Fireblocks mpc-lib hardened derivation fails to isolate ancestor shares
CVE-2026-90975 lets a known chain code turn a leaf share into that party's ancestor shares; no vendor fix is available.
58
- Mentions · 7d2
- Mentions · 30d15
- All mentions36
- First seenAug 19, 2026
- Last mentioned4d ago
Timeline
36 articles · newest firstvsomeip 3.7.3 and earlier can exhaust memory over TCP (CVE-2026-91141)
A remote peer can force allocation of up to about 4 GB per connection before any bytes are validated.
62
PHP before 8.2.35 and related releases allows remote code execution
Two flaws let unauthenticated attackers send crafted HTTP requests; a mod_php proof of concept runs before application code.
78
Xerj Console API bypass lets token holders mint credentials
CVE-2026-97406 lets a valid API token spawn persistent successor credentials that survive parent-token revocation; no patch is available.
64
Broadcom Wi-Fi bug since 2010 allows unauthenticated router code execution
Quentin Kaiser demonstrated exploits on two Belgian ISP routers; Broadcom assigned no CVE after an incomplete 2018 fix.
74
Multiple TLS libraries: X.509 Name Constraints enforcement bypasses (CVE-2026-34073, CVE-2026-3833, CVE-2026-5263, CVE-2026-33810; CERT/CC VU#573195, VU#948176, VU#410595)
Multiple TLS libraries bypass X.509 name-constraint checks, tracked in four CVEs and three CERT/CC notes.
54
VU#410595: Google BoringSSL Name Constraints Bypass in SAN Validation Logic
CERT/CC reports five BoringSSL Name Constraints flaws, with two fixed and three unresolved or rejected.
52
VU#948176: Multiple TLS Libraries can Bypass Delegation Enforcement
CERT/CC says TLS libraries inconsistently enforce Name Constraints, with three assigned CVEs already fixed.
64
VU#166125: Bisheng has authentication bypass vulnerabilities
CERT/CC warns Bisheng has an unpatched SSO authentication bypass that can grant super-admin access.
64
VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration
CERT/CC says Lowcoder 2.4.10 lets admins or developers read and run other tenants' library queries.
64
VU#573195: Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint Inconsistency in RFC 5280 Implementation
CERT/CC warns TLS libraries inconsistently enforce X.509 name constraints, with fixes for GnuTLS and pyca/cryptography.
54
VU#157374: XSS vulnerability in Shopware 6 enables Admin Token Theft and RCE
CERT/CC warns a Shopware 6 stored XSS can steal admin tokens and enable code execution, with no patch.
48
VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1
CERT/CC details multiple Thelia 2.6.0 and 2.6.1 flaws, including admin-reachable remote code execution.
52
From: anyone@icloud.com - Spoofing Arbitrary Apple iCloud Identities
SEC Consult showed header smuggling can spoof arbitrary sender addresses on Apple iCloud.
66
VU#553437: InsydeH2O IHISI SMM is vulnerable to unsafe memory write operations
CERT warns an InsydeH2O SMM flaw in HP BIOS lets kernel attackers write arbitrary memory, including SMRAM.
48
VU#762428: Authlib library contains a signature‑verification bypass vulnerability
Authlib through 1.7.2 can accept unsigned JWS payloads, enabling authentication bypass via CVE-2026-96760.
66
VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities
CERT/CC discloses three stored XSS flaws in Readwise Reader Android 8.7.2 that can run JavaScript in WebView.
34
VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise
Unauthenticated ViewSonic vCast flaws can leak screens and fully compromise ViewBoard devices.
68
VU#273940: Enterprise Access Management EAM does not rotate RSA keys
Imprivata EAM 26.2.6 and earlier cannot rotate its RSA key, enabling persistent impersonation after key theft.
48
VU#754548: Cinnamon's kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlers
Kotaemon through v0.12.0 lets any logged-in user read or alter others' chats and document excerpts via CVE-2026-86867.
62
VU#738147: Vendor-signed UEFI Shell applications allow Secure Boot bypass
CERT warns vendor-signed UEFI shells from Acer, Dell, and others can bypass Secure Boot.
76
CISA Upgrades Vulnerability Reporting Platform with More Automation
CISA migrated its coordinated vulnerability disclosure platform to VINCE-NT on September 17, 2026, adding automation and shifting management to its CVD team.
25
VU#280377: Dokploy is vulnerable to OS command injection
CERT/CC details an OS command injection in Dokploy letting authenticated users execute commands as root; patched in 0.29.13.
58
VU#369093: MLflow dspy and statsmodels flavors bypass pickle deserialization control
CERT/CC warns MLflow's dspy and statsmodels flavors bypass the MLFLOW_ALLOW_PICKLE_DESERIALIZATION control, enabling remote code execution.
50
VU#212479: Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment
CERT/CC details CVE-2026-90999: attacker-controlled Sentry telemetry can steer the Seer coding agent into executing attacker code with repository access.
62
Skullcandy Dime 3 Bluetooth Flaw Lets Nearby Attackers Hijack Audio and Spy Through Microphone
Skullcandy Dime 3 earbuds on firmware 1.0.0.28 accept unauthenticated Bluetooth pairing via Airoha SDK flaw CVE-2025-20701, enabling audio hijack and microphone capture.
35
VU#687587: AOMEI Backupper amwrtdrv.sys local privilege escalation vulnerability allows arbitrary writes to physical disks
AOMEI Backupper 8.4.0 driver flaw CVE-2026-12780 lets unprivileged users write physical disks and execute UEFI code, bypassing HVCI and EDR.
62
Skullcandy Dime 3 earbuds expose users to Bluetooth hijacking
CERT/CC warns Skullcandy Dime 3 earbuds accept silent Bluetooth pairings via CVE-2025-20701, letting nearby attackers hijack audio and microphone.
45
VU#718077: UEFI Shell module embedded in SPI Flash can be used to bypass Secure Boot
CERT/CC details VU#718077: UEFI Shell embedded in SPI flash lets attackers bypass Secure Boot and execute pre-boot code; patches issued.
55
VU#859658: Skullcandy Dime 3 wireless earbuds contain an unauthenticated Bluetooth pairing vulnerability
Skullcandy Dime 3 earbuds (CVE-2025-20701) accept Bluetooth pairings without owner consent, letting in-range attackers hijack audio or capture microphone; no firmware update path exists.
24
VU#943094: ONLYOFFICE ownCloud integration plugin contains a Server-Side Request Forgery (SSRF) vulnerability
ONLYOFFICE's ownCloud integration plugin 9.12 has an SSRF flaw (CVE-2026-84282) letting authenticated admins probe internal networks; no patch exists yet.
32
VU#456290: Hugging Face Transformers library writes remote code to disk prior to consent check
CVE-2026-80047: Hugging Face Transformers 4.49.0 through 5.8.1 writes attacker-controlled Python files to disk before the trust_remote_code consent check.
45
Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code
CERT/CC disclosed unpatched Kaltura mwEmbed flaws CVE-2026-19913 and CVE-2026-19912 allowing unauthenticated file reads and remote code execution.
62
VU#728712: Konami's Metal Gear Online 3 contains a heap-based buffer overflow
CERT/CC details CVE-2026-19874, a heap overflow in Metal Gear Online 3 letting match hosts execute code on lobby members' machines.
40
VU#756733: Calix GS7 XGS GS5239XG residential router contains missing authentication vulnerability
CERT/CC warns Calix GS7 XGS GS5239XG routers on firmware EXOS/6.6.47 expose an unauthenticated UPnP WANIPConnection service on the public WAN interface.
48
VU#874418: RDK-B WebUI contains multiple vulnerabilities
CERT/CC warns RDK-B WebUI rdkb-2025q4-kirkstone contains multiple flaws enabling network attackers to bypass authentication, cause DoS, or potentially execute code.
65
Related CVEs
by mentions- CVE-2025-207018%8.8In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent
- CVE-2026-3833<1%7.4gnutls: This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for…
- CVE-2026-34073<1%1.7cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-33197<1%8.7Privileged local BIOS code execution in AMI Aptio V (incomplete input validation)
- Stored XSS in Shopware 6.7 can steal admin tokens and lead to RCE
- Broken Access Control in Cinnamon Kotaemon Chat Lets Users Read and Delete Others' Chats
- Stored Cross-Site Scripting in Readwise Reader for Android via Imported Document Metadata
- Username Enumeration in Thelia 2.6.0 Admin Login and Password Reset
Appears with
- Applevendor · 4
- CERT/CCvendor · 4
- Skullcandy Dime 3product · 3
- Skullcandyvendor · 3
- wolfSSLproduct · 2
- GnuTLSproduct · 2
- UEFI Shellproduct · 2
- OpenSSLproduct · 2
- GnuTLSvendor · 2
- Voke Cyberorganization · 2
- Carnegie Mellon Universityorganization · 2
- OpenSSLvendor · 2
- LibreSSLproduct · 2
- Airoha Technologyvendor · 2
- wolfSSLvendor · 2
- Go crypto/x509product · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.