IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to vie…

▾ TwilightIBM · Enterprise Build of QuarkusEPSS 0.43%via NVD

CVE-2026-77825Medium· 4.9

4d ago

IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (`GET /v1/admin/logs/file`)

IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (`GET /v1/admin/logs/file`). The path confinement check uses `str.startswith()` rather than proper boundary validati…

▾ SunlitIBM · ContextForge MCP GatewayEPSS 0.32%via NVD

CVE-2026-77707Medium· 5.9

4d ago

Improper certificate validation vulnerability in HAVELSAN Inc

Improper certificate validation vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle (AiTM). This issue affects Liman Render Engine: from 1.0 before 1.2-75.

▾ SunlitHAVELSAN Inc. · Liman Render EngineEPSS 0.13%via NVD

CVE-2026-77703Medium· 5.9

4d ago

Key exchange without entity authentication vulnerability in HAVELSAN Inc

Key exchange without entity authentication vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle (AiTM). This issue affects Liman Render Engine: from 1.0 before 1.2-75.

▾ SunlitHAVELSAN Inc. · Liman Render EngineEPSS 0.24%via NVD

CVE-2026-73064Low· 2.9

4d ago

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.

▾ Sunlittrustedfirmware · Mbed TLSEPSS 0.10%via NVD

CVE-2026-6544Medium· 6.2

4d ago

IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and increased attack surface.

IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and increased attack surface.

▾ SunlitIBM · ConcertEPSS 0.12%via NVD

CVE-2026-65422Medium· 6.5

4d ago

A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails.

▾ SunlitGenetec Inc. · Genetec Security CenterEPSS 0.20%via NVD

CVE-2026-58008High· 8.1

4d ago

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

▾ TwilightAltera · Trusted FirmwareEPSS 0.11%via NVD

CVE-2026-58007High· 8.1

4d ago

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

▾ TwilightAltera · Trusted FirmwareEPSS 0.11%via NVD

CVE-2026-58006High· 8.1

4d ago

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

▾ TwilightAltera · Trusted FirmwareEPSS 0.11%via NVD

CVE-2026-58005High· 8.1

4d ago

Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

▾ TwilightAltera · Trusted FirmwareEPSS 0.11%via NVD

CVE-2026-58004High· 8.1

4d ago

Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

▾ TwilightAltera · Trusted FirmwareEPSS 0.11%via NVD

CVE-2026-56736High· 8.2PoC

4d ago

phpMyFAQ is an open source FAQ web application

phpMyFAQ is an open source FAQ web application. A stored cross-site scripting (XSS) vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user (or low-privileged registered user) to inject arbitrary JavaScript that ex…

▾ Midnightthorsten · phpMyFAQEPSS 0.24%via NVD

CVE-2026-52001None

4d ago

An issue in geelen mcp-remote 0.1.18 through 0.1.38 allows a remote attacker to obtain sensitive information via the SSE transport eventSourceInit fetch wrapper " src/lib/utils.ts

▾ SunlitEPSS 0.25%via NVD

CVE-2026-51997High· 8.8

4d ago

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open() functions

▾ TwilightEPSS 0.53%via NVD

CVE-2026-51996None

4d ago

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash function

▾ SunlitEPSS 0.29%via NVD

CVE-2026-51995High· 7.5

4d ago

An issue in geelen mcp-remote 0.1.32 through 0.1.38 allows a remote attacker to obtain sensitive information via the src/lib/authorization-server-metadata.ts, src/lib/utils.ts components

▾ TwilightEPSS 0.47%via NVD

CVE-2026-51994Critical· 9.1

4d ago

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF) via the resource_metadata URL extracted from a remote MCP server's WWW-Authenticate header

▾ MidnightEPSS 0.35%via NVD

CVE-2026-19492Low· 3.2

4d ago

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a …

▾ SunlitIBM · PowerVM HypervisorEPSS 0.11%via NVD

CVE-2026-18870Medium· 4.3

4d ago

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.

▾ SunlitIBM · PowerVM HypervisorEPSS 0.18%via NVD

CVE-2026-13467High· 8.1

4d ago

Out-of-bounds write vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

Out-of-bounds write vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

▾ TwilightAltera · Trusted FirmwareEPSS 0.11%via NVD

CVE-2026-13466High· 8.1

4d ago

Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on HPS allows Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

▾ TwilightAltera · Trusted FirmwareEPSS 0.11%via NVD

CVE-2026-13465High· 8.1

4d ago

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

▾ TwilightAltera · Trusted FirmwareEPSS 0.11%via NVD

CVE-2026-12559High· 7.3

4d ago

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Vendor Invoice Management for SAP Solutions Capture Validation application

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Vendor Invoice Management for SAP Solutions Capture Validation application. Under certain conditions, this issue could allow execution of unauthorized scri…

▾ TwilightOpenText · Vendor Invoice Management for SAP SolutionsEPSS 0.39%via NVD

CVE-2026-97062Medium· 5.4PoC

4d ago

Aureus ERP through 1.6.0 stores uploaded SVG files on its public disk and serves them from the application origin, allowing authenticated users to upload malicious SVG files containing JavaScript

Aureus ERP through 1.6.0 stores uploaded SVG files on its public disk and serves them from the application origin, allowing authenticated users to upload malicious SVG files containing JavaScript. Attackers can craft SVG files with scrip…

▾ TwilightWebkul · Aureus ERPEPSS 0.22%via NVD

CVE-2026-97061Medium· 4.3

4d ago

Black Candy through 3.2.1 fails to scope playlist search queries to the authenticated session user, allowing any authenticated user to enumerate all playlists on the instance

Black Candy through 3.2.1 fails to scope playlist search queries to the authenticated session user, allowing any authenticated user to enumerate all playlists on the instance. Attackers can query the SearchController or Search::Playlists…

▾ Sunlitblackcandy-org · Black CandyEPSS 0.22%via NVD