DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-75856: CVE-2026-75856: Server-Side Request Forgery (SSRF) Bypass via DNS Resolution TOCTOU in CodeWhale
cverports profile

CVE-2026-75856: CVE-2026-75856: Server-Side Request Forgery (SSRF) Bypass via DNS Resolution TOCTOU in CodeWhale

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75912: CVE-2026-75912: Argument Injection and Arbitrary File Disclosure in CodeWhale Git Tools
cverports profile

CVE-2026-75912: CVE-2026-75912: Argument Injection and Arbitrary File Disclosure in CodeWhale Git Tools

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63735: CVE-2026-63735: Cross-Tenant Authorization Bypass in SurrealDB Custom API Routing Handler
cverports profile

CVE-2026-63735: CVE-2026-63735: Cross-Tenant Authorization Bypass in SurrealDB Custom API Routing Handler

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63733: CVE-2026-63733: Incorrect Authorization in SurrealDB Permissions Clause
cverports profile

CVE-2026-63733: CVE-2026-63733: Incorrect Authorization in SurrealDB Permissions Clause

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72799: CVE-2026-72799: Missing Authorization in SiYuan Filetree Path-Resolution API
cverports profile

CVE-2026-72799: CVE-2026-72799: Missing Authorization in SiYuan Filetree Path-Resolution API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72798: CVE-2026-72798: Missing Authorization and Information Disclosure in SiYuan renderAttributeView
cverports profile

CVE-2026-72798: CVE-2026-72798: Missing Authorization and Information Disclosure in SiYuan renderAttributeView

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72797: CVE-2026-72797: Missing Authorization in SiYuan Notebook Metadata Endpoint
cverports profile

CVE-2026-72797: CVE-2026-72797: Missing Authorization in SiYuan Notebook Metadata Endpoint

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72794: CVE-2026-72794: Cryptographic Key Leakage and Session Forgery in SiYuan
cverports profile

CVE-2026-72794: CVE-2026-72794: Cryptographic Key Leakage and Session Forgery in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72795: CVE-2026-72795: Missing Authorization in SiYuan Block DOM Rendering
cverports profile

CVE-2026-72795: CVE-2026-72795: Missing Authorization in SiYuan Block DOM Rendering

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72793: CVE-2026-72793: Information Disclosure and Session Forgery in SiYuan Note-Taking Application
cverports profile

CVE-2026-72793: CVE-2026-72793: Information Disclosure and Session Forgery in SiYuan Note-Taking Application

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72792: CVE-2026-72792: Information Disclosure via Tag API Endpoint in SiYuan
cverports profile

CVE-2026-72792: CVE-2026-72792: Information Disclosure via Tag API Endpoint in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71486: CVE-2026-71486: Uncontrolled Resource Consumption in vLLM Derender Endpoints
cverports profile

CVE-2026-71486: CVE-2026-71486: Uncontrolled Resource Consumption in vLLM Derender Endpoints

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73555: CVE-2026-73555: Environment and Information Disclosure via Exception Handling in vLLM
cverports profile

CVE-2026-73555: CVE-2026-73555: Environment and Information Disclosure via Exception Handling in vLLM

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73556: CVE-2026-73556: Regular Expression Denial of Service (ReDoS) in vLLM lm-format-enforcer Backend
cverports profile

CVE-2026-73556: CVE-2026-73556: Regular Expression Denial of Service (ReDoS) in vLLM lm-format-enforcer Backend

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73557: CVE-2026-73557: Race Condition in PyTorch Tensor Invariant Checks within vLLM Engine
cverports profile

CVE-2026-73557: CVE-2026-73557: Race Condition in PyTorch Tensor Invariant Checks within vLLM Engine

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73842: CVE-2026-73842: Missing Authentication and Authorization on Internal Management Listener in OpenChoreo cluster-gateway
cverports profile

CVE-2026-73842: CVE-2026-73842: Missing Authentication and Authorization on Internal Management Listener in OpenChoreo cluster-gateway

#security #cve #cybersecurity
Comments
2 min read
GHSA-7Q9C-HPX7-9CWM: GHSA-7Q9C-HPX7-9CWM: Unauthenticated Remote Shutdown in @typespec/spector Mock Server
cverports profile

GHSA-7Q9C-HPX7-9CWM: GHSA-7Q9C-HPX7-9CWM: Unauthenticated Remote Shutdown in @typespec/spector Mock Server

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-72796: CVE-2026-72796: Access Control Bypass via Static Routes in SiYuan
cverports profile

CVE-2026-72796: CVE-2026-72796: Access Control Bypass via Static Routes in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75858: CVE-2026-75858: Silent Remote Code Execution via Approval Bypass in CodeWhale Interactive Tools
cverports profile

CVE-2026-75858: CVE-2026-75858: Silent Remote Code Execution via Approval Bypass in CodeWhale Interactive Tools

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75911: CVE-2026-75911: Remote Code Execution via Configuration Override in CodeWhale
cverports profile

CVE-2026-75911: CVE-2026-75911: Remote Code Execution via Configuration Override in CodeWhale

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75914: CVE-2026-75914: Improper Link Resolution and Path Traversal in CodeWhale image_analyze Tool
cverports profile

CVE-2026-75914: CVE-2026-75914: Improper Link Resolution and Path Traversal in CodeWhale image_analyze Tool

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63376: CVE-2026-63376: Prototype Pollution via Path Desynchronization in toml-node
cverports profile

CVE-2026-63376: CVE-2026-63376: Prototype Pollution via Path Desynchronization in toml-node

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-69083: CVE-2026-69083: Unauthenticated SQL Injection and SQL Command Execution in SiYuan Full-Text Search API
cverports profile

CVE-2026-69083: CVE-2026-69083: Unauthenticated SQL Injection and SQL Command Execution in SiYuan Full-Text Search API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-68587: CVE-2026-68587: Broken Access Control in SiYuan Note Transaction Endpoints
cverports profile

CVE-2026-68587: CVE-2026-68587: Broken Access Control in SiYuan Note Transaction Endpoints

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-68586: CVE-2026-68586: Missing Authorization in SiYuan Backlink Content Endpoints Allows Information Disclosure
cverports profile

CVE-2026-68586: CVE-2026-68586: Missing Authorization in SiYuan Backlink Content Endpoints Allows Information Disclosure

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-68585: CVE-2026-68585: Metadata Disclosure via Missing Authorization in SiYuan API
cverports profile

CVE-2026-68585: CVE-2026-68585: Metadata Disclosure via Missing Authorization in SiYuan API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72812: CVE-2026-72812: Broken Access Control and SQL Injection in SiYuan
cverports profile

CVE-2026-72812: CVE-2026-72812: Broken Access Control and SQL Injection in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72811: CVE-2026-72811: Remote SQL Injection in SiYuan Backlink and Mention Search Engine
cverports profile

CVE-2026-72811: CVE-2026-72811: Remote SQL Injection in SiYuan Backlink and Mention Search Engine

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72810: CVE-2026-72810: Publish-Boundary Bypass and Real-Time Data Leakage via WebSocket Session Pollution in SiYuan
cverports profile

CVE-2026-72810: CVE-2026-72810: Publish-Boundary Bypass and Real-Time Data Leakage via WebSocket Session Pollution in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72809: CVE-2026-72809: Authentication Bypass in SiYuan via Localhost Trust Spoofing
cverports profile

CVE-2026-72809: CVE-2026-72809: Authentication Bypass in SiYuan via Localhost Trust Spoofing

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72808: CVE-2026-72808: Unauthorized PDF Annotation Access in SiYuan Knowledge Management System
cverports profile

CVE-2026-72808: CVE-2026-72808: Unauthorized PDF Annotation Access in SiYuan Knowledge Management System

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72807: CVE-2026-72807: Second-Order SQL Injection via Attribute View Templates in SiYuan
cverports profile

CVE-2026-72807: CVE-2026-72807: Second-Order SQL Injection via Attribute View Templates in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72806: CVE-2026-72806: Missing Authorization in SiYuan Attribute View Rendering Leads to Information Disclosure
cverports profile

CVE-2026-72806: CVE-2026-72806: Missing Authorization in SiYuan Attribute View Rendering Leads to Information Disclosure

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72805: CVE-2026-72805: Missing Authorization in SiYuan Note Block APIs Leads to Information Disclosure
cverports profile

CVE-2026-72805: CVE-2026-72805: Missing Authorization in SiYuan Note Block APIs Leads to Information Disclosure

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72804: CVE-2026-72804: Authentication Bypass and Sensitive Information Exposure in SiYuan Graph Endpoints
cverports profile

CVE-2026-72804: CVE-2026-72804: Authentication Bypass and Sensitive Information Exposure in SiYuan Graph Endpoints

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72802: CVE-2026-72802: Sensitive Information Disclosure via Administrative Asset Resolvers in SiYuan Note
cverports profile

CVE-2026-72802: CVE-2026-72802: Sensitive Information Disclosure via Administrative Asset Resolvers in SiYuan Note

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-72801: CVE-2026-72801: Information Disclosure of Cryptographic Key Material in SiYuan
cverports profile

CVE-2026-72801: CVE-2026-72801: Information Disclosure of Cryptographic Key Material in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72800: CVE-2026-72800: Missing Authorization in SiYuan Personal Knowledge Management System
cverports profile

CVE-2026-72800: CVE-2026-72800: Missing Authorization in SiYuan Personal Knowledge Management System

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72803: CVE-2026-72803: Information Disclosure via Missing Authorization in SiYuan API
cverports profile

CVE-2026-72803: CVE-2026-72803: Information Disclosure via Missing Authorization in SiYuan API

#security #cve #cybersecurity
Comments
2 min read
GHSA-7J72-F6WG-CXW6: CVE-2026-68584: Authentication Bypass via Auxiliary Content Endpoints in SiYuan
cverports profile

GHSA-7J72-F6WG-CXW6: CVE-2026-68584: Authentication Bypass via Auxiliary Content Endpoints in SiYuan

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-77465: CVE-2026-77465: Uncontrolled Recursion in toml-node Deserializer Leads to Denial of Service
cverports profile

CVE-2026-77465: CVE-2026-77465: Uncontrolled Recursion in toml-node Deserializer Leads to Denial of Service

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73295: CVE-2026-73295: DOM-based Cross-Site Scripting (XSS) in Material for MkDocs Search Suggestions
cverports profile

CVE-2026-73295: CVE-2026-73295: DOM-based Cross-Site Scripting (XSS) in Material for MkDocs Search Suggestions

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71869: CVE-2026-71869: Remote Code Execution in Orval via OpenAPI Default Value Template Literal Injection
cverports profile

CVE-2026-71869: CVE-2026-71869: Remote Code Execution in Orval via OpenAPI Default Value Template Literal Injection

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61625: CVE-2026-61625: Arbitrary File Write via Path Traversal in VictoriaMetrics vmrestore
cverports profile

CVE-2026-61625: CVE-2026-61625: Arbitrary File Write via Path Traversal in VictoriaMetrics vmrestore

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73846: CVE-2026-73846: Cache Key Canonicalization Collision in ondata ckan-mcp-server
cverports profile

CVE-2026-73846: CVE-2026-73846: Cache Key Canonicalization Collision in ondata ckan-mcp-server

#security #cve #cybersecurity
Comments
2 min read
GHSA-99RQ-75J6-5J9F: GHSA-99rq-75j6-5j9f: Stored and Reflected XSS in SiYuan via SVG Sanitizer Bypass
cverports profile

GHSA-99RQ-75J6-5J9F: GHSA-99rq-75j6-5j9f: Stored and Reflected XSS in SiYuan via SVG Sanitizer Bypass

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-GW25-M53R-QH88: GHSA-gw25-m53r-qh88: Path Traversal Bypass in SiYuan Notebook via /export/temp/ Short-Circuit Branch
cverports profile

GHSA-GW25-M53R-QH88: GHSA-gw25-m53r-qh88: Path Traversal Bypass in SiYuan Notebook via /export/temp/ Short-Circuit Branch

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-62669: CVE-2026-62669: Critical Two-Factor Authentication Bypass in Grav CMS Login Plugin
cverports profile

CVE-2026-62669: CVE-2026-62669: Critical Two-Factor Authentication Bypass in Grav CMS Login Plugin

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63435: CVE-2026-63435: Parser Interpretation Conflict in Ruby Mail Gem RFC 2047 Decoders
cverports profile

CVE-2026-63435: CVE-2026-63435: Parser Interpretation Conflict in Ruby Mail Gem RFC 2047 Decoders

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63481: CVE-2026-63481: Sensitive Information Exposure in Hurl [Cookies] Redirection
cverports profile

CVE-2026-63481: CVE-2026-63481: Sensitive Information Exposure in Hurl [Cookies] Redirection

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63490: CVE-2026-63490: Path Traversal and Arbitrary File Disclosure in Handlebars.java
cverports profile

CVE-2026-63490: CVE-2026-63490: Path Traversal and Arbitrary File Disclosure in Handlebars.java

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-4692: CVE-2026-4692: Sandbox Escape via Responsive Design Mode in Mozilla Firefox and Thunderbird
cverports profile

CVE-2026-4692: CVE-2026-4692: Sandbox Escape via Responsive Design Mode in Mozilla Firefox and Thunderbird

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-65842: CVE-2026-65842: Server-Side Request Forgery with Response Disclosure in @platejs/docx-io
cverports profile

CVE-2026-65842: CVE-2026-65842: Server-Side Request Forgery with Response Disclosure in @platejs/docx-io

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-2763: CVE-2026-2763: Use-After-Free in SpiderMonkey Generator for-in Loops
cverports profile

CVE-2026-2763: CVE-2026-2763: Use-After-Free in SpiderMonkey Generator for-in Loops

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-60206: CVE-2026-60206: Unauthenticated SAML Authentication Bypass in Oracle WebLogic Server
cverports profile

CVE-2026-60206: CVE-2026-60206: Unauthenticated SAML Authentication Bypass in Oracle WebLogic Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62676: CVE-2026-62676: Security Guardrail Policy Bypass via Shell-Command Parser Flaws in Omnigent AI Agent Framework
cverports profile

CVE-2026-62676: CVE-2026-62676: Security Guardrail Policy Bypass via Shell-Command Parser Flaws in Omnigent AI Agent Framework

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-68921: CVE-2026-68921: Cross-Site Scripting via SVG Attribute Injection in DiceBear
cverports profile

CVE-2026-68921: CVE-2026-68921: Cross-Site Scripting via SVG Attribute Injection in DiceBear

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67446: CVE-2026-67446: Unbounded Image Dimension Decoding in Mailpit Thumbnail Generation
cverports profile

CVE-2026-67446: CVE-2026-67446: Unbounded Image Dimension Decoding in Mailpit Thumbnail Generation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72921: CVE-2026-72921: Incorrect Authorization in SeaweedFS Filer JWT Prefix Match
cverports profile

CVE-2026-72921: CVE-2026-72921: Incorrect Authorization in SeaweedFS Filer JWT Prefix Match

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67445: CVE-2026-67445: Uncontrolled Memory Resource Consumption in Mailpit SMTP and POP3 Services
cverports profile

CVE-2026-67445: CVE-2026-67445: Uncontrolled Memory Resource Consumption in Mailpit SMTP and POP3 Services

#security #cve #cybersecurity
Comments
2 min read
loading...