close

DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-55688: CVE-2026-55688: Cookie Tossing / Cookie Injection Vulnerability in AsyncHttpClient
cverports profile

CVE-2026-55688: CVE-2026-55688: Cookie Tossing / Cookie Injection Vulnerability in AsyncHttpClient

#security #cve #cybersecurity
Comments
2 min read
GHSA-93QJ-5Q5V-3C2H: GHSA-93QJ-5Q5V-3C2H: Embedded Malicious Code in pantheon-agents PyPI Packages
cverports profile

GHSA-93QJ-5Q5V-3C2H: GHSA-93QJ-5Q5V-3C2H: Embedded Malicious Code in pantheon-agents PyPI Packages

#security #cve #cybersecurity #ghsa
Comments
1 min read
GHSA-X287-5C68-36WP: GHSA-X287-5C68-36WP: Broken Object-Level Authorization in OpenWISP IPAM Django Admin
cverports profile

GHSA-X287-5C68-36WP: GHSA-X287-5C68-36WP: Broken Object-Level Authorization in OpenWISP IPAM Django Admin

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-54563: CVE-2026-54563: Path Traversal and Incorrect Authorization in Cloudreve WebDAV Component
cverports profile

CVE-2026-54563: CVE-2026-54563: Path Traversal and Incorrect Authorization in Cloudreve WebDAV Component

#security #cve #cybersecurity
Comments
1 min read
CVE-2026-54606: CVE-2026-54606: DOM-based Cross-Site Scripting via Programmatic Script Recreation in SunEditor Embed Plugin
cverports profile

CVE-2026-54606: CVE-2026-54606: DOM-based Cross-Site Scripting via Programmatic Script Recreation in SunEditor Embed Plugin

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54569: CVE-2026-54569: Remote Code Execution via Missing Authorization and Eval Injection in senaite.core
cverports profile

CVE-2026-54569: CVE-2026-54569: Remote Code Execution via Missing Authorization and Eval Injection in senaite.core

#security #cve #cybersecurity
Comments
2 min read
GHSA-7W8C-QGXG-M7JX: GHSA-7W8C-QGXG-M7JX: Stored Cross-Site Scripting in LibreNMS Legacy Templates
cverports profile

GHSA-7W8C-QGXG-M7JX: GHSA-7W8C-QGXG-M7JX: Stored Cross-Site Scripting in LibreNMS Legacy Templates

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-54614: CVE-2026-54614: Unsafe Reflection and Arbitrary Class Instantiation in cakephp/debug_kit MailPreview
cverports profile

CVE-2026-54614: CVE-2026-54614: Unsafe Reflection and Arbitrary Class Instantiation in cakephp/debug_kit MailPreview

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54590: CVE-2026-54590: Path Traversal and Authentication Bypass in AsyncSSH via Username Token Substitution
cverports profile

CVE-2026-54590: CVE-2026-54590: Path Traversal and Authentication Bypass in AsyncSSH via Username Token Substitution

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54591: CVE-2026-54591: Arbitrary File Overwrite via Path Traversal in AsyncSSH SCP Implementation
cverports profile

CVE-2026-54591: CVE-2026-54591: Arbitrary File Overwrite via Path Traversal in AsyncSSH SCP Implementation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55419: CVE-2026-55419: Unrestricted File Upload in Pollen Robotics Reachy Mini SDK
cverports profile

CVE-2026-55419: CVE-2026-55419: Unrestricted File Upload in Pollen Robotics Reachy Mini SDK

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55637: CVE-2026-55637: Remote Administrative Command Execution in genieacs-mcp via DNS Rebinding
cverports profile

CVE-2026-55637: CVE-2026-55637: Remote Administrative Command Execution in genieacs-mcp via DNS Rebinding

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-48853: CVE-2026-48853: Remote Code Execution and Denial of Service in elixir-grpc via Erlpack Deserialization
cverports profile

CVE-2026-48853: CVE-2026-48853: Remote Code Execution and Denial of Service in elixir-grpc via Erlpack Deserialization

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-48599: CVE-2026-48599: Authorization Bypass in elixir-grpc/grpc Transcoding Layer
cverports profile

CVE-2026-48599: CVE-2026-48599: Authorization Bypass in elixir-grpc/grpc Transcoding Layer

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-48854: CVE-2026-48854: Unauthenticated Denial of Service via Resource Exhaustion in elixir-grpc Server
cverports profile

CVE-2026-48854: CVE-2026-48854: Unauthenticated Denial of Service via Resource Exhaustion in elixir-grpc Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-53430: CVE-2026-53430: Unauthenticated Remote Denial of Service via Gzip Decompression Bomb in elixir-grpc/grpc
cverports profile

CVE-2026-53430: CVE-2026-53430: Unauthenticated Remote Denial of Service via Gzip Decompression Bomb in elixir-grpc/grpc

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-55663: CVE-2026-55663: unauthenticated state cookie forgery in mediasoup SCTP stack
cverports profile

CVE-2026-55663: CVE-2026-55663: unauthenticated state cookie forgery in mediasoup SCTP stack

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-49757: CVE-2026-49757: Authentication Bypass and Account Takeover in ash_authentication OAuth2/OIDC
cverports profile

CVE-2026-49757: CVE-2026-49757: Authentication Bypass and Account Takeover in ash_authentication OAuth2/OIDC

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55618: CVE-2026-55618: URL Extraction Bypass via HTML Entities in eml_parser
cverports profile

CVE-2026-55618: CVE-2026-55618: URL Extraction Bypass via HTML Entities in eml_parser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55619: CVE-2026-55619: Parser Denial of Service via Deeply Nested Parentheses in E-mail Headers
cverports profile

CVE-2026-55619: CVE-2026-55619: Parser Denial of Service via Deeply Nested Parentheses in E-mail Headers

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55620: CVE-2026-55620: Algorithmic Complexity Denial of Service in GOVCERT-LU eml_parser
cverports profile

CVE-2026-55620: CVE-2026-55620: Algorithmic Complexity Denial of Service in GOVCERT-LU eml_parser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55629: CVE-2026-55629: Arbitrary File Read via Path Traversal in Whistle Proxy Internal Service
cverports profile

CVE-2026-55629: CVE-2026-55629: Arbitrary File Read via Path Traversal in Whistle Proxy Internal Service

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55604: CVE-2026-55604: Authorization Bypass via Global Session Singleton in @arikusi/deepseek-mcp-server
cverports profile

CVE-2026-55604: CVE-2026-55604: Authorization Bypass via Global Session Singleton in @arikusi/deepseek-mcp-server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-45018: CVE-2026-45018: Unauthenticated Remote Code Execution via MCP stdio Transport in Chainlit
cverports profile

CVE-2026-45018: CVE-2026-45018: Unauthenticated Remote Code Execution via MCP stdio Transport in Chainlit

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-45019: CVE-2026-45019: Server-Side Request Forgery (SSRF) in Chainlit MCP Endpoint
cverports profile

CVE-2026-45019: CVE-2026-45019: Server-Side Request Forgery (SSRF) in Chainlit MCP Endpoint

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55099: CVE-2026-55099: Algorithmic Complexity Denial of Service in icalendar Component Equality
cverports profile

CVE-2026-55099: CVE-2026-55099: Algorithmic Complexity Denial of Service in icalendar Component Equality

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54338: CVE-2026-54338: JupyterHub Unauthenticated Denial of Service via Unbounded Username Logging
cverports profile

CVE-2026-54338: CVE-2026-54338: JupyterHub Unauthenticated Denial of Service via Unbounded Username Logging

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55605: CVE-2026-55605: Missing Authentication in @arikusi/deepseek-mcp-server HTTP Transport Endpoint
cverports profile

CVE-2026-55605: CVE-2026-55605: Missing Authentication in @arikusi/deepseek-mcp-server HTTP Transport Endpoint

#security #cve #cybersecurity
Comments
1 min read
GHSA-VWF3-4XXJ-QG6H: GHSA-VWF3-4XXJ-QG6H: Server-Side Template Injection in mcp-contextforge-gateway
cverports profile

GHSA-VWF3-4XXJ-QG6H: GHSA-VWF3-4XXJ-QG6H: Server-Side Template Injection in mcp-contextforge-gateway

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-55596: CVE-2026-55596: DOM-based Cross-Site Scripting (XSS) in Plate Media Embed Component
cverports profile

CVE-2026-55596: CVE-2026-55596: DOM-based Cross-Site Scripting (XSS) in Plate Media Embed Component

#security #cve #cybersecurity
Comments
2 min read
GHSA-8QX3-8GM5-9CJ2: GHSA-8QX3-8GM5-9CJ2: Terminal Escape-Sequence Injection in pickem
cverports profile

GHSA-8QX3-8GM5-9CJ2: GHSA-8QX3-8GM5-9CJ2: Terminal Escape-Sequence Injection in pickem

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-55537: CVE-2026-55537: Webhook Server-Side Request Forgery and TOCTOU Bypass in PraisonAI
cverports profile

CVE-2026-55537: CVE-2026-55537: Webhook Server-Side Request Forgery and TOCTOU Bypass in PraisonAI

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54625: CVE-2026-54625: Server-Side Page Cache Bypass and Cache Poisoning in django CMS
cverports profile

CVE-2026-54625: CVE-2026-54625: Server-Side Page Cache Bypass and Cache Poisoning in django CMS

#security #cve #cybersecurity
Comments
2 min read
GHSA-W67G-5RQW-F597: GHSA-W67G-5RQW-F597: Cryptographically Weak PRNG for WebSocket Frame Masking in Gorilla WebSocket
cverports profile

GHSA-W67G-5RQW-F597: GHSA-W67G-5RQW-F597: Cryptographically Weak PRNG for WebSocket Frame Masking in Gorilla WebSocket

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-55477: CVE-2026-55477: Authenticated Arbitrary File Write in MHSanaei 3X-UI via Database Import
cverports profile

CVE-2026-55477: CVE-2026-55477: Authenticated Arbitrary File Write in MHSanaei 3X-UI via Database Import

#security #cve #cybersecurity
Comments
2 min read
GHSA-VX2M-JPXR-XV7W: GHSA-vx2m-jpxr-xv7w: Incorrect Authorization Bypass via Context Hint Cache Replay in Cloudreve
cverports profile

GHSA-VX2M-JPXR-XV7W: GHSA-vx2m-jpxr-xv7w: Incorrect Authorization Bypass via Context Hint Cache Replay in Cloudreve

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-W8J7-39HP-8X59: GHSA-W8J7-39HP-8X59: Path Traversal Vulnerability in Cloudreve Remote Downloader Workflow
cverports profile

GHSA-W8J7-39HP-8X59: GHSA-W8J7-39HP-8X59: Path Traversal Vulnerability in Cloudreve Remote Downloader Workflow

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-FX4F-MHW4-QM7J: GHSA-FX4F-MHW4-QM7J: Integer Overflow and Denial of Service in vibeio-http Chunked Parser
cverports profile

GHSA-FX4F-MHW4-QM7J: GHSA-FX4F-MHW4-QM7J: Integer Overflow and Denial of Service in vibeio-http Chunked Parser

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-4PH6-MJV7-3FQ6: GHSA-4PH6-MJV7-3FQ6: Improper Handling of Untrusted DNS-over-HTTPS Response Data in netfoil
cverports profile

GHSA-4PH6-MJV7-3FQ6: GHSA-4PH6-MJV7-3FQ6: Improper Handling of Untrusted DNS-over-HTTPS Response Data in netfoil

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-3GJW-F78C-VVPW: GHSA-3GJW-F78C-VVPW: Denial of Service via Unhandled Out-of-Bounds Indexing Panic in tokio-postgres
cverports profile

GHSA-3GJW-F78C-VVPW: GHSA-3GJW-F78C-VVPW: Denial of Service via Unhandled Out-of-Bounds Indexing Panic in tokio-postgres

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-14669: CVE-2026-14669: PostgreSQL to_char() Timezone Abbreviation Heap-Based Buffer Overflow
cverports profile

CVE-2026-14669: CVE-2026-14669: PostgreSQL to_char() Timezone Abbreviation Heap-Based Buffer Overflow

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63462: CVE-2026-63462: Unauthenticated Stack Overflow Denial of Service in Unleash Server
cverports profile

CVE-2026-63462: CVE-2026-63462: Unauthenticated Stack Overflow Denial of Service in Unleash Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63004: CVE-2026-63004: Server-Side Request Forgery in Unleash Addon and Integration Subsystem
cverports profile

CVE-2026-63004: CVE-2026-63004: Server-Side Request Forgery in Unleash Addon and Integration Subsystem

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63466: CVE-2026-63466: Process-Wide Security Degradation via Global Module Mutation in Unleash
cverports profile

CVE-2026-63466: CVE-2026-63466: Process-Wide Security Degradation via Global Module Mutation in Unleash

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-76904: CVE-2026-76904: Unauthenticated SQL Injection in GeoTools PostGIS DataStore Component
cverports profile

CVE-2026-76904: CVE-2026-76904: Unauthenticated SQL Injection in GeoTools PostGIS DataStore Component

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-61824: CVE-2026-61824: High-Severity Cross-Site Scripting (XSS) via Unsanitized Site Extractors in Defuddle
cverports profile

CVE-2026-61824: CVE-2026-61824: High-Severity Cross-Site Scripting (XSS) via Unsanitized Site Extractors in Defuddle

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63421: CVE-2026-63421: Query Limit Bypass via Negative Integer Input in KeystoneJS core resolvers
cverports profile

CVE-2026-63421: CVE-2026-63421: Query Limit Bypass via Negative Integer Input in KeystoneJS core resolvers

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-64679: CVE-2026-64679: Directory Traversal via Workspace Parameter in Atlantis
cverports profile

CVE-2026-64679: CVE-2026-64679: Directory Traversal via Workspace Parameter in Atlantis

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-76905: CVE-2026-76905: Denial of Service via Nil-Pointer Dereference in getkin/kin-openapi openapi3filter
cverports profile

CVE-2026-76905: CVE-2026-76905: Denial of Service via Nil-Pointer Dereference in getkin/kin-openapi openapi3filter

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59989: CVE-2026-59989: Remote Code Execution via Server-Side Template Injection in Phalcon Volt Engine
cverports profile

CVE-2026-59989: CVE-2026-59989: Remote Code Execution via Server-Side Template Injection in Phalcon Volt Engine

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61539: CVE-2026-61539: Remote Code Execution via Llama3 Tool Parser Eval Injection in Xinference
cverports profile

CVE-2026-61539: CVE-2026-61539: Remote Code Execution via Llama3 Tool Parser Eval Injection in Xinference

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77354: CVE-2026-77354: Uncontrolled Resource Consumption (OOM) via Sparse Array Indexes in kin-openapi
cverports profile

CVE-2026-77354: CVE-2026-77354: Uncontrolled Resource Consumption (OOM) via Sparse Array Indexes in kin-openapi

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77413: CVE-2026-77413: Remote Code Execution via Prototype Chain Bypass in JSONata Evaluator
cverports profile

CVE-2026-77413: CVE-2026-77413: Remote Code Execution via Prototype Chain Bypass in JSONata Evaluator

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63135: CVE-2026-63135: Stored Cross-Site Scripting (XSS) via Referer Header in YOURLS
cverports profile

CVE-2026-63135: CVE-2026-63135: Stored Cross-Site Scripting (XSS) via Referer Header in YOURLS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-68508: CVE-2026-68508: Arbitrary Code Execution via Unsafe Dynamic Instantiation in Hydra Core
cverports profile

CVE-2026-68508: CVE-2026-68508: Arbitrary Code Execution via Unsafe Dynamic Instantiation in Hydra Core

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77415: CVE-2026-77415: Sandbox Escape and Arbitrary Code Execution in JSONata Engine
cverports profile

CVE-2026-77415: CVE-2026-77415: Sandbox Escape and Arbitrary Code Execution in JSONata Engine

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77414: CVE-2026-77414: Critical Sandbox Escape and Remote Code Execution in JSONata via Prototype Pollution
cverports profile

CVE-2026-77414: CVE-2026-77414: Critical Sandbox Escape and Remote Code Execution in JSONata via Prototype Pollution

#security #cve #cybersecurity
Comments
3 min read
GHSA-8HGV-XC77-JMCR: GHSA-8HGV-XC77-JMCR: Privilege Escalation to Super-Admin via Twig Sandbox Escape and Stored XSS in Grav CMS Assets
cverports profile

GHSA-8HGV-XC77-JMCR: GHSA-8HGV-XC77-JMCR: Privilege Escalation to Super-Admin via Twig Sandbox Escape and Stored XSS in Grav CMS Assets

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-8CFW-PCWH-V63W: GHSA-8CFW-PCWH-V63W: Authenticated Twig Sandbox Escape and Remote Code Execution in Winter CMS
cverports profile

GHSA-8CFW-PCWH-V63W: GHSA-8CFW-PCWH-V63W: Authenticated Twig Sandbox Escape and Remote Code Execution in Winter CMS

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-Q9C5-PP7M-FM2G: GHSA-Q9C5-PP7M-FM2G: Missing Authorization in Fleet Enterprise iOS Application Distribution Endpoints
cverports profile

GHSA-Q9C5-PP7M-FM2G: GHSA-Q9C5-PP7M-FM2G: Missing Authorization in Fleet Enterprise iOS Application Distribution Endpoints

#security #cve #cybersecurity #ghsa
Comments
2 min read
loading...