CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The ESI plugin of Apache Traffic Server can recurse without bound and fetch attacker-controlled URLs. Affected versions: 8.0.0 through 8.1.9, 9.0.0 through 9.2.14, and 10.0.0 through 10.1.3.
The Cripts framework of Apache Traffic Server has out-of-bounds writes, path traversal, and use-after-free errors. Affected versions: 10.0.0 through 10.1.3.
Apache Traffic Server leaks memory when handling HostDB SRV records. Affected versions: 8.0.0 through 8.1.9, 9.0.0 through 9.2.14, and 10.0.0 through 10.1.3.
Apache Traffic Server has use-after-free and time-of-check/time-of-use (TOCTOU) errors in remap configuration handling. Affected versions: 8.0.0 through 8.1.9, 9.0.0 through 9.2.14, and 10.0.0 through 10.1.3.
Apache Traffic Server mishandles on-disk cache fields and object lifetimes, corrupting state or crashing. Affects versions 8.0.0 through 8.1.9, 9.0.0 through 9.2.14, and 10.0.0 through 10.1.3.
Apache Traffic Server can crash from null dereferences and dangling references in TLS and SNI handling. Affects versions 8.0.0 through 8.1.9, 9.0.0 through 9.2.14, and 10.0.0 through 10.1.3.
Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors. Affects versions 8.0.0 through 8.1.9, 9.0.0 through 9.2.14, and 10.0.0 through 10.1.3.
Apache Traffic Server can reuse server sessions and tunnels improperly, exposing data across client connections. Affects versions 8.0.0 through 8.1.9, 9.0.0 through 9.2.14, and 10.0.0 through 10.1.3.
In Apache Atlas, missing authorization in admin endpoints allows any authenticated user, regardless of role, to perform administrative operations.
Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destination. A remote attacker with network access can cause SSRF or open-proxy behavior.
Apache Traffic Server drops the per-stream buffer cap when dechunking HTTP/2 or HTTP/3 responses, letting a slow client exhaust server memory. Affects versions 8.0.0 through 8.1.9, 9.0.0 through 9.2.14, and 10.0.0 through 10.1.3.
In the Linux kernel's Bluetooth L2CAP stack, a use-after-free vulnerability exists in l2cap_sock_new_connection_cb(). After releasing the parent lock, a child socket can be accepted and freed by another thread before dereference, leading to use-after-free.
In the Linux kernel, a vulnerability was found in the perf event group management. Removing events via perf_event_remove_on_exec() can leave an inconsistent group state when a group leader is removed while sibling events remain active. This corrupts the PMU context active list and can cause a double list addition.
Apache Traffic Server can write out of bounds or overflow integers while parsing MIME and HTTP headers. Affects versions 8.0.0 through 8.1.9, 9.0.0 through 9.2.14, and 10.0.0 through 10.1.3.
Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked framing when converting HTTP/2 to HTTP/1. Affects versions 10.0.0 through 10.1.3.
Apache Traffic Server can be crashed or driven to resource exhaustion by abusive HTTP/2 framing and flow-control. Affects versions 8.0.0 through 8.1.9, 9.0.0 through 9.2.14, and 10.0.0 through 10.1.3.
The Database for CF7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Array Form Field Values in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts that execute when a user accesses an injected page. This is exploitable because Contact Form 7 accepts array-structured input for ordinary text fields via the public REST API endpoint, and the plugin stores submitted data using $wpdb INSERT with serialize() into a custom table, bypassing WordPress save-time filtering.
HTTP Request Smuggling vulnerability in Apache Traffic Server. Affects versions 10.0.0 through 10.1.3 and 9.0.0 through 9.2.14.
A Regular Expression without Anchors vulnerability was found in Apache Traffic Server. It affects versions from 10.0.X through 10.1.3 and from 9.0.X through 9.2.14. Upgrading to version 9.2.15 or 10.1.4 fixes the issue.
A post-authentication SQL injection vulnerability was found in Koollab LMS. An authenticated attacker can use the face-to-face runs update endpoint to read the entire database and obtain valid JWT tokens for account takeover.