MAL-2026-16399Published
Malicious code in lufxchwmxwyps (npm)
osv · GHSA-xvmw-wchq-f7p8
npm: lufxchwmxwyps
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
699054 source statements · aliases may refer to the same vulnerabilityMAL-2026-16158Published
Malicious code in afhmxiewpsf (npm)
osv · GHSA-59f6-ch49-395j
npm: afhmxiewpsf
MAL-2026-16374Published
Malicious code in test-react-app-in (npm)
osv · GHSA-wm2w-4m2r-mv73
npm: test-react-app-in
MAL-2026-16398Published
Malicious code in luftmvfiwgxydes (npm)
osv · GHSA-j2f6-x53f-2qqf
npm: luftmvfiwgxydes
MAL-2026-16397Published
Malicious code in kambxjowhdsgyw (npm)
osv · GHSA-pmhv-gqr9-wrgr
npm: kambxjowhdsgyw
MAL-2026-16375Published
Malicious code in test-react-app-out (npm)
osv · GHSA-vx3p-fwmg-p7g8
npm: test-react-app-out
MAL-2026-16400Published
Malicious code in ndmcjcxiebysfdb (npm)
osv · GHSA-8344-w2r2-rxp2
npm: ndmcjcxiebysfdb
MAL-2026-16401Published
Malicious code in ndmckauxuoincv (npm)
osv · GHSA-q5vm-6mhj-qq8c
npm: ndmckauxuoincv
MAL-2026-16109Published
Malicious code in @auction-fe/ui-kit (npm)
osv · GHSA-2r37-886p-hj65
npm: @auction-fe/ui-kit
GHSA-3xm7-qw7j-qc8vPublished
SSRF in @aborruso/ckan-mcp-server via base_url allows access to internal networks
osv · CVE-2026-33060
npm: @aborruso/ckan-mcp-server
GHSA-g84h-j7jj-x32pPublished
@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)
osv · CVE-2026-53509
npm: @aborruso/ckan-mcp-server
GHSA-798p-78g2-v556Published
@aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509
osv · CVE-2026-61612
npm: @aborruso/ckan-mcp-server
CVE-2026-28325Published
SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution Vulnerability
cve-program ·
Vendor product: Observability Self-Hosted
CVE-2026-75663Published
Bridge | Out-of-bounds Write (CWE-787)
cve-program ·
Vendor product: Adobe Bridge · Vendor product: Adobe Bridge
CVE-2026-75655Published
Bridge | Uncontrolled Recursion (CWE-674)
cve-program ·
Vendor product: Adobe Bridge · Vendor product: Adobe Bridge
CVE-2026-75676Published
Bridge | Stack-based Buffer Overflow (CWE-121)
cve-program ·
Vendor product: Adobe Bridge · Vendor product: Adobe Bridge
CVE-2026-65178Published
NVIDIA NeMo contains a vulnerability in its dataset-loading workflow where a maliciously crafted model_config.yaml can inject unsafe parameters. A successful exploit of this vulnerability may lead to code execution, data tampering, denial o…
cve-program ·
Vendor product: NeMo Speech
CVE-2026-75686Published
Adobe Connect | Improper Input Validation (CWE-20)
cve-program ·
Vendor product: Adobe Connect · Vendor product: Adobe Connect Android Mobile App
CVE-2026-81999Published
Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)
cve-program ·
Vendor product: AEM 6.5 Forms JEE · Vendor product: AEM 6.5 LTS Forms JEE
CVE-2026-79906Published
Substance3D - Modeler | Out-of-bounds Write (CWE-787)
cve-program ·
Vendor product: Substance3D - Modeler
CVE-2026-83962Published
Substance3D - Modeler | Stack-based Buffer Overflow (CWE-121)
cve-program ·
Vendor product: Substance3D - Modeler
CVE-2026-84395Published
Premiere Pro | Server-Side Request Forgery (SSRF) (CWE-918)
cve-program ·
Vendor product: Premiere · Vendor product: Premiere
CVE-2026-8849Published
Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation.
cve-program ·
Vendor product: connext_professional
CVE-2026-7866Published
Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.
cve-program ·
Vendor product: connext_professional
CVE-2026-93616Published
Directory Traversal and File upload allows execution of arbitrary script on the Management Server
cve-program ·
Vendor product: Quantum Security Management
CVE-2026-86805Published
AT_SECURE programs may load attacker-controlled code via $ORIGIN
cve-program ·
Vendor product: glibc
CVE-2026-84085Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-84084Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-84083Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-84082Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-84081Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-84071Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-84064Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-84034Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-82967Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-82893Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-82892Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-82887Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-82885Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-82340Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-81937Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-81933Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-81669Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-81657Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-81656Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-93952Published
Security Advisory 0183
cve-program ·
Vendor product: VeloCloud Orchestrator (VCO) On-Prem
CVE-2026-80442Published
IBM Guardium Data Protection is affected by multiple vulnerabilities.
cve-program ·
Vendor product: Guardium Data Protection
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.