CVE-2026-92121 | High | 7.5 | 2026-09-30 | In the WSS4J streaming (StAX) code, a signature reference using the WS-Security STR-Transform leaves an internal "inside signed content" flag permanently set… |
CVE-2026-102674 | High | 8.2 | 2026-09-29 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, wi… |
CVE-2026-102673 | High | 8.2 | 2026-09-29 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.4, 42.5.2, and 43.0.0, popups opened fro… |
CVE-2026-101900 | | | 2026-09-28 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.12.0 until 1.20.0, ResolveConfig reads inherited Symbol.toStringTag, append, and getHe… |
CVE-2025-71424 | Low | 3.5 | 2026-09-27 | Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0. The VOLUME directive in a Doc… |
CVE-2026-100676 | High | 8.2 | 2026-09-26 | January, the media proxy/embed service of stoatchat (stoatchat/stoatchat), before version 0.15.5 improperly resolves SVG <image href> values as local filesyste… |
CVE-2026-39353 | Critical | 9.1 | 2026-09-25 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2-rc-1, InvoicePlane builds its permitted temp… |
CVE-2026-90950 | Medium | 5.3 | 2026-09-23 | The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not verify the reCAPTCHA on its registration handler when a form field is absent from the… |
CVE-2026-94251 | Medium | 6.5 | 2026-09-23 | A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource
This issue affects Apache Sling… |
CVE-2026-91796 | Medium | 6.1 | 2026-09-23 | The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB… |
CVE-2026-85288 | Medium | 6.7 | 2026-09-22 | Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ incompletely enforces shortcuts.xml HMAC validation because WM_MACRODLGRUNMAC… |
CVE-2026-79919 | Medium | 6.3 | 2026-09-21 | MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, function-library code running under the LD_PRELOAD sandbox can invoke ctypes… |
CVE-2026-79918 | Medium | 6.3 | 2026-09-21 | MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, the ToolExecutor LD_PRELOAD sandbox hooks execve, execvpe, and execveat to pr… |
CVE-2026-93606 | Critical | 10.0 | 2026-09-18 | vm2 (npm) versions 3.12.0 and earlier contain a sandbox escape in `VM` and `NodeVM`. When an embedder exposes a host API that returns a host-realm Promise, the… |
CVE-2026-93605 | Critical | 10.0 | 2026-09-18 | vm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUILTINS denylist omits child_process despite blocking other host-… |
CVE-2026-86800 | Medium | 5.3 | 2026-09-18 | The Hide My WP Ghost WordPress plugin before 7.0.11 does not properly validate a loopback security-check request before disabling its login and URL hiding prot… |
CVE-2026-86796 | Medium | 5.3 | 2026-09-18 | The Hide My WP Ghost WordPress plugin before 7.0.11 does not verify that a request is a genuine WooCommerce request before disabling its firewall, threat-detec… |
CVE-2026-54577 | | | 2026-09-17 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, the audit command in mport/mport.c computed option-adjusted local_argv and local_argc values but pass… |
CVE-2026-92962 | | | 2026-09-17 | vm2 is a sandbox for running untrusted JavaScript. In vm2 versions up to and including 3.11.3, the defaultSandboxPrepareStackTrace function in lib/setup-sandbo… |
CVE-2026-92959 | High | 7.1 | 2026-09-17 | vm2 before 3.11.8 does not fully enforce the allowAsync: false option in VM and NodeVM. While localPromise.prototype.then is replaced with a handler that throw… |
CVE-2026-92956 | Critical | 10.0 | 2026-09-17 | vm2 versions 3.10.1 through 3.11.6 contain a sandbox escape reachable from a default `new VM()` sandbox when running on Node.js 26. WebAssembly.compileStreamin… |
CVE-2026-92948 | Critical | 9.9 | 2026-09-17 | vm2 versions >= 3.9.6 and <= 3.11.6 are affected by a NodeVM builtin allowlist bypass that permits a sandbox escape on Node.js 24 and newer when the embedder e… |
CVE-2026-92944 | Critical | 9.8 | 2026-09-17 | vm2 versions 3.10.2 through 3.11.6 contain a sandbox escape vulnerability on Node.js 26 where Promise.prototype.finally() bypasses vm2's wrapper protections du… |
CVE-2026-92938 | Critical | 9.9 | 2026-09-17 | vm2 versions 3.11.3 through 3.11.6 expose Node.js's host node:sqlite module to code running in NodeVM when that builtin is permitted, either explicitly or thro… |
CVE-2026-92934 | Critical | 9.0 | 2026-09-17 | vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError objects are cau… |
CVE-2026-92778 | Medium | 5.4 | 2026-09-16 | CMAK through 3.0.0.6 fails to apply the scheduled leader election feature toggle to HTML form routes, allowing attackers to bypass the feature gate. Attackers… |
CVE-2026-79298 | High | 8.4 | 2026-09-16 | An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOT… |
CVE-2026-20331 | Critical | 9.6 | 2026-09-16 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall T… |
CVE-2026-77401 | Medium | 6.8 | 2026-09-16 | Zope AccessControl provides a general security framework for use in Zope. Prior to 7.4, applications that allow untrusted users to create and execute AccessCon… |
CVE-2026-76825 | High | 8.4 | 2026-09-16 | RestrictedPython is a tool that helps define a subset of the Python language for accepting program input in a trusted environment. Prior to 8.4, RestrictedPyth… |
CVE-2026-92129 | High | 7.5 | 2026-09-16 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from sandboxed scripts to methods added dynamically to a class at runtime… |
CVE-2026-92124 | High | 8.8 | 2026-09-16 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier checks the operations Groovy will perform with the elements it reads from a collection that a… |
CVE-2026-92123 | High | 8.8 | 2026-09-16 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not intercept operations performed on a null receiver (method calls, property and attribu… |
CVE-2026-92122 | High | 8.8 | 2026-09-16 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check the method called through the proxy created when a sandboxed script coerces a v… |
CVE-2026-58767 | Medium | 6.7 | 2026-09-15 | In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of pr… |
CVE-2026-58766 | High | 7.8 | 2026-09-15 | In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of pr… |
CVE-2026-58765 | Medium | 6.7 | 2026-09-15 | In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileg… |
CVE-2026-58755 | Medium | 6.7 | 2026-09-15 | In smmu_install_nested_ste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation… |
CVE-2026-58747 | Medium | 6.7 | 2026-09-15 | In smmu_detach_dev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege w… |
CVE-2026-58726 | Medium | 6.7 | 2026-09-15 | In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with Syste… |
CVE-2026-58704 | High | 8.8 | 2026-09-15 | In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privileg… |
CVE-2026-58678 | High | 7.8 | 2026-09-15 | In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution p… |
CVE-2026-57012 | High | 8.4 | 2026-09-15 | In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no ad… |
CVE-2026-57006 | Medium | 4.4 | 2026-09-15 | In acfw_ffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileg… |
CVE-2026-56982 | High | 7.8 | 2026-09-15 | In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privile… |
CVE-2026-56979 | Medium | 6.7 | 2026-09-15 | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System exe… |
CVE-2026-56973 | Medium | 6.7 | 2026-09-15 | In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with Syst… |
CVE-2026-56970 | High | 8.4 | 2026-09-15 | In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additi… |
CVE-2026-56941 | High | 8.4 | 2026-09-15 | In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege w… |
CVE-2026-56881 | High | 8.4 | 2026-09-15 | In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no… |
CVE-2026-55366 | Critical | 9.8 | 2026-09-15 | In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with… |
CVE-2026-55359 | High | 7.8 | 2026-09-15 | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execu… |
CVE-2026-55304 | Medium | 6.7 | 2026-09-15 | In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of priv… |
CVE-2026-55302 | Medium | 6.7 | 2026-09-15 | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System exe… |
CVE-2026-0189 | High | 8.4 | 2026-09-15 | In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no a… |
CVE-2026-0187 | Medium | 6.7 | 2026-09-15 | In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalatio… |
CVE-2026-0186 | Medium | 6.7 | 2026-09-15 | In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege… |
CVE-2026-53710 | Critical | 10.0 | 2026-09-15 | MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the python_sandbox_server in mcp-servers/python/pyth… |
CVE-2026-91949 | Critical | 9.3 | 2026-09-15 | FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections… |
CVE-2026-92079 | Critical | 9.1 | 2026-09-15 | Mitigation bypass in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
CVE-2026-92075 | Critical | 9.1 | 2026-09-15 | Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
CVE-2026-92074 | High | 8.8 | 2026-09-15 | Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
CVE-2026-92066 | Critical | 9.8 | 2026-09-15 | Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
CVE-2026-92057 | Critical | 9.1 | 2026-09-15 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
CVE-2026-92041 | Critical | 9.1 | 2026-09-15 | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
CVE-2026-92039 | Medium | 6.3 | 2026-09-15 | Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
CVE-2026-92038 | Critical | 9.1 | 2026-09-15 | Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153… |
CVE-2026-92030 | Medium | 5.4 | 2026-09-15 | Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thund… |
CVE-2026-92019 | High | 8.1 | 2026-09-15 | Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153… |
CVE-2026-92018 | Critical | 9.6 | 2026-09-15 | Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thund… |
CVE-2026-57138 | Critical | 9.9 | 2026-09-15 | PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, codeMode in src/praisonai-ts/src/tools/builtins/code-mode.ts executes untrusted JavaScript wit… |
CVE-2026-57137 | High | 8.8 | 2026-09-15 | PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop() in src/praisonai-ts/src/ai/agent-loop.ts passes executable tools to generate… |
CVE-2026-57136 | High | 8.8 | 2026-09-15 | PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, CommandValidator in src/praisonai-ts/src/cli/features/sandbox-executor.ts validates only the f… |
CVE-2026-57135 | High | 7.6 | 2026-09-15 | PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, SandboxExecutor network-isolated mode in src/praisonai-ts/src/cli/features/sandbox-executor.ts… |
CVE-2026-57133 | High | 8.8 | 2026-09-15 | PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, the shell() helper exported from src/praisonai-ts/src/tools/utility-tools.ts checks only the f… |
CVE-2026-47424 | | | 2026-09-15 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author… |
CVE-2026-86909 | Medium | 4.4 | 2026-09-14 | A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Gatekeeper checks. |
CVE-2026-86894 | High | 7.5 | 2026-09-14 | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox. |
CVE-2026-84578 | High | 8.8 | 2026-09-14 | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to brea… |
CVE-2026-84570 | Medium | 4.4 | 2026-09-14 | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to bypa… |
CVE-2026-84559 | Medium | 5.5 | 2026-09-14 | A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious appl… |
CVE-2026-65406 | Medium | 5.5 | 2026-09-14 | A logic issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoi… |
CVE-2026-65369 | Medium | 5.5 | 2026-09-14 | A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious appl… |
CVE-2026-43787 | Medium | 5.9 | 2026-09-14 | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privilege… |
CVE-2026-28899 | Medium | 5.5 | 2026-09-14 | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app m… |
CVE-2026-57120 | Medium | 6.5 | 2026-09-14 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, execute_code sandbox mode permits runtime assembly of blocklisted dunder names and al… |
CVE-2026-90957 | | | 2026-09-14 | Affected versions of MISP serve uploaded SVG images inline without a restrictive browser sandbox.
The commit explains that SVG files are XML documents rather… |
CVE-2026-76059 | High | 8.8 | 2026-09-10 | IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotat… |
CVE-2026-45770 | High | 7.5 | 2026-09-10 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to ve… |
CVE-2026-0306 | | | 2026-09-10 | A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP… |
CVE-2026-54694 | Critical | 9.6 | 2026-09-09 | SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a single exploitable attack chain, with th… |
CVE-2026-79638 | Medium | 5.3 | 2026-09-09 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Alternate… |
CVE-2026-87808 | Medium | 4.9 | 2026-09-09 | SiYuan versions <= 3.8.1 contain an incomplete fix for CVE-2026-32767 (GHSA-j7wh-x834-p3r7). The prior fix (commit d5e2d0bc) added an administrator check for S… |
CVE-2026-78552 | Medium | 6.0 | 2026-09-08 | The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field. The field is interpolated directly in… |
CVE-2026-49881 | High | 7.8 | 2026-09-08 | In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalat… |
CVE-2026-45521 | Low | 3.3 | 2026-09-08 | In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosur… |
CVE-2026-28668 | High | 7.8 | 2026-09-08 | In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with… |
CVE-2026-28664 | High | 7.8 | 2026-09-08 | In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege… |
CVE-2026-28660 | Low | 3.3 | 2026-09-08 | In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with… |
CVE-2026-28658 | High | 7.8 | 2026-09-08 | In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with n… |