Reserved but Public CVEs

OpenAM Community Edition contains a pre-authentication remote code execution vulnerability in the WebAuthn authentication module caused by deserialization of untrusted data. The issue arises when the WebAuthn module reads data from a configured storage attribute that can be influenced or written by an attacker. If the WebAuthn userAttribute is configured to reference an attacker-writable string attribute, untrusted serialized data may be processed by the application, leading to code execution. The vulnerable condition is configuration-dependent and affects deployments where the storage attribute consumed by the WebAuthn flow is not strictly server-managed.

CVE-2026-45051First seen Jun 25, 2026

First seen Jul 1, 2026

CVE-2026-55556 is a heap overflow vulnerability in rsyslog’s optional contributed imhttp input module. The flaw is in the HTTP Basic Authentication parsing logic used by imhttp when decoding an oversized Basic Authentication header. The vulnerable code path used `auth->pworkbuf = calloc(0, len);` instead of allocating a buffer of `len` bytes, leading to incorrect heap allocation and subsequent heap memory corruption during processing of attacker-controlled input. The issue affects only deployments where rsyslog is built with the imhttp module, the module is installed, loaded, and configured, and Basic Authentication is enabled on the affected imhttp endpoint. The vulnerable code path was removed upstream in rsyslog 8.2604.0 as part of an authentication refactor in commit `acde2ba25ea33816694b787859f4a727a247b6d6`.

CVE-2026-55556First seen Jun 23, 2026

CVE-2025-68624 is a disputed design-level authorization flaw in N-able Mail Assure’s cloud multi-tenant SMTP relay service. According to the provided reporting, the platform authenticates SMTP users but does not enforce that the authenticated tenant is authorized to use the claimed sender domain during message submission. As a result, an authenticated SMTP user from one tenant can submit outbound email using sender addresses belonging to other unrelated tenants hosted on the same Mail Assure platform. The reported issue is not a credential bypass in the classic sense; rather, it is a missing sender-domain authorization control in a shared relay architecture. The supplied context states that when the spoofed domain already authorizes Mail Assure infrastructure in SPF and the message uses an aligned RFC5322.From domain, downstream receivers such as Microsoft 365 may accept the message with SPF PASS and DMARC PASS, including for domains with strict DMARC enforcement.

CVE-2025-68624First seen Jun 21, 2026

CVE-2026-52717 is an incorrect memory management vulnerability in the ffmpeg plugin shipped with GStreamer via the gst-libav1.0 package. According to the provided advisory context, the flaw can result in heap memory corruption during processing in the plugin. Specific vulnerable functions, code paths, and trigger conditions were not provided in the available content.

CVE-2026-52717First seen Jun 19, 2026

First seen Jun 17, 2026

First seen Jun 17, 2026

CVE-2026-49050 is a privilege-escalation vulnerability in Apache DolphinScheduler affecting the dolphinscheduler-api component (org.apache.dolphinscheduler:dolphinscheduler-api) before version 3.4.2. According to the provided disclosure, a general user can mint administrator access tokens via the /access-tokens endpoint. This indicates an authorization flaw in token creation logic whereby a low-privileged authenticated user is able to obtain credentials associated with a higher-privileged administrative account or role. The issue is fixed in Apache DolphinScheduler 3.4.2.

CVE-2026-49050First seen Jun 17, 2026

CVE-2026-36849 is a denial-of-service vulnerability in libtiff affecting version 4.7.1 and earlier. According to the provided disclosure, the issue can be triggered by supplying a crafted TIFF file containing an excessively large SamplesPerPixel tag value. The available context does not identify the exact vulnerable function or code path, but indicates that improper handling of this tag during TIFF parsing can cause the application or library consumer to enter a failure condition resulting in denial of service.

CVE-2026-36849First seen Jun 17, 2026

CVE-2025-55662 is a divide-by-zero vulnerability in GPAC/MP4Box affecting gpac/gpac prior to fix commit ff8249a407685d00ceb5f4d2a798b9cad195140e. The flaw is in gf_opus_parse_packet_header() in media_tools/av_parsers.c while processing an MP4 file containing an Opus audio track with malformed packet or header parameters. Specifically, critical Opus packet fields such as nb_frames are not validated before being used in arithmetic; the available reporting notes logic equivalent to computing values derived from header->nb_frames without first ensuring the field is non-zero and otherwise valid. When MP4Box reaches the Opus dump path on a crafted file, this can trigger a division by zero and terminate the process with a floating-point exception, with published traces pointing to media_tools/av_parsers.c:11479 and call paths including gf_inspect_dump_opus_internal() and dump_isom_opus().

CVE-2025-55662First seen Jun 13, 2026

First seen Mar 18, 2026

CVE-2025-61620 is described in the provided content only as a denial-of-service vulnerability in vLLM involving chat template handling. The content states it affects the same general attack surface as later template-rendering issues, but does not provide specific technical details such as the vulnerable function, affected versions, exact trigger condition, or patch information for this CVE.

CVE-2025-61620First seen Apr 20, 2026

CVE-2023-47399 affects Nagios XI and allows the Nagios XI database user (`nagiosxi`) to update or delete records in the `xi_auditlog` table. Based on the provided advisory context, the issue is not a memory corruption or code execution flaw but an authorization and integrity weakness in database privilege design: the application database account was granted full CRUD capabilities over audit log records when audit data should be append-only or otherwise protected from modification and deletion. This undermines the trustworthiness of Nagios XI audit logging because actions recorded for administrative and security-relevant events can be altered or removed by an attacker who gains the ability to act through that database user or abuse application functionality that uses it.

CVE-2023-47399First seen May 31, 2026

CVE-2023-47405 is a vulnerability in Nagios XI affecting at least version 5.11.1 in which the installer creates multiple MySQL database accounts with weak default credentials. According to the provided advisory context, a fresh installation creates at least three database users—nagiosxi, nagiosql, and ndoutils—using the password "n@gweb". This results in predictable, low-entropy credentials being present by default for backend database access.

CVE-2023-47405First seen May 31, 2026

Nagios XI before 5.11.4 stored sensitive credentials and tokens in plaintext in the `xi_options` database table. According to the provided context, this affected credentials supplied in Inbound/Outbound Transfer settings and exposed NRDP, NSCA, SMTP, and related transfer credentials without encryption or adequate protection at rest. The issue is an insecure storage flaw in which application secrets that should be protected were persisted directly in database records in recoverable plaintext form.

CVE-2023-47402First seen May 31, 2026

CVE-2023-47400 is a high-severity remote code execution vulnerability in the Nagios XI Custom Includes feature affecting Nagios XI v5.11.1. According to the provided context, the protection model for Custom Includes could be bypassed by overwriting or removing the .htaccess file that was intended to prevent execution of uploaded content, and then uploading a PHP payload disguised with an allowed filename or extension pattern such as "exploit.jpg.php". Once the uploaded file was reachable over the web interface, the attacker could request it directly and cause the embedded PHP code to execute on the Nagios XI server. The issue is therefore an unrestricted or insufficiently restricted file upload condition combined with ineffective server-side execution controls in the upload location.

CVE-2023-47400First seen May 31, 2026

CVE-2023-47401 is a critical remote code execution vulnerability in Nagios XI, affecting the migration feature in versions including 5.11.1. According to the provided content, the migration page at /nagiosxi/admin/migrate.php passes attacker-supplied IP address, username, and password values to a PHP migration script executed via sudo as root. A high-privileged attacker can inject attacker-controlled Ansible playbook or vault content into this workflow. Because the injected YAML can invoke Ansible functionality such as lookup("pipe", ...), arbitrary shell commands can be executed on the Nagios XI server with root privileges. The issue is described as an Ansible vault file injection flaw in the migration feature and was mitigated in Nagios XI 5.11.4.

CVE-2023-47401First seen May 31, 2026

CVE-2023-47411 is a destructive vulnerability in Nagios XI affecting the backup_xi.sh backup script. According to the provided context, the flaw is caused by unsafe handling of attacker-controlled name and directory parameters in backup_xi.sh. An attacker who can control inputs passed to this script can influence the path operated on by a root-executed recursive deletion routine, resulting in behavior described as directly equivalent to executing `rm -rf /`. The issue therefore allows attacker-influenced filesystem path control in a privileged maintenance script, turning a backup-related operation into arbitrary recursive deletion of filesystem content as root. The advisory context states this issue was mitigated in Nagios XI version 5.11.4.

CVE-2023-47411First seen May 31, 2026

CVE-2023-47412 is an authorization flaw in the Nagios XI usermacros component affecting Nagios XI v5.11.1. According to the provided advisory context, any authenticated user could send crafted HTTP requests directly to the usermacros endpoint to access functionality intended to manage user and system macros. The issue allowed low-privileged authenticated users to view or modify user macros and system macros without proper privilege enforcement. The advisory further states that an authenticated user could overwrite the /usr/local/nagios/etc/resource.cfg macros file through these requests. Where macro redaction was disabled, sensitive macro values could also be disclosed directly.

CVE-2023-47412First seen May 31, 2026

CVE-2023-47410 is a stored cross-site scripting vulnerability in Nagios XI, affecting the admin user management page in versions including 5.11.1. According to the provided context, the flaw is caused by unsafe concatenation/insertion of usernames into inline JavaScript in the Manage Users / Admin’s User Management interface. A malicious username containing JavaScript can be stored by the application and later rendered in the administrative page without proper output encoding, causing the payload to execute in the victim administrator’s browser when the page is viewed. The issue was mitigated by Nagios in version 5.11.4.

CVE-2023-47410First seen May 31, 2026

CVE-2023-47409 affects Nagios XI's migration process. Migration job files stored encrypted Ansible vault data containing credentials for remote hosts, but the vault passwords were generated predictably using PHP uniqid(). The advisory states that these encrypted migration job files were not deleted after completion, allowing an attacker with local root access on the Nagios XI server to recover the files and brute-force the vault passwords offline. Successful recovery exposes privileged credentials for remote machines involved in migration operations.

CVE-2023-47409First seen May 31, 2026

CVE-2023-47414 is a local privilege escalation vulnerability in Nagios XI, affecting the send_to_nls.php functionality that generates rsyslog configuration files. According to the provided content, attacker-controlled input was not sanitized before being written into new rsyslog configuration content. This allowed a local attacker to inject arbitrary rsyslog directives, including omprog, into generated rsyslog files. Because rsyslog would subsequently process that injected configuration, the attacker could cause execution of attacker-controlled commands in the security context of the syslog user. The issue was reported in Nagios XI v5.11.1 and was mitigated in Nagios XI v5.11.4.

CVE-2023-47414First seen May 31, 2026

CVE-2023-47406 is an information disclosure issue in Nagios XI affecting the Scheduled Backups FTP connectivity test functionality. According to the provided context, the feature exhibits a discrepancy in error-message timing depending on whether a target port is open or closed. An attacker can abuse these timing differences to infer port state and perform time-based port scanning against the Nagios XI server itself, including localhost, and potentially internal network hosts reachable from the server. The issue was reported in Nagios XI v5.11.1 and was mitigated in version 5.11.4.

CVE-2023-47406First seen May 31, 2026

CVE-2023-47407 is an information exposure vulnerability in Nagios XI affecting at least version 5.11.1. Sensitive files on the Nagios XI host were readable by all local users. Specifically, /usr/local/nagiosxi/html/config.inc.php contained plaintext database credentials and was world-readable, and /usr/local/nagiosxi/etc/htpasswd.users was also world-readable and exposed SHA1 password hashes for Nagios XI accounts. The issue is caused by overly permissive filesystem permissions on credential-bearing files, allowing unauthorized local users to read secrets that should be restricted to privileged service accounts or administrators.

CVE-2023-47407First seen May 31, 2026

Nagios XI before 5.11.4 contains an arbitrary file editing issue in the Graph Templates editor. According to the provided advisory context, an administrator using the Graph Editor/Graph Templates page could edit unintended files in the parent directory, including PHP files such as index.php, ajax.php, and zoom.php. The flaw stems from insufficient restriction of file paths accessible through the editor, allowing modification of files outside the intended template scope.

CVE-2023-47413First seen May 31, 2026