Reserved but Public CVEs

CVE-2026-54561 is an arbitrary local file read vulnerability in mcp-memory-keeper affecting the context_import functionality. The flaw is caused by insufficient validation of the filePath argument, which allows path traversal and use of absolute paths to access files outside the intended import directory. Because the implementation does not properly constrain file resolution to a trusted server-owned location, an attacker who can supply the import path can cause the application to open attacker-selected local files that are readable by the server process. If the targeted file contains valid JSON, its contents can be imported into application context and later retrieved through normal application behavior. If the targeted file is not valid JSON, portions of the file may still be disclosed through JSON parsing error messages.

CVE-2026-54561First seen Jul 18, 2026

CVE-2026-54246 is a missing authentication vulnerability in Zalando Skipper's routesrv-no-auth component. The flaw allows any pod with network reachability to the routesrv HTTP service from within the Kubernetes cluster to query the service without authentication and retrieve sensitive control-plane metadata. Exposed information includes cluster-wide route topology, backend URL information, filter-chain details, OAuth/OIDC callback paths, and Redis or Valkey shard information. The issue effectively removes intended access restrictions around routesrv and permits unauthorized in-cluster access to operationally sensitive routing and cache infrastructure data.

CVE-2026-54246First seen Jul 18, 2026

CVE-2026-54559 is a buffer overflow vulnerability in PocketSphinx model-loading code affecting the parsing and loading of language models and acoustic models. The flaw can be triggered when PocketSphinx processes invalid, corrupted, or malicious ARPA, DMP, binary language model, or acoustic model files, leading to stack-based and heap-based memory corruption during model ingestion.

CVE-2026-54559First seen Jul 18, 2026

CVE-2026-53717 is a denial-of-service vulnerability in Envoy Gateway’s OCI layer extraction logic. The flaw arises from using an attacker-controlled tar header size directly in memory allocation, specifically allocating a byte slice based on the untrusted header value. Because the allocation size is derived from unvalidated metadata in an OCI layer, a maliciously crafted image can force the controller process to attempt an excessively large allocation. In Go, this can result in an unrecoverable out-of-memory condition that terminates the process. In multi-tenant or shared-controller deployments, this creates a cluster-wide availability risk because a malicious tenant can supply a crafted OCI artifact that is processed by the shared controller.

CVE-2026-53717First seen Jun 12, 2026

CVE-2026-52724 is an improper certificate validation vulnerability in kuma-dp in Kuma. In Universal mode, when connecting to an HTTPS control plane without a configured CA certificate, the dataplane component does not properly verify the control plane's TLS certificate before sending its authentication token. This allows a malicious intermediary or spoofed endpoint to present an untrusted certificate and still receive the dataplane authentication token. Successful exploitation can enable an attacker to impersonate the control plane to the dataplane and deliver a forged bootstrap configuration, resulting in compromise of the proxy.

CVE-2026-52724First seen Jul 17, 2026

CVE-2026-53718 is an authorization flaw in Envoy Gateway's handling of custom backendRef objects for extension-managed HTTPRoute processing. The vulnerability allows backend references to resources located in a different Kubernetes namespace to be accepted without the target namespace providing the required Gateway API ReferenceGrant. As a result, Envoy Gateway can violate the intended cross-namespace consent model enforced by the Gateway API, permitting unauthorized cross-namespace backend attachment through custom backendRef handling.

CVE-2026-53718First seen Jun 12, 2026

CVE-2026-52832 is an unauthenticated path traversal vulnerability in the Nuclio Dashboard API. The flaw is associated with handling of the function specification field spec.handler, where insufficient validation of handler-derived paths allows traversal outside the intended directory boundary during the build or source-file creation workflow. By supplying crafted path elements in spec.handler, a remote attacker can cause the Dashboard to write attacker-controlled content to arbitrary filesystem locations accessible to the Dashboard process. Because the Dashboard process runs as root in the affected deployment context, the vulnerability can result in high-impact arbitrary file write within the container and create conditions for broader compromise.

CVE-2026-52832First seen Jul 17, 2026

CVE-2026-52833 is a build-time remote code execution vulnerability in Nuclio affecting the Java runtime build path. The flaw arises because attacker-controlled runtimeAttributes.repositories values are inserted verbatim into generated Groovy build.gradle content without proper sanitization or validation. This unsafe templating allows crafted repository values to inject arbitrary Groovy or shell-executed logic during Gradle configuration, resulting in command execution inside the function builder environment. The issue is triggered during Java function builds and affects the integrity of the build pipeline and produced function images.

CVE-2026-52833First seen Jul 17, 2026

CVE-2026-54077 is a vulnerability in ArcadeDB affecting the SQL IMPORT DATABASE functionality. Authenticated users with SQL command access can abuse import handling to cause the server to fetch attacker-controlled resources over HTTP or HTTPS, resulting in server-side request forgery. The same import capability can also be used with local file sources to read files accessible to the ArcadeDB server process. Imported content may then be materialized as database records and queried by the attacker. A related hardening gap in the XML importer allowed unsafe DTD and external entity processing behavior, creating additional XML parsing risk and potential resource-consumption abuse.

CVE-2026-54077First seen Jul 17, 2026

CVE-2026-54076 is an authorization flaw in ArcadeDB's arcadedb-engine schema layer. Due to an incomplete fix for CVE-2026-44221, public schema-mutating methods on schema objects such as LocalDocumentType and LocalProperty do not consistently enforce the required UPDATE_SCHEMA permission. As a result, an authenticated user or API token that is intended to have read-only access can invoke unchecked schema modification operations and alter the database schema despite lacking the documented privilege to do so. The issue affects authorization enforcement for schema-level operations rather than direct record-level read or write access.

CVE-2026-54076First seen Jul 17, 2026

CVE-2026-54542 is an out-of-bounds access flaw in the nimiq-primitives component used by core-rs-albatross. The issue occurs in the KeyNibbles::Add logic during key-nibble concatenation, where insufficient bounds checking can cause an out-of-bounds slice operation on crafted deserialized proof data. A malicious state-sync peer can supply specially crafted state-sync data that triggers the panic before proof verification completes, causing the target node to terminate unexpectedly during synchronization.

CVE-2026-54542First seen Jul 17, 2026

CVE-2026-53715 is a concurrency vulnerability in Envoy Gateway affecting the Wasm cache HTTP handler. The flaw arises because the ServeHTTP code path reads the mappingPath2Cache map without synchronization while other code paths modify the same native Go map under a lock. This inconsistent locking model can trigger a concurrent map read/write condition in the Go runtime. Under exploitable timing conditions, the runtime raises a fatal error and terminates the controller process. The issue is exposed through the Wasm cache HTTP endpoint and can be triggered in environments where an attacker can both reach the relevant service port and induce churn in EnvoyExtensionPolicy resources.

CVE-2026-53715First seen Jun 12, 2026

CVE-2026-50166 is an improper certificate validation vulnerability in kumactl, the command-line client for Kuma. When kumactl is configured to connect to an HTTPS control plane without a CA certificate, it fails to properly verify the server's TLS certificate before establishing the connection. As a result, authentication material, including API tokens used by operators or administrators, can be transmitted over an unverified TLS session. This weakness enables a man-in-the-middle condition on the connection between kumactl and the Kuma control plane.

CVE-2026-50166First seen Jul 17, 2026

CVE-2026-53719 is a nil-dereference vulnerability in Envoy Gateway during reconciliation of SecurityPolicy resources. The flaw is triggered when a SecurityPolicy targets a TCPRoute but omits the spec.authorization field, causing the gatewayapi runner to dereference a nil value and panic deterministically during reconcile. The issue affects the control-plane reconciliation path rather than the data plane, and can be exercised by a tenant able to create or attach the relevant policy objects to targeted routes.

CVE-2026-53719First seen Jun 12, 2026

CVE-2026-54541 is a denial-of-service vulnerability in nimiq-primitives affecting core-rs-albatross deployments prior to version 1.6.0. A malicious state-sync peer can send a crafted TrieChunk proof containing equal-length keys during node synchronization. This reaches TrieProof::verify, where child_index performs an unwrap on a condition that is not safely handled for equal-length keys, causing a panic before cryptographic proof verification completes. The flaw allows an untrusted synchronization peer to crash a syncing node by supplying malformed proof data that triggers the panic path instead of a recoverable validation error.

CVE-2026-54541First seen Jul 17, 2026

CVE-2026-53716 is a denial-of-service vulnerability in Envoy Gateway’s handling of Wasm HTTP fetch responses. When processing gzip-compressed content retrieved from a tenant-controlled URL, the controller decompresses the response without enforcing an output-size limit. This allows a crafted highly compressed payload to expand excessively in memory during decompression. In multi-tenant environments, an attacker able to define an EnvoyExtensionPolicy can direct the controller to attacker-controlled content and trigger unbounded memory allocation in the shared controller process, resulting in repeated crashes and instability of the control plane.

CVE-2026-53716First seen Jun 12, 2026

CVE-2026-53714 is an information disclosure vulnerability in Envoy Gateway affecting deployments that use GatewayNamespaceMode. The flaw arises from missing authentication on unary gRPC requests to the xDS control plane and incomplete JWT validation for State-of-the-World discovery requests. As a result, unauthenticated clients that can reach the xDS service may obtain control plane resources that should be restricted to authorized components. Exposed data can include Secret Discovery Service material such as TLS private keys, Aggregated Discovery Service resources, backend endpoint information, and routing and listener configuration.

CVE-2026-53714First seen Jun 12, 2026

CVE-2026-52883 is an authorization validation flaw in MantisBT affecting the SOAP mc_issue_update endpoint and a related REST API path. The vulnerability allows a user with UPDATER access to add note types that should be subject to stronger authorization controls, specifically TIME_TRACKING notes and, through SOAP, REMINDER notes. The issue stems from insufficient server-side authorization validation when processing issue update requests, enabling an authenticated user to submit note data that is accepted as privileged note content despite lacking the intended permissions for that note type.

CVE-2026-52883First seen Jul 16, 2026

CVE-2026-47142 is a SQL injection vulnerability in MantisBT affecting core/history_api.php. The flaw arises from insufficient neutralization of attacker-controlled SQL syntax in the history_order configuration value, which is incorporated into an ORDER BY clause. An administrator can set a crafted value that is later processed when users view issues containing history entries, causing the application to execute unintended SQL against the bug tracker database.

CVE-2026-47142First seen Jul 16, 2026

CVE-2026-54450 is a server-side request forgery protection bypass in ToolHive. The vulnerability stems from incomplete validation of destination addresses in the product's private and reserved IP filtering logic: the guard does not correctly recognize IPv6 NAT64 ranges and therefore fails to identify embedded private, loopback, link-local, and other reserved IPv4 destinations when they are represented through NAT64 addressing in NAT64/DNS64 environments. As a result, attacker-controlled URLs processed by guarded HTTP client functionality, including the embedded OAuth authorization server's CIMD fetch path, can induce ToolHive to initiate outbound connections to internal or otherwise restricted network targets that should have been blocked by the SSRF defense.

CVE-2026-54450First seen Jul 16, 2026

CVE-2026-50285 is a pre-authentication denial-of-service vulnerability in Pomerium affecting the HPKE callback flow used by stateless authentication deployments. The flaw arises because attacker-controlled zstd-compressed data supplied to the callback processing path is decompressed without an enforced output size limit. As a result, specially crafted HPKE-encrypted input can trigger unbounded memory allocation during decompression in the callback handling logic, enabling remote exhaustion of process memory before authentication is completed.

CVE-2026-50285First seen Jul 16, 2026

CVE-2026-54447 is an insecure permission assignment vulnerability in garminconnect affecting versions through 0.3.4. The application may create its Garmin OAuth token store with overly permissive filesystem permissions, resulting in a world-readable token file. Because the stored refresh token can be used to obtain continued authenticated access, a local user on the same host may read the token and impersonate the victim's Garmin Connect session. The issue is particularly relevant on multi-user Linux or macOS systems where the effective umask or file-creation behavior permits broader read access than intended.

CVE-2026-54447First seen Jul 16, 2026

CVE-2026-54452 is a network access restriction bypass in the Go package github.com/doyensec/safeurl. The vulnerability stems from an incomplete privateNetworks blocklist that omits several reserved or special-use IPv6 CIDR ranges. As a result, applications that rely on safeurl to prevent access to internal, private, or otherwise disallowed network destinations may incorrectly treat some IPv6 addresses as permitted. This can allow requests to reach destinations that should have been blocked by the library’s network filtering logic.

CVE-2026-54452First seen Jul 16, 2026

CVE-2026-62944 is a stored cross-site scripting vulnerability in MantisBT affecting the HTML export functionality implemented in print_all_bug_page_word.php. The flaw is caused by missing output encoding of attacker-controlled image attachment filenames before they are inserted into an IMG alt attribute. By supplying a crafted attachment filename, an authenticated user can persist malicious HTML or script-bearing content that is later rendered when another user accesses the affected export page. The vulnerability arises from improper neutralization of input during web page generation, enabling stored client-side code injection in a privileged application context.

CVE-2026-62944First seen Jul 16, 2026

CVE-2026-58196 is a server-side request forgery vulnerability in ToolHive's remote MCP server authentication discovery logic. A malicious or compromised remote MCP server can cause the ToolHive host process to perform outbound HTTP GET requests to attacker-chosen destinations, including internal and link-local addresses, undermining the expected container isolation boundary. The vulnerable behavior includes following redirects without adequate destination validation and lacking sufficient address filtering during resource metadata retrieval, authentication detection, and issuer discovery flows. As a result, attacker-influenced discovery responses can steer the host into requesting internal-only resources and cloud instance metadata endpoints.

CVE-2026-58196First seen Jul 16, 2026