CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In BuildKit, a crafted message in the low-level build API can be used to remove the contents of the /tmp directory. The action normally used to delete files inside the build container rootfs can escape into the real host temp directory.
Vulnerability in BuildKit. A custom client can send an upload request that allows files to escape from the BuildKit-controlled state directory. Requires valid permissions to access the BuildKit control API.
Vulnerability in Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2. An authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files, write files to arbitrary directories, or determine whether specific files exist on the server.
When verifying a MAC with a ChunkedMacVerification object in the Tink library, the tag comparison is not constant-time. This potentially allows an attacker to use timing information as a side channel to determine how many bytes of a given tag match the correct tag, which could lead to bytewise recovery of the correct tag.
A path traversal vulnerability in the backup-restore function of Home Assistant Core before 2026.7.0 allows attackers to write files to arbitrary absolute filesystem paths by supplying a crafted tar archive with a SYMTYPE entry. Because the official Docker image runs the process as root, attackers can achieve remote code execution by overwriting auto-imported Python paths such as site-packages/sitecustomize.py.
Vulnerability in PraisonAI (versions before 4.6.40) – incomplete fix for previous flaw (CVE-2026-44336). An unauthenticated attacker can read any file on the host (e.g., /etc/passwd, SSH keys) via MCP tools/call to praisonai.workflow.show.
Vulnerability in snap-confine (snapd component). A local unprivileged attacker can escalate privileges to root by bypassing security restrictions in set-capabilities configuration.
Ninja Forms WordPress plugin version 3.14.8 and earlier contains an improper input validation vulnerability. Unauthenticated attackers can inject arbitrary numeric values into form calculations and payment totals by submitting values that do not match any configured option in ListSelect or ListRadio fields. This can lead to manipulation of payment amounts, including setting them to zero.
Vulnerability in the libssh library on servers with GSSAPIKeyExchange enabled. The gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users.
Vulnerability in @nevware21/ts-utils library before version 0.14.0. The _copyProps function does not check hasOwnProperty and does not filter dangerous keys (__proto__, constructor, prototype), allowing an attacker to pollute the prototype chain of all objects in the application.
Vulnerability in snapd (Canonical) in the snap-confine component. Default seccomp templates do not block operations creating files with setuid flags, allowing applications in strict snap sandboxes to create and execute setuid binaries, bypassing security restrictions. Fixed by hardening the seccomp template engine.
In D-Link DNS-320 version 1.0.2, an unknown function in /web/jquery/uploader/multi_uploadify.php is vulnerable to unrestricted file upload via the Filedata[] argument. The attack can be executed remotely and the exploit is publicly available.
A command injection vulnerability in dracut. A remote attacker on the adjacent network can provide crafted DHCP options, leading to code execution in initramfs during system boot.
Invalid pointer vulnerability in the Security: PSM component of Firefox and Thunderbird. Fixed in Firefox 153 and Thunderbird 153.
Information disclosure vulnerability in the Networking: WebSockets component in Firefox and Thunderbird. Fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.
Privilege escalation vulnerability in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Information disclosure vulnerability in the DOM: Security component in Firefox and Thunderbird. Fixed in Firefox 153 and Thunderbird 153.
Site isolation issue in the DOM: Navigation component in Firefox and Thunderbird. Fixed in version 153.
Site isolation issue in the Graphics component in Firefox and Thunderbird. Fixed in version 153.