CVE Notifier

CVE-2026-92602 CWE-918 7.1

TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URL

TDuck survey form through version 5.3 fails to validate webhook URLs or verify form ownership in the WebhookConfigController. Authenticated attackers can attach webhooks to other users' forms and exfiltrate submissions t…

cve.org TDuckCloud:tduck-survey-form 16 Sep 2026

CVE-2026-92601 CWE-862 6.5

Guns through 8.3.5 Improper Access Control via SysNoticeController

Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where requiredPermission defaults to false and is not overridden by any action methods. Authenticated users without assigned rol…

cve.org stylefeng:Guns 16 Sep 2026

CVE-2026-92600 CWE-862 6.5

Guns through 8.3.5 Information Disclosure via Missing Permission Check

Guns through 8.3.5 contains an information disclosure vulnerability in SysUserController where /sysUser/detail and /sysUser/page endpoints omit requiredPermission configuration, causing the permission interceptor to skip…

cve.org stylefeng:Guns 16 Sep 2026

CVE-2026-92398 CWE-78 9.1

Ruijie RG-EW3000GX user_list_note admin os command injection

A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue is some unknown functionality of the file /etc/rg_config/admin of the component user_list_note Module. Performing a manipulation of…

cve.org Ruijie:RG-EW3000GX 16 Sep 2026

CVE-2026-61593 CWE-352 8.1

djust has Cross-Site Request Forgery on the Server-Sent-Events transport: a cross-origin page can drive a victim-authenticated SSE session

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the SSE client→server POST endpoints are `@csrf_exempt` and the SSE GET stream endpoi…

cve.org djust-org:djust 16 Sep 2026

CVE-2026-19607 CWE-287 5.3

Keycloak-services: keycloak-services: broker-originated username collision causes account lockout

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue a…

cve.org Red · Hat:Red · Hat 16 Sep 2026

CVE-2026-17526 CWE-862 7.2

Keycloak-services: keycloak-services: privilege escalation via impersonation role allows takeover of realm administrator accounts

Keycloak is an open-source identity and access management solution. A vulnerability was discovered where a user with the impersonation role can impersonate a realm administrator. This allows the attacker to gain full adm…

cve.org Red · Hat:Red · Hat 16 Sep 2026

CVE-2026-90999 CWE-? N/A

Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment

Sentry Seer is vulnerable to a multi-stage trust-boundary violation that allows unauthenticated attacker-controlled telemetry to become code that is executed by an agent in a privileged automation environment. An externa…

cve.org Functional · Software, · Inc.:Sentry 16 Sep 2026

CVE-2026-92397 CWE-78 9.1

Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injection

A vulnerability has been found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this vulnerability is the function cc_set of the file unifyframe-sgi.elf of the component configChange. Such manipulation of the argument…

cve.org Ruijie:RG-EW3000GX 16 Sep 2026

CVE-2025-59953 CWE-502 9.8

LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy

LMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in version 0.9.1 and prior to version 0.10.2, the LMdeploy implements an rpc server (AsyncRPCServer in zmq_rpc.py) for support…

cve.org InternLM:lmdeploy 16 Sep 2026

CVE-2026-61595 CWE-636 7.7

djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' data

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, `djust.tenants` isolation was enforced only on the HTTP path. The current tenant was …

cve.org djust-org:djust 16 Sep 2026

CVE-2026-92626 CWE-476 7.5

Control iD iDSecure Unauthenticated Denial of Service

Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/dguardintegration/dguardVersion endpoint dereferences DGuard integration login state that may be unset, raisi…

cve.org Control · iD:iDSecure 16 Sep 2026