CVE-2026-90812Published
cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment
cve-program ·
Vendor product: mercury-agent
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
699685 source statements · aliases may refer to the same vulnerabilityCVE-2026-0128Published
In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploita…
cve-program ·
Vendor product: Android
CVE-2026-52827Published
Kimai: Two-factor authentication bypass on the Kimai API
cve-program ·
Vendor product: kimai
CVE-2026-0130Published
In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitatio…
cve-program ·
Vendor product: Android
CVE-2026-0134Published
In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User inte…
cve-program ·
Vendor product: Android
CVE-2026-0141Published
In decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploit…
cve-program ·
Vendor product: Android
CVE-2026-0142Published
In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for…
cve-program ·
Vendor product: Android
CVE-2026-59973Published
mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi
cve-program ·
Vendor product: frontmcp · Vendor product: mcp-from-openapi · Vendor product: adapters
CVE-2026-54177Published
backpack/crud: HasUploadFields keeps the attacker-supplied file extension — public-disk uploads of `shell.php` reach the webserver
cve-program ·
Vendor product: CRUD
CVE-2026-0144Published
In writeAocCommand of AocAudioCodec.cpp, there is a possible memory safety issue due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for e…
cve-program ·
Vendor product: Android
CVE-2026-0155Published
In ImsMediaBitReader::ReadByteBuffer, there is a possible OOB read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitati…
cve-program ·
Vendor product: Android
CVE-2026-0156Published
In checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety issue due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed fo…
cve-program ·
Vendor product: Android
CVE-2026-0158Published
In Camera, there is a possible unauthorized way to access photos due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitat…
cve-program ·
Vendor product: Android
CVE-2026-0165Published
In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is need…
cve-program ·
Vendor product: Android
CVE-2026-48737Published
pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs
cve-program ·
Vendor product: pyload
CVE-2026-56888Published
In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exp…
cve-program ·
Vendor product: Android
CVE-2026-56892Published
In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for …
cve-program ·
Vendor product: Android
CVE-2026-54178Published
backpack/crud: Arbitrary file deletion via attacker-controlled clear_<attr>[] in HasUploadFields::uploadMultipleFilesToDisk
cve-program ·
Vendor product: CRUD
CVE-2026-54254Published
Cyberdrop-DL: Pixeldrain API key shared with unverified thirdparty sites
cve-program ·
Vendor product: cyberdrop-dl
CVE-2026-56958Published
In gf_algo_get_cached_dump_data of gf_algo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not need…
cve-program ·
Vendor product: Android
CVE-2026-56975Published
In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for ex…
cve-program ·
Vendor product: Android
CVE-2026-44163Published
fluent-plugin-opentelemetry: Denial of Service (DoS) via Large Payloads and Decompression Bombs in `in_opentelemetry`
cve-program ·
Vendor product: fluent-plugin-opentelemetry
CVE-2026-40855Published
Command Injection in T-Mobile 5G Box IDU router via ping functionality
cve-program ·
Vendor product: T-Mobile 5G Box IDU
CVE-2026-40856Published
Config disclosure in T-Mobile 5G Box IDU routers
cve-program ·
Vendor product: T-Mobile 5G Box IDU
CVE-2026-40857Published
CSRF token bypass in T-Mobile 5G Box IDU routers
cve-program ·
Vendor product: T-Mobile 5G Box IDU
CVE-2026-58731Published
In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not neede…
cve-program ·
Vendor product: Android
CVE-2026-90807Published
nanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following
cve-program ·
Vendor product: NanoClaw
CVE-2026-58146Published
Unauthorized remote code execution in T-Mobile 5G Box IDU routers
cve-program ·
Vendor product: T-Mobile 5G Box IDU
CVE-2026-58147Published
Authorized remote code execution via password change functionality in T-Mobile 5G Box IDU routers
cve-program ·
Vendor product: T-Mobile 5G Box IDU
CVE-2026-53752Published
docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service
cve-program ·
Vendor product: docx4j · Vendor product: docx4j-core
CVE-2026-92465Published
WordPress WP Mega Menu plugin <= 1.4.2 - SQL Injection vulnerability
cve-program ·
https://wordpress.org/plugins: wp-megamenu
CVE-2026-79970Published
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with remote access could …
cve-program ·
Vendor product: Secure Connect Gateway 5.0 - Application · Vendor product: Secure Connect Gateway 5.0 - Appliance
CVE-2026-79770Published
Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer
cve-program ·
Vendor product: nokogiri
CVE-2026-91964Published
FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken
cve-program ·
Vendor product: FreeRDP · Vendor product: FreeRDP
CVE-2026-88765Published
Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
cve-program ·
Vendor product: GitLab
CVE-2026-81236Published
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Re…
cve-program ·
Vendor product: Wyse Management Suite
CVE-2026-92362Published
ag-ui-protocol ag-ui SSE Frame sse.rs resource consumption
cve-program ·
Vendor product: ag-ui
CVE-2026-50166Published
Kuma: kumactl connects to control plane without verifying TLS certificate when no CA is configured
cve-program ·
Vendor product: kuma
CVE-2025-14871Published
Allocation of Resources Without Limits or Throttling in GitLab
cve-program ·
Vendor product: GitLab
CVE-2026-61590Published
djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, and the views enforce only DEBUG
cve-program ·
Vendor product: djust
CVE-2026-50024Published
GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via a malicious .git server
cve-program ·
Vendor product: GitHacker
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.