DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-63119: CVE-2026-63119: Denial of Service via Uncontrolled Resource Consumption in Model Context Protocol Ruby SDK
cverports profile

CVE-2026-63119: CVE-2026-63119: Denial of Service via Uncontrolled Resource Consumption in Model Context Protocol Ruby SDK

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67430: CVE-2026-67430: Denial of Service via Unbounded Session Retention in Model Context Protocol Ruby SDK
cverports profile

CVE-2026-67430: CVE-2026-67430: Denial of Service via Unbounded Session Retention in Model Context Protocol Ruby SDK

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67432: CVE-2026-67432: High Severity Denial of Service in Model Context Protocol (MCP) Ruby SDK
cverports profile

CVE-2026-67432: CVE-2026-67432: High Severity Denial of Service in Model Context Protocol (MCP) Ruby SDK

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67431: CVE-2026-67431: Session Poisoning via Improper Access Control in Model Context Protocol Ruby SDK
cverports profile

CVE-2026-67431: CVE-2026-67431: Session Poisoning via Improper Access Control in Model Context Protocol Ruby SDK

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67435: CVE-2026-67435: Custom Authentication Header Leakage via Cross-Origin Redirects in linuxfabrik-lib
cverports profile

CVE-2026-67435: CVE-2026-67435: Custom Authentication Header Leakage via Cross-Origin Redirects in linuxfabrik-lib

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67429: CVE-2026-67429: Arbitrary File Write and Path Traversal in Flyto2 Core Modules
cverports profile

CVE-2026-67429: CVE-2026-67429: Arbitrary File Write and Path Traversal in Flyto2 Core Modules

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67427: CVE-2026-67427: Host Environment Variable Access Policy Bypass via Template Interpolation in Flyto2 Core
cverports profile

CVE-2026-67427: CVE-2026-67427: Host Environment Variable Access Policy Bypass via Template Interpolation in Flyto2 Core

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67425: CVE-2026-67425: Insecure Credential Forwarding in Flyto2 Core
cverports profile

CVE-2026-67425: CVE-2026-67425: Insecure Credential Forwarding in Flyto2 Core

#security #cve #cybersecurity
Comments
2 min read
CVE-2025-4318: CVE-2025-4318: Remote Code Execution in AWS Amplify codegen-ui
cverports profile

CVE-2025-4318: CVE-2025-4318: Remote Code Execution in AWS Amplify codegen-ui

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67426: CVE-2026-67426: Unauthenticated Remote Code Execution and Secret Exfiltration in Flyto2 Core
cverports profile

CVE-2026-67426: CVE-2026-67426: Unauthenticated Remote Code Execution and Secret Exfiltration in Flyto2 Core

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-66066: CVE-2026-66066: Pre-Authentication Arbitrary File Read and Remote Code Execution in Ruby on Rails Active Storage
cverports profile

CVE-2026-66066: CVE-2026-66066: Pre-Authentication Arbitrary File Read and Remote Code Execution in Ruby on Rails Active Storage

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54722: CVE-2026-54722: Server-Side Request Forgery (SSRF) Bypass via Userinfo Stripping in dssrf-js
cverports profile

CVE-2026-54722: CVE-2026-54722: Server-Side Request Forgery (SSRF) Bypass via Userinfo Stripping in dssrf-js

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54522: CVE-2026-54522: Same-Process Use-After-Free and Cross-Buffer Data Disclosure in msgpack-ruby
cverports profile

CVE-2026-54522: CVE-2026-54522: Same-Process Use-After-Free and Cross-Buffer Data Disclosure in msgpack-ruby

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67428: CVE-2026-67428: Server-Side Request Forgery in Flyto2 Core HTTP-Emitting Modules
cverports profile

CVE-2026-67428: CVE-2026-67428: Server-Side Request Forgery in Flyto2 Core HTTP-Emitting Modules

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67424: CVE-2026-67424: Server-Side Request Forgery Bypass via Unvalidated Redirects in Flyto2 Core
cverports profile

CVE-2026-67424: CVE-2026-67424: Server-Side Request Forgery Bypass via Unvalidated Redirects in Flyto2 Core

#security #cve #cybersecurity
Comments
2 min read
GHSA-PC2W-4MQ8-32QW: GHSA-PC2W-4MQ8-32QW: Missing Human-Approval Gate in create_dynatrace_notebook
cverports profile

GHSA-PC2W-4MQ8-32QW: GHSA-PC2W-4MQ8-32QW: Missing Human-Approval Gate in create_dynatrace_notebook

#security #cve #cybersecurity #ghsa
Comments 1
2 min read
CVE-2026-50559: CVE-2026-50559: Authentication and Authorization Bypass via Parser Differential in Quarkus
cverports profile

CVE-2026-50559: CVE-2026-50559: Authentication and Authorization Bypass via Parser Differential in Quarkus

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-11393: CVE-2026-11393: Code Injection via Improper Triple-Quote Escaping in AWS AgentCore CLI
cverports profile

CVE-2026-11393: CVE-2026-11393: Code Injection via Improper Triple-Quote Escaping in AWS AgentCore CLI

#security #cve #cybersecurity
Comments
3 min read
GHSA-WCHH-9X6H-7F6P: GHSA-WCHH-9X6H-7F6P: Cryptographic Vulnerabilities and Deprecation of Olm in matrix-commander
cverports profile

GHSA-WCHH-9X6H-7F6P: GHSA-WCHH-9X6H-7F6P: Cryptographic Vulnerabilities and Deprecation of Olm in matrix-commander

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-55651: CVE-2026-55651: Excessive Data Exposure and BOLA in Easy!Appointments Customer Search
cverports profile

CVE-2026-55651: CVE-2026-55651: Excessive Data Exposure and BOLA in Easy!Appointments Customer Search

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-52840: CVE-2026-52840: Server-Side Request Forgery in Easy!Appointments CalDAV Connector
cverports profile

CVE-2026-52840: CVE-2026-52840: Server-Side Request Forgery in Easy!Appointments CalDAV Connector

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-52839: CVE-2026-52839: Cross-Provider Appointment Injection and Authorization Bypass in Easy!Appointments
cverports profile

CVE-2026-52839: CVE-2026-52839: Cross-Provider Appointment Injection and Authorization Bypass in Easy!Appointments

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-52837: CVE-2026-52837: Unauthenticated PII Leakage in Easy!Appointments Booking Reschedule Endpoint
cverports profile

CVE-2026-52837: CVE-2026-52837: Unauthenticated PII Leakage in Easy!Appointments Booking Reschedule Endpoint

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-52841: CVE-2026-52841: Authorization Bypass in Easy!Appointments Google OAuth Provider Binding
cverports profile

CVE-2026-52841: CVE-2026-52841: Authorization Bypass in Easy!Appointments Google OAuth Provider Binding

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-52838: CVE-2026-52838: Stored Cross-Site Scripting via Booking Disabled Message in Easy!Appointments
cverports profile

CVE-2026-52838: CVE-2026-52838: Stored Cross-Site Scripting via Booking Disabled Message in Easy!Appointments

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54574: CVE-2026-54574: Symlink Escape and Arbitrary Host File Write in proot-distro
cverports profile

CVE-2026-54574: CVE-2026-54574: Symlink Escape and Arbitrary Host File Write in proot-distro

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54727: CVE-2026-54727: Container Isolation Bypass in proot-distro via Malicious Restore Archive
cverports profile

CVE-2026-54727: CVE-2026-54727: Container Isolation Bypass in proot-distro via Malicious Restore Archive

#security #cve #cybersecurity
Comments 1
2 min read
CVE-2026-54680: CVE-2026-54680: Remote Code Execution via Fluentd Configuration Injection in Logging Operator
cverports profile

CVE-2026-54680: CVE-2026-54680: Remote Code Execution via Fluentd Configuration Injection in Logging Operator

#security #cve #cybersecurity
Comments
2 min read
GHSA-XVG2-CGV6-6H7V: GHSA-XVG2-CGV6-6H7V: Local Traffic Interception and Information Disclosure via Improper DNS Block Responses in netfoil
cverports profile

GHSA-XVG2-CGV6-6H7V: GHSA-XVG2-CGV6-6H7V: Local Traffic Interception and Information Disclosure via Improper DNS Block Responses in netfoil

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-PMWX-RM49-XV39: GHSA-PMWX-RM49-XV39: Path Traversal in ActiveRecord::Tenanted::Storage::DiskService
cverports profile

GHSA-PMWX-RM49-XV39: GHSA-PMWX-RM49-XV39: Path Traversal in ActiveRecord::Tenanted::Storage::DiskService

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-54712: CVE-2026-54712: Uncontrolled Resource Consumption in OpenTelemetry Javaagent RMI Context Propagation
cverports profile

CVE-2026-54712: CVE-2026-54712: Uncontrolled Resource Consumption in OpenTelemetry Javaagent RMI Context Propagation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54704: CVE-2026-54704: Sensitive Data Exposure in OpenTelemetry Java Instrumentation SQL Sanitizer
cverports profile

CVE-2026-54704: CVE-2026-54704: Sensitive Data Exposure in OpenTelemetry Java Instrumentation SQL Sanitizer

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54705: CVE-2026-54705: DOM-Based Cross-Site Scripting in MathLive LaTeX Rendering Engine
cverports profile

CVE-2026-54705: CVE-2026-54705: DOM-Based Cross-Site Scripting in MathLive LaTeX Rendering Engine

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54693: CVE-2026-54693: Authorization Bypass in ZITADEL Identity Management Platform
cverports profile

CVE-2026-54693: CVE-2026-54693: Authorization Bypass in ZITADEL Identity Management Platform

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54735: CVE-2026-54735: Critical Server-Side Request Forgery (SSRF) in Prebid Server Bidder Adapters
cverports profile

CVE-2026-54735: CVE-2026-54735: Critical Server-Side Request Forgery (SSRF) in Prebid Server Bidder Adapters

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54666: CVE-2026-54666: Remote Code Execution via OpenAPI Route Path Injection in swagger-typescript-api
cverports profile

CVE-2026-54666: CVE-2026-54666: Remote Code Execution via OpenAPI Route Path Injection in swagger-typescript-api

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-10702: CVE-2026-10702: JIT Miscompilation Type Confusion in Mozilla SpiderMonkey
cverports profile

CVE-2026-10702: CVE-2026-10702: JIT Miscompilation Type Confusion in Mozilla SpiderMonkey

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54690: CVE-2026-54690: Server-Side Request Forgery in datamodel-code-generator Remote Schema Resolution
cverports profile

CVE-2026-54690: CVE-2026-54690: Server-Side Request Forgery in datamodel-code-generator Remote Schema Resolution

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54656: CVE-2026-54656: Arbitrary Code Execution in datamodel-code-generator via Unescaped Validator Configurations
cverports profile

CVE-2026-54656: CVE-2026-54656: Arbitrary Code Execution in datamodel-code-generator via Unescaped Validator Configurations

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55391: CVE-2026-55391: Server-Side Request Forgery Bypass via DNS Rebinding in datamodel-code-generator
cverports profile

CVE-2026-55391: CVE-2026-55391: Server-Side Request Forgery Bypass via DNS Rebinding in datamodel-code-generator

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54653: CVE-2026-54653: Remote Code Execution via Code Injection in datamodel-code-generator
cverports profile

CVE-2026-54653: CVE-2026-54653: Remote Code Execution via Code Injection in datamodel-code-generator

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55389: CVE-2026-55389: Path Traversal and Security Control Bypass in datamodel-code-generator via Scheme Reference Resolution
cverports profile

CVE-2026-55389: CVE-2026-55389: Path Traversal and Security Control Bypass in datamodel-code-generator via Scheme Reference Resolution

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54654: CVE-2026-54654: Python Code Injection in datamodel-code-generator via Comment Line-Break Escape
cverports profile

CVE-2026-54654: CVE-2026-54654: Python Code Injection in datamodel-code-generator via Comment Line-Break Escape

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62325: CVE-2026-62325: Authentication Bypass in goshs SFTP Server via Missing Password Check
cverports profile

CVE-2026-62325: CVE-2026-62325: Authentication Bypass in goshs SFTP Server via Missing Password Check

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-64863: CVE-2026-64863: WebDAV MOVE Bypass of --no-delete and --upload-only Restrictive Policies in goshs
cverports profile

CVE-2026-64863: CVE-2026-64863: WebDAV MOVE Bypass of --no-delete and --upload-only Restrictive Policies in goshs

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-66063: CVE-2026-66063: Path Traversal Arbitrary File Write and Access Control Bypass in goshs
cverports profile

CVE-2026-66063: CVE-2026-66063: Path Traversal Arbitrary File Write and Access Control Bypass in goshs

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54638: CVE-2026-54638: Pre-Authentication Denial of Service via Unbounded Memory Allocation in gotd/td MTProto Parser
cverports profile

CVE-2026-54638: CVE-2026-54638: Pre-Authentication Denial of Service via Unbounded Memory Allocation in gotd/td MTProto Parser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54658: CVE-2026-54658: SQL Injection via Parameter Escaping Bypass in @hypequery/clickhouse
cverports profile

CVE-2026-54658: CVE-2026-54658: SQL Injection via Parameter Escaping Bypass in @hypequery/clickhouse

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54650: CVE-2026-54650: Remote Path Traversal in openhole-server and openhole CLI Client
cverports profile

CVE-2026-54650: CVE-2026-54650: Remote Path Traversal in openhole-server and openhole CLI Client

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54639: CVE-2026-54639: Prototype Pollution and Patch Bypass in style-dictionary
cverports profile

CVE-2026-54639: CVE-2026-54639: Prototype Pollution and Patch Bypass in style-dictionary

#security #cve #cybersecurity
Comments
2 min read
GHSA-6XX4-9WP6-65P7: GHSA-6XX4-9WP6-65P7: Arbitrary Local File Disclosure via UNIX Symlink Following in skilo
cverports profile

GHSA-6XX4-9WP6-65P7: GHSA-6XX4-9WP6-65P7: Arbitrary Local File Disclosure via UNIX Symlink Following in skilo

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2025-6120: CVE-2025-6120: Heap-Based Buffer Overflow in Assimp HL1MDLLoader read_meshes
cverports profile

CVE-2025-6120: CVE-2025-6120: Heap-Based Buffer Overflow in Assimp HL1MDLLoader read_meshes

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54659: CVE-2026-54659: Directory Traversal and File Existence Oracle in Pagy I18n module
cverports profile

CVE-2026-54659: CVE-2026-54659: Directory Traversal and File Existence Oracle in Pagy I18n module

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-66064: CVE-2026-66064: Incorrect Authorization and ACL Bypass via Trailing Slash in goshs
cverports profile

CVE-2026-66064: CVE-2026-66064: Incorrect Authorization and ACL Bypass via Trailing Slash in goshs

#security #cve #cybersecurity
Comments 1
2 min read
CVE-2026-54719: CVE-2026-54719: Access Control List Authorization Bypass in goshs via bulk ZIP Download Route
cverports profile

CVE-2026-54719: CVE-2026-54719: Access Control List Authorization Bypass in goshs via bulk ZIP Download Route

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-52888: CVE-2026-52888: Sensitive Data Exposure and Blacklist Bypass in NocoBase SQL Collection Plugin
cverports profile

CVE-2026-52888: CVE-2026-52888: Sensitive Data Exposure and Blacklist Bypass in NocoBase SQL Collection Plugin

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54603: CVE-2026-54603: Cross-Origin Credential Leakage and SSRF via Protocol-Relative Redirects in ruby-oauth2
cverports profile

CVE-2026-54603: CVE-2026-54603: Cross-Origin Credential Leakage and SSRF via Protocol-Relative Redirects in ruby-oauth2

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54609: CVE-2026-54609: Uncontrolled Resource Consumption and Network Amplification in QTINeon
cverports profile

CVE-2026-54609: CVE-2026-54609: Uncontrolled Resource Consumption and Network Amplification in QTINeon

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54635: CVE-2026-54635: Authentication Bypass via Custom Webhook Paths in pytonapi
cverports profile

CVE-2026-54635: CVE-2026-54635: Authentication Bypass via Custom Webhook Paths in pytonapi

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54588: CVE-2026-54588: Account Takeover via Host Header Injection in Poweradmin Authentication
cverports profile

CVE-2026-54588: CVE-2026-54588: Account Takeover via Host Header Injection in Poweradmin Authentication

#security #cve #cybersecurity
Comments 1
2 min read
loading...