Explore CVE records

LowPublished 28 Oct 2026, 23:34 WIB

CVE-2026-103394

Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.

An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attacker to decrypt traffic or cause a denial of service via security policy assignment.

Excerpt language: en.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 08:52 WIB

Official record

MedPublished 28 Oct 2026, 23:34 WIB

CVE-2026-103393

Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing

An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adjacent attacker to read stale memory contents or cause a system fault via a specially crafted VRRPv3 advertisement.

Excerpt language: en.

MedPublished 28 Oct 2026, 23:33 WIB

CVE-2026-103392

Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled

An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and potentially cause session desynchronization via a transit TCP packet with an oversized SACK option length.

Excerpt language: en.

CVSS4.8v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:33 WIB

Official record

MedPublished 28 Oct 2026, 23:33 WIB

CVE-2026-93536

X.Org Server GestureBuildSprite Use-After-Free

A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X server or potentially execute code.

Excerpt language: en.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:33 WIB

Official record

MedPublished 28 Oct 2026, 23:33 WIB

CVE-2026-103391

Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature

An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router allows an attacker to corrupt forwarded packet data and potentially cause a data-plane crash via a transit TCP packet with a crafted TCP option length.

Excerpt language: en.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:33 WIB

Official record

MedPublished 28 Oct 2026, 23:33 WIB

CVE-2026-103390

Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification

An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of service via a specially crafted HTTP request.

Excerpt language: en.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 08:52 WIB

Official record

MedPublished 28 Oct 2026, 23:24 WIB

CVE-2026-93524

X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read

A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to leak small amounts of information from X server memory or potentially crash the X server.

Excerpt language: en.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:24 WIB

Official record

HighPublished 28 Oct 2026, 23:16 WIB

CVE-2026-93523

X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write

A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.

Excerpt language: en.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:16 WIB

Official record

HighPublished 28 Oct 2026, 23:15 WIB

CVE-2026-118510

Laravel MongoDB `whereDoesntHave` misses deny records for numeric string IDs

A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the absence of a related record to be compiled with an identifier of the wrong data type. In an application that relies on such a check to decide which documents a request may see or act on, a user with bas…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:15 WIB

Official record

HighPublished 28 Oct 2026, 23:03 WIB

CVE-2026-93522

X.Org Server Glamor CopyArea Heap Buffer Overflow

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

Excerpt language: en.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:03 WIB

Official record

HighPublished 28 Oct 2026, 22:49 WIB

CVE-2026-116778

FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.2253 and 1.6.0-RC-1, an authenticated API-enabled user with uType=1 who possesses both the user's API token and the global FOG API token can use PUT /fog/storagenode/{id}/edit to modify Storage Node user, pass, and ftppa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:06 WIB

Official record

HighPublished 28 Oct 2026, 22:42 WIB

CVE-2026-116776

USB Test: Heap-based Buffer Overflow in getSectorSize via untrusted DISK_GEOMETRY.BytesPerSector leads to RCE/DoS

USB Test is a lightweight Windows CLI utility for verifying sector integrity and detecting overreported capacity on USB flash drives. Prior to version 1.1.5, getSectorSize() in USB Test/src/driveinfo.cpp trusts DISK_GEOMETRY.BytesPerSector returned by IOCTL_DISK_GET_DRIVE_GEOMETRY without checking whether the call succ…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS7v4.0KEVNot listedEPSSPresentUpdated28 Oct 2026, 22:42 WIB

Official record

HighPublished 28 Oct 2026, 22:40 WIB

CVE-2026-56828

Shopper: read-only team permissions allow administrator creation and permission escalation

Shopper is a Headless e-commerce Admin Panel. From 2.8.0 until 2.8.1, three Shopper Livewire admin components retain authorization gaps after the earlier team-settings authorization fix. A staff member with only `view_users` and `access_dashboard` can mutate permissions, create an administrator, or delete roles. In `pa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 22:40 WIB

Official record

HighPublished 28 Oct 2026, 22:38 WIB

CVE-2026-47235

SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array

SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before the identified May 7, 2026 nightly, the `bcp_api.cpp` loop over the JSON `sockets` array uses `slot_data["sockets"].Size()` without bounding `gem_idx` by `MAX_GEM_SLOTS`, which is four in `engine/sc_enu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS7.5v4.0KEVNot listedEPSSPresentUpdated28 Oct 2026, 22:38 WIB

Official record

HighPublished 28 Oct 2026, 22:37 WIB

CVE-2026-93521

X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow

A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context.

Excerpt language: en.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 22:37 WIB

Official record

HighPublished 28 Oct 2026, 22:36 WIB

CVE-2026-59979

YosemiteCrew: Missing organization authorization on service and PMS library/template routes

YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snapshots, YosemiteCrew's service and PMS task-library/template routes omit organization and permission checks. `authorizeCognito` in `apps/backend/src/middlewares/auth.ts` sets the authenticated user's ID…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS8.3v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 22:36 WIB

Official record

CritPublished 28 Oct 2026, 22:35 WIB

CVE-2026-44179

XWiki Pro Macros: excerpt-include title and content injection executes code

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until 1.14.5, the `excerpt-include` macro does not properly escape the included page's title and executes `excerpt` content with the macro's rights. The title handling in `xwiki-pro-macros-ui/src/main/r…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 22:35 WIB

Official record

MedPublished 28 Oct 2026, 22:34 WIB

CVE-2026-50542

Xibo: IDOR (Broken Object-Level Authorization) on GET /layout/status/{id} Allows Arbitrary Layout Metadata Disclosure

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on `GET /layout/status/{id}` allow an authenticated user with any privileges to view the `status and metadata` of any layout, including layouts for whic…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:06 WIB

Official record

MedPublished 28 Oct 2026, 22:32 WIB

CVE-2026-118029

Unverified ownership of the default Athena query result location in AWS SDK for pandas

Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas (awswrangler) before 3.16.1 might allow remote actors to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 bucket. To remediate this issue, users should upgrade to ver…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS5.9v4.0KEVNot listedEPSSPresentUpdated28 Oct 2026, 22:32 WIB

Official record

MedPublished 28 Oct 2026, 22:32 WIB

CVE-2026-50543

Xibo: Missing Authorization on POST /displaygroup/criteria/{displayGroupId} Allows Arbitrary Scheduling Criteria Injection to Player Devices

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing authorization on `POST /displaygroup/criteria/{displayGroupId}` allows an authenticated user to send criteria updates to any display via `XMR`. These criteria determine sched…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 22:32 WIB

Official record

Find the CVE cohort

Severity

Matching records by UTC month

Signal coverage

Find the CVE cohort

Matching cohort composition

Severity

Matching records by UTC month

Signal coverage