CVE Notifier

CVE-2026-77407 CWE-316 N/A

RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainAuth values defined in auth.go retain passwords as exported plaintext fields in Connection.Config.SASL after a successful PLAIN authentication handshak…

cve.org rabbitmq:amqp091-go 16 Sep 2026

CVE-2026-92380 CWE-918 7.3

WuzhiCMS Remote Image Fetch index.php saveRemote server-side request forgery

A flaw has been found in WuzhiCMS up to 4.1.0. The impacted element is the function ckditor::saveRemote of the file coreframe/app/attachment/index.php of the component Remote Image Fetch. This manipulation of the argumen…

cve.org n/a:WuzhiCMS 16 Sep 2026

CVE-2026-77408 CWE-190 N/A

RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, the writeShortstr function in write.go casts the byte length of AMQP shortstr property values to uint8 without first rejecting values longer than 255 bytes.…

cve.org rabbitmq:amqp091-go 16 Sep 2026

CVE-2026-77401 CWE-693 6.8

Zope AccessControl: Information disclosure through Python string `format` and `format_map` functions

Zope AccessControl provides a general security framework for use in Zope. Prior to 7.4, applications that allow untrusted users to create and execute AccessControl-controlled Python code do not safely guard str.format an…

cve.org zopefoundation:AccessControl 16 Sep 2026

CVE-2026-63671 CWE-79 8.1

@nuxtjs/mdc: the URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration

MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. Prior to 0.22.1, @nuxtjs/mdc uses parseMarkdown with allowDangerousHtml enabled by default and relies on validateProps, …

cve.org nuxt-content:mdc 16 Sep 2026

CVE-2026-92087 CWE-285 8.1

@fastify/auth vulnerable to Authorization Bypass via order-dependent evaluation of composed auth

@fastify/auth is a Fastify plugin that composes multiple authentication and authorization strategies into a single route guard. In versions 5.0.0 through 5.1.0, when strategies are composed with the relation "or" option …

cve.org @fastify/auth:@fastify/auth 16 Sep 2026

CVE-2026-77119 CWE-346 5.9

NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets

A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged unsigned answer through. This issue affects BIND 9 versions 9.11.0 throug…

cve.org ISC:BIND · 9 16 Sep 2026

CVE-2026-75029 CWE-405 5.3

Message parser retains every identical singleton RDATA, enabling wire-to-work amplification

In a query response, an attacker may send `named` multiple copies of a record that should only exist once (such as an SOA record). If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA…

cve.org ISC:BIND · 9 16 Sep 2026

CVE-2026-92366 CWE-89 7.3

code-projects Matrimonial System Regular Search search.php sql injection

A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialsta…

cve.org code-projects:Matrimonial · System 16 Sep 2026

CVE-2026-88064 CWE-20 8.8

Backstage: Improper input validation in TechDocs MkDocs configuration

Backstage is an open framework for building developer portals. Prior to 1.14.6 and from 1.15.0 until 1.15.4, the @backstage/plugin-techdocs-node package insufficiently validates mkdocs.yml supplied by an authenticated us…

cve.org backstage:backstage 16 Sep 2026

CVE-2026-19668 CWE-407 5.3

Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching

A BIND recursive resolver may experience excessive resource consumption if it encounters large numbers of a particular kind of invalid DNSSEC record. Default limits on "max-records-per-type" and "max-types-per-name" hel…

cve.org ISC:BIND · 9 16 Sep 2026

CVE-2026-88976 CWE-79 6.1

@platejs/core HTML deserialization can trigger browser behavior during parsing

Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.11, and in the discontinued 54.0.0-beta.0 through 54.0.0-beta.1 builds, Plate core HTML deserialization APIs parse supplied HTML strings in the active docu…

cve.org udecode:plate 16 Sep 2026