•about 2 hours ago•CVE-2026-81889
8.6CVE-2026-81889: Server-Side Request Forgery via DNS Rebinding in elFinder
An in-depth analysis of CVE-2026-81889, a critical Server-Side Request Forgery (SSRF) vulnerability in the remote URL upload component of elFinder web file manager before version 2.1.70. The flaw leverages DNS rebinding due to insecure socket fallbacks when the PHP cURL extension is missing, resulting in access to internal network resources and local loopback services.
3 views•8 min read
•about 3 hours ago•CVE-2026-45822
6.6CVE-2026-45822: Algorithmic Complexity Denial of Service in decode-uri-component
A critical algorithmic complexity Denial of Service (DoS) vulnerability exists in the npm package decode-uri-component versions 0.1.0 through 0.4.1. The package employs an inefficient, high-complexity recursive mechanism when processing invalid percent-encoded sequences, such as isolated continuation bytes. An attacker can exploit this behavior by sending malformed strings, causing the Node.js event loop to block entirely and exhausting CPU resources. This vulnerability is resolved in version 0.5.0 by replacing the recursive parser with a single-pass, linear scanning algorithm.
0 views•6 min read
•about 4 hours ago•CVE-2026-75594
8.2CVE-2026-75594: Critical Path Traversal and Directory Containment Bypass in Kirby CMS
A critical path traversal vulnerability was discovered in the Kirby CMS media component. Prior to versions 4.9.5 and 5.5.2, Kirby failed to validate path-traversal indicators in requested filenames, allowing attackers to check for the existence of local JSON files, delete them, or bypass directory prefix containment logic under certain web server configurations.
1 views•6 min read
•about 5 hours ago•CVE-2026-71415
7.1CVE-2026-71415: Missing Authorization in Kirby CMS REST API Chunked Upload Handler
A missing authorization vulnerability (CWE-862) in Kirby CMS (versions 5.0.0 through 5.5.1) allows low-privileged authenticated users with Panel access to write temporary chunk files to disk, leading to potential Denial of Service via storage exhaustion.
2 views•6 min read
•about 6 hours ago•CVE-2026-59724
7.5CVE-2026-59724: Remote Unauthenticated Denial of Service in Engine.IO WebTransport Upgrade
An input validation vulnerability in the WebTransport upgrade handler of the Engine.IO server (the core engine driving Socket.IO) allows remote, unauthenticated attackers to trigger a denial of service via application crashes. By sending a crafted session identifier corresponding to a JavaScript prototype property (such as __proto__), an attacker forces the server to reference Object.prototype instead of a valid socket instance, causing a fatal TypeError in the asynchronous execution context.
1 views•9 min read
•about 7 hours ago•CVE-2026-81888
5.4CVE-2026-81888: Missing State Verification in @hono/oauth-providers Leads to Login CSRF
An authentication bypass vulnerability in @hono/oauth-providers prior to version 0.8.6 allows unauthenticated remote attackers to perform login Cross-Site Request Forgery (CSRF) and forced account linking. Due to a logical 'fail-open' comparison flaw, the middleware validates OAuth callbacks when the state parameter is omitted from both the client cookie and the request query parameters, completely bypassing standard anti-CSRF protections.
5 views•6 min read
•about 8 hours ago•CVE-2026-15305
6.3CVE-2026-15305: Server-Side Validation Bypass in TYPO3 CMS Form Framework File Upload Component
CVE-2026-15305 describes a critical security vulnerability within the TYPO3 CMS Form Framework (ext:form) extension. Due to a lifecycle timing mismatch, server-side MIME type validation was bypassed when processing files uploaded via FileUpload or ImageUpload form elements. This allowed remote, unauthenticated attackers to upload arbitrary file types (with the exception of blocked PHP extensions) to the web server's public storage directory.
3 views•8 min read
•1 day ago•CVE-2026-82329
9.8CVE-2026-82329: Critical Authentication Bypass and Privilege Escalation in JFrog Artifactory
CVE-2026-82329 is a critical authentication bypass vulnerability in the core authentication mechanisms of JFrog Artifactory. Classified under CWE-287, this security weakness allows remote, unauthenticated attackers to bypass authentication controls and obtain full administrative privileges on vulnerable self-managed deployments running default configurations.
226 views•8 min read
•3 days ago•CVE-2026-55854
5.9CVE-2026-55854: Cleartext Credential Disclosure in MariaDB Connector/Node.js via Coerced Authentication Switch
CVE-2026-55854 identifies a critical security flaw in the MariaDB Connector for Node.js (mariadb npm package). When establishing connections, the driver fails to validate transport security requirements during Pluggable Authentication Modules (PAM) dialog authentication. This vulnerability allows active on-path attackers or malicious database servers to coerce the client driver into transmitting user credentials in cleartext over unencrypted TCP connections.
9 views•6 min read
•3 days ago•CVE-2026-55764
8.7CVE-2026-55764: Integer Overflow in SFT Circulation Counter in Klever-Go
An integer overflow vulnerability (CWE-190) exists in klever-go, the Go implementation of the Klever blockchain protocol, within the Semi-Fungible Token (SFT) addition path. An attacker with a mint role can exploit this by passing an extremely large positive value when adding SFT quantity, which overflows a signed 64-bit integer. This bypasses the maximum supply checks and allows minting arbitrary tokens while corrupting the state.
6 views•8 min read
•3 days ago•CVE-2026-55841
7.5CVE-2026-55841: Log Evasion and Tampering in Graylog FortiGate Syslog Parser
A high-severity log evasion and tampering vulnerability in Graylog's FortiGate key-value syslog parser allows unauthenticated remote attackers to modify, delete, or overwrite critical security log fields, potentially bypassing security controls and monitoring systems.
10 views•7 min read
•3 days ago•CVE-2026-55867
5.3CVE-2026-55867: Insecure Direct Object Reference in Graylog Access-Token Revocation
An Insecure Direct Object Reference (IDOR) vulnerability exists within the access-token revocation endpoint of Graylog. Authenticated users can exploit this flaw to delete access tokens belonging to other users, including high-privileged administrator accounts, thereby disrupting active integrations and API access.
7 views•7 min read