DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-16454: CVE-2026-16454: Object-Level Authorization Bypass in Eclipse hawkBit Direct Device Integration Controller
cverports profile

CVE-2026-16454: CVE-2026-16454: Object-Level Authorization Bypass in Eclipse hawkBit Direct Device Integration Controller

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-62284: CVE-2026-62284: Remote Code Execution and SSRF via Unsanitized Kubeconfig in OSAC Operator
cverports profile

CVE-2026-62284: CVE-2026-62284: Remote Code Execution and SSRF via Unsanitized Kubeconfig in OSAC Operator

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-62361: CVE-2026-62361: Authenticated SQL Injection and Table Access Control Bypass in Listmonk Subscriber Export
cverports profile

CVE-2026-62361: CVE-2026-62361: Authenticated SQL Injection and Table Access Control Bypass in Listmonk Subscriber Export

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-28385: CVE-2026-28385: Server-Side Request Forgery in Canonical LXD Image Import
cverports profile

CVE-2026-28385: CVE-2026-28385: Server-Side Request Forgery in Canonical LXD Image Import

#security #cve #cybersecurity
Comments
3 min read
GHSA-9J25-MM2H-2F76: CVE-2026-48750: Arbitrary File Write on Host via exec-output Symlink in Canonical LXD and Incus
cverports profile

GHSA-9J25-MM2H-2F76: CVE-2026-48750: Arbitrary File Write on Host via exec-output Symlink in Canonical LXD and Incus

#security #cve #cybersecurity
Comments
6 min read
GHSA-VGHH-5RFX-XHQ8: CVE-2026-48749: Arbitrary Host File Read and Write via Malicious Image Symlink in Canonical LXD and Incus
cverports profile

GHSA-VGHH-5RFX-XHQ8: CVE-2026-48749: Arbitrary Host File Read and Write via Malicious Image Symlink in Canonical LXD and Incus

#security #cve #cybersecurity
Comments
4 min read
GHSA-FMC8-P6Q7-75CC: GHSA-fmc8-p6q7-75cc: Argument Injection in Canonical LXD Backup Compression Leads to Host Root Code…
cverports profile

GHSA-FMC8-P6Q7-75CC: GHSA-fmc8-p6q7-75cc: Argument Injection in Canonical LXD Backup Compression Leads to Host Root Code…

#security #cve #cybersecurity #ghsa
Comments
4 min read
GHSA-PJFF-C2WC-F6JM: CVE-2026-48769: Arbitrary File Write and Remote Code Execution via Trusted Image Hash in Canonical LXD…
cverports profile

GHSA-PJFF-C2WC-F6JM: CVE-2026-48769: Arbitrary File Write and Remote Code Execution via Trusted Image Hash in Canonical LXD…

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-9639: CVE-2026-9639: Authenticated Denial of Service via Nil-Pointer Dereference in Canonical LXD Custom Volume…
cverports profile

CVE-2026-9639: CVE-2026-9639: Authenticated Denial of Service via Nil-Pointer Dereference in Canonical LXD Custom Volume…

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-33050: CVE-2026-33050: OS Command Injection in GeoNode Vector Upload Handler
cverports profile

CVE-2026-33050: CVE-2026-33050: OS Command Injection in GeoNode Vector Upload Handler

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-46429: CVE-2026-46429: Unrestricted File Upload and Validation Bypass in GeoNode
cverports profile

CVE-2026-46429: CVE-2026-46429: Unrestricted File Upload and Validation Bypass in GeoNode

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-55649: CVE-2026-55649: Stored Cross-Site Scripting in GeoNode Document Metadata Abstract Field
cverports profile

CVE-2026-55649: CVE-2026-55649: Stored Cross-Site Scripting in GeoNode Document Metadata Abstract Field

#security #cve #cybersecurity
Comments
3 min read
GHSA-QX75-2P3R-PWM5: CVE-2026-55622: Cross-Project Instance Copy Authorization Bypass in Canonical LXD and LXC Incus
cverports profile

GHSA-QX75-2P3R-PWM5: CVE-2026-55622: Cross-Project Instance Copy Authorization Bypass in Canonical LXD and LXC Incus

#security #cve #cybersecurity
Comments
5 min read
GHSA-7MR3-28H5-M5VX: GHSA-7mr3-28h5-m5vx: Authorization Bypass and Cross-Project Volume Copy in Canonical LXD
cverports profile

GHSA-7MR3-28H5-M5VX: GHSA-7mr3-28h5-m5vx: Authorization Bypass and Cross-Project Volume Copy in Canonical LXD

#security #cve #cybersecurity #ghsa
Comments
4 min read
GHSA-47W9-6R3F-938G: GHSA-47w9-6r3f-938g: Authorization Bypass and Host Root Command Execution in Canonical LXD and Incus
cverports profile

GHSA-47W9-6R3F-938G: GHSA-47w9-6r3f-938g: Authorization Bypass and Host Root Command Execution in Canonical LXD and Incus

#security #cve #cybersecurity #ghsa
Comments
4 min read
GHSA-JPF8-86F3-WP38: CVE-2026-48752: Arbitrary Host File Read and Write via Templates Symlink in Canonical LXD and Incus
cverports profile

GHSA-JPF8-86F3-WP38: CVE-2026-48752: Arbitrary Host File Read and Write via Templates Symlink in Canonical LXD and Incus

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-12411: CVE-2026-12411: Cross-Guest Volume Hijack via DevLXD Device PATCH in Canonical LXD
cverports profile

CVE-2026-12411: CVE-2026-12411: Cross-Guest Volume Hijack via DevLXD Device PATCH in Canonical LXD

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-105769: CVE-2026-105769: Azure Entra ID Token Exfiltration in Kaniko via Unanchored ACR Hostname Regex
cverports profile

CVE-2026-105769: CVE-2026-105769: Azure Entra ID Token Exfiltration in Kaniko via Unanchored ACR Hostname Regex

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-62300: CVE-2026-62300: Uncontrolled Resource Consumption in filecoin-pin Daemon
cverports profile

CVE-2026-62300: CVE-2026-62300: Uncontrolled Resource Consumption in filecoin-pin Daemon

#security #cve #cybersecurity
Comments
5 min read
CVE-2026-61536: CVE-2026-61536: Remote Code Execution via Unsafe Reflection in masci/banks CompletionExtension
cverports profile

CVE-2026-61536: CVE-2026-61536: Remote Code Execution via Unsafe Reflection in masci/banks CompletionExtension

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-93363: CVE-2026-93363: Improper Access Control in Payload CMS Storage Upload Route
cverports profile

CVE-2026-93363: CVE-2026-93363: Improper Access Control in Payload CMS Storage Upload Route

#security #cve #cybersecurity
1
Comments
3 min read
CVE-2026-55098: CVE-2026-55098: Cross-Database Authorization Bypass via DuckDB Table-Valued I/O Functions in Basekick-Labs Arc
cverports profile

CVE-2026-55098: CVE-2026-55098: Cross-Database Authorization Bypass via DuckDB Table-Valued I/O Functions in Basekick-Labs Arc

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-113787: CVE-2026-113787: Stored Cross-Site Scripting via Unescaped Style Attributes in odf-kit
cverports profile

CVE-2026-113787: CVE-2026-113787: Stored Cross-Site Scripting via Unescaped Style Attributes in odf-kit

#security #cve #cybersecurity
Comments
5 min read
GHSA-M3QR-FVP4-78XJ: GHSA-m3qr-fvp4-78xj: Authentication Bypass and Log Disclosure in Basekick Labs Arc
cverports profile

GHSA-M3QR-FVP4-78XJ: GHSA-m3qr-fvp4-78xj: Authentication Bypass and Log Disclosure in Basekick Labs Arc

#security #cve #cybersecurity #ghsa
Comments
3 min read
CVE-2026-62848: CVE-2026-62848: Local Arbitrary Code Execution via Unsafe Deserialization in Metalama Named Pipe IPC
cverports profile

CVE-2026-62848: CVE-2026-62848: Local Arbitrary Code Execution via Unsafe Deserialization in Metalama Named Pipe IPC

#security #cve #cybersecurity
Comments
3 min read
GHSA-9PPR-WFW9-XVR2: GHSA-9ppr-wfw9-xvr2: DNS Cache TTL Manipulation Failure in Netfoil via Go Value-Copy Range Iteration
cverports profile

GHSA-9PPR-WFW9-XVR2: GHSA-9ppr-wfw9-xvr2: DNS Cache TTL Manipulation Failure in Netfoil via Go Value-Copy Range Iteration

#security #cve #cybersecurity #ghsa
Comments
3 min read
CVE-2026-11800: CVE-2026-11800: Authentication Bypass via JWT Algorithm Confusion in Keycloak
cverports profile

CVE-2026-11800: CVE-2026-11800: Authentication Bypass via JWT Algorithm Confusion in Keycloak

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-62331: CVE-2026-62331: Path Traversal and Stored Instruction Injection in Praktor Telegram File Uploads
cverports profile

CVE-2026-62331: CVE-2026-62331: Path Traversal and Stored Instruction Injection in Praktor Telegram File Uploads

#security #cve #cybersecurity
Comments 1
4 min read
GHSA-P3JP-9V83-76W9: CVE-2026-111497 / GHSA-p3jp-9v83-76w9: Out-of-Bounds Heap Write in Microsoft .NET Brotli Decoder
cverports profile

GHSA-P3JP-9V83-76W9: CVE-2026-111497 / GHSA-p3jp-9v83-76w9: Out-of-Bounds Heap Write in Microsoft .NET Brotli Decoder

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-115878: CVE-2026-115878: Arbitrary Code Execution via Nested Pickle Deserialization in Stanford NLP Stanza Lemmatizer
cverports profile

CVE-2026-115878: CVE-2026-115878: Arbitrary Code Execution via Nested Pickle Deserialization in Stanford NLP Stanza Lemmatizer

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-44265: CVE-2026-44265: Code and SQL Injection via Programmatic AST Emission in @enspirit/elo
cverports profile

CVE-2026-44265: CVE-2026-44265: Code and SQL Injection via Programmatic AST Emission in @enspirit/elo

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-44266: CVE-2026-44266: Remote Code Execution in @enspirit/elo Ruby Compiler Backend via Unescaped String Interpolation
cverports profile

CVE-2026-44266: CVE-2026-44266: Remote Code Execution in @enspirit/elo Ruby Compiler Backend via Unescaped String Interpolation

#security #cve #cybersecurity
1
Comments
4 min read
CVE-2026-44267: CVE-2026-44267: Sandbox Escape and Arbitrary Code Execution in Elo Expression Language
cverports profile

CVE-2026-44267: CVE-2026-44267: Sandbox Escape and Arbitrary Code Execution in Elo Expression Language

#security #cve #cybersecurity
1
Comments
3 min read
CVE-2026-62374: CVE-2026-62374: Silent Claim-Set Reduction and Verification Bypass in SD JWT JS
cverports profile

CVE-2026-62374: CVE-2026-62374: Silent Claim-Set Reduction and Verification Bypass in SD JWT JS

#security #cve #cybersecurity
Comments
3 min read
GHSA-J656-3HF2-FVJC: GHSA-j656-3hf2-fvjc: Read-Only SQL Validation Bypass via Comment Interpretation Conflict in Bytebase DBHub
cverports profile

GHSA-J656-3HF2-FVJC: GHSA-j656-3hf2-fvjc: Read-Only SQL Validation Bypass via Comment Interpretation Conflict in Bytebase DBHub

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-118777: CVE-2026-118777: Prototype Pollution in Forge HTTP Client Cookie Management
cverports profile

CVE-2026-118777: CVE-2026-118777: Prototype Pollution in Forge HTTP Client Cookie Management

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-118775: CVE-2026-118775: ASN.1 OID First Arc Truncation and Ambiguity in node-forge
cverports profile

CVE-2026-118775: CVE-2026-118775: ASN.1 OID First Arc Truncation and Ambiguity in node-forge

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-119194: CVE-2026-119194: Algorithmic Complexity Denial of Service in pyasn1 Schemaless ASN.1 Decoder
cverports profile

CVE-2026-119194: CVE-2026-119194: Algorithmic Complexity Denial of Service in pyasn1 Schemaless ASN.1 Decoder

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119195: CVE-2026-119195: Quadratic-Time Denial of Service in pyasn1 BER/CER/DER Decoders
cverports profile

CVE-2026-119195: CVE-2026-119195: Quadratic-Time Denial of Service in pyasn1 BER/CER/DER Decoders

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-119197: CVE-2026-119197: Quadratic Algorithmic Complexity Denial of Service in pyasn1 REAL Mantissa Decoder
cverports profile

CVE-2026-119197: CVE-2026-119197: Quadratic Algorithmic Complexity Denial of Service in pyasn1 REAL Mantissa Decoder

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119196: CVE-2026-119196: Quadratic CPU Consumption in pyasn1 Constructed BIT STRING Decoding
cverports profile

CVE-2026-119196: CVE-2026-119196: Quadratic CPU Consumption in pyasn1 Constructed BIT STRING Decoding

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-119209: CVE-2026-119209: Uncontrolled Resource Consumption in pypdf XRef Stream Parser
cverports profile

CVE-2026-119209: CVE-2026-119209: Uncontrolled Resource Consumption in pypdf XRef Stream Parser

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-119208: CVE-2026-119208: Uncontrolled Resource Consumption in pypdf Encrypted Page Count Evaluation
cverports profile

CVE-2026-119208: CVE-2026-119208: Uncontrolled Resource Consumption in pypdf Encrypted Page Count Evaluation

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119207: CVE-2026-119207: Asymmetric Resource Consumption in pypdf Dictionary Parser
cverports profile

CVE-2026-119207: CVE-2026-119207: Asymmetric Resource Consumption in pypdf Dictionary Parser

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119206: CVE-2026-119206: Algorithmic Complexity Denial of Service in pypdf Page Label Resolution
cverports profile

CVE-2026-119206: CVE-2026-119206: Algorithmic Complexity Denial of Service in pypdf Page Label Resolution

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-116672: CVE-2026-116672: Authorization Bypass in Authlib RFC 7592 Client Configuration Endpoint
cverports profile

CVE-2026-116672: CVE-2026-116672: Authorization Bypass in Authlib RFC 7592 Client Configuration Endpoint

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118773: CVE-2026-118773: Asynchronous Control Flow Bypass and Uncontrolled Resource Consumption in node-glob
cverports profile

CVE-2026-118773: CVE-2026-118773: Asynchronous Control Flow Bypass and Uncontrolled Resource Consumption in node-glob

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-118764: CVE-2026-118764: Asymmetric Resource Consumption and Denial of Service in minimatch Pattern Preprocessing
cverports profile

CVE-2026-118764: CVE-2026-118764: Asymmetric Resource Consumption and Denial of Service in minimatch Pattern Preprocessing

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118772: CVE-2026-118772: Regular Expression Denial of Service in Joi Email Validation
cverports profile

CVE-2026-118772: CVE-2026-118772: Regular Expression Denial of Service in Joi Email Validation

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119205: CVE-2026-119205: Denial of Service via Infinite Loop in pypdf DictionaryObject Cloning
cverports profile

CVE-2026-119205: CVE-2026-119205: Denial of Service via Infinite Loop in pypdf DictionaryObject Cloning

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119204: CVE-2026-119204: Uncontrolled Resource Consumption in pypdf Page Tree Flattening
cverports profile

CVE-2026-119204: CVE-2026-119204: Uncontrolled Resource Consumption in pypdf Page Tree Flattening

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-119203: CVE-2026-119203: Infinite Loop in pypdf Standard Cross-Reference Table Parser
cverports profile

CVE-2026-119203: CVE-2026-119203: Infinite Loop in pypdf Standard Cross-Reference Table Parser

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118759: CVE-2026-118759: Cross-Tenant Pod Log Exposure via Authorization Bypass in Kubeflow Pipelines
cverports profile

CVE-2026-118759: CVE-2026-118759: Cross-Tenant Pod Log Exposure via Authorization Bypass in Kubeflow Pipelines

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118761: CVE-2026-118761: Pre-Authorization Decompression Bomb Denial of Service in Kubeflow Pipelines API Server
cverports profile

CVE-2026-118761: CVE-2026-118761: Pre-Authorization Decompression Bomb Denial of Service in Kubeflow Pipelines API Server

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118763: CVE-2026-118763: Cross-Origin Credential Exposure in @sigstore/oci
cverports profile

CVE-2026-118763: CVE-2026-118763: Cross-Origin Credential Exposure in @sigstore/oci

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119282: CVE-2026-119282: OS Command Injection via Plugin Options in Nx (@nx/maven and @nx/gradle)
cverports profile

CVE-2026-119282: CVE-2026-119282: OS Command Injection via Plugin Options in Nx (@nx/maven and @nx/gradle)

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-59978: CVE-2026-59978: Persistent Denial of Service via Array Injection in AdminNeo
cverports profile

CVE-2026-59978: CVE-2026-59978: Persistent Denial of Service via Array Injection in AdminNeo

#security #cve #cybersecurity
Comments
3 min read
GHSA-FGXM-5HVV-X4VH: GHSA-fgxm-5hvv-x4vh: Private Repository Enumeration via Go Module Discovery and HTTP Response…
cverports profile

GHSA-FGXM-5HVV-X4VH: GHSA-fgxm-5hvv-x4vh: Private Repository Enumeration via Go Module Discovery and HTTP Response…

#security #cve #cybersecurity #ghsa
Comments
3 min read
GHSA-F3FJ-9625-RV3M: GHSA-f3fj-9625-rv3m: Race Condition in Soft Serve Repository Cache Invalidation
cverports profile

GHSA-F3FJ-9625-RV3M: GHSA-f3fj-9625-rv3m: Race Condition in Soft Serve Repository Cache Invalidation

#security #cve #cybersecurity #ghsa
Comments
3 min read
CVE-2026-119283: CVE-2026-119283: Unbounded JWE Recipients Array Causes CPU Exhaustion in Authlib joserfc
cverports profile

CVE-2026-119283: CVE-2026-119283: Unbounded JWE Recipients Array Causes CPU Exhaustion in Authlib joserfc

#security #cve #cybersecurity
Comments
3 min read
loading...