Explore CVE records

NonePublished 29 Aug 2026, 03:23 WIB

CVE-2026-55891

PrivateBin: Reflected JSON injection in backend responses via unescaped REQUEST_URI

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, Request::getRequestUri() in lib/Request.php passes $_SERVER['REQUEST_URI'] through FILTER_SANITIZE_URL, which does not remove quotation marks, angle brackets, or apostrophes, and Controller::_init() stores the attacker-…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS0v3.1KEVNot listedEPSSPresentUpdated01 Sep 2026, 01:47 WIB

Official record

NonePublished 25 Aug 2026, 07:10 WIB

CVE-2026-54920

OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abort in any application t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

NonePublished 18 Aug 2026, 23:32 WIB

CVE-2026-61634

RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP frame_max value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and NettyFrameHandlerFactory continue t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS0v4.0KEVNot listedEPSSPresentUpdated19 Aug 2026, 00:27 WIB

Official record

NonePublished 14 Aug 2026, 23:25 WIB

CVE-2026-49826

Concourse login flow has an open redirect issue

Concourse is a container-based automation system written in Go. Prior to version 8.2.3, an attacker is able to craft and send a user a URL that will redirect the user from the Concourse web server to any other site. This could be used in a phishing attack to steal user's credentials. This has been fixed in 8.2.3. No kn…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS0v4.0KEVNot listedEPSSPresentUpdated15 Aug 2026, 01:06 WIB

Official record

NonePublished 11 Aug 2026, 02:31 WIB

CVE-2026-72885

Dokploy: Authenticated Command Injection in Dokploy Dockerfile Builder

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, dockerContextPath accepted by apps/dokploy/components/dashboard/application/build/show.tsx flows through getDockerContextPath in packages/server/src/utils/filesystem/directory.ts into the unquoted cd command in packages/server/src/utils/bu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS0v4.0KEVNot listedEPSSPresentUpdated11 Aug 2026, 21:36 WIB

Official record

Find the CVE cohort

Severity

Matching records by UTC month

Signal coverage

Find the CVE cohort

Matching cohort composition

Severity

Matching records by UTC month

Signal coverage