Tagged “cve.org”
CVEs tagged cve.org, newest first.
49927 CVEsRSS
CVE-2026-43854Medium· 6.3A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.
A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.
CVE-2026-43840Medium· 6.9A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.
CVE-2026-43838Critical· 9.2A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.
A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.
CVE-2026-43841Medium· 6.9A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.
CVE-2026-43839High· 8.7A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.
A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.
CVE-2026-113469High· 7.5Improper Signature Verification of Active Update Files
A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine.
CVE-2026-43845Critical· 9.2A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
CVE-2026-43842Medium· 6.9A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.
CVE-2026-43846High· 8.6A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.
A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.
CVE-2026-43844Critical· 9.3A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.
A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.
CVE-2026-43843Medium· 6.9An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.
An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.
CVE-2026-43851High· 8.2A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
CVE-2026-43849Medium· 6.9A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.
A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.
CVE-2026-43848Medium· 6.9A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.
A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.
CVE-2026-43847High· 8.2A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.
A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.
CVE-2026-43853High· 8.2A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.
A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.
CVE-2026-43852High· 8.2A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
CVE-2026-43850High· 8.6A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.
CVE-2026-43856High· 8.6A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.
CVE-2026-112069Medium· 6.3Broken Access Control in extension "FAL Protect" (fal_protect)
The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is o…
CVE-2026-85267High· 8.7Cross-Site WebSocket Hijacking in Google Cloud Shell
A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to hijack an active Cloud Shell session and exfiltrate the user's OAuth access token using a cr…
CVE-2026-43857High· 8.6A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.
A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.
CVE-2026-43855High· 7.5A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
CVE-2026-92287High· 8.1⚖ disputedApache Arrow C++, PyArrow: Parquet file-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation
Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. …
CVE-2026-43858High· 8.6A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
CVE-2026-112070Medium· 5.3Broken Access Control in extension "Analytics" (analytics)
The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user can therefore retrieve analytics data of the sites they have page access to.
CVE-2026-113468Medium· 6.9PoCBroken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider. Any site visitor can overwrite the stored payment notification of an order that is still awaiting payment with …
CVE-2026-113459High· 7.1Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns_t3ai)
In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the OpenAI service directly from the browser. Any authenticated backend user can read the key …
CVE-2026-113378Medium· 5.3PoCmcollina mcp-ripgrep Advanced Search Tool index.ts os command injection
A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the component Advanced Search Tool. The manipulation of the argument fileType results in os command inje…
CVE-2026-112240Medium· 6.3Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)
The download link for files uploaded through a form relied on a token that could be predicted. The file name in the request was also not verified in a way that resisted guessing. An unauthenticated attacker could use this to access files…