Explore CVE records

MedPublished 20 Aug 2026, 17:35 WIB

CVE-2026-77026

Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension < 5.2.5

Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension < 5.2.5 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions.

Excerpt language: en.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 11:45 WIB

Official record

MedPublished 20 Aug 2026, 17:31 WIB

CVE-2026-73196

Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password (OTP) key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a denial of service, d…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

HighPublished 20 Aug 2026, 17:31 WIB

CVE-2026-73197

Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slow…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated26 Oct 2026, 20:26 WIB

Official record

HighPublished 20 Aug 2026, 16:54 WIB

CVE-2026-18917

Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow

A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer overf…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Oct 2026, 15:29 WIB

Official record

MedPublished 20 Aug 2026, 15:54 WIB

CVE-2026-76610

Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65

Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65 - The comment controller endpoint lacked ACL checks, allowing unauthorized tag modifications by unauthenticated users.

Excerpt language: en.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 11:51 WIB

Official record

MedPublished 20 Aug 2026, 15:21 WIB

CVE-2026-77014

Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses

A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INT_MAX. This causes silent omission of requested byte ranges from HTTP 206 Partia…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated25 Aug 2026, 21:23 WIB

Official record

MedPublished 20 Aug 2026, 15:20 WIB

CVE-2026-14953

Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is Missing Authorization due to improper enforcement of role-based access control

A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php.

Excerpt language: en.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:26 WIB

Official record

HighPublished 20 Aug 2026, 15:19 WIB

CVE-2026-14952

Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is offering files with sensitive information for download without requiring authentication

An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under /downloads/*, directly over HTTP without a valid session. These files disclose detailed railway signaling and track layout information that should not be availa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:26 WIB

Official record

HighPublished 20 Aug 2026, 15:19 WIB

CVE-2026-14951

Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Cross-Site Request Forgery due to missing CSFR protection headers

An low privileged remote attacker can cause authenticated users to perform unintended actions in the FDS Web interface using malicious web pages.

Excerpt language: en.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated20 Aug 2026, 23:27 WIB

Official record

CritPublished 20 Aug 2026, 15:19 WIB

CVE-2026-14950

Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Insufficient Session Expiration due to flawed session expiration logic

An unauthenticated remote attacker in possession of a valid session identifier is able to continue using the session after it should have expired. This increases the risk associated with stolen, leaked, shared, or unattended sessions and may enable unauthorized continued access to the FDS web interface.

Excerpt language: en.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:26 WIB

Official record

HighPublished 20 Aug 2026, 15:19 WIB

CVE-2026-14949

Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Incorrect Authorization due to improper enforcement of role-based access control

A low privileged remote attacker with a valid session can submit a request to the user creation functionality exposed through /api/user/add.php to create new accounts with arbitrary role values, including the highest privilege level used by the application.

Excerpt language: en.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated22 Aug 2026, 04:47 WIB

Official record

HighPublished 20 Aug 2026, 15:19 WIB

CVE-2026-14948

Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Insertion of Sensitive Information into Log File via error log archives

A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live plaintext session identifiers for authenticated users from downloadable error log archives.

Excerpt language: en.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:26 WIB

Official record

HighPublished 20 Aug 2026, 15:18 WIB

CVE-2026-14947

Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious ZIP file

A high-privileged remote attacker can upload malicious ZIP archive containing directory traversal sequences such as ../ can escape the intended extraction directory and write files to arbitrary locations on the server, potentially achieve arbitrary code execution due to improper validation of archive entry paths before…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:26 WIB

Official record

HighPublished 20 Aug 2026, 15:18 WIB

CVE-2026-14946

Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious configuration file.

A high privileged remote attacker can upload a .php file and then request it directly from /uploads/<filename>.php to achieve arbitrary code execution due to improper file type validation which could result in full system compromise.

Excerpt language: en.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 21:22 WIB

Official record

HighPublished 20 Aug 2026, 14:29 WIB

CVE-2026-75948

Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12

Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 - The frontend "Submit an Event" form stores the `image` and `file` fields as raw strings with no output-side HTML-attribute escaping.

Excerpt language: en.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 11:47 WIB

Official record

HighPublished 20 Aug 2026, 14:29 WIB

CVE-2026-76564

Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7

Excerpt language: en.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 11:47 WIB

Official record

MedPublished 20 Aug 2026, 14:29 WIB

CVE-2026-76569

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4

Excerpt language: en.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 11:46 WIB

Official record

MedPublished 20 Aug 2026, 14:27 WIB

CVE-2026-76565

Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7

Excerpt language: en.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 11:44 WIB

Official record

HighPublished 20 Aug 2026, 14:21 WIB

CVE-2025-14601

vsDesk Task Scheduler OS Command Injection

An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands due to insufficient input filtering. An attacker can exploit this flaw to disrupt web server operations, expose sensitive data, or potentially achieve full serve…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:21 WIB

Official record

HighPublished 20 Aug 2026, 13:48 WIB

CVE-2026-14163

In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment variable snapshot in clear-text.

Excerpt language: en.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:20 WIB

Official record

Find the CVE cohort

Severity

Matching records by UTC month

Signal coverage

Find the CVE cohort

Matching cohort composition

Severity

Matching records by UTC month

Signal coverage