CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
IBM InfoSphere Optim Test Data Fabrication w wersjach 1.0.0 do 1.0.2.7 może umożliwić zdalnemu atakującemu przechodzenie przez katalogi w systemie. Atakujący może wysłać specjalnie skonstruowane żądanie URL zawierające sekwencje 'kropka kropka' (/../), co pozwala na przeglądanie dowolnych plików w systemie.
Tasmota versions up to 15.3.0.3 contain an issue in the fetch_jpg() function that allows a remote attacker to cause a heap buffer overflow. The Content-Length from a JPEG stream is stored in a uint16_t variable, leading to allocation of a smaller buffer than the data actually read when the value exceeds 65535.
Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the xdrv_10_scripter.ino, fetch_jpg(), jpg_task.boundary[40], strcpy() function.
A Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and earlier allows a remote attacker to execute arbitrary code via the fetch_jpg() function in tasmota/tasmota_xdrv_driver/xdrv_10_scripter.ino.
Netis AC1200 Router NC21 V4.0.1.4296 is vulnerable to unauthenticated command injection in the /cgi-bin/skk_set.cgi endpoint. The password and new_pwd_confirm POST parameters are passed directly to the OS shell without sanitization, allowing an attacker to achieve remote code execution.
Netis AC1200 Router NC21 version V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skk_get.cgi that returns the entire router configuration as a JSON response with no authentication required. Any attacker on the LAN can send a single HTTP GET request and instantly retrieve administrator credentials and passwords.
The Netis AC1200 Router NC21 firmware version V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The root account password is set to the trivially weak value 'root', allowing an attacker with device access to authenticate as root and gain full control of the underlying operating system.
Picoclaw w wersji 0.1.2 i wcześniejszych jest podatny na wstrzyknięcie poleceń systemowych poprzez komponent ExecTool. Funkcja guardCommand() próbuje ograniczyć wykonywanie poleceń powłoki za pomocą listy zablokowanych wyrażeń regularnych, jednak lista ta jest niekompletna.
Biblioteka @pensar/apex w wersjach do 0.0.58 jest podatna na wstrzykiwanie poleceń systemowych za pomocą narzędzia smart_enumerate. Funkcja createSmartEnumerateTool() w pliku src/core/agent/tools.ts tworzy polecenie powłoki, łącząc niesanitizowane wartości z tablicy extensions oraz parametru url, co prowadzi do wykonania dowolnych poleceń systemowych.
In Slican telephone exchanges, the secure key is generated in a predictable manner, allowing an unauthenticated attacker to deduce it and obtain admin credentials.
A flaw was found in Samba's handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports.
IBM Db2 w wersjach od 11.5.0 do 11.5.9 oraz od 12.1.0 do 12.1.4 jest podatny na atak typu denial of service przy użyciu specjalnie skonstruowanego zapytania, gdy włączone są transakcje autonomiczne.
In the Linux kernel, the NTFS3 filesystem has a vulnerability involving the use of uninitialized folios. Newly allocated folios are not marked as uptodate, and the ni_read_frame() function is skipped when the caller expects the frame to be completely overwritten, leaving part of the memory uninitialized.
A vulnerability in the Linux kernel related to stack-out-of-bounds access in the is_bprm_creds_for_exec() function has been fixed. This issue was caused by incorrect offset calculation using the *file pointer.
IBM QRadar w wersji 7.5.0 do 7.5.0 UP15 Interim Fix 002 może umożliwić uprzywilejowanemu użytkownikowi przesłanie złośliwego archiwum kopii zapasowej, które może zostać przywrócone i wykorzystane do uzyskania dostępu do systemu operacyjnego.
Podatność w wtyczce Tassos Framework umożliwia użytkownikom usuwanie dowolnych plików na dotkniętych stronach.
In the Linux kernel, a vulnerability in the SLIP protocol implementation was found where decode() and pull16() functions do not bounds-check the compressed packet length. A short VJ frame can cause an out-of-bounds read, and the excess data is incorporated into the compression state and reflected in subsequent packets.
In the Linux kernel, a vulnerability was found in the CO-RE (Compile Once - Run Everywhere) BPF mechanism. The bpf_core_parse_spec() function accepts negative indices in CO-RE accessor strings, leading to an out-of-bounds memory read and deterministic system crash. The issue is reachable with CAP_BPF privileges.
W jądrze Linux wykryto podatność use-after-free w mechanizmie BPF arena podczas wywoływania funkcji fork. Problem wynika z nieprawidłowego dziedziczenia VMA (Virtual Memory Area) przez proces potomny, co prowadzi do użycia wygasłego wskaźnika i potencjalnej eskalacji uprawnień.
CVE-2026-42762 describes an improper neutralization of input during web page generation, leading to Cross-site Scripting (XSS) vulnerabilities in the VikBooking Hotel Booking Engine. This issue affects versions from n/a through 1.8.9 inclusive.