippo.io/edwards25519` resides in the `(Point).MultiScalarMult` method, which performs a multi-scalar multiplication on the Edwards curve . This

The vulnerability stems from Keras and TensorFlow honoring HDF5 “external storage” and “ExternalLink” features when loading model weights via `load_weights()`

This vulnerability is a time-based blind SQL injection found in LibreNMS versions prior to 24.4.0. The flaw resides in includes/html/table/address-search.inc.php,

The vulnerability CVE-2025-68154 exists in the `fsSize()` function of the systeminformation npm package for Node.js, specifically affecting Windows platforms .

The vulnerability resides in the `ajax_table.php` endpoint of an unspecified PHP application. When the `search_type` parameter is set to ipv6,

The vulnerability resides in how OpenClaw handles logging of errors and stack traces. Specifically, when OpenClaw makes requests to the

The vulnerability stems from how pypdf handles the `/ToUnicode` entry in a PDF’s font dictionary. During text extraction, the library

The vulnerability resides in the `normalizeForHash` function within src/agents/sandbox/config-hash.ts. This function was designed to create a deterministic hash from a

The vulnerability, identified as CVE-2025-55197 and published in the GitHub Advisory Database, affects the pypdf Python library (versions prior to

How CVE-2026-27004 Works The vulnerability stems from two distinct but related issues in OpenClaw versions up to 2026.2.14 . First,

A configuration injection vulnerability exists in OpenClaw’s Docker sandbox mechanism where dangerous Docker options can be applied to container executions.

The vulnerability addressed in this advisory is a path traversal issue in the skill installation process of OpenClaw . The

The vulnerability stems from how older versions of Minimatch (prior to 3.0.2) convert glob patterns into JavaScript `RegExp` objects. Specifically,

The vulnerability is a stored Cross-Site Scripting (XSS) issue in the OpenClaw Control UI. The gateway’s HTML response previously injected

The vulnerabilities arise from insufficient sanitization of user-controlled properties during SVG export. When attacker-crafted JSON is loaded via loadFromJSON(), properties

The vulnerability stems from an incorrect removal of the padding extension in the uTLS library when generating the non-Post-Quantum (non-pq)

The vulnerability, identified as CVE-2026-24688, is a denial-of-service flaw in the pypdf library affecting versions prior to 6.6.2 . It

A stored Cross-Site Scripting (XSS) vulnerability exists in LibreNMS versions prior to 25.12.0 within the Alert Rule API . The

A vulnerable node running Go Ethereum (Geth) can be forced to shut down or crash by a remote attacker sending

When Chrome generates a ClientHello with GREASE ECH (a mechanism to randomize ECH extensions for privacy), it selects the cipher

The vulnerability stems from a missing error check in the CRuby extension of Nokogiri, specifically within the `xmlC14NExecute` function. This

How the Mentioned CVE Works The vulnerability is a stored Cross-Site Scripting (XSS) issue existing in the device group creation

This reflected Cross-Site Scripting (XSS) vulnerability exists in the email field within the alerting settings page of LibreNMS. The application

The CVE-2024-50350 vulnerability is a Stored Cross-Site Scripting (XSS) issue found in LibreNMS, an open-source network monitoring system . It

How the CVE Works: The vulnerability resides in the Custom OID functionality of LibreNMS. When creating or editing a Custom

The vulnerability stems from a flawed retry mechanism within the `wifiNetworks()` function in lib/wifi.js. While the initial function call sanitizes

The vulnerability CVE-2024-23725 is a Cross-site Scripting (XSS) issue found in Ghost versions before 5.76.0, specifically within the `excerpt.js` component

The vulnerability is a remote code execution (RCE) flaw in the @tygo-van-den-hurk/slyde package. Node.js has a loading mechanism that automatically

The vulnerability resides in the credential refresh mechanism of Claude CLI on macOS. When refreshing OAuth tokens, the application constructs

The vulnerability stems from a fundamental discrepancy between how PickleScan and PyTorch parse serialized data to extract a file’s “magic

The BlueBubbles extension in OpenClaw versions prior to 2026.2.14 contains a path traversal vulnerability. The `sendBlueBubblesMedia` function improperly handles the

The vulnerability resides in the browser download helpers within OpenClaw versions from 2026.1.12 up to 2026.2.12. Specifically, the `waitForDownloadViaPlaywright` and

The vulnerability resides in OpenClaw’s browser control API, specifically in the endpoints POST /trace/stop, POST /wait/download, and POST /download. Prior