VULNARCHIVE

Mailing-list archive

Published vulnerabilities

  • GCVE-1988-2026-0440
    SCHUTZWERK-SA-2024-007: Stored Cross-Site Scripting via file upload in H5P module (h5p-nodejs-library) of Lumi Education
  • GCVE-1988-2026-0439
    usvg SVGZ decompression bomb in `Tree::from_data`
  • GCVE-1988-2026-0438
    [SYSS-2026-071]: GDCM (Grassroots DICOM) - Format String (CWE-134)
  • GCVE-1988-2026-0437
    [SYSS-2026-070]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)
  • GCVE-1988-2026-0436
    [SYSS-2026-069]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)
  • GCVE-1988-2026-0435
    [SYSS-2026-068]: GDCM (Grassroots DICOM) - Stack-based Buffer Overflow (CWE-121)
  • GCVE-1988-2026-0434
    [SYSS-2026-067]: GDCM (Grassroots DICOM) - Stack-based Buffer Overflow (CWE-121)
  • GCVE-1988-2026-0433
    SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-13742
  • GCVE-1988-2026-0432
    SCHUTZWERK-SA-2024-006: Stored Cross-Site Scripting via text fields in H5P module (h5p-nodejs-library) of Lumi Education
  • GCVE-1988-2026-0431
    [0day-rubbish] Server Technology PRO3X PDU 030600 port_mux listener program override to root command execution (7.2)
  • GCVE-1988-2026-0430
    [0day-rubbish] Netsis NetOpenX REST 2.0.6.9 Unauthenticated SQL injection to xp_cmdshell SYSTEM command execution (9.8)
  • GCVE-1988-2026-0429
    [0day-rubbish] MultiTech Conduit AEP 6.3.6 Authenticated import_config filename command injection to root RCE (7.2)
  • GCVE-1988-2026-0428
    [0day-rubbish] Lightstreamer Server 7.4.8 Unauthenticated JMX jvmtiAgentLoad native code execution (8.1)
  • GCVE-1988-2026-0427
    [0day-rubbish] Lightstreamer Server 7.4.8 Shipped placeholder JMX/RMI credentials plus MLet remote class loading to root RCE (9.8)
  • GCVE-1988-2026-0426
    [0day-rubbish] Lantronix SGX5150 9.13.0.0R7 Authenticated FsBrowseClean command injection to root RCE (7.2)
  • GCVE-1988-2026-0425
    [0day-rubbish] FME Flow 2026.2 Zip-Slip arbitrary file write to code execution as LocalSystem (8.8)
  • GCVE-1988-2026-0424
    [0day-rubbish] Cambium cnMatrix EX3024F 6.2.1-r4 SSL CSR COMMON_NAME command injection to root RCE (7.2)
  • GCVE-1988-2026-0423
    [NotCVE-2026-0019] game-music-emu through 0.6.5 VGM Command Interpreter Missing Operand Length Check Allows Heap Out-of-Bounds Read
  • GCVE-1988-2026-0422
    [NotCVE-2026-0018] game-music-emu (libgme) through 0.6.5 Unbounded GYM Command Loop Allows Heap Out-of-Bounds Read
  • GCVE-1988-2026-0421
    [NotCVE-2026-0017] game-music-emu (libgme) 0.6.5 and Earlier AY Loader NULL Pointer Dereference Allows Denial of Service
  • GCVE-1988-2026-0420
    [NotCVE-2026-0016] game-music-emu VGM Command Interpreter Unvalidated 0xE0 PCM Seek Offset Allows Out-of-Bounds Read and Denial of Service
  • GCVE-1988-2026-0419
    Teams meeting audio and roster data remain accessible via ACS Call Automation connectCall after a participant is removed from the meeting
  • GCVE-1988-2026-0418
    CFP No cON Name 2k26 - Palma, Mallorca - Spain
  • GCVE-1988-2026-0417
    UAF in XMEye Security Camera
  • GCVE-1988-2026-0416
    harness(gitness) registry webhook sort_order blind SQL injection
  • GCVE-1988-2026-0415
    dive tar-slip in image file extraction
  • GCVE-1988-2026-0414
    HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084)
  • GCVE-1988-2026-0413
    CVE-2026-17613: Penpot cross-team file takeover via import-binfile (unpatched in 2.17.2)
  • GCVE-1988-2026-0412
    [0day-rubbish] TigerGraph Community Edition 4.2.4 Default credentials plus GSQL TO_CSV arbitrary file write to SSH code execution (9.8)
  • GCVE-1988-2026-0411
    [0day-rubbish] Teltonika RutOS 00.07.06.21 Authenticated ipsec.lua logread command injection with reflected output (8.8)
  • GCVE-1988-2026-0410
    [0day-rubbish] Opengear NGCS 25.11.8 Authenticated PDU name command injection to root via io.popen (8.8)
  • GCVE-1988-2026-0409
    [0day-rubbish] LCDS Laquis SCADA Unauthenticated /uploade.html file write chained with CMDEXT*.DLL autoload (9.8)
  • GCVE-1988-2026-0408
    [0day-rubbish] Ecava IntegraXor IGX 16.0.701.10 Unauthenticated /FileUpload write chained to the dxmanager cmd.exe sink (9.8)
  • GCVE-1988-2026-0407
    [0day-rubbish] Devolutions Server (DVLS) 2026.2.14.0 PAM entitlement-gate bypass to SYSTEM PowerShell via the test-script endpoint (9.1)
  • GCVE-1988-2026-0406
    [0day-rubbish] CaptureBites MetaServer Anonymous WCF SOAP workflow leading to RunPrograms code execution (9.8)
  • GCVE-1988-2026-0405
    [0day-rubbish] PrizmDoc for Java (VirtualViewer) 5.22.1 Unauthenticated uploadDocument write into the webapp root to JSP webshell (9.8)
  • GCVE-1988-2026-0404
    CVE-2026-44756: Pre-Auth RCE in SAP EPP Processing (ICM, Web Dispatcher, disp+work)
  • GCVE-1988-2026-0403
    APPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1
  • GCVE-1988-2026-0402
    APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1
  • GCVE-1988-2026-0401
    APPLE-SA-09-28-2026-1 iOS 26.7.1 and iPadOS 26.7.1
  • GCVE-1988-2026-0400
    APPLE-SA-09-14-2026-10 Xcode 27
  • GCVE-1988-2026-0399
    APPLE-SA-09-14-2026-9 Safari 27
  • GCVE-1988-2026-0398
    APPLE-SA-09-14-2026-8 visionOS 27
  • GCVE-1988-2026-0397
    APPLE-SA-09-14-2026-7 watchOS 27
  • GCVE-1988-2026-0396
    APPLE-SA-09-14-2026-6 tvOS 27
  • GCVE-1988-2026-0395
    APPLE-SA-09-14-2026-5 macOS Sequoia 15.8
  • GCVE-1988-2026-0394
    APPLE-SA-09-14-2026-4 macOS Tahoe 26.7
  • GCVE-1988-2026-0393
    APPLE-SA-09-14-2026-3 macOS Golden Gate 27
  • GCVE-1988-2026-0392
    APPLE-SA-09-14-2026-2 iOS 26.7 and iPadOS 26.7
  • GCVE-1988-2026-0391
    APPLE-SA-09-14-2026-1 iOS 27 and iPadOS 27
  • GCVE-1988-2026-0390
    [NotCVE-2026-0015] Input Leap through 3.0.3 input-leapd Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM
  • GCVE-1988-2026-0389
    [NotCVE-2026-0014] Input Leap 3.0.3 Drag-and-Drop File Transfer Path Traversal Allows Arbitrary File Write Outside the Drop Directory
  • GCVE-1988-2026-0388
    [Bugtraq] [SECURITY] [DSA 6491-1] slurm-wlm security update
  • GCVE-1988-2026-0387
    [Bugtraq] [slackware-security] libpcap (SSA:2026-249-01)
  • GCVE-1988-2026-0386
    [Bugtraq] [slackware-security] util-linux (SSA:2026-249-03)
  • GCVE-1988-2026-0385
    [Bugtraq] [slackware-security] mozilla-thunderbird (SSA:2026-247-03)
  • GCVE-1988-2026-0384
    [Bugtraq] [slackware-security] mozilla-firefox (SSA:2026-247-02)
  • GCVE-1988-2026-0383
    [Bugtraq] [SECURITY] [DSA 6493-1] libevent security update
  • GCVE-1988-2026-0382
    Dovecot Security Advisory 3/2026
  • GCVE-1988-2026-0381
    Multiple Vulnerabilities in TBEA TLogger Communication Box 3rd Generation
  • GCVE-1988-2026-0380
    FD - Half-click unauthenticated remote code execution on Horde Groupware IMP (from a stored XSS)
  • GCVE-1988-2026-0379
    [ADVISORY] Multiple Integer Overflows in U-Boot Filesystem Parsing (CVE-2025-70290 through CVE-2025-70293)
  • GCVE-1988-2026-0378
    CyberDanube Security Research 20260611-0 | Multiple Denial of Service Vulnerabilities in Dahua IPC/SD/NVR/XVR/EVS/VTO/VTH/ASI/TPC Camera Series
  • GCVE-1988-2026-0377
    Multiple Integer Overflows in U-Boot Filesystem Parsing (CVE-2025-70290 through CVE-2025-70293)
  • GCVE-1988-2026-0376
    [REVIVE-SA-2026-002] Revive Adserver Vulnerabilities
  • GCVE-1988-2026-0375
    bmcweb (OpenBMC web server): four vulnerabilities — two unfixed, GHSA without a CVE
  • GCVE-1988-2026-0374
    Synology stale DNS allows practical interception of traffic from vulnerable DSM clients
  • GCVE-1988-2026-0373
    [SECURITY ADVISORY] CVE-2021-21735 - ZTE ZXHN H168N V3.5 Unauthenticated Admin Credential Leak
  • GCVE-1988-2026-0372
    [SECURITY ADVISORY] CVE-2026-34474 - ZTE H298A/H108N Unauthenticated Admin Credential Exposure
  • GCVE-1988-2026-0371
    [SECURITY ADVISORY] CVE-2026-34472 - ZTE ZXHN H188A V6 Authentication Bypass via Pre-Login Wizard
  • GCVE-1988-2026-0370
    [SECURITY ADVISORY] CVE-2026-34473 - Unauthenticated DoS in 17+ ZTE Router Models (140K+ Devices)
  • GCVE-1988-2026-0369
    SEC Consult SA-20260617-1 :: Multiple Vulnerabilities in Quanos Content Solutions - SCHEMA ST4
  • GCVE-1988-2026-0368
    SEC Consult SA-20260617-0 :: Multiple Critical Vulnerabilities in Sprecher Automation SPRECON-E-C/-E-P/-E-T3
  • GCVE-1988-2026-0367
    APPLE-SA-05-13-2026-1 Safari 26.5
  • GCVE-1988-2026-0366
    SEC Consult SA-20260610-0 :: Local Privilege Escalation in Slate Digital Connect (macOS)
  • GCVE-1988-2026-0365
    [KIS-2026-12] Control Web Panel <= 0.9.8.1224 (userRes) SQL Injection Vulnerability
  • GCVE-1988-2026-0364
    SEC Consult SA-20260609-0 :: Multiple Local Privilege Escalation Vulnerabilities in Waves Audio - Waves Central
  • GCVE-1988-2026-0363
    [REVIVE-SA-2026-003] Revive Adserver Vulnerabilities
  • GCVE-1988-2026-0362
    OpenBSD sppp_pap_input: PAP authentication bypass
  • GCVE-1988-2026-0361
    APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211
  • GCVE-1988-2026-0360
    SEC Consult SA-20260616-0 :: Broken Access Control in syracom AG Secure Login (2FA) for Atlassian Jira / Confluence / Bitbucket #CVE-2026-12225
  • GCVE-1988-2026-0359
    Asterisk Security Release 23.4.1
  • GCVE-1988-2026-0358
    Asterisk Security Release 22.10.1
  • GCVE-1988-2026-0357
    Asterisk Security Release 21.12.3
  • GCVE-1988-2026-0356
    Certified Asterisk Security Release certified-22.8-cert3
  • GCVE-1988-2026-0355
    SEC Consult SA-20260618-0 :: Hardcoded Root Cloud Credentials in Application Binaries in Silver Leaf Technologies - Worksnaps.net Worksnaps
  • GCVE-1988-2026-0354
    NotCVE registry index — public records of vulnerabilities that shipped without a CVE
  • GCVE-1988-2026-0353
    ASUS bsitf.sys (CVE-2026-13585): Arbitrary Physical Memory Mapping in ASUS Business/Software Manager kernel driver
  • GCVE-1988-2026-0352
    CVE-2026-56877 - Skillable SCORM userId authorisation bypass
  • GCVE-1988-2026-0351
    pwnlift: symlink following and TOCTOU in privileged upload handler allow arbitrary file write as root
  • GCVE-1988-2026-0350
    SEC Consult SA-20260608-0 :: Privilege Escalation via Binary Planting in Genetec-provided RabbitMQ in multiple Genetec products
  • GCVE-1988-2026-0349
    [SYSS-2026-004] SAP NetWeaver SAML XML Signature Wrapping
  • GCVE-1988-2026-0348
    SCHUTZWERK-SA-2025-001: Authentication Bypass for SafeLine SL6 and SL6+
  • GCVE-1988-2026-0347
    APPLE-SA-06-29-2026-3 Safari 26.5.2
  • GCVE-1988-2026-0346
    APPLE-SA-06-29-2026-2 macOS Tahoe 26.5.2
  • GCVE-1988-2026-0345
    APPLE-SA-06-29-2026-1 iOS 26.5.2 and iPadOS 26.5.2
  • GCVE-1988-2026-0344
    [KIS-2026-11] Discuz! <= X5.0 (enable_disable.php) Local File Inclusion Vulnerability
  • GCVE-1988-2026-0343
    [KIS-2026-10] Discuz! <= X5.0 OCR-based CAPTCHA Bypass Vulnerability
  • GCVE-1988-2026-0342
    [KIS-2026-09] Discuz! X5.0 (UC_KEY) Cross-Context Token Reuse Vulnerability
  • GCVE-1988-2026-0341
    SEC Consult SA-20260615-1 :: Multiple Vulnerabilities in Wertheim SafeController Hardware for VAULT ROOMS (Safe Deposit Locker System – Microcontroller)
  • GCVE-1988-2026-0340
    SEC Consult SA-20260615-0 :: Multiple Critical Vulnerabilities in Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)
  • GCVE-1988-2026-0339
    [NotCVE-2026-0001] Cloudflare Universal SSL CAA augmentation weakens RFC 8657 account binding — CVE-2026-14440 assigned 163 days after public no-CVE disclosure
  • GCVE-1988-2026-0338
    APPLE-SA-05-11-2026-11 visionOS 26.5
  • GCVE-1988-2026-0337
    APPLE-SA-05-11-2026-10 watchOS 26.5
  • GCVE-1988-2026-0336
    APPLE-SA-05-11-2026-9 tvOS 26.5
  • GCVE-1988-2026-0335
    APPLE-SA-05-11-2026-8 macOS Sonoma 14.8.7
  • GCVE-1988-2026-0334
    APPLE-SA-05-11-2026-7 macOS Sequoia 15.7.7
  • GCVE-1988-2026-0333
    APPLE-SA-05-11-2026-6 macOS Tahoe 26.5
  • GCVE-1988-2026-0332
    APPLE-SA-05-11-2026-5 iOS 15.8.8 and iPadOS 15.8.8
  • GCVE-1988-2026-0331
    APPLE-SA-05-11-2026-4 iOS 16.7.16 and iPadOS 16.7.16
  • GCVE-1988-2026-0330
    APPLE-SA-05-11-2026-3 iPadOS 17.7.11
  • GCVE-1988-2026-0329
    APPLE-SA-05-11-2026-2 iOS 18.7.9 and iPadOS 18.7.9
  • GCVE-1988-2026-0328
    APPLE-SA-05-11-2026-1 iOS 26.5 and iPadOS 26.5
  • GCVE-1988-2026-0327
    [fulldis] CVE-2026-58451 - Horde Groupware IMP path traversal vuln
  • GCVE-1988-2026-0326
    CyberDanube Security Research 20260528-0 | Multiple Vulnerabilities in Multiple Vulnerabilities in Mennekes Amtron Series
  • GCVE-1988-2026-0325
    Multiple vulnerabilities in Sparx Pro Cloud Server and Enterprise Architect
  • GCVE-1988-2026-0324
    PHP 8.5.7 `levenshtein()` signed-integer overflow
  • GCVE-1988-2026-0323
    PHP 8.5.7 `dom_xml_serialization_algorithm()` stack-overflow
  • GCVE-1988-2026-0322
    PHP 8.5.7 `mb_substr()` 'SJIS-mac' size_t underflow
  • GCVE-1988-2026-0321
    PHP 8.5.7 `FILTER_SANITIZE_ENCODED` uninitialized read
  • GCVE-1988-2026-0320
    OpenBSD mpls_do_error: Remote Kernel Stack Disclosure via MPLS Label Stack Over-read
  • GCVE-1988-2026-0319
    OpenMetadata <= 1.11.3 Authenticated SQL Injection
  • GCVE-1988-2026-0318
    MongoDB v8.3.0 Integer Underflow in LMDB mdb_load
  • GCVE-1988-2026-0317
    RIOT OS 2026.01-devel-317 Stack-Based Buffer Overflow in tapslip6 Utility via Unbounded Device Path Construction
  • GCVE-1988-2026-0316
    RIOT OS 2026.01-devel-317 Stack-Based Buffer Overflow in RIOT ethos Serial Frame Parser
  • GCVE-1988-2025-0005
    MongoDB v8.3.0 Heap Buffer Underflow in OpenLDAP LMDB mdb_load
  • GCVE-1988-2026-0315
    thttpd v2.26 Stack-Based Buffer Overflow in thttpd htpasswd Utility Allows Local Memory Corruption
  • GCVE-1988-2026-0314
    CVE-2026-52307: Stored XSS in 1CMS v5.6
  • GCVE-1988-2026-0313
    [0day-rubbish] Royal Server 5.04.50529.0 Local privilege escalation to LocalSystem on the execution path without credential override (7.2)
  • GCVE-1988-2026-0312
    [0day-rubbish] core-admin 1.0.164 (build 16468) Systemic shell command injection via ineffective quote escaping (8.8)
  • GCVE-1988-2026-0311
    [0day-rubbish] OP5 Monitor 9.20 Command injection surviving the CVE-2025-34115 patch (OPT-IN fix ineffective) (8.8)
  • GCVE-1988-2026-0310
    [0day-rubbish] QuantaStor 6.8.3.018 Command injection in the alert-mail command via the smtpPassword field (8.8)
  • GCVE-1988-2026-0309
    [0day-rubbish] Jitterbit Agent 12.8.1.6 (Docker jitterbit/agent:12.8.1.6) Unauthenticated SOAP with hard-coded credentials leading to OS command execution (9.8)
  • GCVE-1988-2026-0308
    [0day-rubbish] Accurate Online Private Cloud on-prem (current) Unauthenticated Hessian deserialization leading to JNDI remote class loading (9.8)
  • GCVE-1988-2026-0307
    [0day-rubbish] DBxtra .NET 13.1.1.0 Unauthenticated SOAP API to xp_cmdshell code execution (9.8)
  • GCVE-1988-2026-0306
    **Subject:** CVE-2026-2035703: Tozed ZLT X300 5G CPE — Unauthenticated Remote Root Code Execution via TR-069 Command Injection (CVSS 9.8)
  • GCVE-1988-2026-0305
    CVE-2026-15013 – miniOrange SAML SSO <= 5.4.3 Unauthenticated Authentication Bypass (PoC)
  • GCVE-1988-2026-0304
    Cudy WR3000: Hard-coded JWT Secret to Root Command Injection
  • GCVE-1988-2026-0303
    APPLE-SA-08-18-2026-1 Safari 26.6.1
  • GCVE-1988-2026-0302
    CVE-2026-20079 - Cisco Secure Firewall Management Center Authentication Bypass to Root RCE
  • GCVE-1988-2026-0301
    APPLE-SA-08-06-2026-3 macOS Sonoma 14.8.9
  • GCVE-1988-2026-0300
    APPLE-SA-08-06-2026-2 macOS Sequoia 15.7.9
  • GCVE-1988-2026-0299
    [0day-rubbish] LogicalDOC Enterprise Edition 9.3 (the incomplete CVE-2024-54448 fix suggests earlier 9.x versions are likely affected) Authenticated RCE (automation sandbox bypass + default credentials) (8.8)
  • GCVE-1988-2026-0298
    NVIDIA Linux GPU driver: cross-UID GPU process telemetry via NVML, no CVE (vendor: expected behavior)
  • GCVE-1988-2026-0297
    [KIS-2026-16] Telenia Software TVox <= 26.5.3 (nice) Local Privilege Escalation Vulnerability
  • GCVE-1988-2026-0296
    [KIS-2026-15] Telenia Software TVox <= 26.5.3 (action_audio.php) OS Command Injection Vulnerability
  • GCVE-1988-2026-0295
    [KIS-2026-14] Telenia Software TVox <= 26.5.3 (set_env.php) Authentication Bypass Vulnerability
  • GCVE-1988-2026-0294
    APPLE-SA-07-27-2026-8 Safari 26.6
  • GCVE-1988-2026-0293
    APPLE-SA-07-27-2026-7 visionOS 26.6
  • GCVE-1988-2026-0292
    APPLE-SA-07-27-2026-6 watchOS 26.6
  • GCVE-1988-2026-0291
    APPLE-SA-07-27-2026-5 tvOS 26.6
  • GCVE-1988-2026-0290
    APPLE-SA-07-27-2026-4 macOS Sonoma 14.8.8
  • GCVE-1988-2026-0289
    APPLE-SA-07-27-2026-3 macOS Sequoia 15.7.8
  • GCVE-1988-2026-0288
    APPLE-SA-07-27-2026-2 macOS Tahoe 26.6
  • GCVE-1988-2026-0287
    [KIS-2026-13] vBulletin <= 6.2.1 (runMaths) Remote Code Execution Vulnerability
  • GCVE-1988-2026-0286
    APPLE-SA-08-17-2026-3 macOS Tahoe 26.6.2
  • GCVE-1988-2026-0285
    APPLE-SA-08-17-2026-2 iOS 18.7.10 and iPadOS 18.7.10
  • GCVE-1988-2026-0284
    APPLE-SA-08-17-2026-2 iOS 18.7.10 and iPadOS 18.7.10
  • GCVE-1988-2026-0283
    APPLE-SA-08-17-2026-1 iOS 26.6.1 and iPadOS 26.6.1
  • GCVE-1988-2026-0282
    Skullcandy Dime 3 unauthorized Bluetooth pairing behavior
  • GCVE-1988-2026-0281
    APPLE-SA-07-27-2026-1 iOS 26.6 and iPadOS 26.6
  • GCVE-1988-2026-0280
    Cisco Catalyst SD-WAN C8000V Authenticated Heap Buffer Overflow
  • GCVE-1988-2026-0279
    OpenClaw MEDIA: Protocol Prompt Injection - File Disclosure Bypassing Tool Permissions (Silently Fixed, Report Denied)
  • GCVE-1988-2026-0278
    APPLE-SA-04-22-2026-2 iOS 18.7.8 and iPadOS 18.7.8
  • GCVE-1988-2026-0277
    APPLE-SA-04-22-2026-1 iOS 26.4.2 and iPadOS 26.4.2
  • GCVE-1988-2026-0276
    SEC Consult SA-20260318-0 :: Multiple Privilege Escalation Vulnerabilities in Arturia Software Center MacOS
  • GCVE-1988-2026-0275
    SEC Consult SA-20260415-0 :: Exposed Private Key of X.509 Certificate in SAP HANA Cockpit & SAP HANA Database Explorer
  • GCVE-1988-2026-0274
    [KIS-2026-06] MetInfo CMS <= 8.1 (weixinreply.class.php) PHP Code Injection Vulnerability
  • GCVE-1988-2026-0273
    SEC Consult SA-20260401-0 :: Broken Access Control in Open WebUI
  • GCVE-1988-2026-0272
    ESP-RFID-Tool v2 PRO — Full Public Disclosure
  • GCVE-1988-2026-0271
    Re: SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App
  • GCVE-1988-2026-0270
    APPLE-SA-03-24-2026-10 Xcode 26.4
  • GCVE-1988-2026-0269
    APPLE-SA-03-24-2026-9 Safari 26.4
  • GCVE-1988-2026-0268
    APPLE-SA-03-24-2026-8 visionOS 26.4
  • GCVE-1988-2026-0267
    APPLE-SA-03-24-2026-7 watchOS 26.4
  • GCVE-1988-2026-0266
    APPLE-SA-03-24-2026-6 tvOS 26.4
  • GCVE-1988-2026-0265
    APPLE-SA-03-24-2026-5 macOS Sonoma 14.8.5
  • GCVE-1988-2026-0264
    APPLE-SA-03-24-2026-4 macOS Sequoia 15.7.5
  • GCVE-1988-2026-0263
    APPLE-SA-03-24-2026-3 macOS Tahoe 26.4
  • GCVE-1988-2026-0262
    APPLE-SA-03-24-2026-2 iOS 18.7.7 and iPadOS 18.7.7
  • GCVE-1988-2026-0261
    APPLE-SA-03-24-2026-1 iOS 26.4 and iPadOS 26.4
  • GCVE-1988-2026-0260
    SEC Consult SA-20260421-0 :: Broken Access Control in Config Endpoint in LiteLLM
  • GCVE-1988-2026-0259
    snap-confine + systemd-tmpfiles = root (CVE-2026-3888)
  • GCVE-1988-2026-0258
    APPLE-SA-03-17-2026-1 Background Security Improvements for iOS 26.3.1, iPadOS 26.3.1, macOS 26.3.1, and macOS 26.3.2
  • GCVE-1988-2026-0257
    SEC Consult SA-20260317-0 :: Multiple vulnerabilities in PEGA Infinity platform
  • GCVE-1988-2026-0256
    CyberDanube Security Research 20260408-1 | Multiple Vulnerabilities in Siemens SICAM A8000
  • GCVE-1988-2026-0255
    CyberDanube Security Research 20260408-0 | Remote Operation Denial of Service in Siemens SICAM A8000
  • GCVE-1988-2026-0254
    SEC Consult SA-20260414-0 :: Improper Enforcement of Locked Accounts in WebUI (SSO) in Kiuwan SAST on-premise (KOP) & cloud/SaaS
  • GCVE-1988-2026-0253
    Dovecot Security Advisory OXDC-2026-0002
  • GCVE-1988-2026-0252
    Full disclosure: Impersonation attacks on Edupage portal
  • GCVE-1988-2026-0251
    Full disclosure: Edupage web and mobile application authorization bypass leaks PII and IBAN codes
  • GCVE-1988-2026-0250
    SCHUTZWERK-SA-2024-005: Arbitrary File Read and Server Side Request Forgery via XML External Entities in Lobster_pro (CVE-2024-13971)
  • GCVE-1988-2026-0249
    SCHUTZWERK-SA-2024-002: Arbitrary File Read and Server Side Request Forgery via XML External Entities in 4D Server SOAP (CVE-2024-39847)
  • GCVE-1988-2026-0248
    SEC Consult SA-20260326-0 :: Local Privilege Escalation in Vienna Assistant (MacOS) - Vienna Symphonic Library
  • GCVE-1988-2026-0247
    [SBA-ADV-20251120-01] CVE-2026-0972: GoAnywhere MFT Email HTML Injection
  • GCVE-1988-2026-0246
    SEC Consult SA-20260423-0 :: DLL Hijacking in EfficientLab Controlio (cloud-based employee monitoring service)
  • GCVE-1988-2026-0245
    [KIS-2026-08] SocialEngine <= 7.8.0 (get-memberall) SQL Injection Vulnerability
  • GCVE-1988-2026-0244
    [KIS-2026-07] SocialEngine <= 7.8.0 Blind Server-Side Request Forgery Vulnerability
  • GCVE-1988-2026-0243
    Alipay DeepLink+JSBridge Attack Chain: Silent GPS Exfiltration, 17 Vulns, 6 CVEs (CVSS 9.3)
  • GCVE-1988-2026-0242
    UPDATE: Ant Group Censors 4 Security Research Articles After Initial Complaint Rejection
  • GCVE-1988-2026-0241
    Cohesity TranZman Migration Appliance - 5 CVEs (command injection, LPE, unsigned patches, weak crypto)
  • GCVE-1988-2026-0240
    JSON Deserialiser Unconstrained Resource Consumption Quick Overview
  • GCVE-1988-2026-0239
    [CVE-2026-33691] OWASP CRS whitespace padding bypass vulnerability
  • GCVE-1988-2026-0238
    [IWCC 2026] CfP: 15th International Workshop on Cyber Crime - Linköping, Sweden, Aug 24-27, 2026
  • GCVE-1988-2026-0237
    SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App
  • GCVE-1988-2026-0236
    Trojan-Spy.Win32.Small / Remote Command Execution
  • GCVE-1988-2026-0235
    Dovecot Security Advisory OXDC-2026-0001
  • GCVE-1988-2026-0234
    CVE-2026-33150, CVE-2026-33179: libfuse io_uring memory safety vulnerabilities (use-after-free, NULL deref)
  • GCVE-1988-2026-0233
    [KIS-2026-03] Blesta <= 5.13.1 (2Checkout) Multiple PHP Object Injection Vulnerabilities
  • GCVE-1988-2026-0232
    [KIS-2026-02] Blesta <= 5.13.1 (Admin Interface) Multiple PHP Object Injection Vulnerabilities
  • GCVE-1988-2026-0231
    [KIS-2026-01] Blesta <= 5.13.1 (confirm_url) Reflected Cross-Site Scripting Vulnerability
  • GCVE-1988-2026-0230
    CVE-2025-12758: Unicode Variation Selectors Bypass in 'validator' library (isLength)
  • GCVE-1988-2026-0229
    Re: Multiple Security Misconfigurations and Customer Enumeration Exposure in Convercent Whistleblowing Platform (EQS Group)
  • GCVE-1988-2026-0228
    SEC Consult SA-20260218-0 :: Multiple Critical Vulnerabilities in NesterSoft WorkTime (on-prem/cloud)
  • GCVE-1988-2026-0227
    [REVIVE-SA-2026-001] Revive Adserver Vulnerabilities
  • GCVE-1988-2026-0226
    APPLE-SA-03-11-2026-2 iOS 15.8.7 and iPadOS 15.8.7
  • GCVE-1988-2026-0225
    APPLE-SA-03-11-2026-1 iOS 16.7.15 and iPadOS 16.7.15
  • GCVE-1988-2026-0224
    APPLE-SA-02-11-2026-9 Safari 26.3
  • GCVE-1988-2026-0223
    APPLE-SA-02-11-2026-8 visionOS 26.3
  • GCVE-1988-2026-0222
    APPLE-SA-02-11-2026-7 watchOS 26.3
  • GCVE-1988-2026-0221
    APPLE-SA-02-11-2026-6 tvOS 26.3
  • GCVE-1988-2026-0220
    APPLE-SA-02-11-2026-5 macOS Sonoma 14.8.4
  • GCVE-1988-2026-0219
    APPLE-SA-02-11-2026-4 macOS Sequoia 15.7.4
  • GCVE-1988-2026-0218
    APPLE-SA-02-11-2026-3 macOS Tahoe 26.3
  • GCVE-1988-2026-0217
    APPLE-SA-02-11-2026-2 iOS 18.7.5 and iPadOS 18.7.5
  • GCVE-1988-2026-0216
    APPLE-SA-02-11-2026-1 iOS 26.3 and iPadOS 26.3
  • GCVE-1988-2026-0215
    CyberDanube Security Research 20260119-0 | Authenticated Command Injection in Phoenix Contact TC Router Series
  • GCVE-1988-2026-0214
    SEC Consult SA-20260224-0 :: Multiple vulnerabilities in CPSD CryptoPro Secure Disk for BitLocker (CVE-2025-10010)
  • GCVE-1988-2026-0213
    Re: Multiple Security Misconfigurations and Customer Enumeration Exposure in Convercent Whistleblowing Platform (EQS Group)
  • GCVE-1988-2026-0212
    Firedancer Solana Validator - QUIC Transport Parameter UB and Consensus-Splitting Cast Bug
  • GCVE-1988-2026-0211
    KL-001-2026-01: yintibao Fun Print Mobile Unauthorized Access via Context Hijacking
  • GCVE-1988-2026-0210
    Defense in depth -- the Microsoft way (part 95): the (shared) "Start Menu" is dispensable
  • GCVE-1988-2026-0209
    Asterisk Security Release 23.2.2
  • GCVE-1988-2026-0208
    Asterisk Security Release 21.12.1
  • GCVE-1988-2026-0207
    Asterisk Security Release 22.8.2
  • GCVE-1988-2026-0206
    Asterisk Security Release 20.18.2
  • GCVE-1988-2026-0205
    Certified Asterisk Security Release certified-20.7-cert9
  • GCVE-1988-2026-0204
    [SYSS-2025-014] Linksys MX4200 - Improper Verification of Source of a Communication Channel
  • GCVE-1988-2026-0203
    [SYSS-2025-011] Linksys MX9600/MX4200 - OS Command Injection
  • GCVE-1988-2026-0202
    [SYSS-2025-010] Linksys MX9600/MX4200 - OS Command Injection
  • GCVE-1988-2026-0201
    [SYSS-2025-009] Linksys MX9600/MX4200 - SQL Injection
  • GCVE-1988-2026-0200
    [SYSS-2025-002] Linksys MX9600/MX4200 - Missing Authentication for Critical Function
  • GCVE-1988-2026-0199
    [SYSS-2025-001] Linksys MX9600/MX4200 - Path Traversal
  • GCVE-1988-2026-0198
    SEC Consult SA-20260212-0 :: Multiple Vulnerabilities in various Solax Power Pocket WiFi models
  • GCVE-1988-2026-0197
    Re: Multiple Security Misconfigurations and Customer Enumeration Exposure in Convercent Whistleblowing Platform (EQS Group)
  • GCVE-1988-2026-0196
    🚨 Public Disclosure: Remote BitLocker Bypass via Intel AMT — SYSTEM Access Without Login
  • GCVE-1988-2026-0195
    Multiple Security Misconfigurations and Customer Enumeration Exposure in Convercent Whistleblowing Platform (EQS Group)
  • GCVE-1988-2026-0194
    Username Enumeration - elggv6.3.3
  • GCVE-1988-2026-0193
    Weak Password Complexity - elggv6.3.3
  • GCVE-1988-2026-0192
    SEC Consult SA-20260126-2 :: UART Leaking Sensitive Data in dormakaba registration unit 9002 (PIN pad)
  • GCVE-1988-2026-0191
    SEC Consult SA-20260126-1 :: Multiple Critical Vulnerabilities in dormakaba Access Manager
  • GCVE-1988-2026-0190
    SEC Consult SA-20260126-0 :: Multiple Critical Vulnerabilities in dormakaba Kaba exos 9300
  • GCVE-1988-2026-0189
    SEC Consult SA-20260202-0 :: Multiple vulnerabilities in Native Instruments Native Access (MacOS)
  • GCVE-1988-2026-0188
    [KIS-2026-04] SmarterMail <= 9518 (MailboxId) Reflected Cross-Site Scripting Vulnerability
  • GCVE-1988-2026-0187
    [Full Disclosure] CVE-2025-69690 & CVE-2025-69691 — Authenticated RCE in Netgate pfSense CE 2.7.2 and 2.8.0
  • GCVE-1988-2026-0186
    Blind XXE in Electronic Invoice online tools (validator.invoice-portal.de, xrechnung.rib.de)
  • GCVE-1988-2026-0185
    Re: Multiple Security Misconfigurations and Customer Enumeration Exposure in Convercent Whistleblowing Platform (EQS Group)
  • GCVE-1988-2025-0004
    Bioformats v8.3.0 Untrusted Deserialization of Bio-Formats Memoizer Cache Files
  • GCVE-1988-2025-0003
    Bioformats v8.3.0 Improper Restriction of XML External Entity Reference in Bio-Formats Leica Microsystems XML Parser
  • GCVE-1988-2025-0002
    Security Vulnerability in Koller Secret: Real Hidden App (com.koller.secret.hidemyphoto)
  • GCVE-1988-2025-0001
    Linux Kernel Block Subsystem Vulnerabilities
  • GCVE-1988-2026-0184
    HP Easy Start for macOS: CVE-2026-12554 / CVE-2026-12555 / CVE-2026-12556
  • GCVE-1988-2026-0183
    Flextype v1.0.0-alpha.3 Stored Filesystem Shortcode Allows Arbitrary File Read
  • GCVE-1988-2026-0182
    Flextype v1.0.0-alpha.3 Stored Expression Injection Enables PHP Remote Code Execution
  • GCVE-1988-2026-0181
    Flextype v1.0.0-alpha.3 NULL access_token Authentication Bypass
  • GCVE-1988-2026-0180
    Flextype v1.0.0-alpha.3 Path Traversal in Entry Copy Allows Arbitrary Directory Copy and File Disclosure
  • GCVE-1988-2026-0179
    Flextype v1.0.0-alpha.3 Server-Side Request Forgery via fetch() in Query API
  • GCVE-1988-2026-0178
    Flextype v1.0.0-alpha.3 Stored Arbitrary Expression Injection in ExpressionsDirective Allows Arbitrary File Read
  • GCVE-1988-2026-0177
    lighttpd2 Signedness Error in li_chunkqueue_append_mem() Leads to Out-of-Bounds Memory Access
  • GCVE-1988-2026-0176
    Paho v1.3.15 Heap Use-After-Free in Eclipse Paho MQTT C Client via Message Retry Logi
  • GCVE-1988-2026-0175
    Paho v1.3.15 Arbitrary Code Execution via Untrusted Dynamic Library Execution
  • GCVE-1988-2026-0174
    Paho v1.3.15 Arbitrary Code Execution via Shared Library Search Path Hijacking
  • GCVE-1988-2026-0173
    [0day-rubbish] Puppet Enterprise 2025.10.0 Authenticated command injection to root RCE (patch-bypass variant of CVE-2025-5459) (8.8)
  • GCVE-1988-2026-0172
    Acunetix 25.11.x - Local Privilege Escalation Vulnerability via OpenSSL Configuration (CVE-2026-6958)
  • GCVE-1988-2026-0171
    Flextype v1.0.0-alpha.3 CMS registerShortcodes() Remote Code Execution via Attacker-Controlled File Inclusion
  • GCVE-1988-2026-0170
    The DCHECK Illusion: Chrome's "Trusted Path" Policy Creates Vulnerabilities
  • GCVE-1988-2026-0169
    [0day-rubbish] StreamSets DataCollector 6.4.1 (official Docker image) Default credentials plus unsandboxed Shell Executor to root RCE (9.8)
  • GCVE-1988-2026-0168
    [0day-rubbish] Puppet Enterprise 2025.10.0 Authenticated command injection to root RCE (patch-bypass variant of CVE-2025-5459) (8.8)
  • GCVE-1988-2026-0167
    [0day-rubbish] NoMachine Terminal Server 10.0.57 two vulnerabilities
  • GCVE-1988-2026-0166
    [0day-rubbish] Minuteman UPS Network Management Card 1.60.3 Unauthenticated OS command injection to root RCE (9.8)
  • GCVE-1988-2026-0165
    [0day-rubbish] Lantronix EDS3000PR 3.2.0.0R2 two vulnerabilities
  • GCVE-1988-2026-0164
    [0day-rubbish] GeoVision GV-TBL4700 V1.06 Authenticated command injection to root RCE via SNMPv3 user configuration (8.8)
  • GCVE-1988-2026-0163
    [0day-rubbish] DrayTek Vigor 2960 v1.5.1.6 Authenticated command injection to root RCE in uploadlangs (8.8)
  • GCVE-1988-2026-0162
    [0day-rubbish] Codoforum 5.4.1 Authenticated arbitrary file upload to PHP RCE (7.2)
  • GCVE-1988-2026-0161
    [0day-rubbish] Akana API Platform 8.4.29 Unauthenticated RCE via path-normalization filter/dispatcher discrepancy (9.8)
  • GCVE-1988-2026-0160
    Acunetix 25.11.x - Local Privilege Escalation Vulnerability via OpenSSL Configuration (CVE-2026-6958)
  • GCVE-1988-2026-0159
    batch-2: 15 vulnerabilities incl. multiple pre-auth RCE across 10 enterprise/SCADA products - full analyses + reproducible exploits
  • GCVE-1988-2026-0158
    CVE-2026-15013 – miniOrange SAML SSO <= 5.4.3 Unauthenticated Authentication Bypass (PoC)
  • GCVE-1988-2026-0157
    Synology stale DNS allows practical interception of traffic from vulnerable DSM clients
  • GCVE-1988-2026-0156
    Cudy WR3000: Hard-coded JWT Secret to Root Command Injection
  • GCVE-1988-2026-0155
    [NotCVE-2026-0011] Nmap 7.99 and Earlier nselib/packet.lua Zero-Length TCP Option Infinite Loop Allows Remote Denial of Service
  • GCVE-1988-2026-0154
    [NotCVE-2026-0010] Barrier 2.4.0 for Windows Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM
  • GCVE-1988-2026-0153
    [NotCVE-2026-0009] NitroShare Desktop 0.3.4 Path Traversal Allows LAN-Adjacent Arbitrary File Write
  • GCVE-1988-2026-0152
    [0day-rubbish] VMS 6.48.809 Authenticated command injection to root RCE (8.8)
  • GCVE-1988-2026-0151
    [0day-rubbish] ONE Reporter 13.1 Authenticated RCE / privilege escalation via CommandExecutor (8.8)
  • GCVE-1988-2026-0150
    [0day-rubbish] Gemini 7.3.0 Authenticated SQL injection to xp_cmdshell RCE (8.8)
  • GCVE-1988-2026-0149
    [0day-rubbish] RoboTask 11.0.5.1229 Unauthenticated REST API remote task execution (9.8)
  • GCVE-1988-2026-0148
    [0day-rubbish] ActiveFax Server 10.70 Unauthenticated LPD Ghostscript %pipe% SYSTEM RCE (9.8)
  • GCVE-1988-2026-0147
    [0day-rubbish] Tornado 2.11.3 Unauthenticated arbitrary file write to root RCE (storeTo=file: to cron) (9.8)
  • GCVE-1988-2026-0146
    [0day-rubbish] Datalore On-Premises 2026.2.3 Unauthenticated RCE via InteractiveReport access-mapping flaw (9.8)
  • GCVE-1988-2026-0145
    [KIS-2026-12] Control Web Panel <= 0.9.8.1224 (userRes) SQL Injection Vulnerability
  • GCVE-1988-2026-0144
    [REVIVE-SA-2026-003] Revive Adserver Vulnerabilities
  • GCVE-1988-2026-0143
    Skullcandy Dime 3 unauthorized Bluetooth pairing behavior
  • GCVE-1988-2026-0142
    [0day-rubbish] VitalPBX 4.5.2 (Asterisk 20.20.1) Authenticated root RCE via asterisk_cli to dialplan System() (8.8)
  • GCVE-1988-2026-0141
    [0day-rubbish] Seeq Server R65.2.3 (default deployment with Data Lab installed via the official CLI) Unauthenticated RCE (open self-registration + Data Lab Jupyter missing authorization) (9.8)
  • GCVE-1988-2026-0140
    [0day-rubbish] Raritan EMX firmware emx_ecx_3.6.1_46982 (EMX/ECX gateway) Authenticated config injection to root RCE (8.8)
  • GCVE-1988-2026-0139
    [0day-rubbish] mySCADA PRO Runtime 9.4.0 (container deployment msxrun; earlier versions with the same upgrade branch are likely affected) Unauthenticated OS command injection to root RCE (9.4)
  • GCVE-1988-2026-0138
    [0day-rubbish] Maian Gallery v2.1 Authenticated unrestricted file upload to PHP RCE (7.2)
  • GCVE-1988-2026-0137
    [0day-rubbish] Leostream Connection Broker 9.1.37.0 two vulnerabilities (SQLi to root RCE, unauth SSRF)
  • GCVE-1988-2026-0136
    [0day-rubbish] Delta DIAEnergie IEMS V1.11 Authenticated (conditional) SQL injection to VBScript RCE (8.8)
  • GCVE-1988-2026-0135
    [0day-rubbish] CacheGuard OS UF-2.5.2 Authenticated RCE via config-import eval injection (8.8)
  • GCVE-1988-2026-0134
    [0day-rubbish] Biamp Devio SCR-20/25 firmware 2.3.1 Unauthenticated remote root RCE (DTP protocol quote injection) (9.8)
  • GCVE-1988-2026-0133
    FD - Half-click unauthenticated remote code execution on Horde Groupware IMP (from a stored XSS)
  • GCVE-1988-2026-0132
    A project is publishing full analyses of AI-discovered 0-days - first batch of 10 with reproducible exploits
  • GCVE-1988-2026-0131
    APPLE-SA-08-18-2026-1 Safari 26.6.1
  • GCVE-1988-2026-0130
    Security advisory: Pre-authentication RCE (SQL injection) in XPressEntry 3.7.7454 (Telaeris Inc)
  • GCVE-1988-2026-0129
    Security advisory: Authenticated RCE (SQL injection) in Scrutinizer 19.7.0 (Plixer)
  • GCVE-1988-2026-0128
    Security advisory: Pre-authentication SYSTEM RCE (Zip-Slip plugin planting) in Output Messenger Server 2.0.x (>= 2.0.63) (Srimax Software (Output Technology))
  • GCVE-1988-2026-0127
    Security advisory: Pre-authentication RCE (arbitrary file write) in RapidDeploy 5.2.2 (MidVision)
  • GCVE-1988-2026-0126
    Security advisory: Authenticated RCE (second-order SQL injection) in Lansweeper 12.2.1.0 (web reports 12.2.1.6) (Lansweeper)
  • GCVE-1988-2026-0125
    Security advisory: Authenticated RCE (command injection) in Kerio Connect 10.0.9 Patch 2 (build 10320) (GFI Software)
  • GCVE-1988-2026-0124
    Security advisory: Pre-authentication RCE (default credentials + path traversal) in PulseNET Enterprise 6.0.3 (build 6975) (GE Vernova)
  • GCVE-1988-2026-0123
    Security advisory: Pre-authentication RCE (BinaryFormatter deserialization) in Cinegy Cinegize 2026-02-05 installer (Cinegy GmbH)
  • GCVE-1988-2026-0122
    Security advisory: Pre-authentication RCE in Wyn Enterprise 9.1.00145.0 (Mescius (GrapeCity))
  • GCVE-1988-2026-0121
    Security advisory: Pre-authentication RCE (default credentials) in ObjectDB 2.9.5 server mode (ObjectDB Software)
  • GCVE-1988-2026-0120
    Security advisory: Pre-authentication RCE in nanoDLP stable build #10729 (Nano3Dtech)
  • GCVE-1988-2026-0119
    Security advisory: Pre-authentication SYSTEM RCE in MAPS SCADA 4.0.5.5 (Adroit Technologies)
  • GCVE-1988-2026-0118
    Security advisory: Pre-authentication RCE in Confluent Platform (ksqlDB) 7.9.1-ce (Confluent, Inc.)
  • GCVE-1988-2026-0117
    Security advisory: Pre-authentication SYSTEM RCE in iMonnit Express 4.0.5.5 (Monnit / iMonnit)
  • GCVE-1988-2026-0116
    Security advisory: Pre-authentication RCE in Ontotext GraphDB 11.4.3 Free edition (Ontotext / Graphwise)
  • GCVE-1988-2026-0115
    Security advisory: Pre-authentication RCE in DataStax Enterprise (DSE) 6.8.49 (DataStax)
  • GCVE-1988-2026-0114
    New Release: UFONet v2.0 - "R3DST4R!"...
  • GCVE-1988-2026-0113
    XSSer v.1.9 - "Bl4ck Swarm!" released
  • GCVE-1988-2026-0112
    CyberDanube Security Research 20260611-0 | Multiple Denial of Service Vulnerabilities in Dahua IPC/SD/NVR/XVR/EVS/VTO/VTH/ASI/TPC Camera Series
  • GCVE-1988-2026-0111
    Asterisk Security Release 23.4.1
  • GCVE-1988-2026-0110
    Asterisk Security Release 22.10.1
  • GCVE-1988-2026-0109
    Asterisk Security Release 21.12.3
  • GCVE-1988-2026-0108
    Asterisk Security Release 20.20.1
  • GCVE-1988-2026-0107
    Certified Asterisk Security Release certified-22.8-cert3
  • GCVE-1988-2026-0106
    Certified Asterisk Security Release certified-20.7-cert11
  • GCVE-1988-2026-0105
    CVE-2026-20079 - Cisco Secure Firewall Management Center Authentication Bypass to Root RCE
  • GCVE-1988-2026-0104
    NotCVE registry index — public records of vulnerabilities that shipped without a CVE
  • GCVE-1988-2026-0103
    Subject: Advisory Submission: EZ Game Booster - Cleartext Storage of Sensitive Credentials (CWE-312)
  • GCVE-1988-2026-0102
    ASUS bsitf.sys (CVE-2026-13585): Arbitrary Physical Memory Mapping in ASUS Business/Software Manager kernel driver
  • GCVE-1988-2026-0101
    APPLE-SA-08-06-2026-3 macOS Sonoma 14.8.9
  • GCVE-1988-2026-0100
    APPLE-SA-08-06-2026-2 macOS Sequoia 15.7.9
  • GCVE-1988-2026-0099
    OpenBlow Multiple Deanonymization Vulnerabilities
  • GCVE-1988-2026-0098
    OpenZFS Linux open zpool manipulation and escapes via unprivileged userns
  • GCVE-1988-2026-0097
    CVE-2026-56877 - Skillable SCORM userId authorisation bypass
  • GCVE-1988-2026-0096
    JSON Deserialiser Unconstrained Resource Consumption Proof of Concept
  • GCVE-1988-2026-0095
    pwnlift: symlink following and TOCTOU in privileged upload handler allow arbitrary file write as root
  • GCVE-1988-2026-0094
    [0day-rubbish] SpiraTeam 9.3.0.0 (other versions with the same RetrieveByIndentLevel implementation are likely affected) Authenticated SQL injection to RCE (sysadmin + xp_cmdshell) (8.8)
  • GCVE-1988-2026-0093
    [0day-rubbish] webMethods Microservices Runtime (MSR) 10.x (other versions with the same XSLT module are likely affected) Pre-authentication RCE (default factory credentials + XSLT extension functions) (9.8)
  • GCVE-1988-2026-0092
    [0day-rubbish] Scan2x ScanWebClient 2.3.3.0 (other versions with the same handler are likely affected) Pre-authentication RCE (unrestricted upload to executable webroot) (9.8)
  • GCVE-1988-2026-0091
    [0day-rubbish] VLink Virtual Matrix 6.60 (other versions with the same unquoted openssl command construction are likely affected) Authenticated RCE (OpenSSL argument injection to SYSTEM) (8.8)
  • GCVE-1988-2026-0090
    [0day-rubbish] NCache Enterprise 5.3.6 (other versions with the same default-disabled security and handler logic are likely affected) Pre-authentication RCE (missing auth + attacker assembly load) (9.8)
  • GCVE-1988-2026-0089
    [0day-rubbish] myDBR 7.5.4 (build 5454) (other versions with the same file-editor are likely affected) Authenticated RCE (admin file editor + default credentials) (8.8)
  • GCVE-1988-2026-0088
    [0day-rubbish] Microsip 2026 (ASD data-service agent) 2026 Eval (other builds with the same backup-runner path handling are likely affected) Pre-authentication RCE (attacker-controlled binary path, LocalSystem) (9.8)
  • GCVE-1988-2026-0087
    [0day-rubbish] LogicalDOC Enterprise Edition 9.3 (the incomplete CVE-2024-54448 fix suggests earlier 9.x versions are likely affected) Authenticated RCE (automation sandbox bypass + default credentials) (8.8)
  • GCVE-1988-2026-0086
    [0day-rubbish] CFEngine Enterprise Nova Hub 3.27.1 (other versions with the same generateScriptFromTemplates quoting are likely affected) Authenticated RCE (command injection via VCS settings, root) (8.8)
  • GCVE-1988-2026-0085
    [0day-rubbish] Brekeke PBX 3.19.1.8 (other versions with the same Bean dispatch model are likely affected) Pre-authentication RCE (fail-open auth gate + reflection to exec) (9.8)
  • GCVE-1988-2026-0084
    [NotCVE-2026-0013] CHIRP Kenwood ITM Driver Eval Injection Allows Arbitrary Code Execution via Crafted Radio File
  • GCVE-1988-2026-0083
    NVIDIA Linux GPU driver: unprivileged Xid 31 MMU fault via undocumented peer-teardown ordering, no CVE (vendor: intended)
  • GCVE-1988-2026-0082
    NVIDIA Linux GPU driver: cross-UID GPU process telemetry via NVML, no CVE (vendor: expected behavior)
  • GCVE-1988-2026-0081
    Escargot v4.3.0-214-gfaee4437 Unauthenticated Remote Debugger Allows Arbitrary JavaScript Evaluation and Local File Disclosure
  • GCVE-1988-2026-0080
    Escargot v4.3.0-214-gfaee4437 OS Command Injection in Crash Handler via Unsanitized Executable Path
  • GCVE-1988-2026-0079
    Escargot v4.3.0-214-gfaee4437 Debugger WebSocket Off-by-One Stack Buffer Overflow
  • GCVE-1988-2026-0078
    UltraJSON v5.13.0-6-g733f9e1 Length-Boundary Violation Causes Out-of-Bounds Read During Incomplete JSON Parsing
  • GCVE-1988-2026-0077
    Realtek edimax 52fc10d19 In-Band Ioctl Response Length Confusion Causes Heap Buffer Overflow
  • GCVE-1988-2026-0076
    WatsonWebserver v7.1.0 HTTP/1 Chunked Request Processing Bypasses MaxRequestBodySize
  • GCVE-1988-2026-0075
    Chronicle Wire v2026.8 Arbitrary Class Instantiation During YAML Deserialization via Externally Controlled YAML Type Tags
  • GCVE-1988-2026-0074
    Chronicle Wire v2026.8 Insecure Reflection Allows Unvalidated Method Invocation
  • GCVE-1988-2026-0073
    Chronicle Wire v2026.8 FileMarshallableOut Append Operations Follow Symbolic Links and Allow File Write Redirection
  • GCVE-1988-2026-0072
    [0day-rubbish] Workflow Enterprise 9.1.0.1 Pre-authentication RCE (expression injection) (9.8)
  • GCVE-1988-2026-0071
    [0day-rubbish] Call Center Suite 10.10.1 Pre-authentication RCE (auth bypass + webroot write) (9.8)
  • GCVE-1988-2026-0070
    [0day-rubbish] Vocia MS-1 Firmware 1.2.27 Pre-authentication RCE (hardcoded credentials + supervisor execution) (9.8)
  • GCVE-1988-2026-0069
    [0day-rubbish] Enterprise ADC 8.13.8 Authenticated RCE (command injection + passwordless sudo) (8.8)
  • GCVE-1988-2026-0068
    [0day-rubbish] KeyHelp 26.0 (Build 3624) Authenticated RCE (command injection via Apache directive) (7.2)
  • GCVE-1988-2026-0067
    [0day-rubbish] IceWarp Server 14.3.0 Authenticated config write + unauthenticated trigger (UNC DLL loading) (9.0)
  • GCVE-1988-2026-0066
    [0day-rubbish] InsightEdge Enterprise (XAP IMDg) 16.1.1 Pre-authentication RCE (path traversal + JSP webshell) (9.8)
  • GCVE-1988-2026-0065
    [0day-rubbish] HiveMQ Platform 4.54.0 Pre-authentication RCE (default credentials + Zip-Slip) (9.8)
  • GCVE-1988-2026-0064
    SCHUTZWERK-SA-2025-001: Authentication Bypass for SafeLine SL6 and SL6+
  • GCVE-1988-2026-0063
    [KIS-2026-16] Telenia Software TVox <= 26.5.3 (nice) Local Privilege Escalation Vulnerability
  • GCVE-1988-2026-0062
    [KIS-2026-15] Telenia Software TVox <= 26.5.3 (action_audio.php) OS Command Injection Vulnerability
  • GCVE-1988-2026-0061
    [KIS-2026-14] Telenia Software TVox <= 26.5.3 (set_env.php) Authentication Bypass Vulnerability
  • GCVE-1988-2026-0060
    Security advisory: multiple vulnerabilities including Pre-authentication root RCE in Xeams 10.3 build 6449 (Synametrics Technologies)
  • GCVE-1988-2026-0059
    Security advisory: Pre-authentication RCE in vMix 29 v29.0.0.48 (Studio Coast Pty Ltd)
  • GCVE-1988-2026-0058
    Security advisory: Pre-authentication SYSTEM RCE in Vicon Valerus ViconNet Gateway 25.200.46.0 (Vicon Industries)
  • GCVE-1988-2026-0057
    Security advisory: Pre-authentication RCE in Plastic SCM (Unity Version Control On-Prem) 11.0.16.10303 (Unity Technologies)
  • GCVE-1988-2026-0056
    Security advisory: Pre-authentication SYSTEM RCE in Stimulsoft Server 2026.3.1 (Stimulsoft)
  • GCVE-1988-2026-0055
    Security advisory: multiple vulnerabilities including JWT forgery / authentication bypass, Pre-authentication SYSTEM RCE in CIRCUTOR PowerStudio SCADA WAVE 24.11.6.0 (CIRCUTOR S.A.)
  • GCVE-1988-2026-0054
    Security advisory: multiple vulnerabilities including Authenticated RCE (property injection), Hardcoded credentials, Pre-authentication root RCE in CatDV Server 10.7.8 (Square Box Systems)
  • GCVE-1988-2026-0053
    Security advisory: multiple vulnerabilities including Default-credential RCE, Pre-authentication root RCE in atvise SCADA 3.13.0 (atvise GmbH / Bachmann Visutec)
  • GCVE-1988-2026-0052
    Security advisory: Pre-authentication RCE in Apache Struts 2 2.6.11.0 (Apache Software Foundation)
  • GCVE-1988-2026-0051
    Security advisory: Pre-authentication RCE in AOMEI Cyber Backup v2.3.0 (AOMEI)
  • GCVE-1988-2026-0050
    APPLE-SA-06-29-2026-3 Safari 26.5.2
  • GCVE-1988-2026-0049
    APPLE-SA-06-29-2026-2 macOS Tahoe 26.5.2
  • GCVE-1988-2026-0048
    APPLE-SA-06-29-2026-1 iOS 26.5.2 and iPadOS 26.5.2
  • GCVE-1988-2026-0047
    Zig std.http chunked reader integer overflow -> unauthenticated remote DoS
  • GCVE-1988-2026-0046
    APPLE-SA-07-27-2026-8 Safari 26.6
  • GCVE-1988-2026-0045
    APPLE-SA-07-27-2026-7 visionOS 26.6
  • GCVE-1988-2026-0044
    APPLE-SA-07-27-2026-6 watchOS 26.6
  • GCVE-1988-2026-0043
    APPLE-SA-07-27-2026-5 tvOS 26.6
  • GCVE-1988-2026-0042
    APPLE-SA-07-27-2026-4 macOS Sonoma 14.8.8
  • GCVE-1988-2026-0041
    APPLE-SA-07-27-2026-3 macOS Sequoia 15.7.8
  • GCVE-1988-2026-0040
    APPLE-SA-07-27-2026-2 macOS Tahoe 26.6
  • GCVE-1988-2026-0039
    APPLE-SA-07-27-2026-1 iOS 26.6 and iPadOS 26.6
  • GCVE-1988-2026-0038
    [KIS-2026-13] vBulletin <= 6.2.1 (runMaths) Remote Code Execution Vulnerability
  • GCVE-1988-2026-0037
    [0day-Rubbish] SonicWall SMA 1000 — Pre-Auth Deserialization RCE (CVSS 9.8) via Struts 1 Property Injection and Auth-Filter Rewrite
  • GCVE-1988-2026-0036
    CVE-2026-78331 / CVE-2026-78332: Multiple Vulnerabilities in NethServer
  • GCVE-1988-2026-0035
    APPLE-SA-08-17-2026-3 macOS Tahoe 26.6.2
  • GCVE-1988-2026-0034
    APPLE-SA-08-17-2026-2 iOS 18.7.10 and iPadOS 18.7.10
  • GCVE-1988-2026-0033
    APPLE-SA-08-17-2026-2 iOS 18.7.10 and iPadOS 18.7.10
  • GCVE-1988-2026-0032
    APPLE-SA-08-17-2026-1 iOS 26.6.1 and iPadOS 26.6.1
  • GCVE-1988-2026-0031
    Re: Security advisory: multiple vulnerabilities including Default-credential RCE, Pre-authentication root RCE in atvise SCADA 3.13.0 (atvise GmbH / Bachmann Visutec)
  • GCVE-1988-2026-0030
    The DCHECK Illusion: Chrome's "Trusted Path" Policy Creates Vulnerabilities
  • GCVE-1988-2026-0029
    [NotCVE-2026-0001] Cloudflare Universal SSL CAA augmentation weakens RFC 8657 account binding — CVE-2026-14440 assigned 163 days after public no-CVE disclosure
  • GCVE-1988-2026-0028
    Cisco Catalyst SD-WAN C8000V Authenticated Heap Buffer Overflow
  • GCVE-1988-2026-0027
    [SYSS-2026-050]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)
  • GCVE-1988-2026-0026
    [SYSS-2026-049]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)
  • GCVE-1988-2026-0025
    [SYSS-2026-048]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)
  • GCVE-1988-2026-0024
    [SYSS-2026-047]: DICOM Toolkit (DCMTK) - Path traversal (CWE-22)
  • GCVE-1988-2026-0023
    [SYSS-2026-046]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)
  • GCVE-1988-2026-0022
    OPNsense XPATH Injection (CVE-2026-53582)
  • GCVE-1988-2026-0021
    [fulldis] CVE-2026-58451 - Horde Groupware IMP path traversal vuln
  • GCVE-1988-2026-0020
    Dovecot Security Advisory 3/2026
  • GCVE-1988-2026-0019
    Dangling DNS record for bastion.certb.cdp.bethesda.net
  • GCVE-1988-2026-0018
    CL.0 desync in www.microsoft.com
  • GCVE-1988-2026-0017
    [NotCVE-2026-0012] EmpManageX Hardcoded Administrative Credentials in Login API Allow Full Access to Employee Records
  • GCVE-1988-2026-0016
    Silent;Call — Pre-Authentication Remote Root in Cisco CUCM 15.x (SKYLINE-2026-001/002/003)
  • GCVE-1988-2026-0015
    Next.js 16.4.0-canary.13 Image Optimizer DNS Rebinding TOCTOU SSRF Still Exists
  • GCVE-1988-2026-0014
    Flextype v1.0.0-alpha.3 Stored Fetch Shortcode Allows Server-Side Request Forgery
  • GCVE-1988-2026-0013
    Flextype v1.0.0-alpha.3 Stored Filesystem Shortcode Allows Arbitrary File Read
  • GCVE-1988-2026-0012
    Flextype v1.0.0-alpha.3 Stored Expression Injection Enables PHP Remote Code Execution
  • GCVE-1988-2026-0011
    Flextype v1.0.0-alpha.3 NULL access_token Authentication Bypass
  • GCVE-1988-2026-0010
    Flextype v1.0.0-alpha.3 Path Traversal in Entry Copy Allows Arbitrary Directory Copy and File Disclosure
  • GCVE-1988-2026-0009
    Flextype v1.0.0-alpha.3 Server-Side Request Forgery via fetch() in Query API
  • GCVE-1988-2026-0008
    Flextype v1.0.0-alpha.3 Stored Arbitrary Expression Injection in ExpressionsDirective Allows Arbitrary File Read
  • GCVE-1988-2026-0007
    Payara 7.2026.1.RC1 Remote Code Execution via Server-Side Includes #exec Directive in Payara Server
  • GCVE-1988-2026-0006
    Payara 7.2026.1.RC1 Arbitrary EJB Method Invocation via Insecure Reflection in Payara Server
  • GCVE-1988-2026-0005
    WireGuard-Linux Stack-Based Buffer Overflow in lsiio (Linux IIO Userspace Tool) Due to Unbounded fscanf
  • GCVE-1988-2026-0004
    thttpd v2.26 Stack-Based Buffer Overflow in thttpd redirect CGI Program
  • GCVE-1988-2026-0003
    O-CMS 1.0.0 Authenticated OS Command Injection via ai_cli_script
  • GCVE-1988-2026-0002
    Flextype v1.0.0-alpha.3 CMS registerShortcodes() Remote Code Execution via Attacker-Controlled File Inclusion
  • GCVE-1988-2026-0001
    HP Easy Start for macOS: CVE-2026-12554 / CVE-2026-12555 / CVE-2026-12556

October 2026

September 2026