DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-114150: CVE-2026-114150: Remote Information Disclosure via Uninitialized Pooled Memory in ASP.NET Core Response…
cverports profile

CVE-2026-114150: CVE-2026-114150: Remote Information Disclosure via Uninitialized Pooled Memory in ASP.NET Core Response…

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-114146: CVE-2026-114146: Elevation of Privilege in ASP.NET Core SignalR Connection Dispatcher
cverports profile

CVE-2026-114146: CVE-2026-114146: Elevation of Privilege in ASP.NET Core SignalR Connection Dispatcher

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-109478: CVE-2026-109478: Algorithmic Complexity Denial of Service in ASP.NET Core Header Parsing
cverports profile

CVE-2026-109478: CVE-2026-109478: Algorithmic Complexity Denial of Service in ASP.NET Core Header Parsing

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-114147: CVE-2026-114147: Denial of Service via Memory Leak in ASP.NET Core SignalR Redis Backplane
cverports profile

CVE-2026-114147: CVE-2026-114147: Denial of Service via Memory Leak in ASP.NET Core SignalR Redis Backplane

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-114156: CVE-2026-114156: Path Equivalence Security Feature Bypass in Microsoft ASP.NET Core
cverports profile

CVE-2026-114156: CVE-2026-114156: Path Equivalence Security Feature Bypass in Microsoft ASP.NET Core

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-114157: CVE-2026-114157: Local Privilege Escalation via Race Condition in ASP.NET Core Kestrel Named Pipes Transport
cverports profile

CVE-2026-114157: CVE-2026-114157: Local Privilege Escalation via Race Condition in ASP.NET Core Kestrel Named Pipes Transport

#security #cve #cybersecurity
Comments
5 min read
CVE-2026-114154: CVE-2026-114154: Denial of Service in ASP.NET Core HttpSys Request Header Processing
cverports profile

CVE-2026-114154: CVE-2026-114154: Denial of Service in ASP.NET Core HttpSys Request Header Processing

#security #cve #cybersecurity
Comments
5 min read
CVE-2026-124194: CVE-2026-124194: Forced Authentication and NetNTLMv2 Credential Leakage in Microsoft Office Outlook
cverports profile

CVE-2026-124194: CVE-2026-124194: Forced Authentication and NetNTLMv2 Credential Leakage in Microsoft Office Outlook

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-120778: CVE-2026-120778: Local Elevation of Privilege via Insecure Temporary Directory Handling and MSBuild Response…
cverports profile

CVE-2026-120778: CVE-2026-120778: Local Elevation of Privilege via Insecure Temporary Directory Handling and MSBuild Response…

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-120792: CVE-2026-120792: Local Information Disclosure via Temporary File Logging in Microsoft .NET Aspire CLI
cverports profile

CVE-2026-120792: CVE-2026-120792: Local Information Disclosure via Temporary File Logging in Microsoft .NET Aspire CLI

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-114159: CVE-2026-114159: Heap-Based Buffer Overflow in Microsoft Visual Studio and .NET Native Symbol Reader
cverports profile

CVE-2026-114159: CVE-2026-114159: Heap-Based Buffer Overflow in Microsoft Visual Studio and .NET Native Symbol Reader

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-114158: CVE-2026-114158: Heap-Based Buffer Overflow in Microsoft.DiaSymReader.Native Portable PDB Parser
cverports profile

CVE-2026-114158: CVE-2026-114158: Heap-Based Buffer Overflow in Microsoft.DiaSymReader.Native Portable PDB Parser

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-114151: CVE-2026-114151: Remote Code Execution via Stack-Based Buffer Overflow in Microsoft Visual Studio and .NET…
cverports profile

CVE-2026-114151: CVE-2026-114151: Remote Code Execution via Stack-Based Buffer Overflow in Microsoft Visual Studio and .NET…

#security #cve #cybersecurity
Comments
3 min read
GHSA-6856-87HX-P5X7: CVE-2026-105544: Local Elevation of Privilege in .NET Test Platform CLI
cverports profile

GHSA-6856-87HX-P5X7: CVE-2026-105544: Local Elevation of Privilege in .NET Test Platform CLI

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-114152: CVE-2026-114152: Stack-Based Buffer Overflow and Untrusted Pointer Dereference in Microsoft DiaSymReader.Native
cverports profile

CVE-2026-114152: CVE-2026-114152: Stack-Based Buffer Overflow and Untrusted Pointer Dereference in Microsoft DiaSymReader.Native

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118745: CVE-2026-118745: Remote Code Execution via Heap-Based Buffer Overflow in Microsoft Visual Studio and .NET…
cverports profile

CVE-2026-118745: CVE-2026-118745: Remote Code Execution via Heap-Based Buffer Overflow in Microsoft Visual Studio and .NET…

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-109481: CVE-2026-109481: Cross-Site Request Forgery Leading to Elevation of Privilege in ASP.NET Core
cverports profile

CVE-2026-109481: CVE-2026-109481: Cross-Site Request Forgery Leading to Elevation of Privilege in ASP.NET Core

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-126187: CVE-2026-126187: Unauthenticated Remote Code Execution in React Server Components
cverports profile

CVE-2026-126187: CVE-2026-126187: Unauthenticated Remote Code Execution in React Server Components

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-125123: CVE-2026-125123: Improper Output Neutralization and CI Workflow Command Injection in compose-lint CLI Parser
cverports profile

CVE-2026-125123: CVE-2026-125123: Improper Output Neutralization and CI Workflow Command Injection in compose-lint CLI Parser

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-125116: CVE-2026-125116: Type Confusion in Mongoose Discriminator Resolution
cverports profile

CVE-2026-125116: CVE-2026-125116: Type Confusion in Mongoose Discriminator Resolution

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-125119: CVE-2026-125119: Connection-Level Filter Sanitization Bypass in Mongoose ODM
cverports profile

CVE-2026-125119: CVE-2026-125119: Connection-Level Filter Sanitization Bypass in Mongoose ODM

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-125110: CVE-2026-125110: Path Canonicalization Mismatch and Security Header Bypass in Rack::Static
cverports profile

CVE-2026-125110: CVE-2026-125110: Path Canonicalization Mismatch and Security Header Bypass in Rack::Static

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-118776: CVE-2026-118776: Improper PKCS#7 Padding Validation in node-forge CBC and ECB Cipher Modes
cverports profile

CVE-2026-118776: CVE-2026-118776: Improper PKCS#7 Padding Validation in node-forge CBC and ECB Cipher Modes

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-118774: CVE-2026-118774: Improper Verification of Cryptographic Signature in node-forge X.509 Certificate Validation
cverports profile

CVE-2026-118774: CVE-2026-118774: Improper Verification of Cryptographic Signature in node-forge X.509 Certificate Validation

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118670: CVE-2026-118670: DOM-Based Cross-Site Scripting in OHIF Viewers dicom-pdf Extension
cverports profile

CVE-2026-118670: CVE-2026-118670: DOM-Based Cross-Site Scripting in OHIF Viewers dicom-pdf Extension

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-103022: CVE-2026-103022: Denial of Service via Unhandled Unicode Exception and File Descriptor Leak in Urwid Web…
cverports profile

CVE-2026-103022: CVE-2026-103022: Denial of Service via Unhandled Unicode Exception and File Descriptor Leak in Urwid Web…

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-115770: CVE-2026-115770: Email Verification Bypass and Downstream Account Takeover in Pocket ID
cverports profile

CVE-2026-115770: CVE-2026-115770: Email Verification Bypass and Downstream Account Takeover in Pocket ID

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-102895: CVE-2026-102895: Unauthenticated Administrative Access and Remote Code Execution via Loopback Spoofing in…
cverports profile

CVE-2026-102895: CVE-2026-102895: Unauthenticated Administrative Access and Remote Code Execution via Loopback Spoofing in…

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-87008: CVE-2026-87008: Out-of-Root Arbitrary File Read and Overwrite via Symlink Following in code-graph-rag
cverports profile

CVE-2026-87008: CVE-2026-87008: Out-of-Root Arbitrary File Read and Overwrite via Symlink Following in code-graph-rag

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-94618: CVE-2026-94618: Missing Authorization and Weak Archive Identifier Generation in FileGator Batch Download
cverports profile

CVE-2026-94618: CVE-2026-94618: Missing Authorization and Weak Archive Identifier Generation in FileGator Batch Download

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-94619: CVE-2026-94619: Missing Authorization and Unnamespaced Temporary File Reassembly in FileGator UploadController
cverports profile

CVE-2026-94619: CVE-2026-94619: Missing Authorization and Unnamespaced Temporary File Reassembly in FileGator UploadController

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-77596: CVE-2026-77596: Cross-Tenant Authorization Bypass in Kubeflow Pipelines Upload API
cverports profile

CVE-2026-77596: CVE-2026-77596: Cross-Tenant Authorization Bypass in Kubeflow Pipelines Upload API

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-85737: CVE-2026-85737: Missing Authorization and Arbitrary File Disclosure in Velocidex Velociraptor sql() VQL Plugin
cverports profile

CVE-2026-85737: CVE-2026-85737: Missing Authorization and Arbitrary File Disclosure in Velocidex Velociraptor sql() VQL Plugin

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-97705: CVE-2026-97705: Unauthenticated Denial of Service in Moleculer TCP Transporter Packet Parser
cverports profile

CVE-2026-97705: CVE-2026-97705: Unauthenticated Denial of Service in Moleculer TCP Transporter Packet Parser

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-108262: CVE-2026-108262: Arbitrary Host File Overwrite via Tar Symlink Traversal in DDEV
cverports profile

CVE-2026-108262: CVE-2026-108262: Arbitrary Host File Overwrite via Tar Symlink Traversal in DDEV

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119298: CVE-2026-119298: Overwrite Confirmation Bypass in schollz/croc via Unvalidated Text Artifact Prefix
cverports profile

CVE-2026-119298: CVE-2026-119298: Overwrite Confirmation Bypass in schollz/croc via Unvalidated Text Artifact Prefix

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-88968: CVE-2026-88968: TOCTOU Race Condition in Claude Code Edit Tool Allows Arbitrary File Overwrite
cverports profile

CVE-2026-88968: CVE-2026-88968: TOCTOU Race Condition in Claude Code Edit Tool Allows Arbitrary File Overwrite

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-88982: CVE-2026-88982: Cross-Tenant Execution Cache Poisoning and Output Substitution in Kubeflow Pipelines
cverports profile

CVE-2026-88982: CVE-2026-88982: Cross-Tenant Execution Cache Poisoning and Output Substitution in Kubeflow Pipelines

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-88983: CVE-2026-88983: Authenticated Server-Side Request Forgery in Kubeflow Pipelines API Server
cverports profile

CVE-2026-88983: CVE-2026-88983: Authenticated Server-Side Request Forgery in Kubeflow Pipelines API Server

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-88985: CVE-2026-88985: SQL Injection via Pagination Token Deserialization and Metric Sorting in Kubeflow Pipelines…
cverports profile

CVE-2026-88985: CVE-2026-88985: SQL Injection via Pagination Token Deserialization and Metric Sorting in Kubeflow Pipelines…

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-88986: CVE-2026-88986: Reflected Cross-Site Scripting in Kubeflow Pipelines Frontend Error Responses
cverports profile

CVE-2026-88986: CVE-2026-88986: Reflected Cross-Site Scripting in Kubeflow Pipelines Frontend Error Responses

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-88984: CVE-2026-88984: RBAC Authorization Bypass in Kubeflow Pipelines Multi-User API Server
cverports profile

CVE-2026-88984: CVE-2026-88984: RBAC Authorization Bypass in Kubeflow Pipelines Multi-User API Server

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-102340: CVE-2026-102340: Missing Authentication and Authorization in Telepresence Traffic Manager gRPC API
cverports profile

CVE-2026-102340: CVE-2026-102340: Missing Authentication and Authorization in Telepresence Traffic Manager gRPC API

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-63198: CVE-2026-63198: OAuth 2.0 Silent Authorization Scope Escalation in traQ
cverports profile

CVE-2026-63198: CVE-2026-63198: OAuth 2.0 Silent Authorization Scope Escalation in traQ

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-63475: CVE-2026-63475: Persistent Denial of Service via Circular Symbolic References in isomorphic-git
cverports profile

CVE-2026-63475: CVE-2026-63475: Persistent Denial of Service via Circular Symbolic References in isomorphic-git

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-63470: CVE-2026-63470: Call-Time Code Injection via Unescaped Route-Handler Docstrings in fastapi-code-generator
cverports profile

CVE-2026-63470: CVE-2026-63470: Call-Time Code Injection via Unescaped Route-Handler Docstrings in fastapi-code-generator

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-16454: CVE-2026-16454: Object-Level Authorization Bypass in Eclipse hawkBit Direct Device Integration Controller
cverports profile

CVE-2026-16454: CVE-2026-16454: Object-Level Authorization Bypass in Eclipse hawkBit Direct Device Integration Controller

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-62284: CVE-2026-62284: Remote Code Execution and SSRF via Unsanitized Kubeconfig in OSAC Operator
cverports profile

CVE-2026-62284: CVE-2026-62284: Remote Code Execution and SSRF via Unsanitized Kubeconfig in OSAC Operator

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-62361: CVE-2026-62361: Authenticated SQL Injection and Table Access Control Bypass in Listmonk Subscriber Export
cverports profile

CVE-2026-62361: CVE-2026-62361: Authenticated SQL Injection and Table Access Control Bypass in Listmonk Subscriber Export

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-28385: CVE-2026-28385: Server-Side Request Forgery in Canonical LXD Image Import
cverports profile

CVE-2026-28385: CVE-2026-28385: Server-Side Request Forgery in Canonical LXD Image Import

#security #cve #cybersecurity
Comments
3 min read
GHSA-9J25-MM2H-2F76: CVE-2026-48750: Arbitrary File Write on Host via exec-output Symlink in Canonical LXD and Incus
cverports profile

GHSA-9J25-MM2H-2F76: CVE-2026-48750: Arbitrary File Write on Host via exec-output Symlink in Canonical LXD and Incus

#security #cve #cybersecurity
Comments
6 min read
GHSA-VGHH-5RFX-XHQ8: CVE-2026-48749: Arbitrary Host File Read and Write via Malicious Image Symlink in Canonical LXD and Incus
cverports profile

GHSA-VGHH-5RFX-XHQ8: CVE-2026-48749: Arbitrary Host File Read and Write via Malicious Image Symlink in Canonical LXD and Incus

#security #cve #cybersecurity
Comments
4 min read
GHSA-FMC8-P6Q7-75CC: GHSA-fmc8-p6q7-75cc: Argument Injection in Canonical LXD Backup Compression Leads to Host Root Code…
cverports profile

GHSA-FMC8-P6Q7-75CC: GHSA-fmc8-p6q7-75cc: Argument Injection in Canonical LXD Backup Compression Leads to Host Root Code…

#security #cve #cybersecurity #ghsa
Comments
4 min read
GHSA-PJFF-C2WC-F6JM: CVE-2026-48769: Arbitrary File Write and Remote Code Execution via Trusted Image Hash in Canonical LXD…
cverports profile

GHSA-PJFF-C2WC-F6JM: CVE-2026-48769: Arbitrary File Write and Remote Code Execution via Trusted Image Hash in Canonical LXD…

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-9639: CVE-2026-9639: Authenticated Denial of Service via Nil-Pointer Dereference in Canonical LXD Custom Volume…
cverports profile

CVE-2026-9639: CVE-2026-9639: Authenticated Denial of Service via Nil-Pointer Dereference in Canonical LXD Custom Volume…

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-33050: CVE-2026-33050: OS Command Injection in GeoNode Vector Upload Handler
cverports profile

CVE-2026-33050: CVE-2026-33050: OS Command Injection in GeoNode Vector Upload Handler

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-46429: CVE-2026-46429: Unrestricted File Upload and Validation Bypass in GeoNode
cverports profile

CVE-2026-46429: CVE-2026-46429: Unrestricted File Upload and Validation Bypass in GeoNode

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-55649: CVE-2026-55649: Stored Cross-Site Scripting in GeoNode Document Metadata Abstract Field
cverports profile

CVE-2026-55649: CVE-2026-55649: Stored Cross-Site Scripting in GeoNode Document Metadata Abstract Field

#security #cve #cybersecurity
Comments
3 min read
GHSA-QX75-2P3R-PWM5: CVE-2026-55622: Cross-Project Instance Copy Authorization Bypass in Canonical LXD and LXC Incus
cverports profile

GHSA-QX75-2P3R-PWM5: CVE-2026-55622: Cross-Project Instance Copy Authorization Bypass in Canonical LXD and LXC Incus

#security #cve #cybersecurity
Comments
5 min read
GHSA-7MR3-28H5-M5VX: GHSA-7mr3-28h5-m5vx: Authorization Bypass and Cross-Project Volume Copy in Canonical LXD
cverports profile

GHSA-7MR3-28H5-M5VX: GHSA-7mr3-28h5-m5vx: Authorization Bypass and Cross-Project Volume Copy in Canonical LXD

#security #cve #cybersecurity #ghsa
Comments
4 min read
loading...