CVE Notifier

CVE-2026-74909 CWE-862 8.1

Keycloak-services: keycloak-services: incomplete fix for cve-2026-15573 allows policy enforcer bypass via percent-encoded uri segments

Keycloak provides a policy enforcer to protect applications by matching incoming web requests against defined security policies. A flaw was found where the enforcer fails to correctly normalize web addresses that contain…

cve.org Red · Hat:Red · Hat 16 Sep 2026

CVE-2026-18212 CWE-401 7.5

Keycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib state

A flaw was found in the SAML Redirect Binding implementation of Keycloak, an open-source identity and access management solution. The issue occurs because the custom DEFLATE compression and decompression helpers fail to …

cve.org Red · Hat:Red · Hat 16 Sep 2026

CVE-2026-84860 CWE-? 8.8

Scada-LTS DWR Authorization Bypass - Systemic

ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authorization Bypass Spring Security gates DWR endpoints by URL path pattern, but DWR itself dispatches method calls based on the POST body parameters c0-scri…

cve.org Scada-LTS:Scada-LTS 16 Sep 2026

CVE-2026-84859 CWE-? 6.5

Scada-LTS Authenticated Blind SQL Injection

ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Blind SQL Injection The /api/events/search endpoint accepts a JSON body containing a sortBy array. The values in this array are concatenated dir…

cve.org Scada-LTS:Scada-LTS 16 Sep 2026

CVE-2026-84858 CWE-? 8.8

Scada-LTS Authenticated Remote Code Execution via Scripting Sandbox Bypass

ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and execu…

cve.org Scada-LTS:Scada-LTS 16 Sep 2026

CVE-2026-63127 CWE-345 8.2

RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery

RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's OAuth implementation in crates/rmcp/src/transport/auth.rs omits the RFC 9728 resource field from ResourceServerMetadata and al…

cve.org modelcontextprotocol:rust-sdk 16 Sep 2026

CVE-2026-63128 CWE-400 7.5

RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service

RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's stateful Streamable HTTP server in crates/rmcp/src/transport/streamable_http_server/tower.rs allows an unauthenticated client …

cve.org modelcontextprotocol:rust-sdk 16 Sep 2026

CVE-2026-77409 CWE-770 N/A

RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.dispatch in channel.go, confirms.confirm in confirms.go, and Connection.dispatch0 in connection.go synchronously send publisher confirmations, flow-…

cve.org rabbitmq:amqp091-go 16 Sep 2026

CVE-2026-77411 CWE-754 N/A

RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLongstr in read.go returns an empty string and a nil error when a declared AMQP longstr length exceeds 0x7FFFFFFF instead of returning ErrSyntax. The fu…

cve.org rabbitmq:amqp091-go 16 Sep 2026

CVE-2026-92381 CWE-79 3.5

PbootCMS Template Rendering ContentController.php decode_string cross site scripting

A weakness has been identified in PbootCMS up to 3.2.22. This affects the function decode_string of the file apps/admin/controller/content/ContentController.php of the component Template Rendering. This manipulation of t…

cve.org n/a:PbootCMS 16 Sep 2026

CVE-2026-77412 CWE-681 N/A

RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readField in read.go reads the length of an AMQP byte-array field with type tag x into a signed int32 and passes the value directly to make when allocating …

cve.org rabbitmq:amqp091-go 16 Sep 2026

CVE-2026-77405 CWE-326 N/A

RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, tlsConfigFromURI in uri.go creates tls.Config values without setting MinVersion to tls.VersionTLS12. Builds using a Go runtime whose default permits TLS 1.0…

cve.org rabbitmq:amqp091-go 16 Sep 2026