CVEs published February 6, 2026

Claude Code's bubblewrap sandboxing mechanism failed to properly protect the .claude/settings.json configuration file when it did not exist at startup.

There is a sandbox escape vulnerability due to a mismatch between the key on which the validation is performed and the key used for accessing properties.

EPyT-Flow’s REST API parses attacker-controlled JSON request bodies using a custom deserializer (my_load_from_json) that supports a type field.

As Map is in SAFE_PROTOYPES, it's prototype can be obtained via Map.prototype.

A sandbox escape is possible by shadowing hasOwnProperty on a sandbox object, which disables prototype whitelist enforcement in the property-access path.

The return values of functions aren't wrapped.

An arbitrary file write vulnerability exists in OpenProject’s repository changes endpoint (/projects/:project_id/repository/changes) when rendering the “latest changes” view via git log.

An Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin.

The application automatically creates an administrative account with known default credentials (admin/admin) upon the first initialization.

The application uses a hard-coded, static default password for all newly created student accounts.

When querying JSON or richText fields, user input was directly embedded into SQL without escaping, enabling blind SQL injection attacks.

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or…

A vulnerability was detected in IP-COM W30AP up to 1.0.0.11(1340).

BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability.

A flaw was found in Keylime.

Antrea's network policy priority assignment system has a uint16 arithmetic overflow bug that causes incorrect OpenFlow priority calculations when handling a large numbers of policies with various priority…

An authorization bypass vulnerability in FUXA allows an unauthenticated, remote attacker to modify device tags via WebSockets.

Claude Code failed to properly validate directory changes when combined with write operations to protected folders.

A critical Remote Command Execution (RCE) vulnerability has been identified in the Frigate integration with go2rtc.

The Agentspace service was affected by a vulnerability that exposed sensitive information due to the use of predictable Google Cloud Storage bucket names.

The existing layers of security in enclave-vm are insufficient: The AST sanitization can be bypassed with dynamic property accesses, the hardening of the error objects does not cover the peculiar behavior…

OpenFGA v1.8.5 to v1.11.2 ( openfga-0.2.22<= Helm chart <= openfga-0.2.51, v.1.8.5 <= docker <= v.1.11.2) are vulnerable to improper policy enforcement when certain Check calls are executed.

A vulnerability has been found in UTT 进取 520W 1.7.7-180627.

A vulnerability was detected in UTT 进取 520W 1.7.7-180627.

A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627.

A weakness has been identified in UTT 进取 520W 1.7.7-180627.

The WP Duplicate plugin for WordPress is vulnerable to Missing Authorization leading to Arbitrary File Upload in all versions up to and including 1.1.8.

Calibre's CHM reader contains a path traversal vulnerability that allows arbitrary file writes anywhere the user has write permissions.

AServer-Side Request Forgery (SSRF) vulnerability exists in Pydantic AI's URL download functionality.

It is possible to append to arbitrary files via /logger endpoint using an attacker-controlled on_disk.log_file path.

An unauthenticated local client could use the Gateway WebSocket API to write config via config.apply and set unsafe cliPath values that were later used for command discovery, enabling command injection as…

UAF concurrency vulnerability in the graphics module.

Out-of-bounds write vulnerability in the camera module.

A path traversal vulnerability in Calibre's EPUB conversion allows a malicious EPUB file to corrupt arbitrary existing files writable by the Calibre process.

A bug in the GRPC authorization middleware of the "Reva" component of OpenCloud allows a malicious user to bypass the scope verification of a public link.

When using P256 certificates (which is not the default configuration), it is possible to evade a blocklist entry created against the fingerprint of a certificate by using ECDSA Signature Malleability to use…

A path traversal vulnerability exists in the updateWikiPage function of Gogs.

A Server-Side Template Injection (SSTI) vulnerability in Calibre's Templite templating engine allows arbitrary code execution when a user converts an ebook using a malicious custom template file via the…

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.

A denial of service (DoS) vulnerability exists in the multipart file handling logic of @adonisjs/bodyparser.

A critical IDOR vulnerability exists in Spree Commerce's guest checkout flow that allows any guest user to bind arbitrary guest addresses to their order by manipulating address ID parameters.

An information disclosure vulnerability in FUXA allows an unauthenticated, remote attacker to retrieve sensitive administrative database credentials.

NiceGUI's FileUpload.name property exposes client-supplied filename metadata without sanitization, enabling path traversal when developers use the pattern UPLOAD_DIR / file.name.

Claude Code failed to strictly enforce deny rules configured in settings.json when accessing files through symbolic links.

Arbitrary attribute access leads to disclosure of Salesforce auth token.

The LDAP ingestion source is vulnerable to MITM attack through TLS downgrade.

MuPDF versions 1.23.0 through 1.27.0 contain a double-free vulnerability in fz_fill_pixmap_from_display_list() when an exception occurs during display list rendering.

Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure

Heap-based buffer overflow vulnerability in the image module.

A vulnerability was found in code-projects Simple Blood Donor Management System 1.0.

A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0.

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be.

A vulnerability was detected in SourceCodester Medical Center Portal Management System 1.0.

A flaw has been found in itsourcecode School Management System 1.0.

A security flaw has been discovered in itsourcecode Student Management System 1.0.

A vulnerability was identified in itsourcecode Student Management System 1.0.

A vulnerability was determined in itsourcecode Student Management System 1.0.

A vulnerability was found in itsourcecode Student Management System 1.0.

A prototype pollution vulnerability in AdonisJS multipart form-data parsing may allow a remote attacker to manipulate object prototypes at runtime.

a path traversal vulnerability in the Pydantic AI web UI allows an attacker to serve arbitrary JavaScript in the context of the application by crafting a malicious URL.

Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys.

Buffer overflow vulnerability in the HDC module.

Address read vulnerability in the communication module.

A heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option.

A path traversal in the website content subsystem lets an authenticated operator read arbitrary files on the Sliver server host.

There is an improper access control vulnerability in the /api/v1/users/ endpoint allows any authenticated user to enumerate all users in the system and retrieve sensitive information including email…

time provides date and time handling in Rust.

Claude Code failed to properly validate commands using piped sed operations with the echo command, allowing attackers to bypass file write restrictions.

There is a vulnerability in the HTTP Request node's credential domain validation allowed an authenticated attacker to send requests with credentials to unintended domains, potentially leading to credential…

UAF vulnerability in the security module.

OpenSTAManager v2.9.8 and earlier contain a critical Error-Based SQL Injection vulnerability in the Prima Nota (Journal Entry) module's add.php file.

OpenSTAManager v2.9.8 and earlier contain a critical Error-Based SQL Injection vulnerability in the bulk operations handler for the Scadenzario (Payment Schedule) module.

OpenSTAManager v2.9.8 and earlier contain a critical Time-Based Blind SQL Injection vulnerability in the global search functionality.

OpenSTAManager v2.9.8 and earlier contain a critical Time-Based Blind SQL Injection vulnerability in the article pricing completion handler.

There is an arbitrary file read/write via path traversal in Git hook editing.

The endpoint "PUT /repos/:owner/:repo/contents/*" does not require write permissions and allows access with read permission only via repoAssignment().

An authenticated user can cause a DOS attack.

The WaveSurfer-WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's audio shortcode in all versions up to, and including, 2.8.3 due to insufficient input sanitization and…

The Docus – YouTube Video Playlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'docusplaylist' shortcode in all versions up to, and including, 1.0.6 due to insufficient input…

The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' parameter of the ocplus_button shortcode in all versions up to, and…

The Tune Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CSV import in all versions up to, and including, 1.6.3.

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the `yoast-schema` block attribute in all versions up to, and…

The Employee Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_title' parameter in the `search_employee_directory` shortcode in all versions up to, and including,…

The Events Listing Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Event URL' parameter in all versions up to, and including, 1.3.4 due to insufficient input sanitization…

Permission control vulnerability in the HDC module.

A security flaw has been discovered in Flycatcher Toys smART Pixelator 2.0.

A weakness has been identified in Portabilis i-Educar up to 2.10.

A flaw has been found in SourceCodester Gas Agency Management System 1.0.

A vulnerability was detected in abhiphile fermat-mcp up to 47f11def1cd37e45dd060f30cdce346cbdbd6f0a.

A security vulnerability has been detected in isaacwasserman mcp-vegalite-server up to 16aefed598b8cd897b78e99b907f6e2984572c61.

Permission control vulnerability in the AMS module.

Out-of-bounds read issue in the media subsystem.

client-certificate-auth is middleware for Node.js implementing client SSL certificate authentication/authorization.

The ui.markdown() component uses the markdown2 library to convert markdown content to HTML, which is then rendered via innerHTML.

Vulnerability of improper permission control in the print module.

A reflected cross-site scripting (XSS) vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allows unauthenticated attackers to craft a malicious URL, that if visited by a victim,…

Out-of-bounds write vulnerability in the DFX module.

Vulnerability of improper criterion security check in the card module.

Out-of-bounds read vulnerability in the graphics module.

Identity authentication bypass vulnerability in the window module.

Out-of-bounds write vulnerability in the file system module.

Out-of-bounds access vulnerability in the frequency modulation module.

If an attacker has the ability control configuration options passed to sceditor.create(), like emoticons, charset, etc. then it's possible for them to trigger an XSS attack due to lack of sanitisation of…

A cross-collection Insecure Direct Object Reference (IDOR) vulnerability exists in the payload-preferences internal collection.

A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Log Message in the Session Page in OrcaStatLLM-Researcher that allows attackers to inject and execute arbitrary JavaScript code in…

Some administrative actions on the user profile were susceptible to stored XSS in group names or channel names.

Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML.

5.1.10, 5.2.7, and 5.3.2, unauthenticated users can view completed guest orders by Order ID.

There is a time-based user enumeration vulnerability in the user authentication functionality of PrestaShop.

A public (unauthenticated) tRPC endpoint widget.app.ping accepts an arbitrary url and performs a server-side request to that URL.

Prior to Collabora Online Development Edition version 25.04.08.2 and prior to Collabora Online versions 23.05.20.1, 24.04.17.3, and 25.04.7.5, a user with view-only rights and no download privileges can…

A vulnerability was identified in Open5GS up to 2.7.6.

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01.

A weakness has been identified in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01.

A security flaw has been discovered in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01.

A security vulnerability has been detected in happyfish100 libfastcommon up to 1.0.84.

A flaw has been found in mruby up to 3.4.0.

A vulnerability was detected in kalyan02 NanoCMS up to 0.4.

A weakness has been identified in Free5GC up to 4.1.0.

A security flaw has been discovered in Free5GC up to 4.1.0.

A vulnerability was identified in Free5GC up to 4.1.0.

A vulnerability was determined in Free5GC up to 4.1.0.

A vulnerability was found in Edimax BR-6208AC 2_1.02.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6.

Address read vulnerability in the HDC module.

A security flaw has been discovered in D-Link DIR-823X 250416.

A vulnerability was determined in D-Link DIR-823X 250416.

A vulnerability was found in DCN DCME-320 up to 20260121.

Lute 1.7.6 and earlier (as used in SiYuan before) has a Stored Cross-Site Scripting (XSS) vulnerability in the Markdown rendering engine.

Files served below the /uploads/ endpoint did not use a more strict security-policy.

The drag&drop handler moving an agenda item to a different section was not properly checking if the target meeting section is part of the same meeting (or is the backlog, in case of recurring meetings).

The Code Snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.9.4.

The Timeline Block – Beautiful Timeline Builder for WordPress (Vertical & Horizontal Timelines) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including,…

A vulnerability has been found in Sanluan PublicCMS up to 4.0.202506.d/5.202506.d/6.202506.d.

A security flaw was identified in the Ansible Lightspeed API conversation endpoints that handle AI chat interactions.

Type confusion vulnerability in the camera module.

An HTML injection vulnerability occurs in the time tracking function of OpenProject.

20.18.2, 21.12.1, 22.8.2, and 23.2.2, user supplied/control values for Cookies and any GET variable query Parameter are directly interpolated into the HTML of the page using ast_str_append.

A vulnerability was identified in Portabilis i-Educar up to 2.10.

A flaw has been found in ggml-org llama.cpp up to 55abc39.

A flaw has been found in micropython up to 1.27.0.

A vulnerability was detected in libuvc up to 0.0.7.

A security vulnerability has been detected in oatpp up to 1.3.1.

A vulnerability has been found in Edimax BR-6288ACL up to 1.12.

20.18.2, 21.12.1, 22.8.2, and 23.2.2, the ast_xml_open() function in xml.c parses XML documents using libxml with unsafe parsing options that enable entity expansion and XInclude processing.

20.18.2, 21.12.1, 22.8.2, and 23.2.2, the asterisk/contrib/scripts/ast_coredumper runs as root, as noted by the NOTES tag on line 689 of the ast_coredumper file.

20.18.2, 21.12.1, 22.8.2, and 23.2.2, when ast_coredumper writes its gdb init and output files to a directory that is world-writable (for example /tmp), an attacker with write permission(which is all users…

Versions of Winter CMS before 1.2.10 allow users with access to the CMS Asset Manager were able to upload SVGs without automatic sanitization.