CVEs published April 27, 2026

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel Camel-Coap component.

The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names such as 'CAmelExecCommandExecutable' are filtered out alongside 'CamelExecCommandExecutable'.

A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521.

A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521.

A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521.

A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521.

A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521.

A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521.

A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521.

A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521.

A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521.

A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521.

A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521.

A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521.

A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521.

A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521.

A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521.

Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes or primitive types) does not check the class at all, bypassing the classname allowlist and allowing…

ProjeQtor versions 7.0 through 12.4.3 contain an unauthenticated SQL injection vulnerability in the login functionality where the login variable is directly concatenated into a SQL query without…

The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete.

JmsBinding.extractBodyFromJms() in camel-jms, and the equivalent JmsBinding class in camel-sjms, deserialized the payload of incoming JMS ObjectMessage values via javax.jms.ObjectMessage.getObject() without…

MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP service.

A command injection vulnerability exists in Tenda AC18 V15.03.05.05_multi.

A remote code execution (RCE) vulnerability in the /devserver/start endpoint of leonvanzyl autocoder commit 79d02a allows attackers to execute arbitrary code via providing a crafted command parameter.

Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privilege Escalation.This issue affects Directorist Social Login: from n/a before 2.1.4.

The Camel-Mail component is vulnerable to Camel message header injection.

An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Directorist Booking allows SQL Injection.This issue affects Directorist Booking: from n/a before 3.0.2.

A vulnerability was determined in Tenda HG3 2.0.

A vulnerability was determined in Tenda HG3 2.0.

A vulnerability was detected in Tenda HG3 2.0.

The Highland Software Custom Role Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 1.0.0.

A vulnerability has been found in Tenda F456 1.0.0.5.

A flaw has been found in Tenda F456 1.0.0.5.

A vulnerability was detected in Tenda F456 1.0.0.5.

A security vulnerability has been detected in Tenda F456 1.0.0.5.

A weakness has been identified in Tenda F456 1.0.0.5.

A security flaw has been discovered in Tenda HG3 2.0 300003070.

A flaw has been found in Tenda F456 1.0.0.5.

A vulnerability was detected in Tenda F456 1.0.0.5.

A security vulnerability has been detected in Tenda F456 1.0.0.5.

A weakness has been identified in Tenda F456 1.0.0.5.

A security flaw has been discovered in Tenda F456 1.0.0.5.

A vulnerability was identified in D-Link DIR-825 3.00b32.

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 5.4.1.

Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1

ProjeQtor versions 7.0 through 12.4.3 contain a ZipSlip path traversal vulnerability in the plugin upload functionality that allows authenticated attackers with upload permissions to write files outside the…

The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream without applying any ObjectInputFilter.

The camel-mina component's MinaConverter.toObjectInput(IoBuffer) type converter wraps an IoBuffer in a java.io.ObjectInputStream without applying any ObjectInputFilter or class-loading restrictions.

Cross Site Request Forgery vulnerability in diskoverdata diskover-community v.2.3.5. and before allows a remote attacker to escalate privileges and obtain sensitive information via the…

The ConsulRegistry in the camel-consul component (class org.apache.camel.component.consul.ConsulRegistry and its inner ConsulRegistryUtils.deserialize method) read Java-serialized values from the Consul KV…

An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router.

An OS command Injection issue exists in LogonTracer prior to v2.0.0.

When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server (camel-platform-http-main) and a non-root context path such as /api or /admin is configured via…

A security flaw has been discovered in D-Link DIR-825 up to 3.00b32.

Document structural anomalies caused inconsistencies between page element relationships and internal index states.

Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during internal…

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes.

The Camel-PQC FileBasedKeyLifecycleManager class deserializes the contents of `<keyId>.key` files in the configured key directory using java.io.ObjectInputStream without applying any ObjectInputFilter or…

The following vulnerability has been resolved: firmware: thead: Fix buffer overflow and use standard endian macros Addresses two issues in the TH1520 AON firmware protocol driver: 1.

The following vulnerability has been resolved: mm/kasan: fix double free for kasan pXds kasan_free_pxd() assumes the page table is always struct page aligned.

Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3.6.1.

Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters.

Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated remote denial of service via atom table exhaustion.

A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n.

If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other…

A path traversal vulnerability in the UI/static component of leonvanzyl autocoder commit 79d02a allows attackers to read arbitrary files via sending crafted URL path containing traversal sequences.

An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0.

A weakness has been identified in ChatGPTNextWeb NextChat up to 2.16.1.

A security flaw has been discovered in ChatGPTNextWeb NextChat up to 2.16.1.

A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1.

A vulnerability has been found in dmitryglhf mcp-url-downloader up to 4b8cf2de55f6e8864a77d108e8a94a5b8e4394c6.

A flaw has been found in disler aider-mcp-server up to b2516fa466d0d851932da92ee6d0e66946db9efc.

A vulnerability has been found in dexhunter kaggle-mcp up to 406127ffcb2b91b8c10e20e6c2ca787fbc1dc92d.

A vulnerability was detected in JoeCastrom mcp-chat-studio up to 1.5.0.

A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a51525a69822290eaee569a1ab447b490746d.

A vulnerability has been found in code-projects Online Lot Reservation System up to 1.0.

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.

A security vulnerability has been detected in SourceCodester Pharmacy Sales and Inventory System 1.0.

A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0.

A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0.

A vulnerability was determined in ShadowCloneLabs GlutamateMCPServers up to e2de73280b01e5d943593dd1aa2c01c5b9112f78.

A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0.

A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0.

A vulnerability was identified in itsourcecode Courier Management System 1.0.

A vulnerability was determined in itsourcecode Courier Management System 1.0.

A vulnerability was found in itsourcecode Construction Management System 1.0.

A vulnerability has been found in itsourcecode Construction Management System 1.0.

A flaw has been found in itsourcecode Construction Management System 1.0.

A vulnerability was detected in CodePanda Source canteen_management_system 1.0.

A weakness has been identified in code-projects Inventory Management System 1.0.

A vulnerability was determined in D-Link DIR-822 A_101.

A vulnerability was found in choieastsea simple-openstack-mcp up to 767b2f4a8154cca344344b9725537a58399e6036.

A vulnerability has been found in BidingCC BuildingAI up to 26.0.1.

authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege escalation.

Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute arbitrary code within the fulfillment…

A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed.

An authenticated administrative user who can import or save DataObject class definitions can inject attacker-controlled composite index metadata and trigger unintended SQL execution in the backend.

Successful exploitation of the race condition vulnerability could allow an attacker to trigger a kernel heap overflow, potentially leading to local privilege escalation and granting system-level access to…

Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain an Execution with Unnecessary Privileges vulnerability in the AWCC.

Successful exploitation of the string injection vulnerability could allow an attacker to obtain memory address information or crash the application.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows DOM-Based XSS.This issue affects TheGem Theme…

ProjeQtor versions 7.0 through 12.4.3 contain a path traversal vulnerability in the log file viewer at dynamicDialog.php where the logname parameter is not validated against directory traversal sequences…

ProjeQtor versions 7.0 through 12.4.3 contain a missing authorization vulnerability in the objectDetail.php endpoint that allows authenticated users with guest-level privileges to retrieve sensitive data…

Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm Versions Affected: up to 2.8.7 Description: When TLS transport is enabled in Apache Storm…

A vulnerability was found in dh1011 auto-favicon up to f189116a9259950c2393f114dbcb94dde0ad864b.

A flaw has been found in CodeAstro Online Classroom 1.0.

A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0.

A vulnerability was determined in Wooey up to 0.13.2.

A security vulnerability has been detected in code-projects Employee Management System 1.0.

A weakness has been identified in code-projects Employee Management System 1.0.

A vulnerability was identified in code-projects Employee Management System 1.0.

A vulnerability was determined in code-projects Employee Management System 1.0.

A weakness has been identified in code-projects Invoice System in Laravel 1.0.

A vulnerability was found in Tenda F456 1.0.0.5.

A vulnerability was found in code-projects Invoice System in Laravel 1.0.

A vulnerability has been found in code-projects Invoice System in Laravel 1.0.

A flaw has been found in code-projects Invoice System in Laravel 1.0.

A vulnerability was found in HBAI-Ltd Toonflow-app up to 1.1.1.

The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts.

A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/selectindices.php via the namecontains parameter

A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/view.php via the doctype parameter

A reflected cross-site scripting (XSS) vulnerability exists in WebFileSys version before 2.32.0 and fixed in v.2.32.0.

An improper ownership management vulnerability has been identified in Moxa’s Secure Router.

SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC encryption with keys and initialization vectors derived from…

A vulnerability was found in vLLM up to 0.19.0.

A vulnerability was found in NousResearch hermes-agent 0.8.0.

A vulnerability has been found in NousResearch hermes-agent 0.8.0.

OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sensitive information disclosure.

Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access invalidated objects and crash the program.

A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution.

Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service.

Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalid_argument" exception, ultimately causing the program to terminate.

The following vulnerability has been resolved: igb: remove napi_synchronize() in igb_down() When an AF_XDP zero-copy application terminates abruptly (e.g., kill -9), the XSK buffer pool is destroyed but…

The following vulnerability has been resolved: EDAC/mc: Fix error path ordering in edac_mc_alloc() When the mci->pvt_info allocation in edac_mc_alloc() fails, the error path will call put_device() which…

The following vulnerability has been resolved: gpio: omap: do not register driver in probe() Commit 11a78b794496 ("ARM: OMAP: MPUIO wake updates") registers the omap_mpuio_driver from omap_mpuio_init(),…

A weakness has been identified in mettle sendportal up to 3.0.1.

An authenticated attacker with permission to edit document content can store crafted HTML/JavaScript in a Document embed editable and cause script execution when the published page is rendered.

ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the file upload functionality where the checkValidFileName() function fails to restrict HTML and HTM file uploads.

ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the checkValidHtmlText() function within Security.php that fails to properly sanitize user input by only…

A vulnerability has been found in aligungr UERANSIM up to 3.2.7.

A security vulnerability has been detected in OSPG binwalk up to 2.4.3.

A security flaw has been discovered in GPAC up to 26.03-DEV-rev105-g8f39a1eb3-master.

A vulnerability was found in code-projects Online Lot Reservation System up to 1.0.

A vulnerability was detected in code-projects Invoice System in Laravel 1.0.

A security vulnerability has been detected in CodeAstro Online Job Portal 1.0.

pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names.

Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain a Least Privilege Violation vulnerability.

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.

If specially crafted Windows event log data is loaded, the contents of the database may be altered.

A vulnerability was determined in HBAI-Ltd Toonflow-app up to 1.1.1.

When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to the RabbitMQ broker.

When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch server.

Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description:  In production deployments where an…

A vulnerability was identified in code-projects Online Lot Reservation System 1.0.

A vulnerability was determined in code-projects Online Lot Reservation System 1.0.

A vulnerability has been found in likeadmin-likeshop likeadmin_php up to 1.9.6.

A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by repeatedly sending SETUP requests for the same…

A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0.

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0.

A security flaw has been discovered in code-projects Employee Management System 1.0.

A security vulnerability has been detected in code-projects Invoice System in Laravel 1.0.

A vulnerability was identified in code-projects Employee Management System 1.0.

A security vulnerability has been detected in code-projects Home Service System 1.0.

A vulnerability was identified in HBAI-Ltd Toonflow-app up to 1.1.1.

A path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows attackers to execute a directory traversal.

An open redirect in the /api/google/authorize endpoint of hunvreus DevPush v0.3.2 allows attackers to redirect users to malicious sites via supplying a crafted URL.

A vulnerability was determined in code-projects Chat System 1.0.

A flaw has been found in code-projects Invoice System in Laravel 1.0.

A vulnerability was detected in code-projects Chat System 1.0.