CVEs published March 27, 2026

The command auto-approval module in CodeRider-Kilo contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective.

Incus instances have an option to provide credentials to systemd in the guest.

The Agentic Assistant feature in Langflow executes LLM-generated Python code during its validation phase.

OS Command Injection vulnerability in NEC Platforms, Ltd.

OS Command Injection vulnerability in NEC Platforms, Ltd.

Path Traversal vulnerability in NEC Platforms, Ltd.

Fleet is open source device management software.

Locutus brings stdlibs of other programming languages to JavaScript for educational purposes.

Locutus brings stdlibs of other programming languages to JavaScript for educational purposes.

Handlebars provides the power necessary to let users build semantic templates.

The application exposes passkey registration endpoints without requiring prior authentication.

The FLIP login page in versions 0.1.1 and prior has no rate limiting or CAPTCHA, enabling brute-force and credential-stuffing attacks.

The `fixCleanTitle()` static method in `objects/category.php` constructs a SQL SELECT query by directly interpolating both `$clean_title` and `$id` into the query string without using prepared statements or…

Versions prior to 6.0 have a critical OS Command Injection vulnerability in the savesettings.php file.

Under specific conditions, models using conditions with caching enabled can result in two different check requests producing the same cache key.

The RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters.

OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java.

An indirect prompt injection vulnerability exists in the email channel processing module (`nanobot/channels/email.py`), allowing a remote, unauthenticated attacker to execute arbitrary LLM instructions (and…

Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.

Code injection vulnerability exists in BUFFALO Wi-Fi router products.

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/manage_product.php file via the "id" parameter.

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/view_product.php file via the "id" parameter.

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_customer action).

The command auto-approval module in Axon Code contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective.

OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products.

Bludit allows user's session identifier to be set before authentication.

A SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key.

Home Assistant is open source home automation software that puts local control and privacy first.

A stored XSS in the Web Clipper rendering flow can be escalated to remote code execution in the desktop app.

OpenBao does not prompt for user confirmation when logging in via JWT/OIDC and a role with `callback_mode` set to `direct`.

AI Code offers two options: Execute safe commands and execute all commands.

Gematik Authenticator securely authenticates users for login to digital health applications.

Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass.

The `Live_schedule::keyExists()` method constructs a SQL query by interpolating a stream key directly into the query string without parameterization.

A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impact (RCE).

The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the multipart form data, allowing an attacker to write files to arbitrary locations on the filesystem using path traversal…

A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309.

A vulnerability has been found in Tenda AC15 15.03.05.19.

A flaw has been found in Tenda AC7 15.03.06.44.

A vulnerability was identified in Tenda AC6 15.03.05.16.

A vulnerability was determined in Tenda AC6 15.03.05.16.

A vulnerability was determined in Tenda AC5 15.03.06.47.

A vulnerability was found in Tenda AC5 15.03.06.47.

A vulnerability has been found in Tenda AC5 15.03.06.47.

Fleet is open source device management software.

The `_read_flow` helper in `src/backend/base/langflow/api/v1/flows.py` branched on the `AUTO_LOGIN` setting to decide whether to filter by `user_id`.

The file `html/socio/sistema/deletar_tag.php` uses `extract($_REQUEST)` on line 14 and directly concatenates the `$id_tag` variable into SQL queries on lines 16-17 without prepared statements or sanitization.

A code injection vulnerability in `ECMAScriptModuleCompiler` allows an attacker to achieve Remote Code Execution (RCE) by injecting arbitrary JavaScript expressions inside `export { }` declarations in ES…

The web server spawned by `incus webui` incorrectly validates the authentication token such that an invalid value will be accepted. `incus webui` runs a local web server on a random localhost port.

In `objects/like.php`, the `getLike()` method constructs a SQL query using a prepared statement placeholder (`?`) for `users_id` but directly concatenates `$this->videos_id` into the query string without…

25.0.92, and 26.0.17, an authenticated SQL Injection vulnerability in the JMAP `Contact/query` endpoint allows any authenticated user with basic addressbook access to extract arbitrary data from the…

The bypass is relevant for other POST routes as well.

3.6.11, and 3.7.0-ea.3, when `headerField` is configured with a non-canonical HTTP header name (e.g., `x-auth-user` instead of `X-Auth-User`), an authenticated attacker can inject their own canonical…

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_category action).

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_user action).

Fleet is open source device management software.

Two model implementation files hardcode `trust_remote_code=True` when loading sub-components, bypassing the user's explicit `--trust-remote-code=False` security opt-out.

Fleet is open source device management software.

Bludit’s API plugin allows an authenticated attacker with a valid API token to upload files of any type and extension without restriction, which can then be executed, leading to Remote Code Execution.

Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.

A flaw was found in Undertow.

A flaw was found in Undertow.

A flaw was found in Undertow.

A cross-site scripting vulnerability stored in the note history comparison viewer can escalate to remote code execution in a desktop application.

Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability in BedrockProxyChatModel when processing multimodal messages that include user-supplied media URLs.

But still performs server-side requests to internal-only resources when those resources are referenced through an internal hostname.

`isPrivateIP()` in `packages/api/src/auth/domain.ts` fails to detect IPv4-mapped IPv6 addresses in their hex-normalized form, allowing any authenticated user to bypass SSRF protection and make the server…

When using a custom BuildKit frontend, the frontend can craft an API message that causes files to be written outside of the BuildKit state directory for the execution context.

Versions up to and including 0.1.1 contain KQL (Kusto Query Language) injection vulnerabilities in three MCP tool handlers: `get_table_schema`, `sample_table_data`, and `get_table_details`.

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via the "id" parameter.

The Twilio integration webhook handler accepts any POST request without validating Twilio's 'X-Twilio-Signature'.

The YPTWallet Stripe payment confirmation page directly echoes the `$_REQUEST['plugin']` parameter into a JavaScript block without any encoding or sanitization.

Express XSS Sanitizer is Express 4.x and 5.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross Site Scripting (XSS) attack.

Handlebars provides the power necessary to let users build semantic templates.

Fleet is open source device management software.

The `@mobilenext/mobile-mcp` server contains a Path Traversal vulnerability in the `mobile_save_screenshot` and `mobile_start_screen_recording` tools.

Handlebars provides the power necessary to let users build semantic templates.

Handlebars provides the power necessary to let users build semantic templates.

The Ultimate Member plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.2.

Gematik Authenticator securely authenticates users for login to digital health applications.

The `docker.system_packages` field in `bentofile.yaml` accepts arbitrary strings that are interpolated directly into Dockerfile `RUN` commands without sanitization.

Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

Traefik's Knative provider builds router rules by interpolating user-controlled values into backtick-delimited rule expressions without escaping.

Versions 0.8.2-rc2 through 0.8.2 are vulnerable to a server-side request forgery (SSRF) attack when using agent actions or MCP.

Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin.

OpenHands is software for AI-driven development.

Fleet is open source device management software.

Fleet is open source device management software.

Versions prior to 20.8.9 may attach cookies from the current page origin (`window.location`) instead of the request target URL when `fetch(..., { credentials: "include" })` is used.

Handlebars provides the power necessary to let users build semantic templates.

The application exposes three password verification endpoints, all of which are publicly accessible.

Ed25519 signature verification accepts forged non-canonical signatures where the scalar S is not reduced modulo the group order (`S >= L`).

RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3).

A Denial of Service (DoS) vulnerability exists in the node-forge library due to an infinite loop in the BigInteger.modInverse() function (inherited from the bundled jsbn library).

A remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of `CONTINUATION` frames.

Netty incorrectly parses quoted strings in HTTP/1.1 chunked transfer encoding extension values, enabling request smuggling attacks.

AVideo allows content owners to password-protect individual videos.

Insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root.

Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop.

The current implementation of attested TLS (aTLS) in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2.

The Flannel project includes an experimental Extension backend that allows users to easily prototype new backend types.

Server-Side Request Forgery (SSRF) vulnerability exists in the AnnounContent of the /admin/read.php in OTCMS V7.66 and before.

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file.

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file.

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sales.php file.

A path traversal vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19) in the Beifong AI News and Podcast Agent backend in FastAPI backend,…

The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.

Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory.

Fleet is open source device management software.

When a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts the value directly into the @field:{VALUE} RediSearch TAG block without escaping characters.This issue…

Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter.

`pki.verifyCertificateChain()` does not enforce RFC 5280 basicConstraints requirements when an intermediate certificate lacks both the `basicConstraints` and `keyUsage` extensions.

The cpp-httplib HTTP client forwards stored Basic Auth, Bearer Token, and Digest Auth credentials to arbitrary hosts when following cross-origin HTTP redirects (301/302/307/308).

Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack.

A security vulnerability has been detected in chatwoot up to 4.11.1.

A user with permission "update world" in any Venueless world is able to exfiltrate chat messages from direct messages or channels in other worlds on the same server due to a bug in the reporting feature.

A vulnerability was detected in letta-ai letta 0.16.4.

A vulnerability was found in OpenBMB XAgent 1.0.0.

A vulnerability was detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.44.

A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.44.

A weakness has been identified in mingSoft MCMS up to 5.5.0.

A security vulnerability has been detected in Shenzhen Ruiming Technology Streamax Crocus up to 1.3.44.

A security flaw has been discovered in code-projects Simple Laundry System 1.0.

The NetworkManager role was granted backup and restore permission.

Workspace environment variable values are interpolated into JavaScript string literals without escaping single quotes in the NativeTS executor.

1.55.22, 1.56.22, 1.57.16, 1.58.10, and 1.59.4, authenticated admins on Metabase Enterprise Edition can achieve Remote Code Execution (RCE) and Arbitrary File Read via the `POST…

elixir-nodejs provides an Elixir API for calling Node.js functions.

Any authenticated user can overwrite any file's content by ID through the `POST /api/v1/retrieval/process/files/batch` endpoint.

A security flaw has been discovered in UltraVNC up to 1.6.4.0.

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS.

User-created MCP (Model Context Protocol) servers can include arbitrary HTTP headers that undergo credential placeholder substitution.

Dovecot OTP authentication is vulnerable to replay attack under specific conditions.

The '/logs' and '/logs-stream' endpoints in the log router allow any authenticated user to read the full application log buffer.

Missing Authorization vulnerability in NEC Platforms, Ltd.

Fleet is open source device management software.

PyLoad's download engine accepts arbitrary URLs without validation, enabling Server-Side Request Forgery (SSRF) attacks.

The `jq:` and `jqraw:` include filter expressions allow use of the jq `env` builtin, which reads all process environment variables and stores them as the watch snapshot.

A private note attached to a non-private link can be disclosed to a different authenticated user via the web interface.

Versions prior to 1.7.0 panic when processing Authentication Response and Authentication Failure NAS message missing IEs.

A deadlock in the AMF's SCTP notification handler causes the entire AMF control plane to hang until the process is restarted.

Versions prior to 1.7.0 panic when processing a specially crafted NGAP LocationReport message.

A control panel user with access to Antlers-enabled fields could access sensitive application configuration values by inserting config variables into their content.

The markdown preview endpoint could be manipulated to return augmented data from arbitrary fieldtypes.

`isSSRFSafeURL()` validates URLs against private/reserved IP ranges before fetching, but `url_get_contents()` follows HTTP redirects without re-validating the redirect target.

The brace-expansion library generates arbitrary strings containing a common prefix and suffix.

An Insecure Direct Object Reference (IDOR) vulnerability allows an authenticated low-privileged user to access the password change functionality of other users, including administrators, by manipulating the…

The `v4_is_invalid()` function in `activitypub-federation-rust` (`src/utils.rs`) does not check for `Ipv4Addr::UNSPECIFIED` (0.0.0.0).

The Smart Slider 3 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.5.1.33 via the 'actionExportAll' function.

A testdata data-source can be used to trigger out-of-memory crashes in Grafana.

A resample query can be used to trigger out-of-memory crashes in Grafana.

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards.

A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags.

A security flaw has been discovered in code-projects Social Networking Site 1.0.

A flaw has been found in itsourcecode Free Hotel Reservation System 1.0.

A security vulnerability has been detected in letta-ai letta 0.16.4.

A weakness has been identified in huggingface smolagents 1.25.0.dev0.

A security vulnerability has been detected in mingSoft MCMS up to 5.5.0.

A vulnerability was identified in Page-Replica Page Replica up to e4a7f52e75093ee318b4d5a9a9db6751050d2ad0.

The `plugin/PlayLists/View/Playlists_schedules/add.json.php` endpoint allows any authenticated user with streaming permission to create or modify broadcast schedules targeting any playlist on the platform,…

A path traversal vulnerability exists in Calibre' handling of images in Markdown and other similar text-based files allowing an attacker to include arbitrary files from the file system into the converted book.

The external URL detection used for redirect validation on unauthenticated endpoints could be bypassed, allowing users to be redirected to external URLs after actions like form submissions and…

The `user:reset_password_form` tag could render user-input directly into HTML without escaping, allowing an attacker to craft a URL that executes arbitrary JavaScript in the victim's browser.

OpenBao installations that have an OIDC/JWT authentication method enabled and a role with `callback_mode=direct` configured are vulnerable to XSS via the `error_description` parameter on the page for a…

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the view_category.php file via the "limit" parameter.

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the view_sales.php file via the "limit" parameter.

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the view_product.php file via the "limit" parameter.

Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.

The Ruby SDK's streamable_http_transport.rb implementation contains a session hijacking vulnerability.

Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remote attackers to cause a…

The listing tables on multiple management pages (Host, Storage, Group, Image, Printer, Snapin) are vulnerable to Stored Cross-Site Scripting (XSS), due to insufficient server-side parameter sanitization in…

Hidden Functionality vulnerability in NEC Platforms, Ltd.

A flaw was found in firewalld.

The JWK parsing for RSA-PSS did not protect against a NULL value when expecting to parse JSON string values.

A Server-Side Request Forgery vulnerability in the background-image endpoint of calibre e-book reader's web view allows an attacker to perform blind GET requests to arbitrary URLs and exfiltrate information…

The '/api/v1/files/images/{flow_id}/{file_name}' endpoint serves SVG files with the 'image/svg+xml' content type without sanitizing their content.

Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or…

The `verifyTokenSocket()` function in `plugin/YPTSocket/functions.php` has its token timeout validation commented out, causing WebSocket tokens to never expire despite being generated with a 12-hour timeout.

The `plugin/Live/uploadPoster.php` endpoint allows any authenticated user to overwrite the poster image for any scheduled live stream by supplying an arbitrary `live_schedule_id`.

Authenticated Control Panel users could view entry revisions for any collection with revisions enabled, regardless of whether they had the required collection permissions.

1.18.8, and 1.19.2, Ingress Network Policies are not enforced for traffic from pods to L7 Services (Envoy, GAMMA) with a local backend on the same node, when Per-Endpoint Routing is enabled and BPF Host…

Home Assistant is open source home automation software that puts local control and privacy first.

Home Assistant is open source home automation software that puts local control and privacy first.

ByteDance DeerFlow versions prior to commit 5dbb362 contain a stored cross-site scripting vulnerability in the artifacts API that allows attackers to execute arbitrary scripts by uploading malicious HTML or…

A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel.

An access control check is missing when deleting a file from a knowledge base.

Bludit is vulnerable to Stored Cross-Site Scripting (XSS) in its image upload functionality.

The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authentication or authorization checks, allowing any unauthenticated user to download images belonging to any flow by knowing…

Appsmith versions prior to 1.98 expose sensitive instance management API endpoints without authentication.

The `get_api_video_file` and `get_api_video` API endpoints in AVideo return full video playback sources (direct MP4 URLs, HLS manifests) for password-protected videos without verifying the video password.

The `transferBalance()` method in `plugin/YPTWallet/YPTWallet.php` contains a Time-of-Check-Time-of-Use (TOCTOU) race condition.

The `categories.json.php` endpoint, which serves the category listing API, fails to enforce user group-based access controls on categories.

An issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions. `ecdsa.der.remove_octet_string()` accepts truncated DER where the encoded length…

The `get_api_video_password_is_correct` API endpoint allows any unauthenticated user to verify whether a given password is correct for any password-protected video.

Three `list.json.php` endpoints in the Scheduler plugin lack any authentication check, while every other endpoint in the same plugin directories (`add.json.php`, `delete.json.php`, `index.php`) requires…

The `objects/playlistsVideos.json.php` endpoint returns the full video contents of any playlist by ID without any authentication or authorization check.

A heap-buffer-overflow write in MapServer’s SLD (Styled Layer Descriptor) parser lets a remote, unauthenticated attacker crash the MapServer process by sending a crafted SLD with more than 100 Threshold…

The SSE streaming endpoint `/api/agents/chat/stream/:streamId` does not verify that the requesting user owns the stream.

A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too much CPU.

When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path traversal can happen if the domain…

A reflected Cross-Site Scripting (XSS) vulnerability has been discovered in Clickedu.

WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability.

An attacker that knows of a quote before it has reached a server can prevent it from being correctly processed on that server.

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in in the view_purchase.php file via the "limit" parameter.

Handlebars provides the power necessary to let users build semantic templates.

A flaw has been found in wandb OpenUI up to 1.0.

A vulnerability was identified in dloebl CGIF up to 0.5.2.

A weakness has been identified in SourceCodester Note Taking App up to 1.0.

A vulnerability was determined in SourceCodester Diary App 1.0.

An authenticated Control Panel user with access to live preview could use a live preview token to access restricted content that the token was not intended for.

4.4.15, and 4.3.21, an unauthenticated Open Redirect vulnerability (CWE-601) exists in the `/web/*` route due to improper handling of URL-encoded path segments.

The AI plugin's `save.json.php` endpoint loads AI response objects using an attacker-controlled `$_REQUEST['id']` parameter without validating that the AI response belongs to the specified video.

GlobaLeaks is free and open-source whistleblowing software.

The getinfobytoken API interface contains improper access control that leads to sensitive data exposure.

An unsanitized filename field in the speech-to-text transcription endpoint allows any authenticated non-admin user to trigger a `FileNotFoundError` whose message — including the server's absolute `DATA_DIR`…

Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage.

A security flaw has been discovered in Open5GS 2.7.6.

If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication.

A vulnerability was detected in QDOCS Smart School Management System up to 7.2.

A vulnerability was detected in SourceCodester Online Quiz System up to 1.0.

A vulnerability was identified in code-projects Social Networking Site 1.0.

Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input.

A vulnerability has been found in OpenBMB XAgent 1.0.0.

Any authenticated user can read other users' private memories via `/api/v1/retrieval/query/collection`.

A flaw has been found in OpenBMB XAgent 1.0.0.

A security vulnerability has been detected in code-projects Online Reviewer System up to 1.0.

A weakness has been identified in code-projects Exam Form Submission 1.0.