CVE Vulnerability Catalog

In JetBrains TeamCity versions before 2026.1 and 2025.11.5, authenticated users could expose the server API to unauthorized access.

A vulnerability in Bitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retrieving or rotating an organization's SCIM API key. This allows an authenticated user with SCIM management privileges to obtain the key using only a valid session.

Bitwarden Server prior to v2026.4.0 contains a missing authorization vulnerability that allows a provider service user to add an arbitrary organization to their provider via POST /providers/{providerId}/clients/existing, resulting in takeover of the target organization. Self-hosted installations are unaffected as this endpoint is restricted to Cloud via SelfHosted(NotSelfHostedOnly = true).

The Open edX Enterprise Service app provides enterprise features to the Open edX platform. From versions 7.0.2 to 7.0.4, the sync_provider_data endpoint in SAMLProviderDataViewSet fetches SAML metadata from a URL stored in SAMLProviderConfig.metadata_source, which can lead to unauthorized HTTP requests.

In the Neat VNC server library prior to version 0.9.6, a pre-authentication stack buffer overflow exists in the RSA-AES security type handler. An unauthenticated remote attacker who can reach the VNC listening socket can send a crafted handshake, leading to server crash.

A vulnerability in the Open edX platform allows authenticated Enterprise Admin users to supply any URL via the metadata_url POST parameter. This URL is passed directly without validation, enabling an attacker to force the server to make HTTP requests to internal network services or malicious endpoints.

Network-AI is a multi-agent orchestrator based on TypeScript/Node.js. In versions prior to 5.1.3, the MCP HTTP transport accepts JSON-RPC requests without any authentication, allowing enumeration and invocation of privileged management tools.

In pyLoad prior to version 0.5.0b3.dev100, there is a vulnerability that allows a user with Perms.MODIFY to specify arbitrary directories as download locations for a package through the set_package_data() API function. The lack of sanitization in the '_folder' key enables this action.

In pyLoad prior to version 0.5.0b3.dev100, the set_config_value() API method improperly managed security-sensitive options, allowing authenticated users with SETTINGS permission to enable proxying and route traffic through a host they control.

Zen Browser prior to version 1.19.9b included a MAR updater that did not verify cryptographic signatures. This creates a risk of delivering unauthorized code to users via the auto-update mechanism.

Wellbia's XIGNCODE3 xhunter1.sys kernel driver, versions 10.0.10011.16384 through 2023.12.7.78, has a privilege escalation vulnerability that provides access to the IRP_MJ_WRITE command interface, allowing any user process to request PROCESS_ALL_ACCESS. The vulnerability was not fully remediated and remains in version 2023.12.7.78.

HireFlow v1.2 is vulnerable to Incorrect Access Control. The application does not enforce object-level authorization on the /candidate/<id> and /interview/<id> endpoints, allowing access to other users' data.

HireFlow v1.2 does not implement CSRF token validation on any state-changing POST endpoint. All forms are vulnerable to CSRF, allowing an attacker to change the victim's password, delete records, or inject arbitrary data.

D-Link DCS-932L version v2.18.01 is vulnerable to Command Injection in the function sub_42EF14 of the file /bin/alphapd. Manipulation of the argument LightSensorControl leads to command injection.

MuuCMF T6 version 1.9.4.20260115 has a SQL Injection vulnerability that allows an unauthenticated attacker to compromise the entire database and gain unauthorized administrative access. The attacker may also potentially achieve remote code execution by writing malicious files to the server's file system via the keyword parameter in the /index/controller/Search.php endpoint.

CVE-2026-30635 in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via command injection in the readTranscriptFromCommit function when reading from an external FORGE_BASE_URL.

A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The `_create_webhook()` function accepts a user-controlled `url` parameter without validation, allowing an attacker to force the MLflow backend to send HTTP requests to internal services or arbitrary external servers.

The extract_name() function in dnsmasq is vulnerable to a heap buffer overflow, allowing an attacker to inject false DNS cache entries. This can result in DNS lookups being redirected to an attacker-controlled IP address or cause a denial of service (DoS).

Grav is a file-based web platform. Prior to version 2.0.0-rc.2, the Twig sandbox allow-list permitted any user with the admin.pages role to call config.toArray() within a page body, dumping the entire merged site configuration, including all plugin secrets.

The form plugin for Grav adds the ability to create and use forms. Prior to 9.1.0, there was an unauthenticated page-content overwrite via file upload.