CVE Notifier

CVE-2026-54626 CWE-122 9.8

SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, the TGA_INDEXED_RLE path selected by image_type == 9 allocates an image buffer…

cve.org HappySeaFox:sail 3 hari lalu

CVE-2026-54618 CWE-306 9.4

Obsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the user

Obsidian Web MCP is a secure remote MCP server for Obsidian vaults. Prior to 0.2.0, /oauth/authorize issues an authorization code without a login, consent, or session check, and /oauth/token can exchange that code for th…

cve.org jimprosser:obsidian-web-mcp 3 hari lalu

CVE-2026-54495 CWE-668 4.3

Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters

The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant who can create a controller-owned workload can use the openfeature.dev/featureflagsource annotation wi…

cve.org open-feature:open-feature-operator 3 hari lalu

CVE-2026-54716 CWE-770 7.5

Valhalla: Degenerate exclude_polygons (collinear points, zero area) causes OOM in /sources_to_targets

Valhalla is an open source routing engine and accompanying libraries for use with OpenStreetMap data. In 3.7.0 and earlier, a POST request to /sources_to_targets containing an exclude_polygons ring formed by three collin…

cve.org valhalla:valhalla 3 hari lalu

CVE-2026-45720 CWE-294 7.0

Omni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session token

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and from 1.7.0 until 1.7.3, SAML.getSession in internal/pkg/auth/interceptor/saml.go checks SAMLAssertion.Used and marks it used in s…

cve.org siderolabs:omni 3 hari lalu

CVE-2026-45723 CWE-20 2.7

Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, managementServer.CreateSchematic in internal/backend/grpc/schematics.go passes the caller-controlled TalosVersion field to…

cve.org siderolabs:omni 3 hari lalu

CVE-2026-45726 CWE-200 7.6

Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. From 1.3.0 until 1.6.6 and 1.7.3, importing a standalone Talos cluster creates an ImportedClusterSecrets resource containing the cluster's complete …

cve.org siderolabs:omni 3 hari lalu

CVE-2026-92757 CWE-311 5.5

Malformed connection string may disable field level encryption

Applications built on MongoDB Entity Framework Core Provider which place a database name in the connection string may inadvertently disable field level encryption.

cve.org MongoDB · Inc.:MongoDB · Entity 3 hari lalu

CVE-2026-93337 CWE-88 7.8

NetworkManager-l2tp Privilege Escalation via pppd Plugin Injection

NetworkManager-l2tp contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values contain…

cve.org nm-l2tp:NetworkManager-l2tp 3 hari lalu

CVE-2026-92758 CWE-532 5.5

Logs may collect sensitive information

If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information (if in use) such as passwords and AWS secure access keys.

cve.org MongoDB · Inc.:MongoDB · Entity 3 hari lalu

CVE-2026-92993 CWE-78 6.3

Dromara mayfly-go Machine Script Feature machine_script.go RunMachineScript os command injection

A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of the file server/internal/machine/api/machine_script.go of the component Machine Script Feature. The…

cve.org Dromara:mayfly-go 3 hari lalu

CVE-2026-92943 CWE-297 8.1

Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python

Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to i…

cve.org AWS:AWSIoTPythonSDK 3 hari lalu