CVE Notifier

CVE-2026-92259 CWE-190 5.5

CVE-2026-92259

Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-based buffer overflow and denial of service via a crafted cac…

cve.org Samsung · Opensource:Escargot 15 Sep 2026

CVE-2026-81855 CWE-321 9.1

Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard.

cve.org Wärtsilä:FOS-Onboard 15 Sep 2026

CVE-2026-92114 CWE-1333 5.3

a2ui-project a2ui Basic Catalog safe_regex.ts redos

A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/web_core/src/v0_9/basic_catalog/functions/safe_regex.ts of the component Basic Catalog. Such manipul…

cve.org a2ui-project:a2ui 15 Sep 2026

CVE-2026-78225 CWE-321 9.0

Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard.

cve.org Wärtsilä:FOS-Onboard 15 Sep 2026

CVE-2026-73444 CWE-303 4.7

On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the

On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypas…

cve.org Arista · Networks:EOS 15 Sep 2026

CVE-2026-61560 CWE-22 9.8

@zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover

`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE transport mode (`SSE=true`) exposes all MCP tools without any authentication. The `upload_markdown` tool reads arbitr…

cve.org zereight:gitlab-mcp 15 Sep 2026

CVE-2026-73437 CWE-345 9.6

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from an IP address that is not configured as a helper/destinat

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from an IP address that is…

cve.org Arista · Networks:EOS 15 Sep 2026

CVE-2026-10144 CWE-78 7.8

Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling

Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to the server.open configuration on macOS.…

cve.org web-infra-dev:rsbuild 15 Sep 2026

CVE-2026-68491 CWE-59 N/A

CVE-2026-68491

An insufficient check allowed for the overwrite of arbitrary files via a symlink.

cve.org Webpros:SolusVM 15 Sep 2026

CVE-2026-61559 CWE-918 9.6

@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable `ENABLE_DYNAMIC_API_URL=true` is set, the server reads the `X-Git…

cve.org zereight:gitlab-mcp 15 Sep 2026

CVE-2026-92234 CWE-79 5.4

QloApps through 1.7.0 Reflected XSS via Hotel Feature Validation Errors

QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back-office users who follow a crafted link c…

cve.org Webkul:QloApps 15 Sep 2026

CVE-2026-19655 CWE-20 6.5

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server configured with match criteria based on the information option, an unauthent

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server configured with match criteria based on …

cve.org Arista · Networks:EOS 15 Sep 2026