CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.11)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In donchelo processing-claude-mcp-bridge up to e017b20a4b592a45531a6392f494007f04e661bd, a path traversal vulnerability exists in the create_sketch Tool function in processing_server.py. Manipulating the sketch_name argument allows remote attack.
gmx-vmd-mcp up to version 0.1.0 is vulnerable to command injection in the launch_vmd_gui_tool function of mcp_server.py within the VMD Launch Handler component. Manipulating the structure_file/trajectory_file arguments allows remote command execution. A public exploit exists, and the project has not responded.
A post-authentication command injection vulnerability in the 'DomainName' parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions up to 5.50(ABVY.7.1)C0. Allows an authenticated attacker with administrator privileges to execute OS commands on the affected device.
In eghuzefa engineer-your-data up to 0.1.3, a path traversal vulnerability was found in the read_file/write_file/list_files/file_inf functions in src/server.py. Manipulating the WORKSPACE_PATH argument allows remote attack.
In ef10007 MLOps_MCP 1.0.0, a path traversal vulnerability exists in the save_file Tool function in fastmcp_server.py. Manipulating the filename/destination argument allows remote attack.
In edvardlindelof notes-mcp up to 0.1.4, a path traversal vulnerability was found in an unknown function of notes_mcp.py. Manipulating the root_dir/path argument allows remote attack.
dvladimirov MCP up to version 0.1.0 is vulnerable to command injection in the GitSearchRequest function of mcp_server.py within the Git Search API component. Manipulating the repo_url/pattern arguments allows remote command execution. A public exploit exists, and the project has not responded.
In dubydu sqlite-mcp up to version 0.1.0, the extract_to_json function in the file src/entry.py is vulnerable to SQL Injection via manipulation of the output_filename argument. The attack can be launched remotely, and the exploit is publicly available. A patch is available with ID a5580cb992f4f6c308c9ffe6442b2e76709db548.
A vulnerability in duartium papers-mcp-server (commit 9ceb3812a6458ba7922ca24a7406f8807bc55598) in the search_papers function of src/main.py allows path traversal via the topic argument. The attack can be launched remotely and the exploit is publicly available.
An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras. This flaw could allow unauthorized reading or writing of memory.
A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_product. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in chat.send that allows write-scoped gateway callers to trigger admin-only session reset operations. Attackers can rotate target sessions, archive prior transcript state, and force new session IDs without requiring admin scope.
OpenClaw before 2026.3.31 contains a symlink following vulnerability in SSH sandbox tar upload that allows remote attackers to write arbitrary files.
Spring Boot versions 4.0.0-4.0.5, 3.5.0-3.5.13, 3.4.0-3.4.15, 3.3.0-3.3.18, 2.7.0-2.7.32 have a vulnerability due to a predictable temp directory (ApplicationTemp). A local attacker can take control of this directory, and with persistent sessions enabled, can read sessions, hijack users, or execute code.
An attacker on the same network as the remote application may use a timing attack to leak information about the remote secret. In extreme cases, this could allow the attacker to determine the secret and upload modified classes, achieving remote code execution.
Niektóre wersje oprogramowania układowego kamer Milesight AIOT zawierają twardo zakodowane dane uwierzytelniające. To może prowadzić do nieautoryzowanego dostępu do urządzeń.
A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0 in the file /ajax.php?action=save_product. Manipulation of the ID argument causes SQL injection. The attack can be carried out remotely and the exploit is publicly available.
W określonych wersjach oprogramowania układowego kamer Milesight AIOT występuje podatność na słabą generację kluczy, co umożliwia obejście autoryzacji.
ChatGPTNextWeb NextChat up to version 2.16.1 has a Server-Side Request Forgery (SSRF) vulnerability in the Artifacts endpoint. The storeUrl function manipulates the ID argument, allowing remote requests to internal resources.
W ChatGPTNextWeb NextChat w wersjach do 2.16.1 odkryto lukę bezpieczeństwa w funkcji proxyHandler w pliku app/api/[provider]/[...path]/route.ts. Manipulacja tą funkcją prowadzi do ataku typu server-side request forgery, który może być przeprowadzony zdalnie.