DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-53493: CVE-2026-53493: Uncontrolled Resource Consumption in containerd Image-Pull Descriptor Graph Resolution
cverports profile

CVE-2026-53493: CVE-2026-53493: Uncontrolled Resource Consumption in containerd Image-Pull Descriptor Graph Resolution

#security #cve #cybersecurity
Comments
2 min read
GHSA-62MM-XWMV-CRHG: GHSA-62MM-XWMV-CRHG: Unauthenticated Path Traversal in Khoj Static File Serving Endpoint
cverports profile

GHSA-62MM-XWMV-CRHG: GHSA-62MM-XWMV-CRHG: Unauthenticated Path Traversal in Khoj Static File Serving Endpoint

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-100369: CVE-2026-100369: Argument Injection Vulnerability in CliInvoke Process Runner Factories
cverports profile

CVE-2026-100369: CVE-2026-100369: Argument Injection Vulnerability in CliInvoke Process Runner Factories

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-100368: CVE-2026-100368: OS Command Injection in CliInvoke Shell Wrappers
cverports profile

CVE-2026-100368: CVE-2026-100368: OS Command Injection in CliInvoke Shell Wrappers

#security #cve #cybersecurity
Comments
2 min read
GHSA-VV77-66RF-PM86: GHSA-vv77-66rf-pm86: Gas Draining Vulnerability in mpp Multi-Party Payments Library
cverports profile

GHSA-VV77-66RF-PM86: GHSA-vv77-66rf-pm86: Gas Draining Vulnerability in mpp Multi-Party Payments Library

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-QPXH-FF8M-C62V: GHSA-QPXH-FF8M-C62V: Gas Draining and Resource Exhaustion in ZenHive mpp Library
cverports profile

GHSA-QPXH-FF8M-C62V: GHSA-QPXH-FF8M-C62V: Gas Draining and Resource Exhaustion in ZenHive mpp Library

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-VJ8P-HP9X-GH47: GHSA-vj8p-hp9x-gh47: Zero-Cost Fee-Payer Wallet Gas Draining in mpp Elixir Library
cverports profile

GHSA-VJ8P-HP9X-GH47: GHSA-vj8p-hp9x-gh47: Zero-Cost Fee-Payer Wallet Gas Draining in mpp Elixir Library

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-57443: CVE-2026-57443: Unauthenticated Operations API Information Disclosure in SCBE-AETHERMOORE
cverports profile

CVE-2026-57443: CVE-2026-57443: Unauthenticated Operations API Information Disclosure in SCBE-AETHERMOORE

#security #cve #cybersecurity
Comments
2 min read
GHSA-29H2-JR22-FRMH: GHSA-29H2-JR22-FRMH: Improper Access Control and Handle Substitution in OpenZeppelin Confidential Contracts
cverports profile

GHSA-29H2-JR22-FRMH: GHSA-29H2-JR22-FRMH: Improper Access Control and Handle Substitution in OpenZeppelin Confidential Contracts

#security #cve #cybersecurity #ghsa
Comments
3 min read
CVE-2026-86439: CVE-2026-86439: Path Traversal Vulnerability in knowns MCP Document and Memory Storage
cverports profile

CVE-2026-86439: CVE-2026-86439: Path Traversal Vulnerability in knowns MCP Document and Memory Storage

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61825: CVE-2026-61825: Stored Cross-Site Scripting (XSS) via data-html-content Sanitizer Bypass in code16/sharp
cverports profile

CVE-2026-61825: CVE-2026-61825: Stored Cross-Site Scripting (XSS) via data-html-content Sanitizer Bypass in code16/sharp

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61823: CVE-2026-61823: Stored Cross-Site Scripting (XSS) via iframe srcdoc Attribute in code16 Sharp
cverports profile

CVE-2026-61823: CVE-2026-61823: Stored Cross-Site Scripting (XSS) via iframe srcdoc Attribute in code16 Sharp

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-57440: CVE-2026-57440: Stored Cross-Site Scripting (XSS) in MediaWiki EmbedVideo Extension
cverports profile

CVE-2026-57440: CVE-2026-57440: Stored Cross-Site Scripting (XSS) in MediaWiki EmbedVideo Extension

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-92161: CVE-2026-92161: Unauthenticated Account Takeover in FriendsOfFlarum OAuth Extension
cverports profile

CVE-2026-92161: CVE-2026-92161: Unauthenticated Account Takeover in FriendsOfFlarum OAuth Extension

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61784: CVE-2026-61784: HTML Attribute Injection and Sanitizer Bypass in node-xhtml-purifier
cverports profile

CVE-2026-61784: CVE-2026-61784: HTML Attribute Injection and Sanitizer Bypass in node-xhtml-purifier

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61741: CVE-2026-61741: XML External Entity (XXE) Injection in http4s-scala-xml
cverports profile

CVE-2026-61741: CVE-2026-61741: XML External Entity (XXE) Injection in http4s-scala-xml

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61742: CVE-2026-61742: DNS Rebinding to Unauthenticated SQL Execution in DBHub
cverports profile

CVE-2026-61742: CVE-2026-61742: DNS Rebinding to Unauthenticated SQL Execution in DBHub

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61788: CVE-2026-61788: Read-Only Bypass in DBHub Database Model Context Protocol Server
cverports profile

CVE-2026-61788: CVE-2026-61788: Read-Only Bypass in DBHub Database Model Context Protocol Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-56742: CVE-2026-56742: Missing ReferenceGrant Authorization Check in Cilium Gateway API Request Mirroring
cverports profile

CVE-2026-56742: CVE-2026-56742: Missing ReferenceGrant Authorization Check in Cilium Gateway API Request Mirroring

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-57231: CVE-2026-57231: Podman Malformed Image Host Environment Variable Leak
cverports profile

CVE-2026-57231: CVE-2026-57231: Podman Malformed Image Host Environment Variable Leak

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-74480: CVE-2026-74480: Use-After-Free in Linux Kernel Network Bridge Multicast Routing
cverports profile

CVE-2026-74480: CVE-2026-74480: Use-After-Free in Linux Kernel Network Bridge Multicast Routing

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-21992: Oracle Fusion Middleware Security Alert Advisory - CVE-2026-21992
cverports profile

CVE-2026-21992: Oracle Fusion Middleware Security Alert Advisory - CVE-2026-21992

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59980: CVE-2026-59980: Uncontrolled Resource Consumption in python-hyper/hpack
cverports profile

CVE-2026-59980: CVE-2026-59980: Uncontrolled Resource Consumption in python-hyper/hpack

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61816: CVE-2026-61816: Uncontrolled Resource Consumption and Algorithmic Complexity in zbateson/mail-mime-parser
cverports profile

CVE-2026-61816: CVE-2026-61816: Uncontrolled Resource Consumption and Algorithmic Complexity in zbateson/mail-mime-parser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61815: CVE-2026-61815: Remote SMTP Header Injection via Unsanitized MIME Decoded Filenames in zbateson/mail-mime-parser
cverports profile

CVE-2026-61815: CVE-2026-61815: Remote SMTP Header Injection via Unsanitized MIME Decoded Filenames in zbateson/mail-mime-parser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59723: CVE-2026-59723: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard Server
cverports profile

CVE-2026-59723: CVE-2026-59723: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-57170: CVE-2026-57170: Server-Side Template Injection Bypass in Compliance-Trestle Include Tags
cverports profile

CVE-2026-57170: CVE-2026-57170: Server-Side Template Injection Bypass in Compliance-Trestle Include Tags

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-57171: CVE-2026-57171: Path Traversal and Arbitrary File Write in compliance-trestle
cverports profile

CVE-2026-57171: CVE-2026-57171: Path Traversal and Arbitrary File Write in compliance-trestle

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55736: CVE-2026-55736: Mass Assignment / Parameter Pollution in Ash Framework Changeset Path
cverports profile

CVE-2026-55736: CVE-2026-55736: Mass Assignment / Parameter Pollution in Ash Framework Changeset Path

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-57175: CVE-2026-57175: Improper Authentication in social-auth-core SAML Backend
cverports profile

CVE-2026-57175: CVE-2026-57175: Improper Authentication in social-auth-core SAML Backend

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-57176: CVE-2026-57176: Multi-Tenant Account Takeover via Identity Binding Collision in python-social-auth Vend Backend
cverports profile

CVE-2026-57176: CVE-2026-57176: Multi-Tenant Account Takeover via Identity Binding Collision in python-social-auth Vend Backend

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-57177: CVE-2026-57177: Login Cross-Site Request Forgery in python-social-auth (social-auth-core)
cverports profile

CVE-2026-57177: CVE-2026-57177: Login Cross-Site Request Forgery in python-social-auth (social-auth-core)

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-57178: CVE-2026-57178: Authentication Bypass via Missing Signature Verification in social-auth-core
cverports profile

CVE-2026-57178: CVE-2026-57178: Authentication Bypass via Missing Signature Verification in social-auth-core

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-57179: CVE-2026-57179: Session Fixation and Login CSRF in social-auth-core Partial Pipeline
cverports profile

CVE-2026-57179: CVE-2026-57179: Session Fixation and Login CSRF in social-auth-core Partial Pipeline

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-57232: CVE-2026-57232: Server-Side Request Forgery in Contao CMS Feed Reader Module
cverports profile

CVE-2026-57232: CVE-2026-57232: Server-Side Request Forgery in Contao CMS Feed Reader Module

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63498: CVE-2026-63498: Stored Cross-Site Scripting via Inline XML Rendering in Snipe-IT API
cverports profile

CVE-2026-63498: CVE-2026-63498: Stored Cross-Site Scripting via Inline XML Rendering in Snipe-IT API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-19730: CVE-2026-19730: Podman Quadlet Install Non-Truncating Write Retains Removed Host-Access/Security Directives
cverports profile

CVE-2026-19730: CVE-2026-19730: Podman Quadlet Install Non-Truncating Write Retains Removed Host-Access/Security Directives

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-63493: CVE-2026-63493: Multi-Factor Authentication Bypass via Stateless API Token Flow in Snipe-IT
cverports profile

CVE-2026-63493: CVE-2026-63493: Multi-Factor Authentication Bypass via Stateless API Token Flow in Snipe-IT

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-57576: CVE-2026-57576: Application-Level Denial of Service via Uncontrolled Resource Consumption in Plone
cverports profile

CVE-2026-57576: CVE-2026-57576: Application-Level Denial of Service via Uncontrolled Resource Consumption in Plone

#security #cve #cybersecurity
Comments
3 min read
GHSA-8PCW-H6W9-H46G: GHSA-8PCW-H6W9-H46G: Denial of Service via Uncontrolled Resource Consumption in plone.app.contenttypes
cverports profile

GHSA-8PCW-H6W9-H46G: GHSA-8PCW-H6W9-H46G: Denial of Service via Uncontrolled Resource Consumption in plone.app.contenttypes

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-61685: CVE-2026-61685: SQL Injection via Dynamic Query Parameters in ReactPress
cverports profile

CVE-2026-61685: CVE-2026-61685: SQL Injection via Dynamic Query Parameters in ReactPress

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-56669: CVE-2026-56669: Remote Denial of Service via Algorithmic Complexity and Interpretation Conflict in Elysia
cverports profile

CVE-2026-56669: CVE-2026-56669: Remote Denial of Service via Algorithmic Complexity and Interpretation Conflict in Elysia

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-86065: CVE-2026-86065: Denial of Service via Resource Exhaustion in klever-go WebSocket Subscription Endpoint
cverports profile

CVE-2026-86065: CVE-2026-86065: Denial of Service via Resource Exhaustion in klever-go WebSocket Subscription Endpoint

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-82405: CVE-2026-82405: Incorrect Authorization leading to Account Takeover in klever-go
cverports profile

CVE-2026-82405: CVE-2026-82405: Incorrect Authorization leading to Account Takeover in klever-go

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63000: CVE-2026-63000: Cross-Site Request Forgery in REDAXO CMS Package Update API
cverports profile

CVE-2026-63000: CVE-2026-63000: Cross-Site Request Forgery in REDAXO CMS Package Update API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-85724: CVE-2026-85724: Pattern-ACL Wildcard Injection & Cross-Tenant Authorization Bypass in Moquette MQTT Broker
cverports profile

CVE-2026-85724: CVE-2026-85724: Pattern-ACL Wildcard Injection & Cross-Tenant Authorization Bypass in Moquette MQTT Broker

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-88974: CVE-2026-88974: Incorrect Authorization in WPGraphQL updatePost Mutation
cverports profile

CVE-2026-88974: CVE-2026-88974: Incorrect Authorization in WPGraphQL updatePost Mutation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73858: CVE-2026-73858: Server-Side Twig Template Injection in Solspace Freeform for Craft CMS
cverports profile

CVE-2026-73858: CVE-2026-73858: Server-Side Twig Template Injection in Solspace Freeform for Craft CMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54892: CVE-2026-54892: Algorithmic Complexity Denial of Service in Plug Query Decoder
cverports profile

CVE-2026-54892: CVE-2026-54892: Algorithmic Complexity Denial of Service in Plug Query Decoder

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-83801: CVE-2026-83801: Stored Cross-Site Scripting via Form Help Text in Nautobot
cverports profile

CVE-2026-83801: CVE-2026-83801: Stored Cross-Site Scripting via Form Help Text in Nautobot

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-83805: CVE-2026-83805: Authorization Bypass and Privilege Escalation in Nautobot Approval Workflows
cverports profile

CVE-2026-83805: CVE-2026-83805: Authorization Bypass and Privilege Escalation in Nautobot Approval Workflows

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-85709: CVE-2026-85709: Sensitive Information Exposure in LightRAG API Server
cverports profile

CVE-2026-85709: CVE-2026-85709: Sensitive Information Exposure in LightRAG API Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-85725: CVE-2026-85725: Observable Timing Side-Channel Vulnerability in HKUDS LightRAG
cverports profile

CVE-2026-85725: CVE-2026-85725: Observable Timing Side-Channel Vulnerability in HKUDS LightRAG

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-85734: CVE-2026-85734: Brute-Force and CPU-Exhaustion DoS in LightRAG API /login Endpoint
cverports profile

CVE-2026-85734: CVE-2026-85734: Brute-Force and CPU-Exhaustion DoS in LightRAG API /login Endpoint

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-85740: CVE-2026-85740: Server-Side Request Forgery (SSRF) Guard Bypass via IPv6 Transition Wrappers in LightRAG
cverports profile

CVE-2026-85740: CVE-2026-85740: Server-Side Request Forgery (SSRF) Guard Bypass via IPv6 Transition Wrappers in LightRAG

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-86062: CVE-2026-86062: Stored Cross-Site Scripting (XSS) in HKUDS LightRAG WebUI Chat Renderer
cverports profile

CVE-2026-86062: CVE-2026-86062: Stored Cross-Site Scripting (XSS) in HKUDS LightRAG WebUI Chat Renderer

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-94462: CVE-2026-94462: Broken Access Control in Spree Store API v3 Cart Association
cverports profile

CVE-2026-94462: CVE-2026-94462: Broken Access Control in Spree Store API v3 Cart Association

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77633: CVE-2026-77633: Storage-quota Time-of-Check to Time-of-Use (TOCTOU) Race Condition in Cloudreve
cverports profile

CVE-2026-77633: CVE-2026-77633: Storage-quota Time-of-Check to Time-of-Use (TOCTOU) Race Condition in Cloudreve

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77637: CVE-2026-77637: Privilege Scope Bypass in Cloudreve Administrative Tools
cverports profile

CVE-2026-77637: CVE-2026-77637: Privilege Scope Bypass in Cloudreve Administrative Tools

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-79767: CVE-2026-79767: Authorization Bypass in Gardener API Server admission plugin
cverports profile

CVE-2026-79767: CVE-2026-79767: Authorization Bypass in Gardener API Server admission plugin

#security #cve #cybersecurity
Comments
2 min read
loading...