Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover
CVE-2026-11746
## Vulnerability `ZooKeeperReplicationConfig.secret()` silently substitutes the hard-coded constant `"ch4n63m3"` (leets
#severity:critical
共收录 1449 条相关情报。
← 返回所有主题MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)
CVE-2026-59971
## Summary In SSE/HTTP transport mode, `mysql_mcp_server` constructs `SseServerTransport` without passing `security_set
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain...
CVE-2026-82107
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause...
CVE-2026-82100
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create...
CVE-2026-80424
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create arbitrary files due to
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due...
CVE-2026-81204
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection duri
IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain...
CVE-2026-78573
IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS...
CVE-2026-79724
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS commands due to improper neu
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0...
CVE-2026-19646
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote
Traefik HTTP/3 Backend NTLM Connection Reuse
CVE-2026-88007
## Summary Traefik's HTTP/3 request path did not initialize the connection-scoped backend transport holder that isolate
rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass
CVE-2026-88018
### Summary `rclone serve s3`'s handler chain, when `--auth-proxy` is configured, is (outermost first): `authPairMiddlew
rclone: RC per-server auth-proxy bypass
CVE-2026-88044
## Summary `serve/start` accepts protocol options in a per-server `proxyOpt` object. The FTP and S3 RC adapters parse t
Forgejo before 16.0.4 allows remote code execution via a crafted template repository because...
CVE-2026-89094
Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files
OmniRoute ACP Custom-Agent Remote Code Execution (RCE)
CVE-2026-88062
## 2. Summary `POST /api/acp/agents` registers a custom ACP agent. The endpoint accepts user-controlled `binary` and `v
Astro: Remote code execution through AVIF image optimization
A vulnerability in `libheif`, used by the default Sharp image service in Astro, can lead to remote code execution when a
Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used
A vulnerability in the underlying `libheif` library used by `sharp` which Next.js uses for image optimization can lead t
@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in...
CVE-2026-76969
@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applicatio
SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked...
CVE-2026-66768
SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backen
SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal...
CVE-2026-58240
SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components d
A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library....
CVE-2026-44756
A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditio