CVE Vulnerability Catalog

A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user-controlled input may be susceptible to manipulation of model behavior across conversation turns.

Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result in unintended data exposure between users.

CVE-2026-2465 describes an incorrect authorization vulnerability in Turboard FOR-S software that allows privilege escalation. This issue affects the software versions from 7.01.2026 to 18.02.2026.

Versions of multiparty up to 4.2.3 are vulnerable to denial of service due to an uncaught exception. By sending a multipart/form-data request with a malformed percent-encoding in the Content-Disposition header, the parser invokes decodeURI without error handling, leading to a process crash.

Versions of multiparty up to 4.2.3 are vulnerable to denial of service due to an uncaught exception. By sending a multipart/form-data request with a field name that collides with an Object.prototype property, the parser invokes .push() on the inherited prototype value, leading to a TypeError and crashing the process.

Versions of multiparty up to 4.2.3 are vulnerable to denial of service due to regular expression backtracking in the Content-Disposition filename parameter parser. A crafted multipart upload with a long header value can cause regex matching to take seconds, blocking the event loop.

A vulnerability in BAPSİS by ABIS Technology Ltd. Co. allows authorization bypass through User-Controlled key, enabling exploitation of Trusted Identifiers.

A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, exposing the /mcp JSON-RPC endpoint without authentication on port 3088. An unauthenticated remote attacker can invoke the run-code MCP tool to supply arbitrary source code and execute it via child_process.exec().

A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5) that involves a stack-based overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.

A vulnerability in Solid Edge SE2026 before version V226.0 Update 5 involves uninitialized pointer access when parsing specially crafted PAR files. This allows remote code execution in the context of the current process.

A vulnerability has been identified in Teamcenter affecting versions V2312, V2406, V2412, V2506, and V2512. The issue involves a hardcoded key used for obfuscation, which could allow an attacker to obtain these keys and misuse them.

A vulnerability has been identified in Teamcenter that affects versions earlier than V2312.0014, V2406.0012, V2412.0009, V2506.0005, and V2512. The issue is due to improper encoding or filtering of user-supplied data, which could allow an attacker to inject malicious code.

Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain unauthorized access to the web browser.

The vulnerability in affected devices is due to improper validation and sanitization of filenames on the Firmware Update page. A remote attacker can use social engineering to trick an authenticated user into selecting a modified firmware file, resulting in malicious JavaScript execution in the context of the user's session without requiring file upload, potentially leading to session hijacking or credential theft.

A vulnerability in SIMATIC CN 4100 (versions prior to V5.0) allows resource exhaustion via a high volume of TCP SYN packets. An attacker can cause service unavailability and denial-of-service conditions.

A vulnerability in RUGGEDCOM ROX devices allows an authenticated remote attacker to inject arbitrary commands during feature key installation. Insufficient input sanitization leads to remote code execution with root privileges.

Inverters and energy storage devices in the blueplanet family (including 100 NX3 M8, 100 TL3 GEN2, 105 TL3, 125 NX3 M10, gridsave) use a CRC16-based algorithm to generate Technical Service credentials. An attacker can derive these credentials from the device serial number and gain unauthorized access.

A null pointer dereference vulnerability in network devices when processing specially crafted IPv4 requests. An attacker can cause a denial of service condition, requiring a manual restart to recover.

The LifePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the 'n' parameter of the lp_update_mds AJAX action in all versions up to and including 2.2.2. This is due to the `wp_ajax_nopriv_lp_update_mds` action being registered without nonce verification or capability checks, combined with insufficient input sanitization and output escaping when the series name is rendered in the admin settings page.

CVE-2026-39432 in Arraytics Timetics has a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels.