Mailing-list archive

Published vulnerabilities

2026-10-02GCVE-1988-2026-0440
SCHUTZWERK-SA-2024-007: Stored Cross-Site Scripting via file upload in H5P module (h5p-nodejs-library) of Lumi Education
2026-10-02GCVE-1988-2026-0439
usvg SVGZ decompression bomb in `Tree::from_data`
2026-10-02GCVE-1988-2026-0438
[SYSS-2026-071]: GDCM (Grassroots DICOM) - Format String (CWE-134)
2026-10-02GCVE-1988-2026-0437
[SYSS-2026-070]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)
2026-10-02GCVE-1988-2026-0436
[SYSS-2026-069]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)
2026-10-02GCVE-1988-2026-0435
[SYSS-2026-068]: GDCM (Grassroots DICOM) - Stack-based Buffer Overflow (CWE-121)
2026-10-02GCVE-1988-2026-0434
[SYSS-2026-067]: GDCM (Grassroots DICOM) - Stack-based Buffer Overflow (CWE-121)
2026-10-02GCVE-1988-2026-0433
SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-13742
2026-10-02GCVE-1988-2026-0432
SCHUTZWERK-SA-2024-006: Stored Cross-Site Scripting via text fields in H5P module (h5p-nodejs-library) of Lumi Education
2026-10-02GCVE-1988-2026-0431
[0day-rubbish] Server Technology PRO3X PDU 030600 port_mux listener program override to root command execution (7.2)
2026-10-02GCVE-1988-2026-0430
[0day-rubbish] Netsis NetOpenX REST 2.0.6.9 Unauthenticated SQL injection to xp_cmdshell SYSTEM command execution (9.8)
2026-10-02GCVE-1988-2026-0429
[0day-rubbish] MultiTech Conduit AEP 6.3.6 Authenticated import_config filename command injection to root RCE (7.2)
2026-10-02GCVE-1988-2026-0428
[0day-rubbish] Lightstreamer Server 7.4.8 Unauthenticated JMX jvmtiAgentLoad native code execution (8.1)
2026-10-02GCVE-1988-2026-0427
[0day-rubbish] Lightstreamer Server 7.4.8 Shipped placeholder JMX/RMI credentials plus MLet remote class loading to root RCE (9.8)
2026-10-02GCVE-1988-2026-0426
[0day-rubbish] Lantronix SGX5150 9.13.0.0R7 Authenticated FsBrowseClean command injection to root RCE (7.2)
2026-10-02GCVE-1988-2026-0425
[0day-rubbish] FME Flow 2026.2 Zip-Slip arbitrary file write to code execution as LocalSystem (8.8)
2026-10-02GCVE-1988-2026-0424
[0day-rubbish] Cambium cnMatrix EX3024F 6.2.1-r4 SSL CSR COMMON_NAME command injection to root RCE (7.2)
2026-10-02GCVE-1988-2026-0423
[NotCVE-2026-0019] game-music-emu through 0.6.5 VGM Command Interpreter Missing Operand Length Check Allows Heap Out-of-Bounds Read
2026-10-02GCVE-1988-2026-0422
[NotCVE-2026-0018] game-music-emu (libgme) through 0.6.5 Unbounded GYM Command Loop Allows Heap Out-of-Bounds Read
2026-10-02GCVE-1988-2026-0421
[NotCVE-2026-0017] game-music-emu (libgme) 0.6.5 and Earlier AY Loader NULL Pointer Dereference Allows Denial of Service
2026-10-02GCVE-1988-2026-0420
[NotCVE-2026-0016] game-music-emu VGM Command Interpreter Unvalidated 0xE0 PCM Seek Offset Allows Out-of-Bounds Read and Denial of Service
2026-10-02GCVE-1988-2026-0419
Teams meeting audio and roster data remain accessible via ACS Call Automation connectCall after a participant is removed from the meeting
2026-10-02GCVE-1988-2026-0418
CFP No cON Name 2k26 - Palma, Mallorca - Spain
2026-10-02GCVE-1988-2026-0417
UAF in XMEye Security Camera
2026-10-02GCVE-1988-2026-0416
harness(gitness) registry webhook sort_order blind SQL injection
2026-10-02GCVE-1988-2026-0415
dive tar-slip in image file extraction
2026-10-02GCVE-1988-2026-0414
HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084)
2026-10-02GCVE-1988-2026-0413
CVE-2026-17613: Penpot cross-team file takeover via import-binfile (unpatched in 2.17.2)
2026-10-02GCVE-1988-2026-0412
[0day-rubbish] TigerGraph Community Edition 4.2.4 Default credentials plus GSQL TO_CSV arbitrary file write to SSH code execution (9.8)
2026-10-02GCVE-1988-2026-0411
[0day-rubbish] Teltonika RutOS 00.07.06.21 Authenticated ipsec.lua logread command injection with reflected output (8.8)
2026-10-02GCVE-1988-2026-0410
[0day-rubbish] Opengear NGCS 25.11.8 Authenticated PDU name command injection to root via io.popen (8.8)
2026-10-02GCVE-1988-2026-0409
[0day-rubbish] LCDS Laquis SCADA Unauthenticated /uploade.html file write chained with CMDEXT*.DLL autoload (9.8)
2026-10-02GCVE-1988-2026-0408
[0day-rubbish] Ecava IntegraXor IGX 16.0.701.10 Unauthenticated /FileUpload write chained to the dxmanager cmd.exe sink (9.8)
2026-10-02GCVE-1988-2026-0407
[0day-rubbish] Devolutions Server (DVLS) 2026.2.14.0 PAM entitlement-gate bypass to SYSTEM PowerShell via the test-script endpoint (9.1)
2026-10-02GCVE-1988-2026-0406
[0day-rubbish] CaptureBites MetaServer Anonymous WCF SOAP workflow leading to RunPrograms code execution (9.8)
2026-10-02GCVE-1988-2026-0405
[0day-rubbish] PrizmDoc for Java (VirtualViewer) 5.22.1 Unauthenticated uploadDocument write into the webapp root to JSP webshell (9.8)
2026-10-02GCVE-1988-2026-0404
CVE-2026-44756: Pre-Auth RCE in SAP EPP Processing (ICM, Web Dispatcher, disp+work)
2026-10-02GCVE-1988-2026-0403
APPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1
2026-10-02GCVE-1988-2026-0402
APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1
2026-10-02GCVE-1988-2026-0401
APPLE-SA-09-28-2026-1 iOS 26.7.1 and iPadOS 26.7.1
2026-10-02GCVE-1988-2026-0400
APPLE-SA-09-14-2026-10 Xcode 27
2026-10-02GCVE-1988-2026-0399
APPLE-SA-09-14-2026-9 Safari 27
2026-10-02GCVE-1988-2026-0398
APPLE-SA-09-14-2026-8 visionOS 27
2026-10-02GCVE-1988-2026-0397
APPLE-SA-09-14-2026-7 watchOS 27
2026-10-02GCVE-1988-2026-0396
APPLE-SA-09-14-2026-6 tvOS 27
2026-10-02GCVE-1988-2026-0395
APPLE-SA-09-14-2026-5 macOS Sequoia 15.8
2026-10-02GCVE-1988-2026-0394
APPLE-SA-09-14-2026-4 macOS Tahoe 26.7
2026-10-02GCVE-1988-2026-0393
APPLE-SA-09-14-2026-3 macOS Golden Gate 27
2026-10-02GCVE-1988-2026-0392
APPLE-SA-09-14-2026-2 iOS 26.7 and iPadOS 26.7
2026-10-02GCVE-1988-2026-0391
APPLE-SA-09-14-2026-1 iOS 27 and iPadOS 27
2026-10-02GCVE-1988-2026-0390
[NotCVE-2026-0015] Input Leap through 3.0.3 input-leapd Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM
2026-10-02GCVE-1988-2026-0389
[NotCVE-2026-0014] Input Leap 3.0.3 Drag-and-Drop File Transfer Path Traversal Allows Arbitrary File Write Outside the Drop Directory
2026-10-02GCVE-1988-2026-0388
[Bugtraq] [SECURITY] [DSA 6491-1] slurm-wlm security update
2026-10-02GCVE-1988-2026-0387
[Bugtraq] [slackware-security] libpcap (SSA:2026-249-01)
2026-10-02GCVE-1988-2026-0386
[Bugtraq] [slackware-security] util-linux (SSA:2026-249-03)
2026-10-02GCVE-1988-2026-0385
[Bugtraq] [slackware-security] mozilla-thunderbird (SSA:2026-247-03)
2026-10-02GCVE-1988-2026-0384
[Bugtraq] [slackware-security] mozilla-firefox (SSA:2026-247-02)
2026-10-02GCVE-1988-2026-0383
[Bugtraq] [SECURITY] [DSA 6493-1] libevent security update

October 2026

2026-10-15[SYSS-2026-080]: dcm4che - Path Traversal (CWE-22)
full-disclosure
2026-10-15[SYSS-2026-079]: dcm4che - Path Traversal (CWE-22)
full-disclosure
2026-10-15[SYSS-2026-078]: dcm4che - Path Traversal (CWE-22)
full-disclosure
2026-10-15[SYSS-2026-077]: dcm4che - Path Traversal (CWE-22)
full-disclosure
2026-10-13[0day-rubbish] Synametrics Syncrify 6.2 build 1178 authenticated PublicLink chunk-upload path traversal to /etc/cron.d and root command execution (7.5)
full-disclosure
2026-10-13[0day-rubbish] South River Technologies Titan MFT Server 26.0.0 first-run administrator setup chained to job post-command injection, NT AUTHORITY\SYSTEM (8.1)
full-disclosure
2026-10-13[0day-rubbish] SmartBear Collaborator Server 15.1.15101 authenticated DOORS/Simulink review-file upload zip-slip to anonymous webroot Groovy Server Page execution as uid 1001 (7.5)
full-disclosure
2026-10-13[0day-rubbish] PacsOne Server 7.3.9 authenticated DICOMweb STOW-RS SOP Instance UID path traversal to www-data code execution on a PACS host (7.2)
full-disclosure
2026-10-13[0day-rubbish] Maian Pal 2.1 product image upload with no extension allow-list to PHP webshell and www-data uid 33 code execution (7.2, PR:H)
full-disclosure
2026-10-13[0day-rubbish] Maian Guardian 2.1 license generator projid command injection to www-data uid 33 code execution (7.2, PR:H)
full-disclosure
2026-10-13[0day-rubbish] Dataedo Portal 26.2.8 with Dataedo Agent 26.2.8 unrestricted scheduler job-type deserialization to Agent-host command execution (8.1)
full-disclosure
2026-10-13[0day-rubbish] CloudPanel 2.5.4-3 site-settings rootDirectory nginx virtual-host injection to host root code execution (8.8)
full-disclosure
2026-10-13[0day-rubbish] Auerswald COMmander 6000 / 6000R 8.6D unauthenticated provisioning import zip-slip to root binary hijack and root code execution (9.8)
full-disclosure
2026-10-13[0day-rubbish] Abyss Web Server X1 2.16.22.0 first-run console credential takeover to configuration-write log-as-CGI command execution (7.5)
full-disclosure
2026-10-12SmarterMail <9777 Pre-Auth RCE (half click lol): CVE-2026-104082, CVE-2026-104083, CVE-2026-104084
full-disclosure
2026-10-091-click MMI/USSD execution in Android via CALL_PHONE and browser-reachable dialer deeplinks (ACR Phone / com.nll.cb)
full-disclosure
2026-10-08SEC Consult SA-20261008-0 :: Multiple critical vulnerabilities in multiple TP-Link device series
full-disclosure
2026-10-06VestaCP <= 0.9.8-26: authenticated config-parser eval sinks -> root RCE (VESTACP-2026-001)
full-disclosure
2026-10-05[0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary)
full-disclosure
2026-10-05[0day-rubbish] RCDevs WebADM 2.4.14 authenticated log viewer sid command injection to webadm uid 999 code execution (7.2)
full-disclosure
2026-10-05[0day-rubbish] Maian Cart 3.8 addBanners unrestricted banner upload to PHP webshell and administrator command execution (7.2 primary, PR:H)
full-disclosure
2026-10-05[0day-rubbish] IPConfigure Orchid VMS 26.3.0 authenticated DNF repository GPG-key property command injection to root (7.2)
full-disclosure
2026-10-05[0day-rubbish] Circutor LineEds 24.11.14-r0 unauthenticated pwrstudio events.xml shellExecute command injection (9.8)
full-disclosure
2026-10-05[0day-rubbish] Asustor ADM 3.5.9.RWM1 (AS602T) music.cgi act=live stored-filename command injection reaching system() (8.8 primary, PR:L)
full-disclosure
2026-10-05[0day-rubbish] Advantech WebAccess Node 9.2.3 unauthenticated CrystalRpt.aspx file upload and path traversal to code execution in w3wp.exe (9.8)
full-disclosure
2026-10-01SEC Consult Research 20261001 :: Arbitrary Email sender spoofing in Apple iCloud mail
full-disclosure
2026-10-01SEC Consult SA-20260924-0 :: Multiple Vulnerabilities in Paessler PRTG Network Monitor #CVE-2026-4637 #CVE-2026-4638
full-disclosure