CVEs published February 9, 2026

GitLab has remediated a vulnerability in the Duo Workflow Service component of GitLab AI Gateway affecting all versions of the AI Gateway from 18.1.6, 18.2.6, 18.3.1 to 18.6.1, 18.7.0, and 18.8.0 in which…

An authentication bypass vulnerability in FUXA allows an unauthenticated, remote attacker to execute arbitrary code on the server when the Node-RED plugin is enabled.

A path traversal vulnerability in FUXA allows an unauthenticated, remote attacker to write arbitrary files to arbitrary locations on the server filesystem.

An insecure default configuration in FUXA allows an unauthenticated, remote attacker to gain administrative access and execute arbitrary code on the server.

An authentication bypass vulnerability in FUXA allows an unauthenticated, remote attacker to gain administrative access via the heartbeat refresh API and execute arbitrary code on the server.

The admin authorization middleware trusts client-controlled JWT claims (role and scope) without enforcing server-side role verification.

User-controlled query parameters are passed directly into DynamoDB query/filter construction without validation or sanitization.

The code evaluation endpoint does not validate the assessment lifecycle state before allowing execution.

User credentials are stored using AES‑ECB encryption with a hardcoded key.

Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote attacker to send oversized cookie values and trigger a stack buffer overflow, resulting in a…

An unauthenticated remote attacker can send a crafted HTTP request containing an overly long SESSIONID cookie.

Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path expressions.

an authorization bypass vulnerability in the FUXA allows an unauthenticated, remote attacker to create and modify arbitrary schedulers, exposing connected ICS/SCADA environments to follow-on actions.

The application fails to filter the phar:// protocol in URL validation, allowing attackers to upload a malicious Phar Polyglot file (disguised as JPEG) via the image upload feature, trigger Phar…

The backend/src/routes/results.routes.ts verify authentication but fails to enforce object-level authorization (ownership checks).

In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible

The application derives the tenant identifier directly from the email domain provided by the user, without validating domain ownership or registration.

The backend/src/routes/student.submission.routes.ts verify authentication but fails to enforce object-level authorization (ownership checks).

Instructors are able to upload a zip file to create an assignment from an exported configuration (courses/<:course_id>/assignments/upload_config_files).

The URBDRC client uses server-supplied interface numbers as array indices without bounds checks, causing an out-of-bounds read in libusb_udev_select_interface.

Ecam_encoder_compress_h264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in sws_scale.

C&Cm@il developed by HGiga has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read and modify any user's mail content.

A sandbox escape vulnerability allows sandboxed code to mutate host built-in prototypes by laundering the isGlobal protection flag through array literal intermediaries.

The application enables credentialed CORS requests but does not implement any CSRF protection mechanism.

The P2P terminal sharing feature (share start) opens a TCP socket on port 5757 without any authentication mechanism.

The Super-linter GitHub Action is vulnerable to command injection via crafted filenames.

There is a Privilege Escalation vulnerability in Craft CMS’s GraphQL API that allows an authenticated user with write access to one asset volume to escalate their privileges and modify/transfer assets…

The element-indexes/get-elements endpoint is vulnerable to SQL Injection via the criteria[orderBy] parameter (JSON body).

A flaw has been found in Tenda AC8 16.03.33.05.

A vulnerability was detected in Tenda AC8 16.03.33.05.

A flaw was found in Keycloak.

Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) register Windows services with unquoted file paths.

In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files.

A flaw was found in Keycloak.

DocumentSettings._determineIsTrusted treats the configuration value cSpell.trustedWorkspace as the authoritative trust flag.

PowerDocu contains a Windows GUI executable to perform technical documentations.

The PDF reader allows execution of a malicious binary (explorer.exe) located in the same directory as the opened PDF when the user clicks File → “Show in folder”.

MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability.

1.4.2, and 1.0.14, it is possible to make a specially crafted request with a valid API token that leads to privilege escalation.

SumatraPDF's update mechanism disables TLS hostname verification (INTERNET_FLAG_IGNORE_CERT_CN_INVALID) and executes installers without signature checks.

Adminer is open-source database management software.

The group chat WebSocket at wss://polarlearn.nl/api/v1/ws can be used without logging in.

The application logs highly sensitive data directly to console output without masking or redaction.

There is a security vulnerability where DMs and followers-only posts were exposed through the ActivityPub outbox endpoint without authorization.

The DNS C2 listener accepts unauthenticated TOTP bootstrap messages and allocates server-side DNS sessions without validating OTP values, even when EnforceOTP is enabled.

The mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property.

The application contains an unauthenticated file read vulnerability due to the lack of access control on the /uploads directory.

The RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in rdpsnd_treat_wave.

This vulnerability is fixed in 3.22.0.

Audin_server_recv_formats frees an incorrect number of audio formats on parse failure (i + i), leading to out-of-bounds access in audio_formats_free.

AAsynchronous bulk transfer completions can use a freed channel callback after URBDRC channel close, leading to a use after free in urb_write_completion.

Sdl_Pointer_New frees data on failure, then pointer_free calls sdl_Pointer_Free and frees it again, triggering ASan UAF.

A capture thread sends sample responses using a freed channel callback after a device channel close, leading to a use after free in ecam_channel_write.

AUDIN format renegotiation frees the active format list while the capture thread continues using audin->format, leading to a use after free in audio_format_compatible.

Urb_select_interface can free the device's MS config on error but later code still dereferences it, leading to a use after free in libusb_udev_select_interface.

Video_timer can send client notifications after the control channel is closed, dereferencing a freed callback and triggering a use after free.

A NULL pointer dereference vulnerability in rdp_write_logon_info_v2() allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0.

An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path traversal sequences (e.g., /js/../cgi-bin/post.cgi), gaining unauthorized access to…

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

CORSConfig.allowed_origins_regex is constructed using a regex built from configured allowlist values and used with fullmatch() for validation.

A flaw has been found in itsourcecode News Portal Project 1.0.

A security vulnerability has been detected in code-projects Online Reviewer System 1.0.

A security flaw has been discovered in code-projects Online Reviewer System 1.0.

A vulnerability was identified in code-projects Online Reviewer System 1.0.

A vulnerability was found in itsourcecode Event Management System 1.0.

A vulnerability was identified in code-projects Online Music Site 1.0.

A vulnerability was determined in code-projects Online Music Site 1.0.

A security flaw has been discovered in code-projects Online Reviewer System 1.0.

A vulnerability was identified in code-projects Online Reviewer System 1.0.

A vulnerability was determined in code-projects Online Reviewer System 1.0.

A vulnerability was found in code-projects Online Reviewer System 1.0.

A vulnerability has been found in code-projects Online Reviewer System 1.0.

There is a flaw in the path sanitization logic allows an authenticated attacker with administrative privileges to bypass directory traversal protections.

A Remote Code Execution (RCE) vulnerability exists in Craft CMS where the assembleLayoutFromPost() function in src/services/Fields.php fails to sanitize user-supplied configuration data before passing it to…

A vulnerability has been found in D-Link DIR-823X 250416.

Users with the Manage Users permission can lock and unlock users.

Dell Display and Peripheral Manager (Windows) versions prior to 2.2 contain an Improper Link Resolution Before File Access ('Link Following') vulnerability in the Installer and Service.

It is possible to make the entire Cube API unavailable by submitting a specially crafted request to a Cube API endpoint.

In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs

The GET /api/students/:email PUT /api/students/:email/status, and DELETE /api/students/:email routes in backend/src/routes/student.routes.ts only enforce authentication using authenticateToken but do not…

The saveAsset GraphQL mutation uses filter_var(..., FILTER_VALIDATE_IP) to block a specific list of IP addresses.

The saveAsset GraphQL mutation validates the initial URL hostname and resolved IP against a blocklist, but Guzzle follows HTTP redirects by default.

The save_images_Asset GraphQL mutation can be abused to fetch internal URLs by providing a domain name that resolves to an internal IP address, bypassing hostname validation.

FileStore maps cache keys to filenames using Unicode NFKD normalization and ord() substitution without separators, creating key collisions.

In litestar.middleware.allowed_hosts, allowlist entries are compiled into regex patterns in a way that allows regex metacharacters to retain special meaning (e.g., . matches any character).

The courses/<:course_id>/assignments/<:assignment_id>/submissions/html_content accepted a select_file_id parameter to serve SubmissionFile objects containing a record of files submitted by students.

Apache Airflow versions 3.0.0 - 3.1.7, has vulnerability that allows authenticated UI users with permission to one or more specific Dags to view import errors generated by other Dags they did not have…

Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with custom permissions limited to task access to view task logs without having task log access.

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

A vulnerability was determined in D-Link DCS-933L up to 1.14.11.

A flaw has been found in D-Link DI-7100G C1 24.04.18D1.

The Python code being run by 'runPython' or 'runPythonAsync' is not isolated from the rest of the JS code, allowing any Python code to use the Pyodide APIs to modify the JS environment.

The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the underlying Python code to access the localhost interface of the host to perform SSRF…

Faraday's build_exclusive_url method (in lib/faraday/connection.rb) uses Ruby's URI#merge to combine the connection's base URL with a user-supplied path.

captive browser, a dedicated Chrome instance to log into captive portals without messing with DNS settings.

LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform.

The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack.

A heap out-of-bounds read vulnerability exists in SumatraPDF's MOBI HuffDic decompressor.

The sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used.

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files.

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.1.12 via the 'saveDataSource' function.

The Adminer route (/admin/adminer) was accessible without Shopware admin authentication.

A security vulnerability has been identified in the Harden-Runner GitHub Action (Community Tier) that allows outbound network connections to evade audit logging.

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p21, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows users with the "Use WATO" permission to access the "Analyze configuration" page by…

Crafted zones can lead to increased incoming network traffic.

Authentication Bypass by Alternate Name vulnerability in Apache Shiro.

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor.

Stored Cross-Site Scripting (XSS) vulnerability in Loggro Pymes, via the 'Facebook' parameter in '/loggrodemo/jbrain/ConsultaTerceros' endpoint.

Stored Cross-Site Scripting (XSS) vulnerability in Loggro Pymes, via the 'descripción' parameter in the '/loggrodemo/jbrain/MaestraCuentasBancarias' endpoint.

A stored XSS vulnerability exists in the Number field type settings.

Craft has a stored XSS via Entry Type names.

A vulnerability was found in D-Link DCS-931L up to 1.13.0.

A vulnerability has been found in DouPHP up to 1.9.

A security flaw has been discovered in code-projects Online Music Site 1.0.

An HTML Injection vulnerability allows an authenticated user to modify the DOM and add e.g. form elements that call certain endpoints or link elements that redirect the user on active interaction.

A vulnerability was discovered in go-git whereby data integrity values for .pack and .idx files were not properly verified.

Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage.

A flaw has been found in rachelos WeRSS we-mp-rss up to 1.4.8.

A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8.

A vulnerability was detected in code-projects Online Reviewer System 1.0.

A security vulnerability has been detected in AprilRobotics apriltag up to 3.4.5.

A vulnerability was identified in CCExtractor up to 183.

A vulnerability was determined in janet-lang janet up to 1.40.1.

A vulnerability was found in janet-lang janet up to 1.40.1.

A vulnerability has been found in janet-lang janet up to 1.40.1.

A weakness has been identified in code-projects Online Reviewer System 1.0.

A weakness has been identified in code-projects for Plugin 1.0.

A security vulnerability has been detected in ZeroWdd studentmanager up to 2151560fc0a50ec00426785ec1e01a3763b380d9.

A weakness has been identified in heyewei JFinalCMS 5.0.0.