CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
OpenStack Mistral through version 22.0.0 contains a remote code execution vulnerability when the API is exposed. Endpoints allow code execution, which can lead to exfiltration of service credentials.
In the Linux kernel, a vulnerability in RAW sockets using IPPROTO_RAW allows malicious ICMP packets to set the protocol field to 255 and match such a socket, leading to FNHE cache changes.
In the Linux kernel netfilter nft_inner module, there is a desynchronization between the transport offset and layer 4 protocol for inner IPv6 packets. The bug overwrites the correct offset calculated by ipv6_find_hdr() with a constant 40 bytes, enabling transport header forgery and potential firewall bypass. This affects stable kernel versions from 6.2.
RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile.
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.
A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization by overriding the trust_remote_code parameter with untrusted configuration data.
An unauthenticated remote attacker can recover a default, hard-coded password from a firmware image and gain full access to all affected devices.
The ZDRES-232 and ZDRES-233 library contains two vulnerabilities: (1) Bypass of acceptMatchers filter via java.lang.reflect.Proxy because resolveProxyClass is not overridden, allowing deserialization of arbitrary proxy classes. (2) Calling Class.forName with static initialization for allow-listed classes can trigger dangerous static initializers.
ABB T-MAC Plus version 4.0-24 contains a vulnerability allowing external parties to access files or directories.
LibreChat up to version 0.8.3 has a vulnerability in the MCP server integration that resolves ${VAR} placeholders from process.env during Zod schema validation of user-supplied MCP URLs. An authenticated user can create a malicious MCP configuration that sends critical secrets (CREDS_KEY, CREDS_IV, JWT_SECRET, MONGO_URI) to an attacker-controlled server.
Vulnerability in authentik (identity provider) prior to versions 2025.12.6, 2026.2.4, and 2026.5.1 allows bypassing the Source stage by sending an empty POST request.
XSS vulnerability in the AutosubmitStage component in authentik (open-source identity provider) prior to versions 2025.12.5 and 2026.2.3, allowing an attacker to inject malicious scripts.
The ARMember Premium plugin for WordPress up to version 7.3.1 stores a plaintext password reset key in the `arm_reset_password_key` user meta field. Combined with other vulnerabilities (e.g., SQL Injection), this allows an attacker to take over any user account, including administrators.
Vulnerability in CrowCpp Crow through v1.3.1 HTTP allows response header injection via unvalidated response header values.
OpenClaude prior to version 0.5.1 exposes the dangerouslyDisableSandbox parameter in the BashTool input schema, allowing a prompt-injected model to escape the sandbox and achieve full host-level code execution.
Spacelabs Healthcare Sentinel versions 10.5.x and higher, and 11.x.x before 11.6.0, contain an unauthenticated remote code execution vulnerability through a deprecated .NET Remoting HTTP channel on port 8989. Attackers can read/write arbitrary files and deploy ASPX webshells.
OpenMed before 1.5.2 has a remote code execution vulnerability in the PII privacy-filter model loading path. The filter uses broad substring matching on the model_name parameter, allowing an unauthenticated attacker to load a malicious Hugging Face model with trust_remote_code=True, executing arbitrary code.
Progress Sitefinity in multiple versions (14.0.7700-14.4.8152, 15.0.8200-15.0.8234, 15.1.8300-15.1.8335, 15.2.8400-15.2.8441, 15.3.8500-15.3.8531, 15.4.8600-15.4.8630) has a vulnerability due to insufficiently protected credentials. A remote unauthenticated attacker can obtain plain-text credentials used to connect to the Sitefinity Insight service.
Progress Sitefinity 15.4.8623 before version 15.4.8630 has an improper access control vulnerability. A remote unauthenticated attacker can access restricted content, leading to full compromise of confidentiality, integrity, and availability.
MISP contains an authentication bypass vulnerability when LDAP mixed authentication is enabled with OTP enforcement. An authenticated user can bypass the OTP step and access the application without providing a TOTP, HOTP, or email OTP code.