Reserved but Public CVEs

CVE-2026-54251 is a denial-of-service vulnerability in io.netty.incubator:netty-incubator-codec-ohttp affecting OHttpServerCodec. When the codec processes malformed OHTTP ciphertext that causes AEAD decryption to fail, allocated pooled direct off-heap ByteBuf memory is not released correctly. Repeated triggering of this error path can accumulate unreleased native memory and exhaust the process's direct-memory pool.

CVE-2026-54251First seen Aug 21, 2026

CVE-2026-55253 is a NoSQL operator injection vulnerability affecting the LangChain MongoDB packages langgraph-checkpoint-mongodb and langgraph-store-mongodb. Authenticated callers who can influence filter parameters passed to MongoDB-backed query functionality can inject MongoDB query operators into those filters. In multi-tenant deployments, this can cause application-enforced tenant scoping to be bypassed when invoking MongoDBSaver.list(), MongoDBSaver.alist(), or MongoDBStore.search(), exposing data belonging to other tenants. The issue is described as read-only and affects confidentiality rather than integrity or code execution.

CVE-2026-55253First seen Aug 21, 2026

CVE-2026-45404 is a concurrency flaw in the OpenTelemetry-Go OpenTracing bridge. Unsynchronized access to the bridge span's baggage item map can occur when baggage is modified and propagated concurrently. In affected configurations, concurrent read/write or iteration/write operations against the shared baggage map can trigger a fatal Go runtime panic due to unsafe concurrent map access. The issue affects the OpenTracing bridge component in OpenTelemetry-Go and results in process termination rather than memory corruption or code execution.

CVE-2026-45404First seen Aug 21, 2026

CVE-2026-54179 is an improper file upload validation vulnerability in Laravel Backpack CRUD affecting the SingleBase64Image upload handling. The vulnerable logic insufficiently validates base64-encoded image uploads, allowing arbitrary file content to be accepted and written to the configured storage disk under an extensionless filename when an image field is configured with file storage support. The issue stems from trusting the supplied base64 image structure without adequately enforcing an allowed MIME subtype, without reliably validating the decoded bytes as a legitimate image, and without rejecting uploads that resolve to an empty extension. As a result, an authenticated administrative user can store non-image content through a feature intended only for image uploads.

CVE-2026-54179First seen Aug 21, 2026

CVE-2026-54175 is a mass assignment vulnerability in Laravel Backpack CRUD affecting the MyAccountController edit-account-info endpoint. The vulnerable logic accepts broad user-supplied fields when updating account information, using an insufficiently restricted parameter set instead of an explicit allowlist. As a result, an authenticated user can submit sensitive attributes that should not be modifiable through that route, including password fields, without being required to provide the current password. The flaw stems from improper control over dynamically assigned model attributes in an account-management workflow that was intended for profile editing rather than credential changes.

CVE-2026-54175First seen Aug 21, 2026

CVE-2026-61827 is a denial-of-service vulnerability in netty-incubator-codec-ohttp affecting the BinaryHttpParser component. The parser does not enforce limits on variable-length encoded fields, allowing a remote peer to provide oversized length encodings that trigger unbounded buffering during parsing. This can cause the application to continue allocating memory while processing attacker-controlled input, eventually exhausting available heap memory.

CVE-2026-61827First seen Aug 21, 2026

CVE-2026-61798 is an information disclosure vulnerability in io.netty.incubator:netty-incubator-codec-ohttp-hpke-classes-boringssl. The affected implementation can expose raw HPKE private key bytes through object stringification and exception text. Specifically, private key material may be included in the output of BoringSSLAsymmetricKeyParameter.toString() when the object represents a private key, in BoringSSLAsymmetricCipherKeyPair.toString(), and in exception messages generated during EVP_HPKE_KEY_init_or_throw(...) failures. If these objects or exceptions are logged, exported to telemetry, or otherwise recorded, sensitive cryptographic key material can be disclosed outside the intended trust boundary.

CVE-2026-61798First seen Aug 21, 2026

CVE-2026-61799 is an integer overflow vulnerability in io.netty.incubator:netty-incubator-codec-bhttp affecting the Binary HTTP parsing and decoding logic. The flaw arises from unchecked varint-derived length handling in BinaryHttpParser and BinaryHttpDecoder, where cumulative byte counts can overflow during processing of malformed Binary HTTP input. This can lead to out-of-bounds conditions and runtime exceptions such as ArrayIndexOutOfBoundsException or IndexOutOfBoundsException instead of controlled rejection of invalid input. The issue is triggered by specially crafted BHTTP payloads and results in parser or decoder failure.

CVE-2026-61799First seen Aug 21, 2026

CVE-2026-54256 is an authenticated insecure direct object reference vulnerability in the Winter CMS backend FileUpload widget. The flaw affects attachment handling in the backend module by allowing file record lookups and attachment sorting operations to act on attachment identifiers that are not properly constrained to the current widget relation or deferred-binding session. As a result, any authenticated backend user can enumerate attachment identifiers and access or modify attachment metadata associated with unrelated users or records stored through the shared file model. Exposed operations include unauthorized changes to attachment title, description, and sort order across models using the shared attachment storage.

CVE-2026-54256First seen Aug 21, 2026

CVE-2026-32637 is a file path traversal vulnerability in Velero during restore operations. The flaw occurs when Velero extracts files from a backup tarball without adequately constraining archive entry paths to an intended destination directory. A maliciously crafted backup tarball can contain traversal sequences that cause extracted files to be written outside the expected restore path within the Velero pod filesystem. This can result in overwrite of sensitive files accessible to the Velero process during restoration.

CVE-2026-32637First seen Aug 21, 2026

CVE-2026-57570 is an authorization flaw in Laravel Backpack CRUD affecting HasMany and MorphMany multiple-relation handling during create and update operations. The vulnerable relationship-saving logic permits submitted related-record identifiers to be processed by attachManyRelation without adequately verifying that each related record is valid for the current parent object, ownership boundary, or tenant scope. As a result, an authenticated low-privileged administrative user with permission to edit an affected CRUD entity can manipulate relationship assignments across authorization boundaries and modify related records that should not be under their control.

CVE-2026-57570First seen Aug 21, 2026

CVE-2026-54168 is an improper access control vulnerability in Tekton Pipelines-as-Code affecting remote task resolution when using a GitHub App installation token. The flaw arises because the token used for resolving remote Tekton definitions is not sufficiently scoped to the originating repository. As a result, a user who can trigger Pipelines-as-Code from one repository may cause the system to resolve a remote task from a different private repository that is covered by the same GitHub App installation. This breaks repository isolation within the installation and can expose private Tekton definitions that should not be readable from the attacker's repository context.

CVE-2026-54168First seen Aug 21, 2026

CVE-2026-54150 is an unauthenticated arbitrary file read vulnerability in the next-video package's /api/video request handler. When deployed in the documented configuration, insufficient validation of the user-supplied url parameter allows a remote attacker to cause the application to access unintended local filesystem resources and disclose arbitrary .json files from the production environment. Exposed data can include sensitive application secrets and internal framework metadata, including Next.js Server Actions encryption material, Preview or Draft Mode keys, build manifests, route registries, runtime path information, and application-specific asset metadata.

CVE-2026-54150First seen Aug 21, 2026

CVE-2026-55236 is an authorization flaw in langgraph-api affecting LangGraph Server run creation. Incomplete assistant authorization allows a user to reference another user's private assistant during run creation. When the authorization logic does not consistently enforce owner-based filtering across assistant read, search, and run or cron creation paths, the server may return sensitive assistant metadata, configuration, and context in the run-creation response. The issue stems from inconsistent authorization coverage between related assistant access paths rather than a memory-safety defect or input-parsing flaw.

CVE-2026-55236First seen Aug 20, 2026

CVE-2026-53964 is a remote code execution vulnerability in Document Merge Service caused by server-side template injection during processing of XLSX templates. A maliciously crafted XLSX template can inject template expressions that are evaluated by the server during document generation, resulting in attacker-controlled code execution within the service context. Successful exploitation executes code as the document-merge-server user inside the application container.

CVE-2026-53964First seen Aug 20, 2026

CVE-2026-53941 is a denial-of-service vulnerability in Inspektor Gadget affecting the ld.so.cache parsing logic used by uprobe-based gadgets. A crafted ld.so.cache file supplied from an unprivileged container can trigger pathological parsing behavior that drives high CPU utilization in the Inspektor Gadget workflow. Because the affected startup path interacts with fanotify-paused container startup handling, exploitation can delay container initialization and prevent other containers on the same host from starting while the vulnerable processing is underway. The issue is limited to availability impact and is fixed in Inspektor Gadget 0.53.1 and later.

CVE-2026-53941First seen Aug 20, 2026

CVE-2026-53957 is a server-side request forgery and proxy injection vulnerability in Contentful MCP Server and MCP Tools affecting the export_space and import_space tool workflows. The flaw allows attacker-influenced or LLM-controlled parameters, including host and proxy-related options, to alter the destination of Contentful Management API requests. As a result, requests intended for the legitimate Contentful Management API can be redirected to attacker-controlled infrastructure, causing the server to disclose its Personal Access Token during tool execution. The issue is particularly significant in deployments where tool arguments can be supplied directly by a user or indirectly through prompt injection originating from untrusted Contentful content.

CVE-2026-53957First seen Aug 20, 2026

CVE-2026-54689 is a server-side request forgery vulnerability in the mcp-searxng web_url_read feature that persists even when hardened mode is enabled. The flaw allows hardened-mode protections to be bypassed through redirect chains, use of 0.0.0.0, and canonicalized IPv4-mapped IPv6 literals, resulting in insufficient validation of destination addresses. The vulnerable logic fails to consistently re-validate each redirect hop and does not fully block special-purpose or internal address representations, enabling requests intended for external resources to be redirected or encoded toward loopback or internal network targets.

CVE-2026-54689First seen Aug 20, 2026

CVE-2026-54688 is a server-side request forgery vulnerability in SearXNG MCP Server affecting the web_url_read functionality. In the default configuration, the internal-address protection mechanism is not enforced when MCP_HTTP_HARDEN is disabled, allowing attacker-influenced URLs to be fetched by the server without adequate validation of destination addresses. This can permit requests to internal-only HTTP services, loopback or private network resources, and cloud metadata endpoints. The issue stems from insufficient restriction of outbound requests to attacker-controlled destinations and inadequate protection against access to internal network address space during server-side URL retrieval.

CVE-2026-54688First seen Aug 20, 2026

CVE-2026-55235 is an authorization bypass issue in langgraph-api, the LangGraph Server runtime, caused by insufficient restriction of webhook target URLs. In affected deployments, an attacker who can create a run or cron can supply a relative webhook target that is delivered to in-process application routes. Because these internal deliveries can reach same-process endpoints without the expected external authentication checks, the flaw allows requests to cross per-user authorization boundaries. Successful exploitation can trigger unauthorized actions against another user's thread or run context and may expose limited metadata from the targeted thread in the resulting run record.

CVE-2026-55235First seen Aug 20, 2026

CVE-2024-45747 is a server-side template injection vulnerability in GeoServer's FreeMarker template processing. The flaw allows an authenticated administrator to supply or influence FreeMarker template content in a way that exposes unsafe template capabilities, enabling execution of operating system commands and arbitrary file read or write operations on the underlying server. The issue stems from insufficient restriction of objects and API access available to FreeMarker templates during server-side rendering.

CVE-2024-45747First seen Aug 20, 2026

CVE-2026-53966 is a privilege escalation vulnerability in XWiki Platform Live Data Live Table Connector. A user who has permission to edit a page can abuse the Live Data edit REST API to modify page rights and elevate privileges to obtain script rights. In XWiki, script rights are highly sensitive because they permit execution of privileged Velocity script content and other actions normally restricted by the platform's security model. The flaw stems from insufficient enforcement of authorization constraints during Live Data-based editing operations, allowing rights changes beyond the attacker's intended privilege level.

CVE-2026-53966First seen Jun 12, 2026

First seen Aug 19, 2026

CVE-2026-55182 is an authenticated remote code execution vulnerability in LibreNMS affecting the Signal alert transport module. The flaw is caused by unsafe use of command execution functionality together with insufficient escaping of user-controlled input. Available information indicates the issue involves direct command execution paths in the Signal transport implementation and related wrapper logic, allowing attacker-controlled values to influence shell command execution on the underlying host. An authenticated administrator can abuse this behavior to execute arbitrary commands in the context of the LibreNMS application on the server.

CVE-2026-55182First seen Aug 19, 2026

CVE-2026-55178 is a set of authorization bypass vulnerabilities in GeoLens affecting multiple dataset read and link endpoints. The flaws permit cross-dataset access control failures in which requests associated with one dataset or map context can be used to retrieve information from private datasets without proper authorization checks. Exposed information can include private dataset metadata, schema details, sampled values, backing-table rows, raster pixel data, and vector tile content. The issue affects several pathways for reading or linking dataset-backed resources, indicating inconsistent or missing object-level authorization enforcement across related API functionality.

CVE-2026-55178First seen Aug 19, 2026