MCPHub authenticated horizontal IDOR: any non-admin user executes tools on other users' MCP servers (cross-tenant file read + SSRF)

CVE-2026-79750

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate end

历史摘要 · 未重新核验 · OSV.dev

zbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UID

CVE-2026-78422

Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned

历史摘要 · 未重新核验 · OSV.dev

@pdfme/schemas before 5.5.9 Cross-Site Scripting via SVG

CVE-2026-82868

@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin that renders user-sup

历史摘要 · 未重新核验 · OSV.dev

@pdfme/schemas before 5.5.9 Cross-Site Scripting via Select

CVE-2026-82867

@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the Select schema plugin that fails to sani

历史摘要 · 未重新核验 · OSV.dev

pdfme pdf-lib before 5.5.10 Denial of Service via Decompression Bomb

CVE-2026-82864

pdfme pdf-lib versions before 5.5.10 contain an unbounded buffer growth vulnerability in the DecodeStream.ensureBuffer()

历史摘要 · 未重新核验 · OSV.dev

@hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection

CVE-2026-82863

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging

历史摘要 · 未重新核验 · OSV.dev

@hulumi/policies before 1.3.2 Evidence Validation Bypass

CVE-2026-82855

@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-

历史摘要 · 未重新核验 · OSV.dev

valkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after free

CVE-2026-82631

A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlocked

历史摘要 · 未重新核验 · OSV.dev

Path traversal in AshAdmin file uploads via unsanitized client filename

CVE-2026-82673

Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in ash-project ash_admin allo

历史摘要 · 未重新核验 · OSV.dev

Stored XSS in AshAdmin relationship typeahead via unescaped label_field content

CVE-2026-77850

Stored Cross-site Scripting vulnerability in ash-project ash_admin executes attacker-supplied record content as script i

历史摘要 · 未重新核验 · OSV.dev

Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records

CVE-2026-82564

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_ai allows a caller of an identity-conf

历史摘要 · 未重新核验 · OSV.dev

MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header

CVE-2026-81315

Origin Validation Error vulnerability in ash-project ash_ai allows a malicious web page to bypass the MCP server's DNS-r

历史摘要 · 未重新核验 · OSV.dev

LogNet grpc-spring-boot-starter Annotation Processing improper authorization

CVE-2026-82594

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the co

历史摘要 · 未重新核验 · OSV.dev

PLANET VDR-300NU ADSL Router - 未授权修改DNS

PLANET VDR-300NU ADSL Router - 未授权修改DNS

历史摘要 · 未重新核验 · 知道创宇 / Seebug

Acknowledgements

Acknowledgements

历史摘要 · 未重新核验 · Android Security Bulletin

Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a...

CVE-2026-51720

Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticate

历史摘要 · 未重新核验 · NVD

The affected Ebyte product uses a deprecated hashing algorithm in an authentication-related operation. Under conditions where an attacker can manipulate or predict the auth...

CVE-2026-76133

The affected Ebyte product uses a deprecated hashing algorithm in an authentication-related operation. Under conditi

历史摘要 · 未重新核验 · NVD

Toss a Fault to BpfChecker: Revealing Implementation Flaws for eBPF runtimes with Differential Fuzzing.

eBPF 是一项可在特权上下文中运行沙箱程序的革命性技术，广泛应用于 Linux 内核网络监控、Windows 拒绝服务防护以及区块链智能合约执行等场景。然而，eBPF 实现中的缺陷可能造成广泛而严重的影响。以往研究主要关注 eBPF 运行

历史摘要 · 未重新核验 · ACM CCS

The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator...

CVE-2026-19806

Support Genix 是一款 WordPress 客服工单插件（Helpdesk、AI 聊天机器人、知识库与客服支持系统）。在 1.4.52 及之前的所有版本中，存在一个严重的认证绕过漏洞，可导致管理员账户被完全接管。漏洞根因在于 `

历史摘要 · 未重新核验 · NVD

The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode...

CVE-2026-75865

The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress i

历史摘要 · 未重新核验 · GitHub Advisory