MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header
CVE-2026-81315
Origin Validation Error vulnerability in ash-project ash_ai allows a malicious web page to bypass the MCP server's DNS-r
#advisory
共收录 23717 条相关情报。
← 返回所有主题EEx template evaluation of prompt content in AshAi enables remote code execution
CVE-2026-77956
Improper Control of Generation of Code (Code Injection) vulnerability in ash-project ash_ai allows a remote, unauthentic
A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an...
CVE-2026-82594
A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the co
A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the...
CVE-2026-82595
A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub_456CF4 of the fil
A vulnerability was determined in LatencyUtils up to 2.0.3. Affected by this issue is the...
CVE-2026-82596
A vulnerability was determined in LatencyUtils up to 2.0.3. Affected by this issue is the function LatencyStats.recordDe
A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of...
CVE-2026-82592
A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDisk
A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file ...
CVE-2026-82593
A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgr
A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing...
CVE-2026-82588
A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/na
A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function...
CVE-2026-82590
A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm_sdm_handle_get of t
A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function...
CVE-2026-82589
A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amf_namf_comm_handle_n1_n2_message_
A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The...
CVE-2026-82591
A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the
LatencyUtils PauseDetector LatencyStats.java LatencyStats.recordDetectedPause memory corruption
CVE-2026-82596
A vulnerability was determined in LatencyUtils up to 2.0.3. Affected by this issue is the function LatencyStats.recordDe
LogNet grpc-spring-boot-starter Annotation Processing improper authorization
CVE-2026-82594
A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the co
Open Asset Import Library Assimp MD5Loader.cpp MakeDataUnique heap-based overflow
CVE-2026-82591
A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the
Open5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertion
CVE-2026-82590
A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm_sdm_handle_get of t
Open5GS N1-N2 Message namf-handler.c amf_namf_comm_handle_n1_n2_message_transfer denial of service
CVE-2026-82589
A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amf_namf_comm_handle_n1_n2_message_
Open5GS Transfer Endpoint namf-handler.c null pointer dereference
CVE-2026-82588
A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/na
AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability...
CVE-2026-56718
AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web ser
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-64844
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-64842
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.