CVE Notifier

CVE-2026-54676 CWE-862 6.5

Scoold: GET /api/posts/{id}/answers leaks private-space replies when personal API tokens are enabled

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, users with personal API tokens can retrieve replies from questions in private spaces they cannot access because src/main/java/com/erudika/scool…

cve.org Erudika:scoold 3 hari lalu

CVE-2026-54677 CWE-862 6.5

Scoold: Authenticated user can post replies and comments to private-space questions without space membership

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of a private space can create content in questions belonging to that space because src/main/java/com/er…

cve.org Erudika:scoold 3 hari lalu

CVE-2026-54446 CWE-306 8.1

NetLicensing MCP Server: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode

NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.6, network-reachable HTTP transport requests to /m…

cve.org Labs64:NetLicensing-MCP 3 hari lalu

CVE-2026-54053 CWE-22 9.6

Many Notes: Path Traversal via ZIP import allows arbitrary file write and stored XSS in other users' vaults

Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the ZIP vault import implemented in app/Actions/ProcessImportedVault.php accepts archive filenames containing parent-director…

cve.org brufdev:many-notes 3 hari lalu

CVE-2026-54551 CWE-285 4.3

WireGuard Portal: Authenticated WebSocket /api/v0/ws broadcasts all peers' and interfaces' traffic stats to every user (missing per-user authorization)

WireGuard Portal, or wg-portal, is a web-based configuration portal for WireGuard server management. From 2.2.0 until 2.3.0, the authenticated GET /api/v0/ws statistics WebSocket in internal/app/api/v0/handlers/endpoint_…

cve.org h44z:wg-portal 3 hari lalu

CVE-2026-44235 CWE-125 6.5

rabbitmq-c: size_t underflow in AMQP frame length computation leads to out-of-bounds read

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized HEADER or METHOD frame during client login and cause unsigned size_t underflow in amqp_handle_i…

cve.org alanxz:rabbitmq-c 3 hari lalu

CVE-2026-44236 CWE-122 7.1

rabbitmq-c: Heap buffer overflow in AMQP login handshake via undersized connection.tune.frame_max

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.frame_max value during amqp_login(), and rabbitmq-c accepts the value in amqp_l…

cve.org alanxz:rabbitmq-c 3 hari lalu

CVE-2026-54546 CWE-918 5.0

CloudTAK: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard

CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to 13.22.1, the authenticated PUT /api/basemap endpoint passes an attacker-controlled URL through importBasem…

cve.org dfpc-coe:CloudTAK 3 hari lalu

CVE-2026-54579 CWE-125 N/A

mport mirror-selection ping accepts insufficiently validated ICMP replies

mport is the MidnightBSD Package Manager. Prior to 2.7.8, ping() in libmport/ping.c accepted ICMP replies without validating icmp_id or icmp_seq and parsed the reply using a fixed IP-header offset instead of ip_hl. A net…

cve.org MidnightBSD:mport 3 hari lalu

CVE-2026-54576 CWE-59 N/A

mport package installation has symlink TOCTOU in chown and chmod handling

mport is the MidnightBSD Package Manager. Prior to 2.7.8, do_actual_install() in libmport/bundle_read_install_pkg.c used path-based lstat(), chown(), stat(), and chmod() operations while installing package files. A local…

cve.org MidnightBSD:mport 3 hari lalu

CVE-2026-54587 CWE-59 N/A

mport directory asset installation is vulnerable to symlink and path traversal races

mport is the MidnightBSD Package Manager. Prior to 2.7.8, directory assets handled as ASSET_DIR or ASSET_DIR_OWNER_MODE in libmport/bundle_read_install_pkg.c used path-based mport_mkdirp(), ownership, and permission oper…

cve.org MidnightBSD:mport 3 hari lalu

CVE-2026-54575 CWE-78 N/A

mport package fetch and clean paths are vulnerable to TOCTOU filesystem races

mport is the MidnightBSD Package Manager. Prior to 2.7.8, privileged package fetch and cache-cleaning operations used race-prone path handling across libmport/fetch.c, libmport/clean.c, libmport/util.c, libmport/bundle_r…

cve.org MidnightBSD:mport 3 hari lalu