CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
LiteLLM versions 1.74.2 through 1.83.6 have a vulnerability in the POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list endpoints, which accept a full MCP server configuration including commands to execute. An authenticated user with any API key can run arbitrary commands on the proxy host.
In LiteLLM versions from 1.81.16 to before 1.83.7, a database query used during proxy API key checks is vulnerable to SQL injection due to mixing caller-supplied key value into the query text. An unauthenticated attacker can send a crafted Authorization header to any LLM API route, leading to reading and potentially modifying data in the proxy's database.
An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution.
A vulnerability was found in the Linux kernel's AEAD algorithm implementation via the algorithmic interface (algif_aead). It involves incorrect in-place operation, which may cause data processing errors. The patch reverts to out-of-place operation and simplifies the code.
Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
A protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. This could lead to impersonation of trusted entities.
An OS command injection vulnerability has been discovered in Fortinet FortiSandbox versions 4.4.0 through 4.4.8. This flaw is due to improper neutralization of special elements used in OS commands.
A missing encryption of sensitive data vulnerability was found in Apache Tomcat due to the fix for CVE-2026-29146 allowing bypass of the EncryptInterceptor. Affected versions: 11.0.20, 10.1.53, and 9.0.116.
A vulnerability in Apache ActiveMQ allows an authenticated attacker to achieve remote code execution on the broker via the Jolokia JMX-HTTP endpoint. The attack invokes network connector operations with a crafted URI that loads a remote Spring XML context, leading to arbitrary code execution in the broker's JVM.
An improper access control vulnerability in Fortinet FortiClientEMS versions 7.4.5 through 7.4.6 allows an unauthenticated attacker to execute unauthorized code or commands via crafted requests.
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
An issue was discovered in Lantronix EDS5000 2.1.0.0R3 where the HTTP RPC module executes a shell command to write logs upon failed authentication. The username is directly concatenated with the command without sanitization, allowing attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.
A vulnerability in the peering authentication mechanism in Cisco Catalyst SD-WAN Controller, Manager, and Validator allows an unauthenticated remote attacker to bypass the login process and gain administrative privileges on an affected system.
A vulnerability in Fortinet FortiOS allows a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases. The attack requires prior compromise of the product via another vulnerability at the filesystem level.
In Fortinet FortiAnalyzer, FortiManager, FortiNAC-F, FortiOS, FortiProxy, and FortiWeb, there is an authentication bypass vulnerability that allows an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts if FortiCloud SSO authentication is enabled on those devices.
Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.
Wersje SmarterTools SmarterMail przed wersją 9511 zawierają podatność na zdalne wykonanie kodu bez uwierzytelnienia w metodzie API ConnectToHub. Atakujący może skierować SmarterMail na złośliwy serwer HTTP, który dostarcza złośliwe polecenie systemowe, które zostanie wykonane przez podatną aplikację.
A vulnerability in Langflow allows remote code execution via the exec_globals parameter in the validate endpoint. An unauthenticated attacker can inject malicious code from an untrusted source.
SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An unauthenticated attacker can supply a target administrator username and a new password to reset the account, resulting in full administrative compromise of the SmarterMail instance. NOTE: SmarterMail system administrator privileges grant the ability to execute operating system commands via built-in management functionality, effectively providing administrative (SYSTEM or root) access on the underlying host.