CVE Notifier

CVE-2026-77360 CWE-113 N/A

oRPC: Vary Header Injection in CORS Plugin leading to potential Cache/CORS Bypass

oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.8, the @orpc/server CORS plugin in packages/server/src/plugins/cors.ts copies a client's incoming Vary re…

cve.org middleapi:orpc 16 Sep 2026

CVE-2026-68536 CWE-918 N/A

Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability

Server-Side Request Forgery / Local File Inclusion in Apache MyFace Core. Older unsupported versions may also be affected.  Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, or 4.1.4, whic…

cve.org Apache · Software · Foundation:Apache 16 Sep 2026

CVE-2026-86003 CWE-441 7.5

CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP

CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC listeners in plugin/pkg/doh/doh.go, core/dnsserver/server_quic.go, and core/dnsserver/server_g…

cve.org coredns:coredns 16 Sep 2026

CVE-2026-91097 CWE-787 N/A

HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denia…

cve.org HP · Inc.:HP · Linux 16 Sep 2026

CVE-2026-82399 CWE-770 7.5

CoreDNS: Unauthenticated memory exhaustion in custom transports

CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC request paths in plugin/pkg/doh/doh.go, core/dnsserver/server_quic.go, and core/dnsserver/serv…

cve.org coredns:coredns 16 Sep 2026

CVE-2026-59823 CWE-918 N/A

LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.9, an authenticated LiteLLM Proxy caller with a valid virtual key can place api_base inside the user_config request body…

cve.org BerriAI:litellm 16 Sep 2026

CVE-2026-81176 CWE-770 5.3

Svelte devalue: DoS via malformed input

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. Prior to 5.9.2, devalue.parse does not reject out-of-bounds indices that are greater than or eq…

cve.org sveltejs:devalue 16 Sep 2026

CVE-2026-92729 CWE-306 8.2

SigNoz 0.88.0 through 0.141.0 - Missing Authentication on Trace Funnel Analytics Endpoints

SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the HTTP handler. Unauthenticated attackers can submit arbitrary funnel definitions to retrieve trace ana…

cve.org SigNoz:signoz 16 Sep 2026

CVE-2026-75516 CWE-770 N/A

RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.34.0, AMQConnection.start() applies Math.min(maxInboundMessageBodySize, frameMax) after C…

cve.org rabbitmq:rabbitmq-java-client 16 Sep 2026

CVE-2026-46352 CWE-833 7.5

Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlock

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, Suricata's IP defragmentation code could deadloc…

cve.org OISF:suricata 16 Sep 2026

CVE-2026-75025 CWE-346 4.7

Mattermost Desktop local network access from server-rendered content

Mattermost Desktop App versions <=6.2 6.2.2.0 Fixed an issue where Mattermost Desktop did not sufficiently restrict server-rendered content from accessing local or private network resources. Thanks to game0v3r for contri…

cve.org Mattermost:Mattermost 16 Sep 2026

CVE-2026-92418 CWE-79 3.5

ChangeWeDer crm Save Endpoint customer.serve.js cross site scripting

A vulnerability was determined in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This vulnerability affects unknown code of the file src/main/resources/public/js/customerServe/customer.serve.js of the co…

cve.org ChangeWeDer:crm 16 Sep 2026