CVE Vulnerability Catalog

Netty's HttpProxyHandler constructs HTTP CONNECT requests with header validation disabled, allowing an attacker controlling outbound headers to inject arbitrary HTTP headers. The vulnerability affects versions prior to 4.2.13.Final and 4.1.133.Final.

Netty, an asynchronous network application framework, has an issue in versions from 4.2.0.Final to 4.2.13.Final where the epoll transport fails to detect and close TCP connections that receive a RST after being half-closed. This leads to stale channels that are never cleaned up and, in some code paths, a 100% CPU busy-loop in the event loop thread.

CKAN is an open-source data management system that, prior to versions 2.10.10 and 2.11.5, had a vulnerability allowing SMTP server spoofing. This could enable MITM attacks, exposing credentials and all sent emails.

CVE-2026-33583 vulnerability involves the exposure of the QKEY and internal system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform. This issue affects versions of the platform before 26.03.

W instalatorze Zoom Rooms dla systemu Windows przed wersją 7.0.0 występuje niezaufana ścieżka wyszukiwania, która może umożliwić uwierzytelnionemu użytkownikowi eskalację uprawnień poprzez lokalny dostęp.

Wtyczka Zoom Workplace VDI dla systemu Windows Universal Installer przed wersją 6.6.11 zawiera podatność na zewnętrzną kontrolę nazwy pliku lub ścieżki. Umożliwia to uwierzytelnionemu użytkownikowi przeprowadzenie eskalacji uprawnień poprzez lokalny dostęp.

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network access to cause a DoS condition by sending specially crafted network traffic. Panorama and Cloud NGFW are not impacted.

Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS software allow an authenticated administrator to bypass system restrictions and execute arbitrary commands as root. Exploitation requires access to the PAN-OS CLI or Web UI.

An arbitrary file read and delete vulnerability in Palo Alto Networks WildFire WF-500 and WF-500-B appliances in default non-FIPS mode allows reading sensitive information and deleting arbitrary files.

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect app allow a local user to escalate privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux.

A buffer overflow vulnerability in the Palo Alto Networks GlobalProtect app allows a man-in-the-middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. The vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.

Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent allow a local attacker to bypass authentication controls and execute privileged operations.

A privilege management vulnerability in the Palo Alto Networks Prisma Access Agent allows a locally authenticated non-administrative user to escalate privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows. This enables arbitrary code execution and reading of sensitive information otherwise restricted to privileged accounts.

An improper certificate validation vulnerability in Palo Alto Networks Prisma SD-WAN ION allows a man-in-the-middle (MitM) attacker to impersonate the controller.

An incorrect authorization vulnerability in Trust Protection Foundation allows attackers to bypass access controls and perform unauthorized actions on restricted resources.

An information disclosure vulnerability in Trust Protection Foundation allows an authenticated attacker to access sensitive data from the server's vault. Exploitation enables impersonation of any user and arbitrary modification of configuration settings.

A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface, allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.

A vulnerability in Next.js involves incomplete application of the fix for CVE-2026-44575 in middleware.ts when using Turbopack. It affects versions from 15.2.0 to before 15.5.18 and 16.2.6.

Next.js, a React framework for building full-stack web applications, is vulnerable to connection exhaustion via crafted POST requests to a server action. This affects applications using Partial Prerendering through the Cache Components feature, where a malicious request can cause a request-body handling deadlock, leaving connections open for an extended period.

Next.js versions from 13.4.13 to before 15.5.16 and 16.2.5 are vulnerable to server-side request forgery (SSRF) via crafted WebSocket upgrade requests. An attacker can force the server to proxy requests to arbitrary internal or external destinations, potentially exposing internal services or cloud metadata endpoints.