Mon, Aug 10 · 09:17 PM CDTCVE-2026-18948
9.9/10 · Must read/watchNVDvuln
Summary
A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to store a malicious UDF, leading to unauthenticated arbitrary code execution on the feature server in default configurations.
CVECVE-2026-18948
SeverityCRITICAL
TypeUPDATED
PublishedMon, Aug 10 · 09:17 PM CDT
ModifiedMon, Sep 28 · 10:16 AM CDT
CVE-2025-14665
9.8/10 · Must read/watchNVDvuln
Summary
A security flaw has been discovered in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/DhcpListClient of the component HTTP Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been released to the p
CVECVE-2025-14665
SeverityCRITICAL
TypeUPDATED
PublishedSun, Dec 14 · 03:15 PM CST
ModifiedMon, Sep 28 · 10:10 AM CDT
CVE-2026-76578
9.8/10 · Must read/watchNVDvuln
Summary
A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An unauthenticated LDAP client can exploit this, combined with a related flaw in the underlying directory server's ACI evaluation (tracked separately
CVECVE-2026-76578
SeverityCRITICAL
TypeUPDATED
PublishedMon, Sep 07 · 01:20 PM CDT
ModifiedMon, Sep 28 · 10:16 AM CDT
CVE-2026-11861
9.6/10 · Must read/watchNVDvuln
Summary
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due
CVECVE-2026-11861
SeverityCRITICAL
TypeUPDATED
PublishedThu, Aug 20 · 11:16 AM CDT
ModifiedMon, Sep 28 · 10:16 AM CDT
CVE-2026-49076
9.3/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows Blind SQL Injection.This issue affects JetEngine: from n/a through 3.8.9.1.
CVECVE-2026-49076
SeverityCRITICAL
TypeUPDATED
PublishedWed, Jun 17 · 01:20 PM CDT
ModifiedMon, Sep 28 · 06:16 AM CDT
CVE-2025-49794
9.1/10 · Must read/watchNVDvuln
Summary
A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or
CVECVE-2025-49794
SeverityCRITICAL
TypeUPDATED
PublishedMon, Jun 16 · 04:15 PM CDT
ModifiedMon, Sep 28 · 02:17 AM CDT
CVE-2025-49796
9.1/10 · Must read/watchNVDvuln
Summary
A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive
CVECVE-2025-49796
SeverityCRITICAL
TypeUPDATED
PublishedMon, Jun 16 · 04:15 PM CDT
ModifiedMon, Sep 28 · 02:17 AM CDT
CVE-2025-14993
8.8/10 · Worth your timeNVDvuln
Summary
A vulnerability was detected in Tenda AC18 15.03.05.05. This affects the function sprintf of the file /goform/SetDlnaCfg of the component HTTP Request Handler. The manipulation of the argument scanList results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used
CVECVE-2025-14993
SeverityHIGH
TypeUPDATED
PublishedSun, Dec 21 · 05:16 AM CST
ModifiedMon, Sep 28 · 10:10 AM CDT
CVE-2025-14995
8.8/10 · Worth your timeNVDvuln
Summary
A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
CVECVE-2025-14995
SeverityHIGH
TypeUPDATED
PublishedSun, Dec 21 · 09:15 AM CST
ModifiedMon, Sep 28 · 10:10 AM CDT
CVE-2026-16526
8.8/10 · Worth your timeNVDvuln
Summary
A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root.
CVECVE-2026-16526
SeverityHIGH
TypeUPDATED
PublishedThu, Jul 30 · 06:25 AM CDT
ModifiedMon, Sep 28 · 10:16 AM CDT
CVE-2026-18950
8.8/10 · Worth your timeNVDvuln
Summary
A flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a vulnerability related to how RoleBindings are created. The system does not properly validate the `roleRef` field, allowing a user to specify an arbitrary role, including highly privileged ones like `cluster-admin`. This can lead to
CVECVE-2026-18950
SeverityHIGH
TypeUPDATED
PublishedMon, Aug 10 · 09:17 PM CDT
ModifiedMon, Sep 28 · 10:16 AM CDT
CVE-2026-18951
8.8/10 · Worth your timeNVDvuln
Summary
A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit ClusterRole`. This allows any user with `edit ClusterRole` permissions in a namespace to create, modify, and delete `TrainJ
CVECVE-2026-18951
SeverityHIGH
TypeUPDATED
PublishedMon, Aug 10 · 09:17 PM CDT
ModifiedMon, Sep 28 · 10:16 AM CDT
CVE-2026-97509
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tb_service_release() and the ID array is owned by the parent XDomain.
CVECVE-2026-97509
SeverityHIGH
TypeUPDATED
PublishedThu, Sep 24 · 05:17 PM CDT
ModifiedMon, Sep 28 · 06:16 AM CDT
CVE-2026-13097
8.7/10 · Worth your timeNVDvuln
Summary
A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service princip
CVECVE-2026-13097
SeverityHIGH
TypeUPDATED
PublishedThu, Aug 20 · 11:16 AM CDT
ModifiedMon, Sep 28 · 10:16 AM CDT
CVE-2026-97450
8.4/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate handler object type in two places ACPICA: validate handler object type in acpi_ev_has_default_handler() and acpi_ev_find_region_handler().
CVECVE-2026-97450
SeverityHIGH
TypeUPDATED
PublishedThu, Sep 24 · 05:17 PM CDT
ModifiedMon, Sep 28 · 06:16 AM CDT
CVE-2026-97451
8.4/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) Add overflow check for Index + Length to prevent integer overflow when calculating the truncation length. This prevents negative size parameter being passed to memcpy().
CVECVE-2026-97451
SeverityHIGH
TypeUPDATED
PublishedThu, Sep 24 · 05:17 PM CDT
ModifiedMon, Sep 28 · 06:16 AM CDT
CVE-2026-97452
8.4/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references Prevent adding references for local, argument, and debug objects in acpi_ut_copy_simple_object().
CVECVE-2026-97452
SeverityHIGH
TypeUPDATED
PublishedThu, Sep 24 · 05:17 PM CDT
ModifiedMon, Sep 28 · 06:16 AM CDT
CVE-2026-97455
8.4/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() Fix use-after-free issue in acpi_ds_terminate_control_method() by clearing references to method locals and arguments.
CVECVE-2026-97455
SeverityHIGH
TypeUPDATED
PublishedThu, Sep 24 · 05:17 PM CDT
ModifiedMon, Sep 28 · 06:16 AM CDT
CVE-2026-19550
8.2/10 · Worth your timeNVDvuln
Summary
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh using an attacker-supplied server and credentials,
CVECVE-2026-19550
SeverityHIGH
TypeUPDATED
PublishedTue, Aug 11 · 09:17 PM CDT
ModifiedMon, Sep 28 · 10:16 AM CDT
CVE-2025-14800
8.1/10 · Worth your timeNVDvuln
Summary
The Redirection for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'move_file_to_upload' function in all versions up to, and including, 3.2.7. This makes it possible for unauthenticated attackers to copy arbitrary files on the affected site's serve
CVECVE-2025-14800
SeverityHIGH
TypeUPDATED
PublishedSun, Dec 21 · 08:15 AM CST
ModifiedMon, Sep 28 · 10:10 AM CDT
CVE-2025-9566
8.1/10 · Worth your timeNVDvuln
Summary
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritt
CVECVE-2025-9566
SeverityHIGH
TypeUPDATED
PublishedFri, Sep 05 · 08:15 PM CDT
ModifiedMon, Sep 28 · 02:17 AM CDT
CVE-2026-18147
8.1/10 · Worth your timeNVDvuln
Summary
A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute arbitrary JavaScript cod
CVECVE-2026-18147
SeverityHIGH
TypeUPDATED
PublishedWed, Sep 09 · 05:17 PM CDT
ModifiedMon, Sep 28 · 10:16 AM CDT
CVE-2026-79678
8.1/10 · Worth your timeNVDvuln
Summary
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environmen
CVECVE-2026-79678
SeverityHIGH
TypeUPDATED
PublishedMon, Sep 07 · 01:20 PM CDT
ModifiedMon, Sep 28 · 10:16 AM CDT
CVE-2026-3012
8.0/10 · Worth your timeNVDvuln
Summary
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect
CVECVE-2026-3012
SeverityHIGH
TypeUPDATED
PublishedWed, May 27 · 11:16 AM CDT
ModifiedMon, Sep 28 · 02:17 AM CDT
CVE-2026-16524
7.8/10 · Worth your timeNVDvuln
Summary
A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.
CVECVE-2026-16524
SeverityHIGH
TypeUPDATED
PublishedThu, Jul 30 · 06:25 AM CDT
ModifiedMon, Sep 28 · 10:16 AM CDT
