Reserved but Public CVEs

CVE-2026-25250 is a Windows Secure Boot security feature bypass caused by a missing cryptographic verification step in a trusted boot component path. The flaw affects Secure Boot trust decisions for third-party UEFI applications signed under the Microsoft third-party UEFI trust model, enabling abuse of legacy or otherwise vulnerable trusted boot artifacts to subvert Secure Boot protections. The issue is local in nature and requires an attacker to introduce or execute a trusted-but-vulnerable boot component during the boot chain. In practical terms, exploitation can allow a malicious actor to leverage an older Microsoft-trusted shim or related bootloader path to load untrusted code during early boot despite Secure Boot being enabled.

CVE-2026-25250First seen Apr 15, 2026

CVE-2026-24205 is a medium-severity race condition vulnerability affecting NVIDIA TensorRT-LLM. The flaw occurs when a user runs concurrent database requests, creating a timing-dependent condition in which shared state or resources may be accessed in an unsafe order. In concurrent execution scenarios, improper synchronization can cause inconsistent application behavior and may undermine the integrity or availability of the affected service.

CVE-2026-24205First seen May 27, 2026

CVE-2024-20452 is a critical buffer overflow vulnerability in the web-based management interface of Cisco Small Business SPA 300 and SPA 500 series IP phones. The flaw affects all software releases for the affected products regardless of configuration. A remote, unauthenticated attacker can trigger the vulnerability by sending a specially crafted HTTP request to a vulnerable device, leading to arbitrary command execution on the underlying operating system with root privileges.

CVE-2024-20452First seen May 26, 2026

CVE-2024-20453 is a high-severity vulnerability in the web-based management interface of Cisco Small Business SPA300 Series and SPA500 Series IP phones. The flaw is caused by inadequate validation of HTTP packets processed by the management interface. A remote attacker can send a crafted HTTP packet to a vulnerable device and trigger a denial-of-service condition. Cisco indicated that all software releases for the affected product lines are vulnerable regardless of configuration, and that this issue is independently exploitable from the other disclosed flaws affecting the same devices.

CVE-2024-20453First seen May 26, 2026

CVE-2026-15917 is a vulnerability in Drupal CMS that was addressed alongside other flaws in July 2026 security updates. Available information indicates that successful exploitation allows remote code injection in the browser context via cross-site scripting (XSS), with resulting risk to data confidentiality. Specific details about the affected component, vulnerable function, attack vector, and triggering conditions are currently not available.

CVE-2026-15917First seen Jul 16, 2026

CVE-2026-47679First seen Jul 27, 2026

CVE-2026-52848First seen Jul 27, 2026

CVE-2026-55805 is one of multiple vulnerabilities addressed in Drupal CMS security updates released in July 2026. Available information indicates that successful exploitation allows remote code injection in the browser context through cross-site scripting and may affect the confidentiality of data. Specific details about the vulnerable component, function, or attack vector are not currently available.

CVE-2026-55805First seen Jul 16, 2026

CVE-2026-53610First seen Jul 27, 2026

CVE-2026-55214First seen Jul 27, 2026

CVE-2026-0065First seen Jul 16, 2026

First seen Jul 22, 2026

CVE-2026-50054 is an authorization vulnerability in Zimbra Collaboration Suite affecting mailbox delegation functionality. The issue was addressed in Zimbra Collaboration Suite 10.1.20. Publicly available information identifies the flaw only at a high level as an authorization issue in mailbox delegation, without disclosing the specific vulnerable code path, affected function, or exploitation sequence. The vulnerability indicates that mailbox delegation operations were not properly constrained by authorization checks, creating a condition in which delegation-related actions could be performed outside intended permissions.

CVE-2026-50054First seen Jul 21, 2026

CVE-2026-10631 is an access control vulnerability affecting the EWS extension in Zimbra Collaboration Suite. The issue was addressed in Zimbra Collaboration Suite 10.1.20. Publicly available information identifies the flaw only at a high level as an access control issue in the EWS component; no further technical details about the vulnerable code path, affected operations, or exploitation method are currently available.

CVE-2026-10631First seen Jul 21, 2026

A reflected cross-site scripting vulnerability affects YesWiki archived-revision handling in versions starting from 4.1.0 and fixed in 4.6.6. The issue stems from insufficient neutralization of attacker-controlled input in the `time` parameter, which is reflected into a hidden HTML field during archived revision processing in the page display handler. Because the input is not properly escaped before being embedded in the HTML response, a crafted request can cause arbitrary JavaScript to execute in the victim's browser within the security context of the YesWiki application.

CVE-2026-52773First seen Jun 14, 2026

Mailpit contains an unauthenticated denial-of-service vulnerability caused by accepting unbounded JSON request bodies on multiple API endpoints. The issue is described as an incomplete fix for an earlier related vulnerability, where request body size limiting was applied insufficiently and additional JSON-body handlers remained exposed. By sending oversized JSON payloads to affected API handlers, a remote attacker can trigger significant memory amplification in the Mailpit process, eventually exhausting available memory and destabilizing or terminating the service.

CVE-2026-45710First seen Jul 2, 2026

First seen Jul 17, 2026

First seen Jul 17, 2026

CVE-2026-0001First seen May 21, 2026

CVE-2026-55606 is a moderate-severity vulnerability in OpenWrt's odhcpd DHCP service. The flaw is a stack buffer over-read caused by an endianness mismatch when handling a DHCP Unique Identifier (DUID) length value. Improper interpretation of the DUID length can cause odhcpd to read beyond the intended bounds of a stack buffer while processing attacker-supplied DHCPv6 data. The issue is reachable by a network-adjacent attacker against the default-enabled odhcpd service in affected OpenWrt releases prior to the fixed 25.12.5 update.

CVE-2026-55606First seen Jun 30, 2026

CVE-2026-55159 is a privilege-escalation and command-injection vulnerability in OpenWrt's luci-app-adblock-fast. The flaw allows a logged-in delegated user to achieve root command execution by supplying newline-separated cron entries through the application's configuration path. The vulnerable behavior indicates insufficient neutralization of special elements in data written into cron-managed content, allowing attacker-controlled input to break the intended entry format and introduce additional cron lines that are later executed with root privileges. The issue affects delegated-access scenarios within LuCI where a non-root user is permitted to manage the application but should not be able to execute arbitrary commands as the system superuser.

CVE-2026-55159First seen Jun 30, 2026

CVE-2026-55897 is a privilege-escalation vulnerability in OpenWrt's luci-app-advanced-reboot LuCI application. The flaw is caused by an overly permissive read ACL that exposes access to file.exec for /bin/sh to delegated users. As a result, a user who is authenticated to LuCI with limited delegated permissions can invoke shell execution paths that should be restricted to privileged contexts, leading to command execution as root.

CVE-2026-55897First seen Jun 30, 2026

CVE-2026-50006 is an arbitrary file write vulnerability in Anyquery server mode caused by insufficient restriction of native SQLite disk manipulation capabilities. In the vulnerable configuration, an unauthenticated remote attacker can issue crafted queries that invoke SQLite ATTACH DATABASE behavior to create or write database files at attacker-controlled filesystem locations accessible to the Anyquery process. The issue stems from exposing SQLite functionality without adequately sandboxing or constraining file-backed database operations in the server-side query interface. Release 0.4.5 introduced sandboxing as part of the remediation for this vulnerability.

CVE-2026-50006First seen Jun 12, 2026

CVE-2026-52774 is a reflected cross-site scripting vulnerability in YesWiki affecting the Bazar widget handler. The flaw is caused by improper neutralization of user-controlled input from the `id` GET parameter before it is reflected into HTML attributes. Because the parameter is incorporated into the generated page without sufficient escaping or sanitization, an attacker can craft a malicious URL that causes arbitrary JavaScript to execute in a victim's browser when the link is opened. The vulnerable condition is exposed through the Bazar extension and does not require authentication to reach the affected functionality.

CVE-2026-52774First seen Jun 14, 2026

CVE-2026-57187 is a heap use-after-free vulnerability in Asterisk's PJSIP handling of TCP/SDP state when a connection-oriented SIP session is closed during SDP processing. According to the advisory, an authenticated attacker can trigger the flaw by sending a SIP INVITE over a connection-oriented transport such as TCP and then disconnecting before Asterisk sends its 200 OK response. This can result in dereferencing freed heap memory during the lifetime management of resources associated with SDP processing. The issue is mapped to CWE-416 and also associated with improper resource lifetime control. The advisory notes that the crash has only been reproducible when Asterisk is built with Address Sanitizer enabled.

CVE-2026-57187First seen Jun 26, 2026