CERT/CC

Mentions · 7d0
Mentions · 30d0
All mentions7
First seenAug 19, 2026
Last mentionedSep 11, 2026

Timeline

7 articles · newest first

VU#369611: ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch index

CERT/CC details CVE-2026-84286, an out-of-bounds memory access in ExLlamaV3's CUDA extension causing denial-of-service crashes; fixed via merged pull request.

CERT/CC Vulnerability NotesSep 11, 20:11 UTC · Sep 11, 2026VulnerabilityCVE-2026-842864 · 2 reads

VU#889462: Casdoor authentication server is vulnerable to authorization bypass

Casdoor IAM versions 3.115.0 and earlier allow organization admins to bypass tenant isolation through inconsistent authorization checks, tracked as CVE-2026-15630.

CERT/CC Vulnerability NotesSep 3, 17:03 UTC · Sep 3, 2026VulnerabilityCVE-2026-156301 · 1 read

VU#456290: Hugging Face Transformers library writes remote code to disk prior to consent check

CVE-2026-80047: Hugging Face Transformers 4.49.0 through 5.8.1 writes attacker-controlled Python files to disk before the trust_remote_code consent check.

CERT/CC Vulnerability NotesSep 1, 13:35 UTC · Sep 1, 2026Vulnerability2 · 1 read

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

CERT/CC disclosed unpatched Kaltura mwEmbed flaws CVE-2026-19913 and CVE-2026-19912 allowing unauthenticated file reads and remote code execution.

The Hacker NewsAug 26, 11:55 UTC · Aug 26, 2026VulnerabilityCVE-2026-19913 CVE-2026-199122

VU#308749: Remote Code Execution and Arbitrary File Read Vulnerabilities in Kaltura Servers

Insecure deserialization in Kaltura's legacy HTML5 Player V2 (mwEmbed) allows arbitrary file read and remote code execution; Player V7 is unaffected.

CERT/CC Vulnerability NotesAug 25, 16:11 UTC · Aug 25, 2026Vulnerability2 · 1 read

VU#756733: Calix GS7 XGS GS5239XG residential router contains missing authentication vulnerability

CERT/CC warns Calix GS7 XGS GS5239XG routers on firmware EXOS/6.6.47 expose an unauthenticated UPnP WANIPConnection service on the public WAN interface.

CERT/CC Vulnerability NotesAug 21, 14:44 UTC · Aug 21, 2026Vulnerability1 · 1 read

VU#874418: RDK-B WebUI contains multiple vulnerabilities

CERT/CC warns RDK-B WebUI rdkb-2025q4-kirkstone contains multiple flaws enabling network attackers to bypass authentication, cause DoS, or potentially execute code.

CERT/CC Vulnerability NotesAug 19, 19:28 UTC · Aug 19, 2026Vulnerability1 · 1 read

Related CVEs

by mentions

CVE-2026-15630<1%9.9
A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a mismatch…
published Jul 23, 2026
CVE-2026-842869.8
Out-of-bounds CUDA kernel dispatch in ExLlamaV3
published 18d agoExLlamaV3 project ExLlamaV3 (EXL3 loader)
CVE-2026-19912<1%9.8
Unauthenticated RCE in Kaltura mwEmbed HTML5 Player
published Aug 25, 2026Kaltura mwEmbed HTML5 player (html5lib)
CVE-2026-19913<1%7.5
Unauthenticated Local File Disclosure in Kaltura HTML5 Player (mwEmbed)
published Aug 25, 2026Kaltura html5lib / mwEmbed HTML5 player (mwEmbedLoader.php)

Appears with

CERT/CCorganization · 4
Kalturavendor · 2
RDK Centralvendor · 1
Voke Cyberorganization · 1
Calixvendor · 1
RDK-B WebUIproduct · 1
KalturaClientBaseproduct · 1
Kaltura HTML5 Player V2product · 1
html5libproduct · 1
ExLlamaV3vendor · 1
exllamav3_extproduct · 1
Casdoorvendor · 1
MiniUPnPd 2.3.7product · 1
Hugging Faceorganization · 1
The Hacker Newsorganization · 1
Calix GS7 XGS GS5239XGproduct · 1

Entities are extracted by the model from each article. First seen Aug 19, 2026, last mentioned Sep 11, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.