default_status: unaffected

status: affected

version_type: rpm

product: xwayland

version_type: rpmver

ecosystem: software/application

author: Codex

description: CVE-2026-56000 use-after-frees xorg-server CommonMakeCurrent on GLX commit before 21.2.24 and xwayland 24.1.13. Upgrade to 21.2.24+ / 24.1.13+.

maturity: development

model: GPT 5.5 Extra High reasoning

title: CVE-2026-56000: xorg-server GLX CommonMakeCurrent UAF

metric_type: Secondary

severity: critical

metric_type: Primary

severity: high

part: a

quality: metadata-backed

recipe_kind: markdown-draft

status: Analyzed

summary: Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

title: X.Org X Server security vulnerability


description: CVE-2026-56001 overflows libXfont2 BitmapScaleBitmaps via a 32-bit size wrap before 2.0.8. Upgrade to 2.0.8+.

title: CVE-2026-56001: libXfont2 BitmapScaleBitmaps Overflow

product: libxfont

vendor: x

summary: A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont

title: X Libxfont security vulnerability


recipe_kind: composed

summary: A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.

title: X Libxfont security vulnerability


description: CVE-2026-56003 is a PCF property-buffer overflow in libXfont2 before 2.0.8. GHSA-3v92-8994-jg8p names 2.0.8. Do not invent 2.0.9.

title: CVE-2026-56003: libXfont2 PCF Overflow, 2.0.8

summary: A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.

title: X Libxfont security vulnerability


product: buildservice

vendor: openSUSE

status: Awaiting Analysis

summary: A shellcode injection in the mercurial handler of the obs tar_scm source service before version 0.12.4 could be used by attackers able to provide a _service file to execute code as the source service or the local user checking out the malicious services

title: Opensuse Buildservice security vulnerability


product: WP Activity Log

vendor: Melapress

status: unaffected

version_type: custom

status: Deferred

summary: Subscriber Cross Site Scripting (XSS) in WP Activity Log <= 5.6.3.1 versions.


summary: Unauthenticated Cross Site Scripting (XSS) in H5P <= 1.17.6 versions.


product: Ocean Product Sharing

vendor: OceanWP

severity: medium

summary: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OceanWP Ocean Product Sharing allows Stored XSS. This issue affects Ocean Product Sharing: from n/a through 2.2.2.

title: Oceanwp Ocean Product Sharing security vulnerability


product: Fusion Builder

vendor: ThemeFusion

description: CVE-2026-56008 is contributor privilege escalation in Fusion Builder through 3.15.4 inclusive. The title names no next tag. Do not invent 3.15.5.

title: CVE-2026-56008: Fusion Builder through 3.15.4

summary: Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions.


product: Bricksable for Bricks Builder

vendor: Bricksable

summary: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bricksable for Bricks Builder allows Stored XSS. This issue affects Bricksable for Bricks Builder: from n/a through 1.6.83.

title: Bricksable Bricksable For Bricks Builder security vulnerability


product: Abandoned Cart Pro for WooCommerce

vendor: Tyche Softwares.

summary: Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.


product: MapPress Maps for WordPress

vendor: chrisvrichardson

ecosystem: php/wordpress

summary: Unauthenticated Cross Site Scripting (XSS) in MapPress Maps for WordPress <= 2.97.3 versions.


product: Media LIbrary Assistant

vendor: David Lingren

summary: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows Blind SQL Injection. This issue affects Media LIbrary Assistant: from n/a through 3.35.

title: David Lingren Media Library Assistant security vulnerability


product: License Manager for WooCommerce

vendor: myCred

summary: Unauthenticated Insecure Direct Object References (IDOR) in License Manager for WooCommerce <= 3.0.15 versions.


product: Master Slider

vendor: Averta

summary: Unauthenticated Cross Site Scripting (XSS) in Master Slider <= 3.11.2 versions.


vendor: TPODER

summary: Net::IP::LPM versions through 1.10 for Perl allow a heap out-of-bounds read via an unbounded prefix length. add() passes the prefix string to the trie builder addPrefixToTrie() without checking it against the address width. addPrefixToTrie() then walks the prefix buffer by prefix_length bits, reading prefix[byte] for byte up to prefix_len/8, where prefix is the 4-byte (IPv4) or 16-byte (IPv6) packed address. A prefix length greater than 32 for IPv4 or 128 for IPv6, for example add("1.2.3.4/255", $v) or add("2001:db8::/255", $v), reads past the end of the packed address. The out-of-bounds read happens during trie construction and is bounded: the prefix length is stored as an unsigned char, so the bit walk reads at most 32 bytes from the start of the packed address, a short distance past the end of the 4-byte or 16-byte buffer. It is detectable under AddressSanitizer, valgrind, or a hardened allocator, where it can abort the process. Lookups and dump() format only the valid address width, so the out-of-bounds bytes are not exposed through the module's API.


vendor: MARKSTOS

summary: CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generate_id method builds the session id from a MD5 digest of the process id, the epoch time, and the built-in rand() function. All three are predictable, low-entropy sources: the PID is drawn from a small range, the epoch time can be guessed or read from the HTTP Date header, and Perl's rand() is unsuitable for security purposes because it is predictable and reversible. An attacker who predicts a session id can impersonate the corresponding session and bypass authentication.


vendor: GTERMARS

ecosystem: javascript/npm

description: CVE-2026-56017 NULLs-dereferences Perl JavaScript::Minifier::XS when the first token is a slash, before 0.16. Upgrade to 0.16+. This is a Perl module, not an npm package.

title: CVE-2026-56017: JavaScript::Minifier::XS Slash NULL Deref

summary: JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. The regexp versus division disambiguator in JsTokenizeString (XS.xs) inspects the previous token's last byte to choose between a regexp literal and a division operator. When a slash is the first meaningful token, with the start of input or only whitespace and comments before it, there is no valid preceding token: the walk back over whitespace and comment nodes runs off the head of the node list to NULL, and the byte lookup reads through a NULL contents pointer at an underflowed length index. The following identifier check dereferences the same NULL pointer. The crash is reachable through the public minify() API, so input as small as a single slash byte crashes the calling process. A service that minifies untrusted or third-party JavaScript can be crashed by a remote request, causing denial of service.

title: Gtermars Javascript::Minifier::Xs security vulnerability


description: CVE-2026-56018 leaks memory on every Perl JavaScript::Minifier::XS minify() call before 0.16. Upgrade to 0.16+. This is a Perl module, not an npm package.

title: CVE-2026-56018: JavaScript::Minifier::XS minify Memory Leak

summary: JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth. In JsMinify (XS.xs) the cleanup frees only the NodeSet structures and never the per-token contents buffers allocated in JsSetNodeContents; JsDiscardNode unlinks nodes without freeing their contents. Each token's contents buffer is therefore leaked on every call, and the two early returns taken when the node list is empty leak the whole NodeSet. A long-lived process that minifies repeatedly, such as an asset pipeline or a server-side minifier endpoint, grows in memory without bound until it exhausts available memory and is killed, causing denial of service.


default_status: unknown

product: Webmin

vendor: Webmin

summary: The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.202.

title: Webmin security vulnerability


archetype: generic

product: webmin

vendor: webmin

summary: Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.

title: Webmin security vulnerability


summary: Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of additional MFA requirements. Fixed in 2.640.

title: Webmin security vulnerability


vendor: Knit Pay

summary: Customer Broken Access Control in UPI QR Code Payment Gateway for WooCommerce <= 1.6.2 versions.


product: WP EasyPay

vendor: Saad Iqbal

summary: Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal WP EasyPay allows Cross Site Request Forgery. This issue affects WP EasyPay: from n/a through 4.5.0.


product: Paymob for WooCommerce

vendor: Paymob

summary: Unauthenticated Broken Access Control in Paymob for WooCommerce <= 4.1.2 versions.


vendor: Chris Carlevato

archetype: ssrf

summary: Subscriber Server Side Request Forgery (SSRF) in utm.codes <= 1.9.0 versions.


product: Booster for WooCommerce

vendor: Pluggabl

summary: Customer Arbitrary File Upload in Booster for WooCommerce <= 8.0.1 versions.


vendor: themewant

description: CVE-2026-56028 is unauthenticated privilege escalation in Easy Elements for Elementor through 1.4.9. No WPScan Fixed-in. Do not invent 1.5.0.

title: CVE-2026-56028: Easy Elements Privilege Escalation

summary: Unauthenticated Privilege Escalation in Easy Elements for Elementor – Addons & Website Templates <= 1.4.9 versions.


product: CorvusPay WooCommerce Payment Gateway

vendor: corvuspay

summary: Unauthenticated Broken Authentication in CorvusPay WooCommerce Payment Gateway <= 2.7.4 versions.


product: Paytium

vendor: paytiumsupport

summary: Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions.


product: Uncanny Automator

vendor: Uncanny Owl

summary: Unauthenticated PHP Object Injection in Uncanny Automator <= 7.3.1.2 versions.


product: Buddyboss Platform

vendor: BuddyBoss

summary: Subscriber PHP Object Injection in Buddyboss Platform <= 3.0.4 versions.


product: Dokan Pro

vendor: Dokan Multivendor Plugin

summary: Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions.


product: Library Management System

vendor: Online Web Tutor

description: CVE-2026-56034 is unauthenticated SQL injection in Library Management System through 3.5.7 inclusive. The title names no next tag. Do not invent 3.5.8.

title: CVE-2026-56034: Library Management System through 3.5.7

summary: Unauthenticated SQL Injection in Library Management System <= 3.5.7 versions.


product: BitFire Security

vendor: Cory Marsh

summary: Unauthenticated Multiple Vulnerabilities in BitFire Security <= 5.0.3 versions.


product: 워드프레스 결제 심플페이

vendor: codemstory

product: 워드프레스 결제 심플페이

summary: Unauthenticated SQL Injection in 워드프레스 결제 심플페이 <= 5.5.6 versions.


product: Themify Popup

vendor: Themify

summary: Deserialization of Untrusted Data vulnerability in Themify Themify Popup allows Object Injection. This issue affects Themify Popup: from n/a through 1.4.3.


product: Frisbii Pay

vendor: Frisbii

summary: Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions.


product: Quick Interest Slider

summary: Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions.


product: Gutenverse Form

summary: Unauthenticated Cross Site Scripting (XSS) in Gutenverse Form <= 2.4.7 versions.


product: Responsive Lightbox

vendor: dFactory

description: CVE-2026-56041 is unauthenticated stored XSS in Responsive Lightbox through 2.7.6 inclusive. The title names no next tag. Do not invent 2.7.7.

title: CVE-2026-56041: Responsive Lightbox through 2.7.6

summary: Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions.


product: Advanced Order Export For WooCommerce

vendor: Algolplus

summary: Customer Cross Site Scripting (XSS) in Advanced Order Export For WooCommerce <= 4.0.9 versions.


product: Customer Reviews for WooCommerce

vendor: CusRev

summary: Unauthenticated Cross Site Scripting (XSS) in Customer Reviews for WooCommerce <= 5.110.1 versions.


vendor: Adenion

summary: Unauthenticated Cross Site Scripting (XSS) in Blog2Social <= 8.9.2 versions.


product: Automatic

vendor: ValvePress

summary: Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions.


product: ListingPro

vendor: CridioStudio

summary: Subscriber Cross Site Scripting (XSS) in ListingPro <= 2.9.11 versions.


product: perfmatters

vendor: Perfmatters, Powered Kinsta + GeneratePress Docs Changelog Feature requests Legal Affiliate Contact

summary: Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.3 versions.


vendor: tychesoftwares

summary: Unauthenticated Insecure Direct Object References (IDOR) in Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0 versions.


product: Post Snippets

vendor: Post Snippets

summary: Contributor Remote Code Execution (RCE) in Post Snippets <= 4.0.19 versions.


product: PPOM for WooCommerce

vendor: Themeisle

summary: Improper Access Control vulnerability in Themeisle PPOM for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PPOM for WooCommerce: from n/a through 33.0.18.

title: Themeisle Ppom For Woocommerce security vulnerability


product: TablePress

vendor: TablePress

description: CVE-2026-56051 is unauthenticated stored XSS in TablePress through 3.3.1 inclusive. The title names no next tag. Do not invent 3.3.2.

title: CVE-2026-56051: TablePress through 3.3.1

summary: Unauthenticated Cross Site Scripting (XSS) in TablePress <= 3.3.1 versions.


product: Funnel Builder by FunnelKit

vendor: FunnelKit

summary: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel Builder by FunnelKit allows Blind SQL Injection. This issue affects Funnel Builder by FunnelKit: from n/a through 3.15.0.5.

title: Funnelkit Funnel Builder By Funnelkit security vulnerability


product: EventPrime

vendor: EventPrime

summary: Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions.


product: JS Help Desk

vendor: Ahmad

summary: Subscriber Arbitrary File Deletion in JS Help Desk <= 3.1.1 versions.


product: RealHomes

vendor: InspiryThemes

summary: Subscriber PHP Object Injection in RealHomes <= 4.5.3 versions.


product: Uncanny Automator Pro

vendor: Uncanny Owl

summary: Subscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions.


product: Quform

vendor: ThemeCatcher

summary: Subscriber Arbitrary File Upload in Quform <= 2.23.0 versions.


product: Travel Booking

vendor: PhysCode

summary: Subscriber Arbitrary File Upload in Travel Booking <= 2.2.5 versions.


summary: Unauthenticated Sensitive Data Exposure in Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 versions.


product: Subscriptions for WooCommerce

vendor: WP Swings

description: CVE-2026-56061 is unauthenticated broken access control in Subscriptions for WooCommerce through 1.9.5 inclusive. The title names no next tag. Do not invent 1.9.6.

title: CVE-2026-56061: Subscriptions for WooCommerce through 1.9.5

summary: Unauthenticated Broken Access Control in Subscriptions for WooCommerce <= 1.9.5 versions.


product: Quotes llama

vendor: oooorgle

summary: Unauthenticated SQL Injection in Quotes llama <= 3.1.5 versions.


product: MailChimp Block

vendor: bPlugins

summary: Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions.


product: Tourfic

vendor: Themefic

summary: Subscriber SQL Injection in Tourfic <= 2.22.5 versions.


product: ShortPixel Adaptive Images

vendor: ShortPixel

summary: Unauthenticated Arbitrary File Deletion in ShortPixel Adaptive Images <= 3.11.4 versions.


product: JetSmartFilters

vendor: Crocoblock. Jetimpex Inc.

summary: Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions.


product: JetEngine

description: CVE-2026-56068 is unauthenticated SQL injection in JetEngine through 3.8.10.2 inclusive. The title names no next tag. Do not invent 3.8.10.3.

title: CVE-2026-56068: JetEngine through 3.8.10.2

summary: Unauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions.


product: Toolset Forms

vendor: Site Building with Toolset

summary: Unauthenticated Insecure Direct Object References (IDOR) in Toolset Forms <= 2.6.24 versions.


product: Advance Product Search

vendor: ThemeHunk

summary: Unauthenticated SQL Injection in Advance Product Search <= 1.4.4 versions.


product: Forminator

vendor: WPMU DEV

summary: Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions.


product: WoodMart

vendor: Xtemos

summary: Unauthenticated Cross Site Scripting (XSS) in WoodMart <= 8.5.3 versions.


product: capgo

vendor: Cap-go

version_type: semver

summary: Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP verification that allows attackers to bypass email verification by modifying server responses. Attackers can intercept OTP verification requests and manipulate HTTP responses to falsely mark verification successful, enabling unauthorized 2FA enablement and account takeover.

title: Cap-Go Capgo security vulnerability


product: PraisonAI

vendor: PraisonAI

summary: PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent execute_command calls to bypass approval prompts. Attackers can exploit this by obtaining initial approval for a benign command, then silently exfiltrate API keys and credentials via subsequent shell commands without user consent.

title: Praisonai security vulnerability


summary: PraisonAI before 4.5.128 contains an arbitrary shell command execution vulnerability where the UI modules hardcode approval_mode to auto, overriding administrator configuration from PRAISON_APPROVAL_MODE environment variable. Authenticated attackers can instruct the LLM agent to execute arbitrary shell commands via subprocess.run with shell=True, bypassing the manual approval gate and insufficient command sanitization blocklists.

title: Praisonai security vulnerability


summary: PraisonAI before 1.5.128 contains a cross-origin agent execution vulnerability in the AGUI endpoint that allows remote attackers to trigger arbitrary agent execution. The POST /agui endpoint lacks authentication and hardcodes Access-Control-Allow-Origin: * headers, combined with Starlette's Content-Type-agnostic JSON parsing, enabling attackers to bypass CORS preflight checks via simple requests and exfiltrate sensitive agent responses including tool execution results and environment data.

title: Praisonai security vulnerability


summary: PraisonAI before 1.5.115 contains an information disclosure vulnerability in the MultiAgentLedger component that allows attackers to access sensitive data by registering agents with duplicate IDs. Attackers can exploit the lack of agent ID uniqueness enforcement to share ledger instances and expose system prompts and conversation history between agents.

title: Praisonai security vulnerability


summary: PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs when building file paths. Attackers can include traversal sequences like ../ in agent IDs to read, write, or overwrite arbitrary files, enabling sensitive disclosure, denial of service, or code execution.

title: Praisonai security vulnerability


product: Capgo

vendor: Capgo

summary: Capgo before 12.128.2 contains a cross-tenant authorization bypass vulnerability in PostgREST endpoints that allows org-scoped read API keys to access other tenants' webhook secrets and delivery logs. Attackers can query the webhooks and webhook_deliveries endpoints to exfiltrate HMAC signing secrets and delivery payloads, enabling forged webhook events against victim organizations.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains a flaw in the Enforce Password Policy feature: after a Super Admin enables the policy and successfully changes their password to a compliant one, the backend does not update the password-compliance state. As a result, the backend continues to treat the account as non-compliant and repeatedly forces password-reset prompts, permanently locking the Super Admin out of organization access (organization lockout / denial of service) despite valid authentication.

title: Cap-Go Capgo security vulnerability


summary: Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and control an account bound to a victim's email address before that email is verified. By enabling two-factor authentication on the pre-registered account, the attacker gains control over the account claimed under the victim's identity, allowing them to read and modify its state and enforce organization-level policies, while the legitimate user is denied access to the account tied to their own email.

title: Cap-Go Capgo security vulnerability


summary: Capgo (Cap-go/capgo) before 12.128.2 contains an improper access control vulnerability in the SECURITY DEFINER PostgREST RPC function public.record_build_time, which is granted to the anon role and callable with only the public Supabase publishable (sb_publishable_*) anon key. An unauthenticated attacker can insert rows into public.build_logs for arbitrary organizations and, because the function uses ON CONFLICT (build_id, org_id) DO UPDATE, can overwrite existing usage/billing records by reusing the same build_id for a target org. This enables cross-tenant tampering of billing build logs and financial-impact denial of service by inflating billable build time.

title: Cap-Go Capgo security vulnerability


product: PowerProtect Data Domain

vendor: Dell

less_than: 8.7.0.0 or later

ecosystem: operating-system

part: o

vendor: dell

summary: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

title: Dell Data Domain Operating System security vulnerability


product: ThinOS 10

summary: Dell ThinOS 10, versions prior to 2605_10.2100 contain a Protection Mechanism Failure vulnerability. An attacker with physical access could potentially exploit this vulnerability, leading to unauthorized access to encrypted data.


product: OpenManage Enterprise

less_than: 4.7.0 or later

summary: Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

title: Dell Openmanage Enterprise security vulnerability


product: ObjectScale

less_than: 4.3.0.1 or later

product: objectscale

summary: Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.


product: Apache Shiro

vendor: Apache Software Foundation

summary: When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://www.cve.org/CVERecord?id=CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the `shiro-guice` module instead of the `shiro-spring` module. This issue affects all Apache Shiro versions through 2.x, and 3.0.0-alpha-1 only when using `shiro-guice` module in a web servlet context. Upgrade to version 3.0.0 or later, which fixes the issue.

title: Apache Software Foundation Apache Shiro security vulnerability


default_status: affected

product: src

vendor: openbsd

version_type: git

product: openbsd

summary: OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read vulnerability in the mpls_do_error function within sys/netmpls/mpls_input.c that allows remote attackers to disclose kernel stack memory by sending crafted MPLS frames with 16 labels and no Bottom-of-Stack bit set.

title: Openbsd security vulnerability


product: chainlit

vendor: Chainlit

summary: Chainlit before 2.10.1 contains a session hijacking vulnerability that allows unauthenticated attackers to restore and inherit authenticated user sessions by presenting a valid sessionId during WebSocket session restoration without ownership verification. Attackers can exploit the restore_existing_session path to assume a victim's permissions and roles, enabling unauthorized invocation of tools and access to data restricted to the authenticated victim.

title: Chainlit security vulnerability


product: alsa-lib

vendor: alsa-project

summary: The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.

title: Alsa-Project Alsa-Lib security vulnerability


product: Marlin

vendor: MarlinFirmware

summary: Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESH_BED_LEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler that allows attackers to corrupt firmware memory by supplying out-of-range X and Y grid indices. Attackers can send a single crafted G-code command via USB serial, network interface, or malicious gcode file to write an attacker-controlled 32-bit float value past the z_values array bounds, corrupting adjacent firmware variables and causing denial of service or firmware state corruption.

title: Marlinfirmware Marlin security vulnerability


product: dhcpcd

vendor: NetworkConfiguration

summary: dhcpcd through 10.3.2, fixed in commit 5733d3c, contains a heap use-after-free vulnerability that allows unauthenticated same-link attackers to crash the daemon by sending a crafted DHCPv6 RENEW reply with RFC6603 OPTION_PD_EXCLUDE and both preferred and valid lifetimes set to zero. Attackers acting as or impersonating a DHCPv6 server can trigger dhcp6_deprecatedele() to free a delegated child address while an outer TAILQ_FOREACH_SAFE iterator in dhcp6_deprecateaddrs() still holds the freed pointer, causing a use-after-free when TAILQ_REMOVE is reached.

title: Dhcpcd Project Dhcpcd security vulnerability


summary: dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds write vulnerability in dhcp6_makemessage() in src/dhcp6.c that allows unauthenticated same-link attackers to write beyond a fixed local buffer by serializing an oversized RFC6603 OPTION_PD_EXCLUDE option body. Attackers can send a crafted DHCPv6 ADVERTISE message containing an IA_PD IAPREFIX /0 with a valid OPTION_PD_EXCLUDE using an exclude prefix length of /121 through /128 to trigger the out-of-bounds write and potentially corrupt adjacent stack memory.


product: bootimus

vendor: garybowers

vendor: bootimus

summary: Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role enforcement in the JWTMiddleware function in internal/auth/auth.go, which validates JWT tokens and account status but fails to inspect the is_admin flag. Attackers can send requests to any endpoint under the /api/users path to create new administrator accounts or reset administrator passwords, thereby gaining full control of the server and the ability to modify boot menus and installation scripts served to PXE clients.

title: Bootimus security vulnerability


summary: dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement route information handling that allows an unauthenticated same-link attacker to cause denial of service by sending crafted Router Advertisements. Attackers can repeatedly send Router Advertisements containing Route Information options with a lifetime of zero, triggering unfreed allocations in routeinfo_findalloc() that cause linear memory exhaustion and eventual daemon crash.


summary: dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged attackers to trigger memory corruption when privilege separation is disabled. Attackers can connect to the control socket and send a privileged command such as -x, causing control_recvdata() to free the client object while the same READ+HANGUP event subsequently reaches control_hangup() with the stale pointer, resulting in a use-after-free condition exploitable in deployments using --disable-privsep or where privsep initialization has failed with the control socket operating in mode 0666.


product: feast

vendor: feast-dev

product: Red Hat OpenShift AI (RHOAI)

vendor: Red Hat

ecosystem: python/pypi

description: CVE-2026-56121 is unsafe deserialization on Feast apply_feature_view before 0.63.0. Upgrade to 0.63.0+ (release notes name commit 835cda8) and do not send a crafted FeatureView to prove it.

title: CVE-2026-56121: Feast apply_feature_view Deserialization

part: redhat

summary: Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by sending a crafted gRPC request to the registry server. The user_defined_function.body field of an OnDemandFeatureView spec is decoded from base64 and passed to dill.loads() before any authorization check is performed, enabling attackers to embed a malicious serialized Python object with an arbitrary __reduce__ method to execute OS commands as the feast service account.

title: Feast-Dev Feast security vulnerability


product: Winstone Servlet Container

vendor: rickknowles

summary: Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by sending HTTP GET requests with dot-dot-slash sequences that are not sanitized when serving static files from the configured webroot. Attackers can traverse outside the webroot directory using traversal-prefixed paths in a single HTTP request to read any file accessible to the servlet engine process, including sensitive system files when the service runs with elevated privileges.

title: Rickknowles Winstone Servlet Container security vulnerability


product: socat

vendor: socat

description: CVE-2026-56123 is heap buffer overflow in socat (through 1.8.1.1). The title names no next tag. Do not invent 1.8.1.2.

title: CVE-2026-56123: socat through 1.8.1.1

vendor: dest-unreach

summary: socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read through a signed char field causing a negative bytes_to_read value that is implicitly converted to size_t, resulting in an unbounded heap write into the 262-byte reply buffer with attacker-controlled size and content.

title: Dest-Unreach Socat security vulnerability


product: phpUploader

vendor: shimosyan

description: CVE-2026-56124 lets an unauthenticated caller read phpUploader's uploaded-files table before 2.0.2. Upgrade to 2.0.2+.

title: CVE-2026-56124: phpUploader Unauth Upload-Table Disclosure

summary: phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability that allows remote attackers to access the full contents of the uploaded-files database table by visiting any page of the application. The index model executes an unbounded SELECT query and embeds the complete JSON-encoded result set in an inline script block, exposing uploader IP addresses, Argon2ID key hashes, internal filenames, and SHA-256 fingerprints.

title: Shimosyan Phpuploader security vulnerability


product: Generic IO & Memory Access driver

vendor: Dynabook Inc.

version: all versions

vendor: TOSHIBA CORPORATION

summary: Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc. exposes its IOCTL with insufficient access control. A logged-in user with no administrative privilege may access physical memory.


product: libexpat

vendor: libexpat project

summary: libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).


summary: In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.

title: Libexpat Project Libexpat security vulnerability


product: RPG MAKER MV

vendor: Gotcha Gotcha Games Inc.

version: 1.6.3 and earlier

product: RPG MAKER MZ

version: 1.10.0 and earlier

description: CVE-2026-56137 lets a crafted RPG Maker MV or MZ save-file run an OS command. GHSA names no version range and no floor.

title: CVE-2026-56137: RPG Maker Save Command, No Named Floor

summary: RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed.


product: ail-framework

vendor: ail-project

summary: AIL framework contains a path traversal vulnerability in the /objects/item/diff endpoint. The endpoint accepts item identifiers through the s1 and s2 query parameters and, prior to the fix, attempted to retrieve and compare item contents without first verifying that both referenced items existed as valid AIL objects. An authenticated AIL user could craft malicious item identifiers containing path traversal sequences to cause the application to read gzip-compressed files accessible to the AIL process. This could result in unauthorized disclosure of local file contents, limited to files readable by the application and compatible with the expected gzip-compressed item format. The issue was fixed by validating that both requested items exist before their contents are accessed.


product: Apache Camel Undertow

vendor: Apache Software Foundation

ecosystem: java/maven

product: camel

vendor: apache

summary: Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Undertow Component. The camel-undertow HTTP server consumer exposes a muteException option that controls what is returned to the client when a route processing error occurs. This option defaulted to false, whereas the other Camel HTTP server components (camel-http / camel-jetty / camel-servlet and camel-platform-http) default it to true. With muteException=false, when a request triggers an exception during route processing the consumer writes the full Throwable stack trace into the HTTP response body as text/plain instead of returning an empty body. Any unauthenticated client that can reach the endpoint and cause a processing error - for example by sending a malformed request body, an invalid parameter, or otherwise triggering a route-internal failure - therefore receives a complete Java stack trace.


product: Apache Camel AWS2 SNS

summary: Improper Input Validation vulnerability in Apache Camel AWS SNS component. The camel-aws2-sns component filters Camel headers through a component-specific HeaderFilterStrategy, Sns2HeaderFilterStrategy. Like the sibling Sqs2HeaderFilterStrategy, it originally configured only an outbound filter (setOutFilterPattern, which blocks Camel*, breadcrumbId and org.apache.camel.* headers from being written out) and did not configure an inbound filter rule. For the related camel-aws2-sqs component this inbound gap was exploitable, because the Sqs2Consumer maps inbound SQS message attributes into the Camel Exchange via HeaderFilterStrategy.applyFilterToExternalHeaders, allowing a message sender to inject Camel control headers (tracked as CVE-2026-46456). camel-aws2-sns, by contrast, is producer-only: Sns2Endpoint does not support consumers (createConsumer throws UnsupportedOperationException, 'You cannot receive messages from this endpoint'), so no externally-supplied message attributes are ever mapped inbound into a Camel Exchange through SNS, and the missing inbound filter rule on Sns2HeaderFilterStrategy was therefore not reachable by an attacker.


product: Hub

vendor: JetBrains

product: hub

vendor: jetbrains

summary: In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via predictable restore codes was possible

title: Jetbrains Hub security vulnerability


description: CVE-2026-56142 lets an attacker attach authentication details to JetBrains Hub accounts before the per-train floors NVD names. Upgrade each train and do not invent a single Hub version.

title: CVE-2026-56142: JetBrains Hub Auth-Detail Privilege Escalation

summary: In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by attaching authentication details to accounts was possible

title: Jetbrains Hub security vulnerability


product: Elasticsearch

vendor: Elastic

product: elasticsearch

vendor: elastic

summary: Incorrect Authorization (CWE-863) in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By targeting indices they are not authorized to access directly, the user can cause those indices' configured ingest pipelines to execute and return their output, potentially disclosing data processed or enriched by those pipelines. Additionally, the same feature can be used to retrieve index mapping metadata for indices the user are not authorized to access directly.

title: Elastic Elasticsearch security vulnerability


summary: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user with permission to execute EQL sequence queries against an index they control can send a specially crafted query that triggers excessive memory consumption, causing the Elasticsearch node to crash.


product: Kibana

product: kibana

summary: Improper Access Control (CWE-284) in Kibana can lead to unauthorized modification of Entity Analytics Watchlist configuration and potential information disclosure. A low-privileged authenticated user with read-only Security Solution access could perform write operations on watchlist data that should require elevated privileges. Under specific deployment conditions, this could also allow such a user to access data beyond their authorized scope.

title: Elastic Kibana security vulnerability


summary: Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized information disclosure and case attachment integrity compromise via Privilege Abuse (CAPEC-122). An inconsistency in Kibana's file access authorization logic allows a low-privileged authenticated user to retrieve, modify, and delete case attachments that belong to feature areas they are not authorized to access. Because the access control check and the resource retrieval use different resolution mechanisms, an authenticated attacker with limited file management permissions can obtain the contents of, modify, or delete protected case attachments — such as those associated with Security Solution cases — without holding the privileges required to access those features.

title: Elastic Kibana security vulnerability


summary: Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted query that causes excessive resource consumption while the request is processed, which may render the affected node unavailable.


summary: Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the affected node unavailable.


product: Fleet Server

summary: Allocation of Resources Without Limits or Throttling (CWE-770) in Fleet Server can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker can submit a specially crafted request to an upload endpoint that causes excessive memory consumption, which may render Fleet Server unavailable.

title: Elastic Fleet Server security vulnerability


summary: Improper Input Validation (CWE-20) in Kibana can lead to a denial of service via Input Data Manipulation (CAPEC-153). An authenticated user can submit a specially crafted Fleet policy input that is not correctly validated, which can render Fleet agent, server, and policy management functionality unavailable.


product: Elastic Defend

summary: Incorrect Authorization (CWE-863) in Elastic Defend can lead to unauthorized information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). Under certain conditions, a low-privileged authenticated user can access response action data that they are not authorized to view.

title: Elastic Endpoint Security security vulnerability


platforms:
32-bit Systems
x64-based Systems

product: Windows 10 Version 1607

vendor: Microsoft

product: Windows 10 Version 1809

product: Windows Server 2012

product: Windows Server 2012 (Server Core installation)

product: Windows Server 2012 R2

product: Windows Server 2012 R2 (Server Core installation)

product: Windows Server 2016

product: Windows Server 2016 (Server Core installation)

product: Windows Server 2019

product: Windows Server 2019 (Server Core installation)

product: Windows Server 2022

product: Windows Server 2025

business_risk: High risk. CVE-2026-56155 affects Active Directory Federation Services and permits an authorized local attacker to elevate privileges. The CVE is listed in CISA’s Known Exploited Vulnerabilities catalog, with active exploitation recorded and a total technical impact assessment. AD FS should be treated as a highly trusted identity component.

claim: CVE-2026-56155 affects Microsoft Windows 10 versions 1607 and 1809 and Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025, including listed Server Core variants.

claim: The vulnerability allows an authorized attacker to elevate privileges locally; the Microsoft CVSS vector is AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

kind: exposure

claim: CISA requires applying vendor mitigations and following applicable risk-based patching guidance; if mitigations are unavailable, discontinuing use of the product is identified as an option.

kind: remediation

claim: The NVD record lists the applicable Windows build thresholds as the end-exclusive boundaries for affected versions, establishing the corresponding fixed-build thresholds.

exposure_conditions: The affected Windows installation hosts or supports AD FS functionality.

exposure_conditions: An attacker has authorized local access or low-level privileges on the affected system.

exposure_conditions: The installed OS build is below the applicable Microsoft fixed build.

exposure_conditions: Internet exposure is not required by the published CVSS vector; exposure assessment should nevertheless include externally reachable AD FS and Web Application Proxy infrastructure.

remediation_steps: Prioritize remediation because the CVE is listed in CISA’s Known Exploited Vulnerabilities catalog; the published CISA due date was July 28, 2026.

remediation_steps: Apply the applicable Microsoft security update and confirm that the installed build is at or above the fixed build for the operating system.

remediation_steps: Fixed builds identified in the NVD/Microsoft affected-configuration data are: Windows 10 version 1607 and Windows Server 2016: 10.0.14393.9339; Windows 10 version 1809 and Windows Server 2019: 10.0.17763.9020; Windows Server 2012 and Windows Server 2012 R2: 6.2.9200.26226 and 6.3.9600.23291 respectively; Windows Server 2022: 10.0.20348.5386; Windows Server 2025: 10.0.26100.33158.

remediation_steps: If timely patching is unavailable, follow Microsoft and CISA mitigation guidance. Where AD FS is no longer required, evaluate migration to Microsoft Entra ID and decommission AD FS through Microsoft’s documented process.

status: complete

uncertainty: The publicly retrievable Microsoft Security Update Guide page was JavaScript-rendered, so a specific Microsoft KB article or package identifier could not be independently confirmed.

uncertainty: The supplied record identifies Windows operating-system build thresholds, but does not independently establish which installed components or AD FS role configurations are present on each asset.

uncertainty: The verification guidance is based on comparing inventory build data with the authoritative affected-version boundaries; no vendor-provided CVE-specific verification procedure was located.

verification_steps: Using approved asset-inventory or endpoint-management data, identify systems running the affected Windows releases and compare their OS build numbers with the applicable fixed builds.

verification_steps: Confirm that AD FS servers and associated proxy infrastructure have received the relevant Microsoft security update and are reporting a build at or above the fixed threshold.

verification_steps: Review patch compliance and authentication-service monitoring after remediation; investigate unexpected AD FS authentication or privilege changes.

verification_steps: For environments retiring AD FS, confirm that application authentication has migrated successfully and that no relying-party traffic remains before decommissioning.

ecosystem: windows/system

known_ransomware_campaign_use: Unknown

product: Active Directory Federation Services

required_action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

vendor_project: Microsoft

vulnerability_name: Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

vendor: microsoft

summary: Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.


product: Microsoft 365 Apps for Enterprise

product: Microsoft Office 365 for Mac

product: Microsoft Office LTSC 2021

product: Microsoft Office LTSC 2024

product: Microsoft Office LTSC for Mac 2021

product: Microsoft Office LTSC for Mac 2024

summary: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.


product: Microsoft SharePoint Enterprise Server 2016

product: Microsoft SharePoint Server 2019

product: Microsoft SharePoint Server Subscription Edition

summary: Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.


product: Windows 10 Version 1607

product: Windows 10 Version 1809

product: Windows Server 2012

product: Windows Server 2012 (Server Core installation)

product: Windows Server 2012 R2

product: Windows Server 2012 R2 (Server Core installation)

summary: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.


product: Azure Red Hat OpenShift (ARO)

summary: Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.


product: Azure Logic Apps

summary: Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.


product: Azure SQL Database

summary: Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.


product: Azure Kubernetes Service

summary: Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

title: Microsoft Azure Kubernetes Service security vulnerability


business_risk: Critical risk to network-reachable SharePoint farms. CVE-2026-56164 is an authentication-bypass vulnerability that can allow an unauthorized network attacker to elevate privileges. The vulnerability is listed in CISA's Known Exploited Vulnerabilities Catalog, so exposed or unpatched systems should receive emergency prioritization.

claim: Microsoft SharePoint Enterprise Server 2016 is affected below build 16.0.5561.1001.

claim: Microsoft SharePoint Server 2019 is affected below build 16.0.10417.20175.

claim: Microsoft SharePoint Server Subscription Edition is affected below build 16.0.19725.20434.

claim: The vulnerability is described as allowing an unauthorized attacker to elevate privileges over a network; the published CVSS vector indicates network attack, no required privileges, and no user interaction.

claim: Microsoft's July 14, 2026 SharePoint Server Subscription Edition security update is KB5002882 and has build 16.0.19725.20434; the update includes CVE-2026-56164.

claim: SharePoint Server Subscription Edition is fixed at build 16.0.19725.20434.

exposure_conditions: The affected SharePoint Server 2016, 2019, or Subscription Edition installation is below its applicable fixed build.

exposure_conditions: The SharePoint service is reachable over the network by an unauthorized attacker; internet exposure materially increases risk.

exposure_conditions: The affected SharePoint farm has not received and completed deployment of the applicable July 14, 2026 security update.

remediation_steps: Apply the July 14, 2026 security update for Microsoft SharePoint Server 2016, KB5002891, and complete the normal SharePoint farm deployment/configuration process. The fixed build is 16.0.5561.1001.

remediation_steps: Apply the July 14, 2026 security update for Microsoft SharePoint Server 2019, KB5002883, and complete the normal SharePoint farm deployment/configuration process. The fixed build is 16.0.10417.20175.

remediation_steps: Apply the July 14, 2026 security update for Microsoft SharePoint Server Subscription Edition, KB5002882. The fixed build is 16.0.19725.20434.

remediation_steps: Until patching is complete, reduce unnecessary network exposure and restrict access to trusted administrative or user networks using existing approved access-control mechanisms. Do not treat network restriction as a replacement for patching.

remediation_steps: Because the vulnerability is in CISA's Known Exploited Vulnerabilities Catalog, prioritize patching and investigate relevant telemetry according to applicable organizational incident-response and CISA requirements.

uncertainty: The Microsoft Security Response Center advisory page was not available in rendered search results, so detailed vendor mitigation or workaround text could not be independently confirmed.

uncertainty: The supplied record and NVD describe network exploitation and privilege elevation, but do not establish a specific endpoint, request pattern, configuration dependency, or forensic indicator.

uncertainty: The fixed-build claims are supported by Microsoft's July 14, 2026 update articles; installation success and current asset state require local administrative verification.

verification_steps: Identify the SharePoint product edition and record the deployed farm/build version through an approved administrative inventory process.

verification_steps: Confirm the reported build is at least 16.0.5561.1001 for SharePoint Server 2016, 16.0.10417.20175 for SharePoint Server 2019, or 16.0.19725.20434 for SharePoint Server Subscription Edition.

verification_steps: Confirm that the corresponding July 14, 2026 security update is recorded as installed on all applicable SharePoint servers in the farm.

verification_steps: Confirm that the farm remains operational after the update using normal, authenticated administrative and application health checks; do not perform unauthenticated exploit testing.

verification_steps: Review network telemetry and authentication logs for unexpected unauthenticated access attempts or anomalous privilege changes, particularly where the SharePoint service was externally reachable.

notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-56164 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-56164

product: SharePoint Server

vulnerability_name: Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

summary: Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.


product: Microsoft Account

product: account

summary: Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.


product: Azure AI Search

summary: Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.


platforms:
32-bit Systems
ARM64-based Systems
x64-based Systems

product: Windows 10 Version 21H2

product: Windows 10 Version 22H2

platforms:
ARM64-based Systems
x64-based Systems

product: Windows 11 Version 24H2

product: Windows 11 Version 25H2

product: Windows 11 version 26H1

product: Windows Server 2022

product: Windows Server 2025

product: Windows Server 2025 (Server Core installation)

summary: Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network.


product: Windows Admin Center

summary: Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.


product: .net

summary: Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.


product: Remote Desktop Web Client

summary: Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.

title: Microsoft Remote Desktop Web Client security vulnerability


product: Windows 10 Version 1809

product: Windows 11 version 23H2

product: Windows Server 2019

product: Windows Server 2019 (Server Core installation)

summary: Use after free in Windows WebView allows an authorized attacker to elevate privileges locally.


summary: Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.


product: Windows 10 Version 1607

product: Windows Server 2012

product: Windows Server 2012 (Server Core installation)

product: Windows Server 2012 R2

product: Windows Server 2012 R2 (Server Core installation)

product: Windows Server 2016

summary: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.


product: Windows 10 Version 21H2

product: Windows 10 Version 22H2

product: Windows 11 Version 24H2

product: Windows 11 Version 25H2

product: Windows 11 version 26H1

summary: Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.


product: Microsoft Defender for Endpoint for Mac

summary: Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

title: Microsoft Defender For Endpoint security vulnerability


product: Windows Server 2025

product: Windows Server 2025 (Server Core installation)

summary: Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.

title: Microsoft Windows 11 24H2 security vulnerability


product: Windows 10 Version 1809

summary: Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.


summary: Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.


product: Windows Server 2022

summary: Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.


product: Windows Admin Center

summary: Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.


product: Windows 10 Version 1607

summary: Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network.


title: Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally


product: Windows Server 2012

summary: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network.

title: Microsoft Windows 10 1607 security vulnerability


product: Windows Server 2012 (Server Core installation)

summary: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.


product: Windows Server 2012 R2

summary: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.


product: Microsoft Exchange Online

summary: Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.


product: Microsoft 365 Apps for Enterprise

product: Microsoft Office 2016

product: Microsoft Office 2019

product: Microsoft Office 365 for Mac

product: Microsoft Office LTSC 2021

product: Microsoft Office LTSC 2024

product: Microsoft Office LTSC for Mac 2021

product: Microsoft Office LTSC for Mac 2024

product: Microsoft SharePoint Enterprise Server 2016

product: Microsoft SharePoint Server 2019

product: Microsoft SharePoint Server Subscription Edition

summary: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.


severity: low

title: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally


product: Windows 10 Version 1809

product: Windows 10 Version 21H2

product: Windows 10 Version 22H2

product: Windows 11 Version 24H2

product: Windows 11 Version 25H2

product: Windows 11 version 26H1

product: Windows Server 2012 R2 (Server Core installation)

product: Windows Server 2016

summary: Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network.


product: Microsoft 365 Apps for Enterprise

product: Microsoft Office 2016

product: Microsoft Office 2019


product: Windows Admin Center

summary: Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.


summary: Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.

title: Microsoft Windows Admin Center security vulnerability


product: Red Hat Enterprise Linux 10.0 Extended Update Support

vendor: Red Hat

product: Red Hat Enterprise Linux 7 Extended Lifecycle Support

product: Red Hat Enterprise Linux 8

product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

product: Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

product: Red Hat Enterprise Linux 8.8 Telecommunications Update Service

product: Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

product: Red Hat Enterprise Linux 9

product: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

product: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

description: CVE-2026-56208 is libaom AV1 LAP first-pass stats ring-buffer overflow. GHSA names no version range and no floor.

title: CVE-2026-56208: libaom LAP Ring Buffer, No Named Floor

summary: A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.


product: Red Hat Enterprise Linux AI 3.3 for RHEL 9

product: Red Hat Enterprise Linux AI 3.4 for RHEL 9

product: Red Hat Enterprise Linux AI 3.5 for RHEL 9

product: Red Hat Hardened Images

product: Red Hat AI Inference Server

product: Red Hat Enterprise Linux 10

product: Red Hat OpenShift AI (RHOAI)

description: CVE-2026-56209 is libaom SVC layer-ID cyclic refresh arbitrary write. GHSA names no version range and no floor.

title: CVE-2026-56209: libaom SVC Cyclic Refresh Write, No Named Floor

summary: An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh map field via crafted image pixel values. The encoder then writes approximately 1,200 bytes at the attacker-controlled address. This is fully deterministic and does not require a separate information leak. An attacker who can supply frames to a network-facing libaom encoder with SVC enabled could exploit this for denial of service or potential code execution.


description: CVE-2026-56210 is libaom SVC spatial_layer_id heap out-of-bounds read. GHSA names no version range and no floor.

title: CVE-2026-56210: libaom SVC Layer Context Read, No Named Floor

summary: A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setting a spatial_layer_id exceeding the configured number of layers. This causes an out-of-bounds heap read of approximately 40,728 bytes when computing a layer context array index. An attacker who can influence SVC encoder parameters in a network-facing service could exploit this for information disclosure (heap content leak) or denial of service (segmentation fault from hitting unmapped memory).


description: CVE-2026-56211 is libaom SVC layer context overlap remote code execution. GHSA names no version range and no floor.

title: CVE-2026-56211: libaom SVC Layer Hijack, No Named Floor

summary: A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal encoder layer context structures. In fork-based video processing services, an attacker can use this to hijack the cyclic refresh map pointer, brute-force the process base address via a crash oracle, and redirect control flow to achieve arbitrary command execution. Exploitation requires the target service to use libaom with SVC encoding enabled and accept attacker-supplied video frames.


product: Capgo

vendor: Capgo

summary: Capgo before 12.128.2 contains an authentication logic flaw: a user with permission to manage team or organization security settings can enable mandatory two-factor authentication for all team members without first enabling 2FA on their own account. The application fails to verify the initiator's 2FA status before allowing the policy change, resulting in inconsistent security enforcement, potential administrative misuse, and lockout risk for team members.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.upsert_version_meta SECURITY DEFINER function exposed via PostgREST RPC, allowing unauthenticated attackers to insert arbitrary rows into version_meta for any app_id. Attackers can exploit this by calling the RPC endpoint with a public anon key to poison storage metrics, causing persistent false data in dashboards and triggering incorrect alerts across victim applications.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains an information disclosure vulnerability in Supabase PostgREST RPC endpoints is_trial_org and is_paying_org that allows unauthenticated attackers to enumerate organizations and disclose billing status using the public sb_publishable key. Attackers can invoke these endpoints to determine organization existence via distinguishable return values and identify paying customers for targeted profiling.

title: Capgo security vulnerability


summary: Capgo before 12.128.12 allows authenticated users to modify their mutable public.users.email to arbitrary addresses, which the SSO provisioning endpoint trusts as an account-merge key. Attackers can pre-position their account with a victim's corporate SSO email, causing the provision-user endpoint to merge the victim's SSO identity into the attacker-controlled account.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains a scope escalation vulnerability in the POST /functions/v1/apikey endpoint that allows app-limited API keys to mint unrestricted keys by setting empty limits. Attackers with a compromised app-limited key can create an unrestricted key with org-wide access to resources like app listings and other protected endpoints.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains a policy bypass vulnerability in app_versions update enforcement that allows app-scoped API keys to downgrade encrypted bundles to non-encrypted state. Attackers with app-scoped all API keys can directly update the app_versions table via PostgREST to clear session_key and key_id fields, bypassing organization-enforced encrypted-bundle policies and weakening OTA security controls.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 fails to strip EXIF metadata including GPS geolocation data from uploaded images, allowing information disclosure. Attackers can download uploaded images and extract precise latitude and longitude coordinates revealing user physical location at capture time.


description: CVE-2026-56219 lets an unauthenticated caller read Capgo org RBAC bindings and emails via get_org_user_access_rbac before 12.128.2. Upgrade to 12.128.2+.

title: CVE-2026-56219: Capgo get_org_user_access_rbac NULL Auth

summary: Capgo before 12.128.2 contains a NULL-auth bypass vulnerability in the public.get_org_user_access_rbac function that allows unauthenticated attackers to retrieve RBAC role bindings and member email addresses. Attackers can exploit improper NULL comparison in the authorization gate to disclose organization membership, roles, and email addresses via the PostgREST RPC endpoint using only a public API key.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.manifest INSERT policy that allows read-only org members to insert OTA manifest rows. Attackers with read-only org access can inject malicious manifest entries with arbitrary s3_path values that are served to devices via the unauthenticated /updates endpoint, enabling OTA metadata poisoning and potential malicious asset delivery.

title: Capgo security vulnerability


product: capgo

vendor: Cap-go

summary: Cap-go before 12.128.2 contains multiple SQL injection vulnerabilities in cloudflare.ts where user-controlled values from API request bodies are interpolated directly into SQL query strings without sanitization or parameterization. Authenticated users with read-level API key permissions can inject arbitrary SQL through deviceIds, search, version_name, cursor, and actions parameters to access analytics data belonging to other users or applications.

title: Cap-Go Capgo security vulnerability


summary: Capgo before 12.128.2 contains an authorization bypass vulnerability in POST /private/role_bindings that fails to verify app_id ownership during app-scoped role binding creation. An attacker with administrative privileges in one organization can create role bindings targeting applications owned by other organizations, enabling unauthorized read and modification of victim applications.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains a cross-domain SSO account takeover vulnerability in the provision-user endpoint that allows attackers to merge arbitrary victim accounts based on email match without validating SSO provider domain authorization. An attacker with enterprise org admin access and a malicious IdP can forge SAML assertions containing victim email addresses to trigger account merge and gain full access to victim accounts, organizations, and data.

title: Capgo security vulnerability


summary: Capgo console.capgo.app/login before 12.128.2 accepts access_token and refresh_token in URL query parameters, automatically authenticating users without confirmation. Attackers can craft malicious links to force victims into attacker-controlled sessions, exposing tokens in browser history and logs.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains an authorization bypass vulnerability in its public API key management handlers (get/put/delete/post). API keys created with mode=all but restricted to a single app via limited_to_apps are only checked for limited_to_orgs and not for limited_to_apps, so an app-scoped key can enumerate, update, and delete sibling API keys belonging to the same account that are outside its declared app scope, enabling tampering with account-level credentials.


summary: Capgo (Cap-go/capgo) before 12.128.2 exposes the Supabase PostgREST RPC function public.get_orgs_v6(userid uuid), which is SECURITY DEFINER and granted to the anon role, allowing unauthenticated access. Because the function accepts a caller-supplied user UUID without verifying it matches the authenticated user, an attacker using only the public publishable API key can query POST /rest/v1/rpc/get_orgs_v6 with an arbitrary user UUID to retrieve that user's organization membership, roles, subscription/trial metadata, and management_email (PII).

title: Cap-Go Capgo security vulnerability


summary: Capgo before 12.128.2 contains a server-side request forgery vulnerability in webhook URL validation that allows loopback and internal addresses. Organization admins can configure webhooks pointing to localhost or 127.0.0.1, and when triggered, the backend performs outbound requests to these addresses with error responses disclosed to users.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 fails to enforce a maximum value on the minimum password length field in its password policy configuration. An authenticated organization administrator can set an extremely large numeric value (e.g., billions of characters) as the minimum password length, making compliance impossible for all organization members. Once the policy is enabled, users (including administrators) are unable to change their passwords or access the organization, resulting in an organization-wide account lockout and application-level denial of service.


summary: Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that allows attackers to access build jobs belonging to different applications by supplying a mismatched app_id and job_id combination. Limited API keys restricted to a single app can retrieve build status and logs from other apps by providing an authorized app_id while using a job_id from an unauthorized app, exposing sensitive build information including logs, metadata, and potentially credentials.

title: Capgo security vulnerability


description: CVE-2026-56230 lets a Capgo caller adopt another tenant's limited key via x-limited-key-id before 12.128.2. Upgrade to 12.128.2+. Do not send a foreign key id.

title: CVE-2026-56230: Capgo middlewareKey Limited-Key BOLA

summary: Capgo before 12.128.2 contains a broken object level authorization vulnerability in middlewareKey() that accepts the client-controlled x-limited-key-id header without validating ownership, allowing authenticated users to adopt cross-tenant limited keys. Attackers can supply another tenant's limited key ID to bypass authorization checks and access unauthorized cross-tenant resources across multiple API endpoints.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains a broken object level authorization (BOLA) vulnerability in the POST /build/start/:jobId and POST /build/cancel/:jobId endpoints. The handlers authorize the request based only on the attacker-controlled app_id supplied in the request body and never verify that the jobId in the URL belongs to that app_id (or the same tenant/org) before issuing privileged builder commands with the server-held builder API key. An authenticated user with the app.build_native permission for any app they control can start or cancel arbitrary builder jobs belonging to other tenants by supplying a victim jobId, resulting in cross-tenant build sabotage (denial of service), unauthorized compute actions, and potential billing impact.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 fails to enforce limited_to_orgs and limited_to_apps constraints on subkeys provided via x-limited-key-id header in middlewareKey function. Attackers can bypass subkey scope restrictions by referencing their own subkeys, causing all downstream route handlers to use the unrestricted parent key instead of the scoped subkey.

title: Capgo security vulnerability


description: CVE-2026-56233 lets a Capgo builder user walk the upload-proxy path before 12.128.2 and hit internal admin routes. Upgrade to 12.128.2+. Do not send traversal paths.

title: CVE-2026-56233: Capgo Builder Upload-Proxy Traversal

summary: Capgo before 12.128.2 contains a path traversal vulnerability in the builder upload proxy that allows authenticated users with build permissions to bypass upload restrictions. Attackers can append traversal sequences to the upload path, which are normalized by the WHATWG URL parser, enabling access to internal administrative endpoints with the privileged BUILDER_API_KEY header and resulting in server-side privilege escalation.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains a credential validation vulnerability in the POST /functions/v1/private/validate_password_compliance endpoint that is callable using only the public Supabase key without authentication. The endpoint is CORS-permissive with wildcard origin allowance and lacks rate limiting, enabling attackers to perform password spraying and credential stuffing attacks to compromise user accounts.

title: Capgo security vulnerability


summary: Cap-go capgo before 12.128.2 contains an authorization bypass in several Supabase PostgREST RPC functions (get_app_metrics, get_global_metrics, get_total_metrics) that are granted to the anon role without enforcing org membership or permission checks. An unauthenticated attacker using only the public Supabase API key (sb_publishable_*) can query arbitrary org_id values to disclose cross-tenant usage telemetry (MAU, bandwidth, installs, gets), enumerate app IDs for a target org, and determine org existence via an oracle (valid org returns metrics, invalid returns []).

title: Cap-Go Capgo security vulnerability


product: cli

vendor: capgo

summary: Capgo CLI before 12.128.2 contains arbitrary file overwrite vulnerabilities in login and build credentials operations that follow symlinks without validation. Attackers can create malicious symlinks in repositories to overwrite arbitrary files or expose credentials with world-readable permissions when developers run the CLI.

title: Capgo Cli security vulnerability


summary: Capgo before 12.128.2 contains a broken authentication vulnerability in its API key generation mechanism. API keys are exposed in frontend requests, and the backend fails to validate that keys are securely generated and bound to the authenticated user. An attacker can tamper with the API key parameter in the generation request and supply arbitrary values, generating custom API keys without proper authorization, which can lead to unauthorized access to protected endpoints.


summary: Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST global_stats endpoint that allows unauthenticated attackers to read sensitive financial and operational metrics using only the public apikey. Remote attackers can query the /rest/v1/global_stats endpoint to expose MRR, total revenue, plan-tier revenue breakdown, customer counts, and operational telemetry.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains a potential privilege escalation vulnerability in the public.apply_usage_overage SECURITY DEFINER function, which performs sensitive billing operations without enforcing internal authorization checks (no validation of auth.uid(), org membership, or check_min_rights). Because the function runs with the owner's privileges, it bypasses Row Level Security. If EXECUTE permission is available to the authenticated or anon roles (explicitly or via default privileges), an authenticated user could invoke it via Supabase RPC to manipulate billing data for arbitrary organizations, including unauthorized credit depletion and fraudulent overage event insertion.

title: Capgo security vulnerability


summary: Capgo before 12.128.12 contains a billing authorization bypass vulnerability in the plan_valid calculation that allows organizations with exhausted or expired usage credit grants to bypass billing gates. Attackers can exploit the divergence between the plugin hot-path plan_valid expression and the authoritative billing gate to gain continued access to /updates, /stats, /channel_self, and attachment upload endpoints after credit depletion.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains a privilege escalation vulnerability where demoted super_admin users retain access to delete_non_compliant_bundles and count_non_compliant_bundles RPCs due to stale org_users.user_right column not being cleared during role binding deletion. Attackers can exploit this by maintaining a previously granted super_admin role to enumerate and bulk delete non-compliant bundles across the entire organization indefinitely.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains an unauthenticated security definer RPC function get_identity_apikey_only that returns the owning user_id for supplied API keys, creating an API key validity oracle and user identity disclosure primitive. Attackers can call this endpoint with valid or invalid API keys to confirm key validity and map keys to user identifiers, then chain results into other exposed RPCs like get_orgs_v6 to retrieve organization membership and management email PII.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains a security control bypass vulnerability where the PostgREST/RLS plane accepts plaintext API keys through the capgkey header despite enforce_hashed_api_keys being enabled. Attackers can bypass org-level hashed-key enforcement by sending plaintext API keys directly to the PostgREST/RLS plane to access protected resources.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 allows non-admin API keys to read webhook signing secrets via Supabase REST due to insufficient row-level security policies on the webhooks table. Attackers can retrieve the webhook secret and forge valid X-Capgo-Signature headers to send authenticated webhook events to configured receivers, breaking webhook authenticity and integrity.

title: Capgo security vulnerability


summary: Supabase Capgo before 12.128.2 contains an authorization bypass vulnerability in the SECURITY DEFINER record_build_time RPC function that allows unauthenticated attackers to insert arbitrary build-time records. Attackers can exploit this by calling POST /rest/v1/rpc/record_build_time with a public API key to poison billing and quota data for any organization, enabling resource exhaustion and cross-tenant billing manipulation.

title: Cap-Go Capgo security vulnerability


summary: Capgo before 12.128.2 contains a broken access control vulnerability in the organization management API where a scoped API key (limited_to_orgs) inherits its owner-user's permissions, allowing destructive cross-organization actions. When a user is an admin in two organizations and creates a write-mode API key restricted to one organization, that key can still perform destructive operations (e.g., DELETE /organization, DELETE /organization/members) against another organization. The root cause is route-level authorization (rbac_check_permission_direct) that evaluates the key owner's user privileges before enforcing the API key's limited_to_orgs scope.

title: Capgo security vulnerability


description: CVE-2026-56247 lets a Capgo org admin bind org-scoped RBAC roles at app scope, including on pending invites, before 12.128.2. Upgrade to 12.128.2+.

title: CVE-2026-56247: Capgo Cross-Scope RBAC Role Binding

summary: Capgo before 12.128.2 allows org admins to assign org-scoped RBAC roles at app scope without validating role scope compatibility, including to pending invitees. Attackers can pre-seed malformed high-privilege bindings that survive invite acceptance, enabling accepted low-privilege users to perform unauthorized privileged app actions.

title: Capgo security vulnerability


summary: Cap-go capgo (capgo-backend) before 12.128.12 contains an unauthenticated denial-of-service vulnerability arising from the audit_logs table's Row-Level Security (RLS) policy when accessed via the Supabase PostgREST API. Because the PostgreSQL query planner executes costly logic before RLS rejection, unfiltered queries to the public.audit_logs endpoint using the public anon key consistently trigger statement timeouts (PostgREST error 57014). Under concurrency, this exhausts database resources and causes cascading HTTP 500 failures on unrelated endpoints (e.g. /orgs), resulting in an application-layer denial of service.

title: Cap-Go Capgo security vulnerability


description: CVE-2026-56249 lets a Capgo user with create_channel overwrite an existing channel by reusing its name before 12.128.2. Upgrade to 12.128.2+.

title: CVE-2026-56249: Capgo Channel-Create Name Overwrite

summary: Capgo before 12.128.2 contains an authorization bypass vulnerability in the channel creation endpoint that allows authenticated users to overwrite existing channels by reusing their names. Attackers with app.create_channel permission can exploit a logic mismatch between existence validation and upsert operations to reassign channel ownership and modify critical production channel configurations.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 allows upload-scoped API keys to modify the mutable app_versions.r2_path field through PostgREST, enabling retargeting to arbitrary R2 bundle objects. Attackers can patch r2_path to point to victim objects, soft-delete the attacker-controlled version, and trigger the on_version_update cleanup function to delete the victim R2 object, causing denial of service and bundle availability disruption.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains a broken row level security policy in the org_users table that allows authenticated users to elevate privileges from admin to super_admin. Attackers can exploit the insufficient RLS enforcement to gain unauthorized super_admin access and compromise system security.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains a scope isolation vulnerability in the POST /webhooks/test endpoint that allows app-scoped API keys to invoke org-scoped webhook operations. Attackers with app-scoped credentials can trigger signed outbound webhook deliveries for arbitrary organization webhooks outside their declared app boundary, bypassing the limited_to_apps authorization check.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 contains an improper access control vulnerability in the public.get_org_members RPC function that allows unauthenticated attackers to enumerate organization members. Attackers can invoke the endpoint using only the public sb_publishable_* key and an organization UUID to retrieve sensitive member information including email addresses, user IDs, roles, and pending invitations.

title: Capgo security vulnerability


product: capacitor-updater

vendor: capacitor-updater

description: CVE-2026-56254 is Capgo leftover. GHAD vulnerabilities empty. NVD Deferred CPE is empty. NVD/vendor names 12.128.2.

title: CVE-2026-56254: Capgo leftover dump, GHAD vulnerabilities empty

summary: In @capgo/capacitor-updater (Cap-go/capgo) before 12.128.2, the end-to-end encryption scheme distributes the private key to each device that downloads the app. Because the public key can be derived from the private key, an attacker performing a man-in-the-middle attack or compromising the Capgo server can create a validly signed update bundle and cause devices to install an update not produced by the original app maker.

title: Capacitor-Updater security vulnerability


summary: Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate approximately 138 database write operations per request, causing degraded performance, increased costs, and potential service instability.

title: Capgo security vulnerability


summary: Capgo before 12.128.2 enforces mandatory two-factor authentication only at the UI level. Sensitive Organization (ORG) management API endpoints (e.g., editing organization details, inviting users) do not validate 2FA completion on the backend. An authenticated Admin user who has not enabled 2FA can replay or modify a previously captured ORG API request to perform privileged organization actions, bypassing the globally enforced 2FA requirement.


summary: Capgo before 12.128.2 allows direct patching of public.apps.owner_org through PostgREST, bypassing the transfer_app() workflow and creating split-brain ownership. Attackers can directly update apps.owner_org while leaving app_versions.owner_org unchanged, enabling old-org keys to retain access to version data while new-org keys control the app record.

title: Capgo security vulnerability


vendor: kidocode

summary: Crawl4AI before 0.8.8 contains an arbitrary file write vulnerability in the screenshot and PDF endpoints that allows unauthenticated attackers to write files outside the intended directory via symlink and time-of-check-time-of-use (TOCTOU) attacks on the output_path parameter. Remote attackers can exploit insufficient path validation and symlink following to achieve arbitrary file write and potential code execution on systems where the runtime user has write access to executable or cron locations.

title: Kidocode Crawl4Ai security vulnerability


summary: Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to redirect LLM API calls to attacker-controlled endpoints and read arbitrary environment variables. Attackers can exploit the unauthenticated /md, /llm, and /llm/job endpoints by supplying a malicious base_url parameter and setting api_token to env:VARIABLE_NAME to exfiltrate provider API keys and server secrets including JWT SECRET_KEY for authentication bypass.


summary: Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The output_path parameter accepts arbitrary filesystem paths without validation, allowing an attacker to supply absolute or path-traversal values to write to any location writable by the application's user, overwriting server files and causing denial of service.


description: CVE-2026-56261 is Crawl4AI leftover. GHAD vulnerabilities empty. NVD CPE excludes 0.8.7. Do not copy leftover 53753 0.8.7.

title: CVE-2026-56261: Crawl4AI leftover dump, GHAD vulnerabilities empty

summary: Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, or cloud metadata endpoints (e.g. 169.254.169.254), causing the server to make requests to internal services and potentially expose cloud metadata.


summary: Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication, causing service disruption.


summary: Crawl4AI before 0.8.7 contains a stored cross-site scripting vulnerability in the monitor dashboard that renders crawl URLs and error messages via innerHTML without escaping. An attacker can submit a crafted crawl request with malicious markup that executes in an operator's browser when viewing the dashboard.


description: CVE-2026-56264 is the Crawl4AI Docker API JavaScript-execution issue in the same GHSA as 56266, patched at 0.8.7. Upgrade to 0.8.7+; this is a pip package, not npm.

title: CVE-2026-56264: Crawl4AI Docker API execute-js

summary: Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API server's /execute_js endpoint, which accepts and executes arbitrary user-supplied JavaScript in the server's browser context with --disable-web-security enabled. An attacker can execute arbitrary JavaScript and, combined with the browser's relaxed security settings, perform server-side request forgery against internal services.


summary: Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server. Attackers who know the default key can forge valid authentication tokens for any user, bypassing authentication and gaining full access to protected functionality.


description: CVE-2026-56266 is part of the Crawl4AI Docker API advisory covering SSRF, file write, and auth bypass through 0.8.6. Upgrade to 0.8.7+ and do not copy a generic vendor-fixed placeholder.

title: CVE-2026-56266: Crawl4AI Docker API SSRF and Related Flaws

summary: Crawl4AI before 0.8.7 contains a server-side request forgery vulnerability in the /crawl, /crawl/stream, /md, and /llm endpoints that fetch arbitrary user-supplied URLs without validation. Unauthenticated attackers can bypass the internal-address blocklist using IPv6-mapped IPv4 addresses to reach internal services and cloud metadata endpoints.


product: Flowise

vendor: Flowise

summary: Flowise before 3.0.13 contains an information exposure vulnerability in the POST /api/v1/account/forgot-password endpoint that returns full user objects including PII to unauthenticated attackers. An attacker can enumerate valid email addresses and harvest sensitive user data including user IDs, names, account status, and timestamps by sending requests with known email addresses.

title: Flowise security vulnerability


product: flowise

vendor: flowiseai

summary: Flowise before 3.1.2 contains an information disclosure vulnerability in the /api/v1/chatflows/apikey/:apikey endpoint. When the keyonly query parameter is omitted (the default), the endpoint returns not only the chatflows bound to the supplied API key but also all chatflows across every workspace that have no API key assigned, because the underlying query lacks any workspace filter. An attacker with a valid API key for one workspace can therefore retrieve the full ChatFlow configuration (including flowData with system prompts and node configurations, chatbotConfig, apiConfig, and credential IDs) of unprotected chatflows belonging to other workspaces.


summary: Flowise before 3.1.0 (npm package flowise, versions 3.0.13 and earlier) uses a weak hardcoded default value 'Secre$t' for the TOKEN_HASH_SECRET environment variable in packages/server/src/enterprise/utils/tempTokenUtils.ts when the variable is not configured. This secret derives the AES-256-CBC key used to encrypt user IDs and workspace IDs in the 'meta' field of JWT tokens. An attacker who knows the default secret can decrypt this metadata to extract internal user and workspace identifiers, and re-encrypt manipulated values such as altered user or workspace IDs. Because the JWT signature is validated separately, decrypting or tampering with this metadata does not by itself grant access, but the disclosure of internal identifiers and possible metadata manipulation could aid privilege escalation or unauthorized data access.

title: Flowiseai Flowise security vulnerability


description: CVE-2026-56270 returns Flowise OAuth client secrets from GET /api/v1/loginmethod without auth through 3.0.13. Upgrade to 3.1.0+ and rotate those secrets. Do not call the endpoint to prove exposure.

title: CVE-2026-56270: Flowise Unauthenticated loginmethod Secrets

summary: Flowise before 3.1.0 (versions 3.0.13 and earlier) contains a missing authentication vulnerability in the /api/v1/loginmethod endpoint that allows unauthenticated users to retrieve an organization's complete SSO configuration, including OAuth client secrets in cleartext, by providing an organizationId parameter. Remote attackers can send a GET request to harvest sensitive API credentials for Google, Microsoft/Azure, GitHub, and Auth0 integrations. This affects FlowiseAI Cloud and self-hosted instances where the endpoint is exposed.


summary: Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets ('auth_token', 'refresh_token') and default audience and issuer values ('AUDIENCE', 'ISSUER') in the enterprise passport authentication middleware (packages/server/src/enterprise/middleware/passport/index.ts). When the corresponding environment variables (JWT_AUTH_TOKEN_SECRET, JWT_REFRESH_TOKEN_SECRET, JWT_AUDIENCE, JWT_ISSUER) are not set, the application silently falls back to these publicly known defaults, allowing an attacker to forge valid JWTs and impersonate any user, including administrators, resulting in authentication bypass.


summary: Flowise before 3.0.13 uses bcrypt with default salt rounds of 5, providing only 32 iterations instead of the OWASP-recommended minimum of 10 rounds. Attackers can crack password hashes approximately 30 times faster with modern GPU hardware, potentially compromising all user accounts in a database breach scenario.


summary: Flowise before 3.1.0 contains a path traversal vulnerability in Faiss and SimpleStore vector store implementations that accept unsanitized basePath parameters from authenticated users. Attackers with valid API tokens can write vector store data to arbitrary filesystem locations, potentially enabling code execution or data exfiltration.

title: Flowise security vulnerability


product: Flowise Components

summary: Flowise before 3.1.2 contains multiple OS command injection vulnerabilities in the Custom MCP Server feature due to incomplete command-flag validation and a regex bypass in local file access restrictions. An attacker with a Flowise account of any role, or API access with view/update permissions for chatflows, can configure a malicious MCP server to bypass the validateCommandFlags blocklist (for example, 'docker build' is not blocked, and 'npx --yes' is not blocked while only '-y' is) and the validateArgsForLocalFileAccess checks, resulting in execution of arbitrary commands on the Flowise host.


summary: Flowise before 3.1.0 contains a server-side request forgery vulnerability in the Execute Flow node that allows attackers to bypass security validation by providing intranet addresses through the base URL field. Attackers can initiate HTTP requests to internal network addresses, access cloud metadata, and enumerate internal services by exploiting the missing secureFetch verification in httpSecurity.ts.