OmniRoute ACP Custom-Agent Remote Code Execution (RCE)
CVE-2026-88062
## 2. Summary `POST /api/acp/agents` registers a custom ACP agent. The endpoint accepts user-controlled `binary` and `v
#advisory
共收录 23661 条相关情报。
← 返回所有主题n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution
CVE-2026-86073
## Impact The OAuth token endpoint bound an authorization code's first access token to the consented resource, but not
n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content
CVE-2026-86074
## Impact Instance AI credential setup accepted a credential test/verification URL without checking it matched the work
n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read
CVE-2026-86995
## Impact The Git node validated the repository that a fetch or pull targeted, but `setUpstream` wrote a `branch..remot
n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints
CVE-2026-86085
## Impact The endpoints `/rest/roles/:slug/assignments` and `/rest/roles/:slug/assignments/:projectId/members` checked
n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check
CVE-2026-86993
## Impact A log streaming event destination may reference a generic HTTP credential, and the destination resolved and d
Concrete CMS 9 through 9.5.2 is vulnerable to CSRFin the Boards custom slot dialog controller
CVE-2026-84432
Concrete CMS 9 through 9.5.2 did not validate an anti-CSRF token in the Boards custom slot dialog controller (concrete/
career-ops: Local dashboard API accepted cross-origin and non-loopback requests, allowing unauthenticated command execution
CVE-2026-88061
career-ops is an open-source AI-assisted job search and application management tool. Prior to 0.8.0, the career-ops loca
Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements
CVE-2026-88060
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other
Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent`
CVE-2026-88059
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other
Consul-template vulnerable to an information disclosure issue in error handling
CVE-2026-87993
The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow V
Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements
CVE-2026-88058
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other
Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler
CVE-2026-88057
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other
Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR
CVE-2026-88056
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other
Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent
CVE-2026-89049
A server-side request forgery issue due to improper validation of equivalent address representations in the port forward
Concrete CMS 8.3.0 through 9.5.2 is vulnerable to an authorization bypass through user-controlled key (cross-calendar IDOR) in the Calendar event edit dialog
CVE-2026-68527
Concrete CMS versions 8.3.0 through 9.5.2 are vulnerable to an authorization bypass in the Calendar event edit dialog (c
AnythingLLM: Stored XSS Due to Unescaped Server-Side HTML Concatenation in MetaGenerator
CVE-2026-88055
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatti
Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load
CVE-2026-88054
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rej
zstd-jni 1.5.5-6 through 1.5.7-13 Out-of-Bounds Read via Negative Offset
CVE-2026-89046
zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that
zstd-jni 1.4.8-4 through 1.5.7-13 Denial of Service via Negative Length
CVE-2026-89045
zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.rea