DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-57178: CVE-2026-57178: Authentication Bypass via Missing Signature Verification in social-auth-core
cverports profile

CVE-2026-57178: CVE-2026-57178: Authentication Bypass via Missing Signature Verification in social-auth-core

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-57179: CVE-2026-57179: Session Fixation and Login CSRF in social-auth-core Partial Pipeline
cverports profile

CVE-2026-57179: CVE-2026-57179: Session Fixation and Login CSRF in social-auth-core Partial Pipeline

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-57232: CVE-2026-57232: Server-Side Request Forgery in Contao CMS Feed Reader Module
cverports profile

CVE-2026-57232: CVE-2026-57232: Server-Side Request Forgery in Contao CMS Feed Reader Module

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63498: CVE-2026-63498: Stored Cross-Site Scripting via Inline XML Rendering in Snipe-IT API
cverports profile

CVE-2026-63498: CVE-2026-63498: Stored Cross-Site Scripting via Inline XML Rendering in Snipe-IT API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-19730: CVE-2026-19730: Podman Quadlet Install Non-Truncating Write Retains Removed Host-Access/Security Directives
cverports profile

CVE-2026-19730: CVE-2026-19730: Podman Quadlet Install Non-Truncating Write Retains Removed Host-Access/Security Directives

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-63493: CVE-2026-63493: Multi-Factor Authentication Bypass via Stateless API Token Flow in Snipe-IT
cverports profile

CVE-2026-63493: CVE-2026-63493: Multi-Factor Authentication Bypass via Stateless API Token Flow in Snipe-IT

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-57576: CVE-2026-57576: Application-Level Denial of Service via Uncontrolled Resource Consumption in Plone
cverports profile

CVE-2026-57576: CVE-2026-57576: Application-Level Denial of Service via Uncontrolled Resource Consumption in Plone

#security #cve #cybersecurity
Comments
3 min read
GHSA-8PCW-H6W9-H46G: GHSA-8PCW-H6W9-H46G: Denial of Service via Uncontrolled Resource Consumption in plone.app.contenttypes
cverports profile

GHSA-8PCW-H6W9-H46G: GHSA-8PCW-H6W9-H46G: Denial of Service via Uncontrolled Resource Consumption in plone.app.contenttypes

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-61685: CVE-2026-61685: SQL Injection via Dynamic Query Parameters in ReactPress
cverports profile

CVE-2026-61685: CVE-2026-61685: SQL Injection via Dynamic Query Parameters in ReactPress

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-56669: CVE-2026-56669: Remote Denial of Service via Algorithmic Complexity and Interpretation Conflict in Elysia
cverports profile

CVE-2026-56669: CVE-2026-56669: Remote Denial of Service via Algorithmic Complexity and Interpretation Conflict in Elysia

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-86065: CVE-2026-86065: Denial of Service via Resource Exhaustion in klever-go WebSocket Subscription Endpoint
cverports profile

CVE-2026-86065: CVE-2026-86065: Denial of Service via Resource Exhaustion in klever-go WebSocket Subscription Endpoint

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-82405: CVE-2026-82405: Incorrect Authorization leading to Account Takeover in klever-go
cverports profile

CVE-2026-82405: CVE-2026-82405: Incorrect Authorization leading to Account Takeover in klever-go

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63000: CVE-2026-63000: Cross-Site Request Forgery in REDAXO CMS Package Update API
cverports profile

CVE-2026-63000: CVE-2026-63000: Cross-Site Request Forgery in REDAXO CMS Package Update API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-85724: CVE-2026-85724: Pattern-ACL Wildcard Injection & Cross-Tenant Authorization Bypass in Moquette MQTT Broker
cverports profile

CVE-2026-85724: CVE-2026-85724: Pattern-ACL Wildcard Injection & Cross-Tenant Authorization Bypass in Moquette MQTT Broker

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-88974: CVE-2026-88974: Incorrect Authorization in WPGraphQL updatePost Mutation
cverports profile

CVE-2026-88974: CVE-2026-88974: Incorrect Authorization in WPGraphQL updatePost Mutation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73858: CVE-2026-73858: Server-Side Twig Template Injection in Solspace Freeform for Craft CMS
cverports profile

CVE-2026-73858: CVE-2026-73858: Server-Side Twig Template Injection in Solspace Freeform for Craft CMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54892: CVE-2026-54892: Algorithmic Complexity Denial of Service in Plug Query Decoder
cverports profile

CVE-2026-54892: CVE-2026-54892: Algorithmic Complexity Denial of Service in Plug Query Decoder

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-83801: CVE-2026-83801: Stored Cross-Site Scripting via Form Help Text in Nautobot
cverports profile

CVE-2026-83801: CVE-2026-83801: Stored Cross-Site Scripting via Form Help Text in Nautobot

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-83805: CVE-2026-83805: Authorization Bypass and Privilege Escalation in Nautobot Approval Workflows
cverports profile

CVE-2026-83805: CVE-2026-83805: Authorization Bypass and Privilege Escalation in Nautobot Approval Workflows

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-85709: CVE-2026-85709: Sensitive Information Exposure in LightRAG API Server
cverports profile

CVE-2026-85709: CVE-2026-85709: Sensitive Information Exposure in LightRAG API Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-85725: CVE-2026-85725: Observable Timing Side-Channel Vulnerability in HKUDS LightRAG
cverports profile

CVE-2026-85725: CVE-2026-85725: Observable Timing Side-Channel Vulnerability in HKUDS LightRAG

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-85734: CVE-2026-85734: Brute-Force and CPU-Exhaustion DoS in LightRAG API /login Endpoint
cverports profile

CVE-2026-85734: CVE-2026-85734: Brute-Force and CPU-Exhaustion DoS in LightRAG API /login Endpoint

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-85740: CVE-2026-85740: Server-Side Request Forgery (SSRF) Guard Bypass via IPv6 Transition Wrappers in LightRAG
cverports profile

CVE-2026-85740: CVE-2026-85740: Server-Side Request Forgery (SSRF) Guard Bypass via IPv6 Transition Wrappers in LightRAG

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-86062: CVE-2026-86062: Stored Cross-Site Scripting (XSS) in HKUDS LightRAG WebUI Chat Renderer
cverports profile

CVE-2026-86062: CVE-2026-86062: Stored Cross-Site Scripting (XSS) in HKUDS LightRAG WebUI Chat Renderer

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-94462: CVE-2026-94462: Broken Access Control in Spree Store API v3 Cart Association
cverports profile

CVE-2026-94462: CVE-2026-94462: Broken Access Control in Spree Store API v3 Cart Association

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77633: CVE-2026-77633: Storage-quota Time-of-Check to Time-of-Use (TOCTOU) Race Condition in Cloudreve
cverports profile

CVE-2026-77633: CVE-2026-77633: Storage-quota Time-of-Check to Time-of-Use (TOCTOU) Race Condition in Cloudreve

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77637: CVE-2026-77637: Privilege Scope Bypass in Cloudreve Administrative Tools
cverports profile

CVE-2026-77637: CVE-2026-77637: Privilege Scope Bypass in Cloudreve Administrative Tools

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-79767: CVE-2026-79767: Authorization Bypass in Gardener API Server admission plugin
cverports profile

CVE-2026-79767: CVE-2026-79767: Authorization Bypass in Gardener API Server admission plugin

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-79913: CVE-2026-79913: Server-Side Request Forgery Bypass via IPv6 Transition Addresses in Cloudreve
cverports profile

CVE-2026-79913: CVE-2026-79913: Server-Side Request Forgery Bypass via IPv6 Transition Addresses in Cloudreve

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84298: CVE-2026-84298: Cross-Tenant Authorization Bypass and Information Disclosure in Hatchet V1 Dispatcher
cverports profile

CVE-2026-84298: CVE-2026-84298: Cross-Tenant Authorization Bypass and Information Disclosure in Hatchet V1 Dispatcher

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-88978: CVE-2026-88978: Multi-Tenant Isolation Failure in Hatchet Durable Workflow Engine
cverports profile

CVE-2026-88978: CVE-2026-88978: Multi-Tenant Isolation Failure in Hatchet Durable Workflow Engine

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-88010: CVE-2026-88010: Unauthenticated Username-Enumeration Timing Oracle in Traefik BasicAuth Middleware
cverports profile

CVE-2026-88010: CVE-2026-88010: Unauthenticated Username-Enumeration Timing Oracle in Traefik BasicAuth Middleware

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-91129: CVE-2026-91129: Server-Side Request Forgery in Home Assistant Core IPP Integration
cverports profile

CVE-2026-91129: CVE-2026-91129: Server-Side Request Forgery in Home Assistant Core IPP Integration

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-91130: CVE-2026-91130: DOM-Based Cross-Site Scripting in Home Assistant Statistics Graph Card
cverports profile

CVE-2026-91130: CVE-2026-91130: DOM-Based Cross-Site Scripting in Home Assistant Statistics Graph Card

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-58268: CVE-2026-58268: Denial of Service via Uncontrolled Memory Allocation in emiago/sipgo Stream Parser
cverports profile

CVE-2026-58268: CVE-2026-58268: Denial of Service via Uncontrolled Memory Allocation in emiago/sipgo Stream Parser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-58270: CVE-2026-58270: Regular Expression Denial of Service (ReDoS) in Sync-in Server
cverports profile

CVE-2026-58270: CVE-2026-58270: Regular Expression Denial of Service (ReDoS) in Sync-in Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-56681: CVE-2026-56681: Authentication Bypass via HTTP Header Spoofing in 9Router
cverports profile

CVE-2026-56681: CVE-2026-56681: Authentication Bypass via HTTP Header Spoofing in 9Router

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-56682: CVE-2026-56682: Rate Limiter Lockout Bypass via Header Spoofing in 9Router
cverports profile

CVE-2026-56682: CVE-2026-56682: Rate Limiter Lockout Bypass via Header Spoofing in 9Router

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-58272: CVE-2026-58272: Username Enumeration via Timing Side-Channel in Sync-in Server
cverports profile

CVE-2026-58272: CVE-2026-58272: Username Enumeration via Timing Side-Channel in Sync-in Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61612: CVE-2026-61612: Server-Side Request Forgery Bypass via DNS Resolution in CKAN MCP Server
cverports profile

CVE-2026-61612: CVE-2026-61612: Server-Side Request Forgery Bypass via DNS Resolution in CKAN MCP Server

#security #cve #cybersecurity
Comments
2 min read
GHSA-JHJP-4C2Q-XMX4: GHSA-JHJP-4C2Q-XMX4: Falco k8saudit Plugin Ruleset Bypass via initContainers and ephemeralContainers
cverports profile

GHSA-JHJP-4C2Q-XMX4: GHSA-JHJP-4C2Q-XMX4: Falco k8saudit Plugin Ruleset Bypass via initContainers and ephemeralContainers

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-61630: CVE-2026-61630: Time-Based One-Time Password (TOTP) Reuse/Replay in nginx-ignition
cverports profile

CVE-2026-61630: CVE-2026-61630: Time-Based One-Time Password (TOTP) Reuse/Replay in nginx-ignition

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61629: CVE-2026-61629: CPU Amplification Denial of Service via ParseAcceptLanguage Underscore Bypass
cverports profile

CVE-2026-61629: CVE-2026-61629: CPU Amplification Denial of Service via ParseAcceptLanguage Underscore Bypass

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61628: CVE-2026-61628: Unauthenticated Admin Account Creation via Onboarding Race Condition in Nginx Ignition
cverports profile

CVE-2026-61628: CVE-2026-61628: Unauthenticated Admin Account Creation via Onboarding Race Condition in Nginx Ignition

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61687: CVE-2026-61687: OAuth State Validation Bypass and Login CSRF in Hatchet
cverports profile

CVE-2026-61687: CVE-2026-61687: OAuth State Validation Bypass and Login CSRF in Hatchet

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-58197: CVE-2026-58197: Host Escape and Lateral Movement via Insecure Container Network Defaults in ToolHive
cverports profile

CVE-2026-58197: CVE-2026-58197: Host Escape and Lateral Movement via Insecure Container Network Defaults in ToolHive

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63405: CVE-2026-63405: Insufficient Verification of Data Authenticity in AnyCable Pusher REST API
cverports profile

CVE-2026-63405: CVE-2026-63405: Insufficient Verification of Data Authenticity in AnyCable Pusher REST API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-64847: CVE-2026-64847: Indefinite Denial of Service via Undrained Stderr in AnyIO Process Pool Workers
cverports profile

CVE-2026-64847: CVE-2026-64847: Indefinite Denial of Service via Undrained Stderr in AnyIO Process Pool Workers

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63349: CVE-2026-63349: Privilege Dropping Bypass and Denial of Service in AnyIO Subprocess Module
cverports profile

CVE-2026-63349: CVE-2026-63349: Privilege Dropping Bypass and Denial of Service in AnyIO Subprocess Module

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63406: CVE-2026-63406: Information Disclosure via Insecure Telemetry and Hardcoded Credentials in AnyCable-Go
cverports profile

CVE-2026-63406: CVE-2026-63406: Information Disclosure via Insecure Telemetry and Hardcoded Credentials in AnyCable-Go

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84992: CVE-2026-84992: Cross-Site Scripting (XSS) via Fenced Code Block Parsing in md-editor-v3
cverports profile

CVE-2026-84992: CVE-2026-84992: Cross-Site Scripting (XSS) via Fenced Code Block Parsing in md-editor-v3

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-81505: CVE-2026-81505: Broken Object Level Authorization (BOLA) in Convoy Webhook Source Retrieval
cverports profile

CVE-2026-81505: CVE-2026-81505: Broken Object Level Authorization (BOLA) in Convoy Webhook Source Retrieval

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77339: CVE-2026-77339: Unauthenticated Remote Command Execution in Process Compose via DNS Rebinding
cverports profile

CVE-2026-77339: CVE-2026-77339: Unauthenticated Remote Command Execution in Process Compose via DNS Rebinding

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77301: CVE-2026-77301: Uncontrolled Resource Allocation (Decompression Bomb) in adm-zip
cverports profile

CVE-2026-77301: CVE-2026-77301: Uncontrolled Resource Allocation (Decompression Bomb) in adm-zip

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-91127: CVE-2026-91127: DOM Cross-Site Scripting via Unsafe Hyperlink Schemes in Flyfish File Viewer Legacy DOC Renderer
cverports profile

CVE-2026-91127: CVE-2026-91127: DOM Cross-Site Scripting via Unsafe Hyperlink Schemes in Flyfish File Viewer Legacy DOC Renderer

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63458: CVE-2026-63458: Broken Object Level Authorization (BOLA) and Tenant Isolation Bypass in Perses
cverports profile

CVE-2026-63458: CVE-2026-63458: Broken Object Level Authorization (BOLA) and Tenant Isolation Bypass in Perses

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63199: CVE-2026-63199: Cross-Scope Secret Disclosure via Missing Authorization in Perses Datasource Proxy
cverports profile

CVE-2026-63199: CVE-2026-63199: Cross-Scope Secret Disclosure via Missing Authorization in Perses Datasource Proxy

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63445: CVE-2026-63445: Arbitrary File Read and Path Traversal in Perses File-System Database Backend
cverports profile

CVE-2026-63445: CVE-2026-63445: Arbitrary File Read and Path Traversal in Perses File-System Database Backend

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59163: CVE-2026-59163: Critical JWT Authentication Bypass in Mnemosyne Sync Server
cverports profile

CVE-2026-59163: CVE-2026-59163: Critical JWT Authentication Bypass in Mnemosyne Sync Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-85058: CVE-2026-85058: Missing Authorization in Moquette MQTT Broker Last Will and Testament Feature
cverports profile

CVE-2026-85058: CVE-2026-85058: Missing Authorization in Moquette MQTT Broker Last Will and Testament Feature

#security #cve #cybersecurity
Comments
2 min read
loading...