Podatności

Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docker host services because isValidCustomHost trusts localhost-style hosts when TRUSTED_CUSTOM_HOSTS is unset. Attackers can send /v1 requests…

CVSS 7,2 · rekomendacja wg zapisanej polityki

The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_alpha1 through 2.7.7 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry.

CVSS 7,2 · rekomendacja wg zapisanej polityki

Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9.

CVSS 7,2 · rekomendacja wg zapisanej polityki

Stonewuu ai-fusion-video through 1.2.0 contains a missing authorization vulnerability that allows authenticated non-admin users to read stored secrets through unprotected ApiConfigController and SystemConfigController endpoints. Attackers can query the api-config get/list and system config…

CVSS 7,1 · EPSS 0,48 % · rekomendacja wg zapisanej polityki

Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

CVSS 7,1 · EPSS 0,47 % · rekomendacja wg zapisanej polityki

An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options

CVSS 7,1 · EPSS 0,47 % · rekomendacja wg zapisanej polityki

FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that…

CVSS 7,1 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access.…

CVSS 7,1 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows any authenticated user to enable or disable accounts because the updateUserStatus handler lacks a @PreAuthorize check. Attackers can send PATCH requests to /api/v1/users/{userId}/status to disable root or admin…

CVSS 7,1 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through…

CVSS 7,1 · EPSS 0,42 % · rekomendacja wg zapisanej polityki

Wukong AICRM through 20260610 contains a missing authorization vulnerability in the /systemConfig controller that allows any authenticated user to read the stored AI provider API key. Attackers can request GET /systemConfig/byType/ai for the cleartext key, or send a chosen apiUrl to…

CVSS 7,1 · EPSS 0,39 % · rekomendacja wg zapisanej polityki

Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tools with a regex engine that expands nested counted repetition unbounded at compile time and caches the result. Authenticated users can have the model call grep_knowledge_files with short…

CVSS 7,1 · EPSS 0,39 % · rekomendacja wg zapisanej polityki

Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting unsatisfiable recurrence rules. Attackers can repeatedly send rules like February 30th to the automations create or update…

CVSS 7,1 · EPSS 0,38 % · rekomendacja wg zapisanej polityki

HyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update Commvault installation of HyperScale MediaAgents.

CVSS 7,1 · EPSS 0,38 % · rekomendacja wg zapisanej polityki

omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into ~/.local/state/omarchy/current/theme may include executable content from an untrusted Git repository.

CVSS 7,1 · EPSS 0,37 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.

CVSS 7,1 · EPSS 0,36 % · rekomendacja wg zapisanej polityki

NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-database read restrictions on the /nornicdb/search and /nornicdb/similar endpoints. Viewer-role users allowlisted for a database but denied read can submit search queries or node IDs…

CVSS 7,1 · EPSS 0,35 % · rekomendacja wg zapisanej polityki

Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emergency-contacts/approve-recovery endpoint authorized approval using a client-supplied userID and updated an emergency recovery session using only its client-supplied…

CVSS 7,1 · EPSS 0,35 % · rekomendacja wg zapisanej polityki

Malcolm file-upload component ships the upstream FilePond PHP server (pqina/filepond-server-php) largely unmodified: Dockerfile copies all upstream *.php files and Malcolm only overwrites config.php and submit.php. Upstream index.php exposes a fetch API route that instructs the server to download…

CVSS 7,1 · EPSS 0,35 % · rekomendacja wg zapisanej polityki

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.

CVSS 7,1 · EPSS 0,35 % · rekomendacja wg zapisanej polityki

Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain…

CVSS 7,1 · EPSS 0,35 % · rekomendacja wg zapisanej polityki

In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenance…

CVSS 7,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki

FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped. Malicious RDP servers can send crafted ATR mask arrays to use query timing as an oracle, leaking heap memory bit-by-bit to…

CVSS 7,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki

Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fim_generate_alert() where full_log is sized from input but written bounded by OS_MAXSTR. An enrolled agent can send a crafted FIM syscheck event to corrupt manager heap memory and deterministically crash wazuh-analysisd, causing a…

CVSS 7,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki

Frappe ERPNext before 15.98.0 and 16.x before 16.6.0 contains an SQL injection vulnerability in some endpoints caused by missing input validation. Remote authenticated attackers can send specially crafted requests to the affected endpoints to manipulate database queries and extract sensitive…

CVSS 7,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki