CVE Notifier

CVE-2026-18424 CWE-918 N/A

Concrete CMS 9.0.0 to 9.5.2 is vulnerable to SSRF protection bypass in remote file import when multiple URLs share a host but use different ports

Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Server-Side Request Forgery iremote file import via cross-port reuse of a host's validated DNS pin. When multiple remote URLs share the same host, only the first `ValidatedRem…

cve.org Concrete · CMS:Concrete · CMS 15 Sep 2026

CVE-2026-32599 CWE-89 N/A

Netmaker has a boolean‑based SQL Injection

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the `sqliteDeleteRecord` function in Netmaker's database layer constructs SQL `DELETE` statements using direct string concatenation of user-supplied input. …

cve.org gravitl:netmaker 15 Sep 2026

CVE-2026-61544 CWE-248 N/A

libp2p-quic: Remote panic via certificate expiry race during QUIC handshake

libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.13.1, libp2p-quic could panic during an inbound QUIC handshake when a remote peer presented a valid short-lived libp2p T…

cve.org libp2p:rust-libp2p 15 Sep 2026

CVE-2026-88922 CWE-281 6.7

Go-getter vulnerable to a privilege escalation issue in its archive decompression handling

The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevat…

cve.org HashiCorp:Shared · library 15 Sep 2026

CVE-2026-92240 CWE-? N/A

Out-of-bounds read in IMAP response parser

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected parsing path is reachable before authenticat…

cve.org Mozilla:Thunderbird 15 Sep 2026

CVE-2026-92239 CWE-? N/A

Buffer overrun in IMAP

A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

cve.org Mozilla:Thunderbird 15 Sep 2026

CVE-2026-92238 CWE-? N/A

Ambiguous parsing of mail headers

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

cve.org Mozilla:Thunderbird 15 Sep 2026

CVE-2026-76820 CWE-918 7.7

OpenCTI: Synchronizer SSRF: stream fetch has no URL validation

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote st…

cve.org OpenCTI-Platform:opencti 15 Sep 2026

CVE-2026-76821 CWE-400 N/A

OpenCTI: User-Controlled ReDoS in JSON Ingestion Mapper

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0, the JSON ingestion mapper's extractWithRegexp formula function compiled a user-supplied regular ex…

cve.org OpenCTI-Platform:opencti 15 Sep 2026

CVE-2026-88975 CWE-400 7.5

Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZE

Http4s is a Scala interface for HTTP services. Prior to 0.23.37 and 1.0.0-M48, Ember’s HTTP/2 read loop parses a frame’s 24-bit declared length but waits to buffer the entire payload before comparing it with SETTINGS_MAX…

cve.org http4s:http4s 15 Sep 2026

CVE-2026-73458 CWE-303 8.2

On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable network changes because various rou

On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable…

cve.org Arista · Networks:EOS 15 Sep 2026

CVE-2026-18423 CWE-639 N/A

Concrete CMS 9.0.0 through 9.5.2 is vulnerable to Insecure direct object reference (IDOR) in the Express saved search preset delete and edit dialogs allowing an authenticated user with permission on one Express entity to delete or rename saved search pres

Concrete CMS 9.0.0 through 9.5.2 is vulnerable to Insecure direct object reference (IDOR) in the Express saved search preset delete and edit dialogs . An authenticated user holding only view permission on a single Expre…

cve.org Concrete · CMS:Concrete · CMS 15 Sep 2026