CVE Notifier

CVE-2026-76646 CWE-400 N/A

Apache MyFaces: Denial of Service via Unbounded Request Parsing

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. …

cve.org Apache · Software · Foundation:Apache 16 Sep 2026

CVE-2026-92474 CWE-416 3.3

GPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free

A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gf_inline_get_proto_lib of the file src/compositor/mpeg4_inline.c of the component Proto Link Handler. The manipulation results in use afte…

cve.org n/a:GPAC 16 Sep 2026

CVE-2026-63225 CWE-22 4.4

Redocly CLI: Path traversal when using `split` command

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to @redocly/cli 2.33.2, the split command constructs output paths under --outDir from untrusted OpenAPI or AsyncAPI component names…

cve.org Redocly:redocly-cli 16 Sep 2026

CVE-2026-63325 CWE-94 7.8

Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions i…

cve.org Redocly:redocly-cli 16 Sep 2026

CVE-2026-86071 CWE-22 3.7

Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root

Junrar is an open source Java RAR archive library. Prior to version 7.6.1, LocalFolderExtractor in src/main/java/com/github/junrar/LocalFolderExtractor.java can create directories outside the intended extraction root whe…

cve.org junrar:junrar 16 Sep 2026

CVE-2026-73462 CWE-125 6.5

On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the I

On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packet…

cve.org Arista · Networks:EOS 16 Sep 2026

CVE-2026-92473 CWE-416 3.3

GPAC BIFS commands.c gf_sg_command_del use after free

A vulnerability was identified in GPAC 26.08-DEV. The impacted element is the function gf_sg_command_del of the file src/scenegraph/commands.c of the component BIFS Handler. The manipulation leads to use after free. The …

cve.org n/a:GPAC 16 Sep 2026

CVE-2026-73457 CWE-532 5.3

Under certain circumstances, the gNPSI client credentials might be logged in clear text, in local or remote accounting logs to authenticated users.

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting l…

cve.org Arista · Networks:EOS 16 Sep 2026

CVE-2026-91106 CWE-122 N/A

HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denia…

cve.org HP · Inc.:HP · Linux 16 Sep 2026

CVE-2026-73456 CWE-94 10.0

Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code exec…

cve.org Arista · Networks:EOS 16 Sep 2026

CVE-2026-91105 CWE-122 N/A

HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denia…

cve.org HP · Inc.:HP · Linux 16 Sep 2026

CVE-2026-91104 CWE-122 N/A

HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denia…

cve.org HP · Inc.:HP · Linux 16 Sep 2026