CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.10)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Zrok is software for sharing web services, files, and network resources. Prior to version 2.0.2, the zrok WebDAV drive backend (davServer.Dir) restricts path traversal through lexical normalization but does not prevent symlink following, allowing access to files outside the shared directory.
Heimdall prior to version 0.17.14 performs rule matching on the raw request path, which may lead to unauthorized access. Due to the discrepancy in path normalization, Heimdall may authorize requests for one path while downstream components process a different, normalized path.
Heimdall, an identity-aware proxy and access control service, prior to version 0.17.14, performed host matching in a case-sensitive manner, which is inconsistent with the fact that HTTP hostnames are case-insensitive. This can lead to misclassification of requests that differ only in letter casing.
Heimdall, a proxy and access control service, prior to version 0.17.14 handled URL-encoded slashes in a case-sensitive manner, leading to request path interpretation issues. As a result, the lowercase equivalent (%2f) was not recognized, potentially resulting in authorization bypass.
LiteLLM versions 1.74.2 through 1.83.6 have a vulnerability in the POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list endpoints, which accept a full MCP server configuration including commands to execute. An authenticated user with any API key can run arbitrary commands on the proxy host.
In Axios versions 1.0.0 through 1.15.1, five config properties (auth, baseURL, socketPath, beforeRedirect, insecureHTTPParser) in the HTTP adapter are read without hasOwnProperty checks, making them exploitable as prototype pollution gadgets. When Object.prototype is polluted by another dependency, Axios silently picks up these polluted values on every outbound HTTP request.
A vulnerability in PromptHub allows SSRF (Server-Side Request Forgery) attacks due to improper IPv6 address validation, enabling authenticated users to access private IP addresses. The issue affects versions from 0.4.9 to before 0.5.4.
LiteLLM versions 1.80.5 through 1.83.7 have a vulnerability in the POST /prompts/test endpoint that accepts user-supplied prompt templates and renders them without sandboxing. A crafted template can execute arbitrary code within the LiteLLM Proxy process.
OpenLearnX to otwartoźródłowa, zdecentralizowana platforma do nauki i oceniania. Przed wersją 2.0.3 zidentyfikowano podatność na zdalne wykonanie kodu (RCE) w środowisku wykonawczym OpenLearnX, co umożliwia ucieczkę z piaskownicy i wykonywanie dowolnych poleceń.
A vulnerability was found in SourceCodester SUP Online Shopping 1.0 that allows SQL injection through manipulation of the msgid argument in the /admin/viewmsg.php file. The attack can be carried out remotely.
A flaw has been found in SourceCodester Comment System 1.0 affecting some unknown processing of the file post_comment.php. Manipulation of the argument 'Name' leads to SQL injection vulnerability.
A vulnerability in the MAXHUB Pivot client application versions prior to v1.36.2 may allow an attacker to obtain encrypted tenant email addresses and related metadata. Due to the presence of a hardcoded AES key within the application, the encrypted data can be decrypted, enabling access to tenant email addresses in cleartext.
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted requests with deeply nested JSON payloads to an unauthenticated API endpoint. The endpoint parsed user-controlled JSON request bodies without size or depth limits.
A server-side request forgery (SSRF) vulnerability in Azure Notification Service allows an authorized attacker to elevate privileges over a network.
OpenStack Cyborg before version 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This unconditionally authorizes any request carrying a valid Keystone token regardless of roles, project membership, or scope.
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network.
A vulnerability in Microsoft Partner Center allows externally controlled references to a resource in another sphere, enabling an unauthorized attacker to perform spoofing over a network.
In Copilot Chat (Microsoft Edge), improper neutralization of special elements used in commands leads to command injection vulnerability. This allows an unauthorized attacker to disclose information over a network.
Azure Machine Learning has an improper neutralization of input during web page generation, leading to a cross-site scripting (XSS) vulnerability. This allows an unauthorized attacker to perform spoofing over a network.
W M365 Copilot występuje niewłaściwe neutralizowanie specjalnych elementów używanych w poleceniach, co prowadzi do podatności na wstrzykiwanie poleceń ('command injection'). Umożliwia to nieautoryzowanemu atakującemu ujawnienie informacji przez sieć.