DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-53951: CVE-2026-53951: Trust-Prefix Bypass via Path Traversal leading to Remote Code Execution in Copier
cverports profile

CVE-2026-53951: CVE-2026-53951: Trust-Prefix Bypass via Path Traversal leading to Remote Code Execution in Copier

#security #cve #cybersecurity
Comments
2 min read
GHSA-P77J-G7H5-R2VW: GHSA-P77J-G7H5-R2VW: Tier-0 Security Hardening in GeoLens
cverports profile

GHSA-P77J-G7H5-R2VW: GHSA-P77J-G7H5-R2VW: Tier-0 Security Hardening in GeoLens

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-55694: CVE-2026-55694: Chained Information Disclosure and IDOR in Snipe-IT EULA Management
cverports profile

CVE-2026-55694: CVE-2026-55694: Chained Information Disclosure and IDOR in Snipe-IT EULA Management

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55703: CVE-2026-55703: Missing Authorization in Snipe-IT Maintenance Records
cverports profile

CVE-2026-55703: CVE-2026-55703: Missing Authorization in Snipe-IT Maintenance Records

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61807: CVE-2026-61807: Stored DOM-Based Cross-Site Scripting in Snipe-IT
cverports profile

CVE-2026-61807: CVE-2026-61807: Stored DOM-Based Cross-Site Scripting in Snipe-IT

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62673: CVE-2026-62673: Security Bypass in Grav CMS via Case-Sensitivity Mismatch
cverports profile

CVE-2026-62673: CVE-2026-62673: Security Bypass in Grav CMS via Case-Sensitivity Mismatch

#security #cve #cybersecurity
Comments
2 min read
GHSA-HJWH-XVFW-QRWJ: GHSA-HJWH-XVFW-QRWJ: Credential Disclosure via Diagnostic Boundaries in mcp-searxng
cverports profile

GHSA-HJWH-XVFW-QRWJ: GHSA-HJWH-XVFW-QRWJ: Credential Disclosure via Diagnostic Boundaries in mcp-searxng

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-61711: CVE-2026-61711: Sandbox Escape via Protobuf SecurityMode Enum Validation Bypass in Moby BuildKit
cverports profile

CVE-2026-61711: CVE-2026-61711: Sandbox Escape via Protobuf SecurityMode Enum Validation Bypass in Moby BuildKit

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61712: CVE-2026-61712: Denial of Service via Unbounded Resource Allocation in moby/buildkit
cverports profile

CVE-2026-61712: CVE-2026-61712: Denial of Service via Unbounded Resource Allocation in moby/buildkit

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59992: CVE-2026-59992: Broken Access Control and Path Traversal in Tina CMS Production Media Adapters
cverports profile

CVE-2026-59992: CVE-2026-59992: Broken Access Control and Path Traversal in Tina CMS Production Media Adapters

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-63123: CVE-2026-63123: Cross-Site Request Forgery leading to Cross-Origin Arbitrary File Write in @tinacms/cli
cverports profile

CVE-2026-63123: CVE-2026-63123: Cross-Site Request Forgery leading to Cross-Origin Arbitrary File Write in @tinacms/cli

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63188: CVE-2026-63188: Unauthenticated Directory Traversal in @logto/tunnel
cverports profile

CVE-2026-63188: CVE-2026-63188: Unauthenticated Directory Traversal in @logto/tunnel

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54347: CVE-2026-54347: Stored Cross-Site Scripting in Froxlor DNS TXT Record Configuration
cverports profile

CVE-2026-54347: CVE-2026-54347: Stored Cross-Site Scripting in Froxlor DNS TXT Record Configuration

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54348: CVE-2026-54348: Second-Order SQL Injection in Froxlor API Layer
cverports profile

CVE-2026-54348: CVE-2026-54348: Second-Order SQL Injection in Froxlor API Layer

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-54543: CVE-2026-54543: DNS Resource Record (RR) Injection in Froxlor DomainZones API
cverports profile

CVE-2026-54543: CVE-2026-54543: DNS Resource Record (RR) Injection in Froxlor DomainZones API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-42533: CVE-2026-42533: NGINX Map Directive and Regex Matching Pre-Auth Heap Buffer Overflow & Info Leak
cverports profile

CVE-2026-42533: CVE-2026-42533: NGINX Map Directive and Regex Matching Pre-Auth Heap Buffer Overflow & Info Leak

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55593: CVE-2026-55593: Persistent Administrative Hijacking via Cross-Site Request Forgery in Froxlor Ajax Router
cverports profile

CVE-2026-55593: CVE-2026-55593: Persistent Administrative Hijacking via Cross-Site Request Forgery in Froxlor Ajax Router

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62988: CVE-2026-62988: Multi-Factor Authentication and Credential Bypass in Froxlor API
cverports profile

CVE-2026-62988: CVE-2026-62988: Multi-Factor Authentication and Credential Bypass in Froxlor API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-70666: CVE-2026-70666: Server-Side Request Forgery in Netflix Lemur ACME Authority Management
cverports profile

CVE-2026-70666: CVE-2026-70666: Server-Side Request Forgery in Netflix Lemur ACME Authority Management

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-70667: CVE-2026-70667: Server-Side Request Forgery Bypass in Netflix Lemur Certificate Verification
cverports profile

CVE-2026-70667: CVE-2026-70667: Server-Side Request Forgery Bypass in Netflix Lemur Certificate Verification

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71303: CVE-2026-71303: Server-Side Request Forgery Bypass in Netflix Lemur Authority Updates
cverports profile

CVE-2026-71303: CVE-2026-71303: Server-Side Request Forgery Bypass in Netflix Lemur Authority Updates

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-71307: CVE-2026-71307: Plaintext Credential Exposure in Netflix Lemur Destinations API
cverports profile

CVE-2026-71307: CVE-2026-71307: Plaintext Credential Exposure in Netflix Lemur Destinations API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71308: CVE-2026-71308: Missing Authorization and Lifecycle Hijacking in Netflix Lemur
cverports profile

CVE-2026-71308: CVE-2026-71308: Missing Authorization and Lifecycle Hijacking in Netflix Lemur

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71317: CVE-2026-71317: Missing Authorization in Netflix Lemur Allows Unauthorized Subordinate CA Creation
cverports profile

CVE-2026-71317: CVE-2026-71317: Missing Authorization in Netflix Lemur Allows Unauthorized Subordinate CA Creation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71322: CVE-2026-71322: Missing Authorization Check in Netflix Lemur Certificate Export
cverports profile

CVE-2026-71322: CVE-2026-71322: Missing Authorization Check in Netflix Lemur Certificate Export

#security #cve #cybersecurity
Comments
3 min read
GHSA-JF24-8G2H-2WG7: GHSA-JF24-8G2H-2WG7: Remote Code Execution in LibreNMS AboutController via Binary Path Substitution
cverports profile

GHSA-JF24-8G2H-2WG7: GHSA-JF24-8G2H-2WG7: Remote Code Execution in LibreNMS AboutController via Binary Path Substitution

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-7CJ5-V4PP-V632: GHSA-7cj5-v4pp-v632: Stored Cross-Site Scripting in LibreNMS Graph Descriptions
cverports profile

GHSA-7CJ5-V4PP-V632: GHSA-7cj5-v4pp-v632: Stored Cross-Site Scripting in LibreNMS Graph Descriptions

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-7GWW-X7FH-JF9J: GHSA-7GWW-X7FH-JF9J: SSRF-Driven Stored Cross-Site Scripting in LibreNMS Oxidized Integration
cverports profile

GHSA-7GWW-X7FH-JF9J: GHSA-7GWW-X7FH-JF9J: SSRF-Driven Stored Cross-Site Scripting in LibreNMS Oxidized Integration

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-17106: CVE-2026-17106: Container-to-Host Arbitrary File Write in moby/go-archive (CopyEscape)
cverports profile

CVE-2026-17106: CVE-2026-17106: Container-to-Host Arbitrary File Write in moby/go-archive (CopyEscape)

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73974: CVE-2026-73974: Local Path Traversal and Privilege Escalation in Linuxfabrik Monitoring Plugins
cverports profile

CVE-2026-73974: CVE-2026-73974: Local Path Traversal and Privilege Escalation in Linuxfabrik Monitoring Plugins

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71417: CVE-2026-71417: Authorization Bypass Leading to Unauthorized TLS Certificate Revocation in Netflix Lemur
cverports profile

CVE-2026-71417: CVE-2026-71417: Authorization Bypass Leading to Unauthorized TLS Certificate Revocation in Netflix Lemur

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-68927: CVE-2026-68927: Server-Side Request Forgery Port Restriction Bypass in Mobile Security Framework (MobSF)
cverports profile

CVE-2026-68927: CVE-2026-68927: Server-Side Request Forgery Port Restriction Bypass in Mobile Security Framework (MobSF)

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-68923: CVE-2026-68923: Cross-Site Request Forgery (CSRF) in Mobile Security Framework (MobSF)
cverports profile

CVE-2026-68923: CVE-2026-68923: Cross-Site Request Forgery (CSRF) in Mobile Security Framework (MobSF)

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-68922: CVE-2026-68922: Arbitrary File Read via Path Traversal in MobSF ZIP/APK Icon Extraction
cverports profile

CVE-2026-68922: CVE-2026-68922: Arbitrary File Read via Path Traversal in MobSF ZIP/APK Icon Extraction

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61634: CVE-2026-61634: Heap Memory Exhaustion in RabbitMQ Java Client
cverports profile

CVE-2026-61634: CVE-2026-61634: Heap Memory Exhaustion in RabbitMQ Java Client

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-70657: CVE-2026-70657: Logical Authorization Bypass in Copyparty Directory and File Key Handling
cverports profile

CVE-2026-70657: CVE-2026-70657: Logical Authorization Bypass in Copyparty Directory and File Key Handling

#security #cve #cybersecurity
Comments
2 min read
GHSA-92HR-GMR6-H8CP: GHSA-92HR-GMR6-H8CP: Cryptographic Weaknesses, Parameter Pollution, Path Traversal, and Timing Flaws in Etherpad
cverports profile

GHSA-92HR-GMR6-H8CP: GHSA-92HR-GMR6-H8CP: Cryptographic Weaknesses, Parameter Pollution, Path Traversal, and Timing Flaws in Etherpad

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-54284: CVE-2026-54284: Algorithmic Complexity Exhaustion in sqlparse Engine
cverports profile

CVE-2026-54284: CVE-2026-54284: Algorithmic Complexity Exhaustion in sqlparse Engine

#security #cve #cybersecurity
Comments
2 min read
GHSA-XHCR-CQFR-M3HV: GHSA-XHCR-CQFR-M3HV: Remote Code Execution via Insecure HTTP MCP Server Registry in atomic-agents-stack
cverports profile

GHSA-XHCR-CQFR-M3HV: GHSA-XHCR-CQFR-M3HV: Remote Code Execution via Insecure HTTP MCP Server Registry in atomic-agents-stack

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-J659-8XH6-5PQ5: GHSA-J659-8XH6-5PQ5: Financial Guardrail Bypass in atomic-agents-stack via Parallel Execution of Unlisted Models
cverports profile

GHSA-J659-8XH6-5PQ5: GHSA-J659-8XH6-5PQ5: Financial Guardrail Bypass in atomic-agents-stack via Parallel Execution of Unlisted Models

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-MPWR-8VM7-H73F: GHSA-mpwr-8vm7-h73f: Key Space Collapse and Authentication Bypass in go-pkcs12 PBMAC1 Decoding
cverports profile

GHSA-MPWR-8VM7-H73F: GHSA-mpwr-8vm7-h73f: Key Space Collapse and Authentication Bypass in go-pkcs12 PBMAC1 Decoding

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-53766: CVE-2026-53766: Workspace Boundary Bypass in chrome-devtools-mcp via Symbolic Link Resolution Failure
cverports profile

CVE-2026-53766: CVE-2026-53766: Workspace Boundary Bypass in chrome-devtools-mcp via Symbolic Link Resolution Failure

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-56677: CVE-2026-56677: Unauthenticated Server-Side Request Forgery in 9Router OIDC Test Endpoint
cverports profile

CVE-2026-56677: CVE-2026-56677: Unauthenticated Server-Side Request Forgery in 9Router OIDC Test Endpoint

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-64849: CVE-2026-64849: Server-Side Request Forgery (SSRF) in MLflow Webhooks via DNS Rebinding
cverports profile

CVE-2026-64849: CVE-2026-64849: Server-Side Request Forgery (SSRF) in MLflow Webhooks via DNS Rebinding

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-69146: CVE-2026-69146: Missing Authorization Bypass in MLflow Basic Authentication Middleware
cverports profile

CVE-2026-69146: CVE-2026-69146: Missing Authorization Bypass in MLflow Basic Authentication Middleware

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-69148: CVE-2026-69148: Broken Object Level Authorization (BOLA) in MLflow Model Registry
cverports profile

CVE-2026-69148: CVE-2026-69148: Broken Object Level Authorization (BOLA) in MLflow Model Registry

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59893: CVE-2026-59893: Regular Expression Denial of Service in sqlparse Lexer
cverports profile

CVE-2026-59893: CVE-2026-59893: Regular Expression Denial of Service in sqlparse Lexer

#security #cve #cybersecurity
Comments
2 min read
GHSA-FHGH-WQ4Q-R37X: GHSA-FHGH-WQ4Q-R37X: Remote Code Execution via Sigstore Signature Verification Bypass in uniget CLI
cverports profile

GHSA-FHGH-WQ4Q-R37X: GHSA-FHGH-WQ4Q-R37X: Remote Code Execution via Sigstore Signature Verification Bypass in uniget CLI

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-59903: CVE-2026-59903: Cache Poisoning and Information Disclosure via CorsHandler Vary Header Overwrite
cverports profile

CVE-2026-59903: CVE-2026-59903: Cache Poisoning and Information Disclosure via CorsHandler Vary Header Overwrite

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59902: CVE-2026-59902: Memory Exhaustion in Netty SctpMessageCompletionHandler
cverports profile

CVE-2026-59902: CVE-2026-59902: Memory Exhaustion in Netty SctpMessageCompletionHandler

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-68518: CVE-2026-68518: Command Injection Bypass in Glances via Cross-Field Shell-Operator Reconstruction
cverports profile

CVE-2026-68518: CVE-2026-68518: Command Injection Bypass in Glances via Cross-Field Shell-Operator Reconstruction

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-53653: CVE-2026-53653: Unauthenticated Denial of Service via Unbounded Image Derivative Dimensions in Grav CMS
cverports profile

CVE-2026-53653: CVE-2026-53653: Unauthenticated Denial of Service via Unbounded Image Derivative Dimensions in Grav CMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-53657: CVE-2026-53657: Privilege Escalation via Overly Permissive Unix Domain Socket in Lima Guest Agent
cverports profile

CVE-2026-53657: CVE-2026-53657: Privilege Escalation via Overly Permissive Unix Domain Socket in Lima Guest Agent

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-10740: CVE-2026-10740: Denial of Service in s2n-quic CryptoStream Reassembly
cverports profile

CVE-2026-10740: CVE-2026-10740: Denial of Service in s2n-quic CryptoStream Reassembly

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55153: CVE-2026-55153: JNDI Injection and Deserialization Gadget Abuse in mchange-commons-java
cverports profile

CVE-2026-55153: CVE-2026-55153: JNDI Injection and Deserialization Gadget Abuse in mchange-commons-java

#security #cve #cybersecurity
Comments
2 min read
GHSA-8RW6-P7M8-63JP: GHSA-8RW6-P7M8-63JP: Array Element-Level SELECT Permissions Leak in SurrealDB
cverports profile

GHSA-8RW6-P7M8-63JP: GHSA-8RW6-P7M8-63JP: Array Element-Level SELECT Permissions Leak in SurrealDB

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-12243: CVE-2026-12243: Incomplete Path Traversal Validation and Percent-Encoding Bypass in NLTK
cverports profile

CVE-2026-12243: CVE-2026-12243: Incomplete Path Traversal Validation and Percent-Encoding Bypass in NLTK

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73654: CVE-2026-73654: Prototype Pollution in Trigger.dev leading to Cascading Denial of Service
cverports profile

CVE-2026-73654: CVE-2026-73654: Prototype Pollution in Trigger.dev leading to Cascading Denial of Service

#security #cve #cybersecurity
1
Comments
2 min read
CVE-2026-73559: CVE-2026-73559: Uncontrolled Resource Consumption in vLLM API completions
cverports profile

CVE-2026-73559: CVE-2026-73559: Uncontrolled Resource Consumption in vLLM API completions

#security #cve #cybersecurity
Comments
1 min read
CVE-2026-54526: CVE-2026-54526: Strict Template Referencing Bypass and Privilege Escalation in Argo Workflows
cverports profile

CVE-2026-54526: CVE-2026-54526: Strict Template Referencing Bypass and Privilege Escalation in Argo Workflows

#security #cve #cybersecurity
Comments
2 min read
loading...