CVE Vulnerability Catalog

An integer overflow in the UA_Variant array size computation in open62541 allows a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information.

In Kamaji, the Hosted Control Plane Manager for Kubernetes, prior to version 26.7.4-edge, the GetDefaultDatastoreSchema() and GetDefaultDatastoreUsername() functions use lossy namespace-and-name normalization, causing identifier collisions. This allows distinct tenants to share control-plane state and read, modify, or destroy another tenant's Kubernetes data.

An incomplete fix for CVE-2026-15352 in the NASA core Flight System (cFS) Health and Safety (HS) application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to crash, resulting in a denial-of-service condition and processor reset.

The RCU II+ and Multiload II+ devices have an unauthenticated debug service based on the Target Communications Framework (TCF) that provides full root-level access to the embedded system. An attacker can connect to this service over the network and freely view and modify the filesystem, manipulate processes, and control network interfaces.

The Sylius Mollie Plugin prior to versions 2.2.8, 3.2.4, and 3.3.1 accepts attacker-controlled id and orderId parameters in the POST /{_locale}/update-payment payment webhook but does not verify that the Mollie payment belongs to the referenced Sylius order. An unauthenticated attacker can use any valid paid Mollie payment ID to mark a victim order as paid without transferring funds.

In GoAccess prior to version 1.11, the built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadlen field before enforcing the maximum frame size. An unauthenticated remote client can bypass the guard and force an approximately 18-exabyte allocation request that terminates the process.

In GoAccess version 1.10.2, the parse_browser function assumes the matched browser token begins with 'Opera' and moves a trailing version substring to match plus five. This allows writing one to four attacker-influenced bytes beyond the heap allocation, potentially corrupting data or crashing GoAccess.

In OpenProject prior to version 17.6.0, the PATCH /api/v3/work_packages/{id} endpoint accepts _links.fileLinks and allows authenticated users with edit_work_packages but without manage_file_links to resolve Storages::FileLink records by raw id, detach or hard-delete existing FileLinks, and re-parent FileLinks from other projects to an attacker-controlled work package, exposing origin filename, origin id, and MIME type metadata.

Wolf CMS through version 0.8.3.1 contains an authorization bypass vulnerability in BackupRestoreController due to a PHP operator precedence flaw in the permission check expression. Authenticated non-administrative users can exploit the incorrect evaluation of the access control expression to create, download, and restore backups without administrative privileges.

Wolf CMS through version 0.8.3.1 contains a remote code execution vulnerability in FileManagerController. Authenticated attackers can create arbitrary PHP files by exploiting missing file extension validation in the create_file() and save() functions. Attackers with the file_manager_mkfile capability can write malicious PHP content into the web-accessible FILES_DIR directory and trigger execution by requesting the file over HTTP.

Apache Tika from version 1.8 through 3.3.1 and 4.0.0-alpha-1 has a relative path traversal vulnerability in the ISA-Tab parser. An attacker can place files in a directory and then read arbitrary files accessible to the Tika process via a crafted "Study Assay File Name" value.

IBM WebSphere Application Server 9.0 and 8.5 contain a remote code execution vulnerability in the SOAP/JMX connector. An attacker can exploit this flaw to execute arbitrary code on the server.

Leantime 3.6.2 contains a cross-site request forgery vulnerability due to missing VerifyCsrfToken middleware. Unauthenticated attackers can trick authenticated users into performing unauthorized actions like creating or deleting projects, modifying settings, and changing permissions.

Leantime 3.6.2 contains a server-side request forgery and local file inclusion vulnerability in the Blueprints::import() method. Authenticated attackers can supply unsanitized filenames with URL wrappers or path traversal sequences to read internal resources like cloud metadata services or arbitrary files from the server filesystem.

Banks prior to version 2.4.3 contains a remote code execution vulnerability in {% completion %} blocks. An attacker can supply a malicious Tool JSON object with an import_path field that is resolved via importlib.import_module() and getattr() without any allowlist. When the LLM invokes a tool with a matching name, arbitrary Python code such as os.system or subprocess.getoutput can be executed.

The aws-smithy-json crate before version 0.62.7 contains an uncontrolled recursion vulnerability in the unknown-key skip path. A remote unauthenticated attacker can send a single small HTTP request with deeply nested JSON, causing stack exhaustion and process abort on a smithy-rs generated server.

SGLang contains a model weight exfiltration vulnerability when no API keys are configured. SGLang exposes two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL and then trigger data transfer, enabling exfiltration of all model weights.

SGLang contains a credential leakage vulnerability in the /server_info endpoint. When only the --admin-api-key is configured, this endpoint returns API keys and SSL keyfile information.

IBM Langflow OSS versions 1.0.0 through 1.10.1 allow an attacker to access another user's private vector documents by creating their own flow with matching Chroma persist_directory and collection_name values. The attacker receives exact victim content in their workflow output despite having no authorization to read the victim's flow. Additionally, the attacker can pollute the victim's collection by inserting their own documents into the shared namespace.

IBM Langflow OSS versions 1.0.0 through 1.10.1 allow a remote attacker to traverse directories on the system. An attacker can send a specially crafted URL request containing "dot dot" sequences ( /../ ) to view arbitrary files.