CVE watch

CVE-2026-105921 published: A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file search_class.php. Such manipulation of the argument school_year leads to sql injection. Th...

CVE-2026-105792 published: Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/task_result/{task_name} endpoint calls SessionManager.get_result_by_task() in ufo/server/services/session_manager.py, which acquires ...

CVE-2026-106039 published: Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to create, steal, and falsely complete replication tasks via the coro_rpc port. Attackers can invoke CreateCopyTask, CreateMoveTa...

CVE-2026-105842 published: lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader() of the lrz receive utility when copying overlong sender-supplied filenames into Pathname. Malicious ZMODEM senders can supply filenames up to 8192 bytes, overflowing the...

CVE-2026-105838 published: libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader load_it.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern r...

CVE-2026-105790 published: Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authenticated device registration through /api/devices can supply a permitted attacker-controlled WebSocket endpoint while aip/transport/webso...

CVE-2026-105789 published: Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the execute_command tool in ufo/client/mcp/http_servers/linux_mcp_server.py treats sort and uniq as read-only commands while the free-form com...

CVE-2026-105836 published: QloApps through 1.7.0 contains an authorization bypass vulnerability in AdminProductsController::ajaxProcessBulkUpdateRooms that allows hotel-restricted back-office employees to modify rooms of other hotels. Attackers can submit foreign room IDs in the id_r...

CVE-2026-105834 published: Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through...

CVE-2026-100518 published: Unauthenticated Broken Authentication in Advanced Google reCAPTCHA <= 5.40 versions.

CVE-2026-105305 published: A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities to obtain security tokens. The issue occurs because the flow fails to check the m...

CVE-2026-25274 published: Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

CVE-2026-25273 published: Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

CVE-2026-25272 published: Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

CVE-2026-25270 published: Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

CVE-2026-25269 published: Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

CVE-2026-25263 published: Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

CVE-2026-97300 published: Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.

CVE-2026-39599 published: Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.

CVE-2026-32582 published: Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.