DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-58197: CVE-2026-58197: Host Escape and Lateral Movement via Insecure Container Network Defaults in ToolHive
cverports profile

CVE-2026-58197: CVE-2026-58197: Host Escape and Lateral Movement via Insecure Container Network Defaults in ToolHive

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63405: CVE-2026-63405: Insufficient Verification of Data Authenticity in AnyCable Pusher REST API
cverports profile

CVE-2026-63405: CVE-2026-63405: Insufficient Verification of Data Authenticity in AnyCable Pusher REST API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-64847: CVE-2026-64847: Indefinite Denial of Service via Undrained Stderr in AnyIO Process Pool Workers
cverports profile

CVE-2026-64847: CVE-2026-64847: Indefinite Denial of Service via Undrained Stderr in AnyIO Process Pool Workers

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63349: CVE-2026-63349: Privilege Dropping Bypass and Denial of Service in AnyIO Subprocess Module
cverports profile

CVE-2026-63349: CVE-2026-63349: Privilege Dropping Bypass and Denial of Service in AnyIO Subprocess Module

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63406: CVE-2026-63406: Information Disclosure via Insecure Telemetry and Hardcoded Credentials in AnyCable-Go
cverports profile

CVE-2026-63406: CVE-2026-63406: Information Disclosure via Insecure Telemetry and Hardcoded Credentials in AnyCable-Go

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84992: CVE-2026-84992: Cross-Site Scripting (XSS) via Fenced Code Block Parsing in md-editor-v3
cverports profile

CVE-2026-84992: CVE-2026-84992: Cross-Site Scripting (XSS) via Fenced Code Block Parsing in md-editor-v3

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-81505: CVE-2026-81505: Broken Object Level Authorization (BOLA) in Convoy Webhook Source Retrieval
cverports profile

CVE-2026-81505: CVE-2026-81505: Broken Object Level Authorization (BOLA) in Convoy Webhook Source Retrieval

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77339: CVE-2026-77339: Unauthenticated Remote Command Execution in Process Compose via DNS Rebinding
cverports profile

CVE-2026-77339: CVE-2026-77339: Unauthenticated Remote Command Execution in Process Compose via DNS Rebinding

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77301: CVE-2026-77301: Uncontrolled Resource Allocation (Decompression Bomb) in adm-zip
cverports profile

CVE-2026-77301: CVE-2026-77301: Uncontrolled Resource Allocation (Decompression Bomb) in adm-zip

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-91127: CVE-2026-91127: DOM Cross-Site Scripting via Unsafe Hyperlink Schemes in Flyfish File Viewer Legacy DOC Renderer
cverports profile

CVE-2026-91127: CVE-2026-91127: DOM Cross-Site Scripting via Unsafe Hyperlink Schemes in Flyfish File Viewer Legacy DOC Renderer

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63458: CVE-2026-63458: Broken Object Level Authorization (BOLA) and Tenant Isolation Bypass in Perses
cverports profile

CVE-2026-63458: CVE-2026-63458: Broken Object Level Authorization (BOLA) and Tenant Isolation Bypass in Perses

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63199: CVE-2026-63199: Cross-Scope Secret Disclosure via Missing Authorization in Perses Datasource Proxy
cverports profile

CVE-2026-63199: CVE-2026-63199: Cross-Scope Secret Disclosure via Missing Authorization in Perses Datasource Proxy

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63445: CVE-2026-63445: Arbitrary File Read and Path Traversal in Perses File-System Database Backend
cverports profile

CVE-2026-63445: CVE-2026-63445: Arbitrary File Read and Path Traversal in Perses File-System Database Backend

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59163: CVE-2026-59163: Critical JWT Authentication Bypass in Mnemosyne Sync Server
cverports profile

CVE-2026-59163: CVE-2026-59163: Critical JWT Authentication Bypass in Mnemosyne Sync Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-85058: CVE-2026-85058: Missing Authorization in Moquette MQTT Broker Last Will and Testament Feature
cverports profile

CVE-2026-85058: CVE-2026-85058: Missing Authorization in Moquette MQTT Broker Last Will and Testament Feature

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71537: CVE-2026-71537: Credit-Refund Double-Spend Race Condition in Paymenter Service Downgrade
cverports profile

CVE-2026-71537: CVE-2026-71537: Credit-Refund Double-Spend Race Condition in Paymenter Service Downgrade

#security #cve #cybersecurity
Comments
2 min read
GHSA-XWMW-PRC4-V3CR: GHSA-XWMW-PRC4-V3CR: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in Obot Platform
cverports profile

GHSA-XWMW-PRC4-V3CR: GHSA-XWMW-PRC4-V3CR: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in Obot Platform

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-PR6H-VR44-XQ8J: GHSA-PR6H-VR44-XQ8J: Authentication Bypass in Obot Model Context Protocol (MCP) Registry API
cverports profile

GHSA-PR6H-VR44-XQ8J: GHSA-PR6H-VR44-XQ8J: Authentication Bypass in Obot Model Context Protocol (MCP) Registry API

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-JGH3-FGGC-MCPM: GHSA-jgh3-fggc-mcpm: Non-Blind Server-Side Request Forgery (SSRF) in Obot Platform
cverports profile

GHSA-JGH3-FGGC-MCPM: GHSA-jgh3-fggc-mcpm: Non-Blind Server-Side Request Forgery (SSRF) in Obot Platform

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2025-53837: CVE-2025-53837: Remote Code Execution in XWiki Rendering via Macro Escape Injection
cverports profile

CVE-2025-53837: CVE-2025-53837: Remote Code Execution in XWiki Rendering via Macro Escape Injection

#security #cve #cybersecurity
Comments
1 min read
CVE-2026-77281: CVE-2026-77281: Rewrite Placeholder Re-expansion Vulnerability in Caddy Web Server
cverports profile

CVE-2026-77281: CVE-2026-77281: Rewrite Placeholder Re-expansion Vulnerability in Caddy Web Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77615: CVE-2026-77615: Stored Cross-Site Scripting (XSS) in Paella Player as used in Opencast
cverports profile

CVE-2026-77615: CVE-2026-77615: Stored Cross-Site Scripting (XSS) in Paella Player as used in Opencast

#security #cve #cybersecurity
Comments
2 min read
GHSA-9395-2G46-RJ3F: GHSA-9395-2G46-RJ3F: Multiple Cross-Site Scripting (XSS) Vulnerabilities in djust Template and Live Engine
cverports profile

GHSA-9395-2G46-RJ3F: GHSA-9395-2G46-RJ3F: Multiple Cross-Site Scripting (XSS) Vulnerabilities in djust Template and Live Engine

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-XJW9-38CR-6372: GHSA-XJW9-38CR-6372: Cross-Site Scripting via Stale Safe-Key Inheritance in djust Template Shadowing
cverports profile

GHSA-XJW9-38CR-6372: GHSA-XJW9-38CR-6372: Cross-Site Scripting via Stale Safe-Key Inheritance in djust Template Shadowing

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-81875: CVE-2026-81875: Unbounded DEFLATE Decompression Denial of Service in HAPI FHIR SHCParser
cverports profile

CVE-2026-81875: CVE-2026-81875: Unbounded DEFLATE Decompression Denial of Service in HAPI FHIR SHCParser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-81876: CVE-2026-81876: Unauthenticated Denial of Service via Infinite Loop in HAPI FHIR SHCParser
cverports profile

CVE-2026-81876: CVE-2026-81876: Unauthenticated Denial of Service via Infinite Loop in HAPI FHIR SHCParser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-82399: CVE-2026-82399: Resource Exhaustion Denial of Service in CoreDNS Custom Transports
cverports profile

CVE-2026-82399: CVE-2026-82399: Resource Exhaustion Denial of Service in CoreDNS Custom Transports

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84997: CVE-2026-84997: Infinite Loop Denial of Service in ReactPHP HTTP Component
cverports profile

CVE-2026-84997: CVE-2026-84997: Infinite Loop Denial of Service in ReactPHP HTTP Component

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-88976: CVE-2026-88976: HTML Deserialization Cross-Site Scripting in @platejs/core
cverports profile

CVE-2026-88976: CVE-2026-88976: HTML Deserialization Cross-Site Scripting in @platejs/core

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-85999: CVE-2026-85999: Regular Expression Denial of Service (ReDoS) in Soup Sieve css_parser.py
cverports profile

CVE-2026-85999: CVE-2026-85999: Regular Expression Denial of Service (ReDoS) in Soup Sieve css_parser.py

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-86000: CVE-2026-86000: Polynomial-Time Regular Expression Denial of Service in Soup Sieve Selector Parser
cverports profile

CVE-2026-86000: CVE-2026-86000: Polynomial-Time Regular Expression Denial of Service in Soup Sieve Selector Parser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-86003: CVE-2026-86003: Unintended Proxying of DNS UPDATE Requests via Alternative Transports in CoreDNS
cverports profile

CVE-2026-86003: CVE-2026-86003: Unintended Proxying of DNS UPDATE Requests via Alternative Transports in CoreDNS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72695: CVE-2026-72695: Authenticated Path Traversal and Arbitrary File Deletion in Grav CMS MediaUploadTrait
cverports profile

CVE-2026-72695: CVE-2026-72695: Authenticated Path Traversal and Arbitrary File Deletion in Grav CMS MediaUploadTrait

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-74907: CVE-2026-74907: Directory Traversal in Grav CMS Pre-Boot Static Asset Server
cverports profile

CVE-2026-74907: CVE-2026-74907: Directory Traversal in Grav CMS Pre-Boot Static Asset Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75828: CVE-2026-75828: Stored Cross-Site Scripting (XSS) via Security Filter Bypass in Grav CMS
cverports profile

CVE-2026-75828: CVE-2026-75828: Stored Cross-Site Scripting (XSS) via Security Filter Bypass in Grav CMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75827: CVE-2026-75827: Grav Arbitrary File Write & Remote Code Execution
cverports profile

CVE-2026-75827: CVE-2026-75827: Grav Arbitrary File Write & Remote Code Execution

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75834: CVE-2026-75834: Input Sanitization Bypass leading to Stored XSS in Grav CMS
cverports profile

CVE-2026-75834: CVE-2026-75834: Input Sanitization Bypass leading to Stored XSS in Grav CMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75837: CVE-2026-75837: Privilege Escalation in Grav CMS via Missing Blueprint Validation
cverports profile

CVE-2026-75837: CVE-2026-75837: Privilege Escalation in Grav CMS via Missing Blueprint Validation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72819: CVE-2026-72819: Remote Code Execution in Grav CMS via Dynamic Callable Validation Bypass in Blueprint
cverports profile

CVE-2026-72819: CVE-2026-72819: Remote Code Execution in Grav CMS via Dynamic Callable Validation Bypass in Blueprint

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-76461: CVE-2026-76461: SQL Injection to Remote Code Execution in Cisco Secure Email Gateway
cverports profile

CVE-2026-76461: CVE-2026-76461: SQL Injection to Remote Code Execution in Cisco Secure Email Gateway

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75523: CVE-2026-75523: Exposure of Sensitive Query Parameter Secrets in Steeltoe Actuator Endpoints
cverports profile

CVE-2026-75523: CVE-2026-75523: Exposure of Sensitive Query Parameter Secrets in Steeltoe Actuator Endpoints

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-86039: CVE-2026-86039: Signature Verification Bypass and Address Book Poisoning in @libp2p/peer-store
cverports profile

CVE-2026-86039: CVE-2026-86039: Signature Verification Bypass and Address Book Poisoning in @libp2p/peer-store

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75831: CVE-2026-75831: Stored Cross-Site Scripting in Grav CMS Audio/Video Media Rendering
cverports profile

CVE-2026-75831: CVE-2026-75831: Stored Cross-Site Scripting in Grav CMS Audio/Video Media Rendering

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-86071: CVE-2026-86071: Path Traversal Vulnerability in Junrar Archive Library
cverports profile

CVE-2026-86071: CVE-2026-86071: Path Traversal Vulnerability in Junrar Archive Library

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63506: CVE-2026-63506: Broken Access Control in TinaCMS isAuthorized Authentication Handler
cverports profile

CVE-2026-63506: CVE-2026-63506: Broken Access Control in TinaCMS isAuthorized Authentication Handler

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-85078: CVE-2026-85078: HTTP Request Smuggling via Chunked Trailers in Sanic Core HTTP Parser
cverports profile

CVE-2026-85078: CVE-2026-85078: HTTP Request Smuggling via Chunked Trailers in Sanic Core HTTP Parser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61597: CVE-2026-61597: Cross-Site Scripting (XSS) via Unsanitized URI Schemes in djust Component Template Tags
cverports profile

CVE-2026-61597: CVE-2026-61597: Cross-Site Scripting (XSS) via Unsanitized URI Schemes in djust Component Template Tags

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61592: CVE-2026-61592: Session Hijacking and Authorization Bypass in djust SSE Transport
cverports profile

CVE-2026-61592: CVE-2026-61592: Session Hijacking and Authorization Bypass in djust SSE Transport

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61591: CVE-2026-61591: State Snapshot Injection and Mass Assignment in djust Framework
cverports profile

CVE-2026-61591: CVE-2026-61591: State Snapshot Injection and Mass Assignment in djust Framework

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-19931: CVE-2026-19931: Unauthenticated Session Reuse Vulnerability in libcurl Negotiate Implementation
cverports profile

CVE-2026-19931: CVE-2026-19931: Unauthenticated Session Reuse Vulnerability in libcurl Negotiate Implementation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61588: CVE-2026-61588: Sensitive Data Exposure via Over-Serialization in djust Framework
cverports profile

CVE-2026-61588: CVE-2026-61588: Sensitive Data Exposure via Over-Serialization in djust Framework

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61596: CVE-2026-61596: Broken Object-Level Access Control (IDOR) in djust Framework
cverports profile

CVE-2026-61596: CVE-2026-61596: Broken Object-Level Access Control (IDOR) in djust Framework

#security #cve #cybersecurity
Comments
1 min read
CVE-2026-61589: CVE-2026-61589: Host Header Propagation Failure in djust WebSocket Live Path Reconstructor
cverports profile

CVE-2026-61589: CVE-2026-61589: Host Header Propagation Failure in djust WebSocket Live Path Reconstructor

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61599: CVE-2026-61599: Unauthenticated Arbitrary Module Import in djust Framework
cverports profile

CVE-2026-61599: CVE-2026-61599: Unauthenticated Arbitrary Module Import in djust Framework

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59193: CVE-2026-59193: Remote Denial of Service via Resource Exhaustion in Grav CMS
cverports profile

CVE-2026-59193: CVE-2026-59193: Remote Denial of Service via Resource Exhaustion in Grav CMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-57173: CVE-2026-57173: Unauthenticated Audio Decompression-Bomb Denial of Service in vLLM
cverports profile

CVE-2026-57173: CVE-2026-57173: Unauthenticated Audio Decompression-Bomb Denial of Service in vLLM

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61453: CVE-2026-61453: Stored Cross-Site Scripting via Twig String Concatenation Bypass in Grav CMS
cverports profile

CVE-2026-61453: CVE-2026-61453: Stored Cross-Site Scripting via Twig String Concatenation Bypass in Grav CMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63127: CVE-2026-63127: OAuth Resource Spoofing and Token Leakage in rmcp SDK
cverports profile

CVE-2026-63127: CVE-2026-63127: OAuth Resource Spoofing and Token Leakage in rmcp SDK

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63128: CVE-2026-63128: Uncontrolled Resource Consumption in Model Context Protocol Rust SDK (rmcp)
cverports profile

CVE-2026-63128: CVE-2026-63128: Uncontrolled Resource Consumption in Model Context Protocol Rust SDK (rmcp)

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63671: CVE-2026-63671: Cross-Site Scripting (XSS) Sanitizer Bypass in @nuxtjs/mdc
cverports profile

CVE-2026-63671: CVE-2026-63671: Cross-Site Scripting (XSS) Sanitizer Bypass in @nuxtjs/mdc

#security #cve #cybersecurity
Comments
2 min read
loading...