CVE Vulnerability Catalog

CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to version 14.50. Attackers with local control of the Windows client can send malformed data to an API and elevate their level of privilege to system.

CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to version 14.50. Attackers can send a modified message to the client, potentially leading to memory overwrite and denial of service.

CVE-2025-56568 describes an assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Function) component of Open5GS before version 2.7.5. This allows remote attackers to cause denial of service via specially crafted NGAP messages containing malformed length fields in protocol configuration data.

An issue in open5gs v.2.7.3 allows a remote attacker to cause a denial of service via a crafted PDU Session Modification Request.

The FSx Windows File Server volume mounting component in Amazon ECS Agent before version 1.103.0 has improper neutralization of inputs used in OS commands. This may allow a remote authenticated threat actor to execute shell commands with SYSTEM privileges on the underlying host.

In version 4.9.0 of Chartbrew, a vulnerability allows low-privileged attackers to access data from other projects within the same team. This vulnerability enables reading, executing, creating, updating, and deleting datasets and data requests that the attacker should not have access to.

In version 4.9.0 of Chartbrew, a vulnerability exists that allows access to the POST /api/chart/:chart_id/query endpoint without authentication. An attacker who knows the chart identifier can trigger a data refresh and access private charts.

In version 4.9.0 of Chartbrew, authenticated users with access to one project can update or delete a SharePolicy record belonging to another project. The issue arises from the lack of verification that policy_id belongs to the specified project.

In version 4.9.0 of Chartbrew, there is a vulnerability that allows public access to chart data, even if they are hidden. This issue arises from improper verification of access permissions for charts in public projects.

An XXE vulnerability in the /designer/loadReport endpoint of SpringBlade v4.8.0 allows authenticated attackers to execute arbitrary code via injecting a crafted payload.

JeeSite version 5.15.1 contains a vulnerability in the fileEntityId parameter in the /a/file/upload endpoint, allowing authenticated attackers with file upload permissions to perform a path traversal attack and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations.

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.

CryptPad version 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance.

Weaver (Fanwei) E-cology w wersjach 9.5 przed 10.52 zawiera podatność na odczyt dowolnych plików w interfejsie XmlRpcServlet na końcówce XML-RPC. Umożliwia to nieautoryzowanym atakującym zdalne odczytywanie plików, podając ścieżki plików do metod WorkflowService.getAttachment i WorkflowService.LoadTemplateProp.

There is an improper input validation vulnerability in MOVEit Automation that allows for privilege escalation.

The web management interface of the U-SPEED N300 Router V1.0.0 lacks CSRF protection mechanisms like anti-CSRF tokens or strict Origin/Referer validation. An attacker can craft a malicious webpage that sends forged HTTP requests to configuration endpoints. If an authenticated administrator visits the page, the browser includes the valid session cookie, allowing unauthorized administrative actions.

Wersja 2.1.5 systemu Krayin CRM zawiera lukę, która umożliwia zdalnemu atakującemu wykonanie dowolnego kodu poprzez funkcję komponowania wiadomości e-mail. Problem został naprawiony w wersji 2.1.6.

The U-SPEED N300 router version V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint. This allows an attacker on the local network to perform unlimited authentication attempts, enabling brute-force attacks against the administrator account and potential unauthorized access to the router management interface.

A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on the web management interface, an attacker can exhaust system resources in the embedded Boa HTTP server. This causes the router web interface to become unresponsive and may require manual reboot to restore normal operation.

The Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler. A high-volume flood of HTTP GET requests to non-existent URIs exhausts critical system resources, including file descriptors and memory buffers.