CVE ID :CVE-2026-81702 Published : Aug. 27, 2026, 5:21 p.m. | 1 hour, 59 minutes ago Description :openssl_encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities from identity.json, allowing attackers to substitute public keys in identity stores. Attackers can…
CVE ID :CVE-2026-70419 Published : Aug. 26, 2026, 6:24 p.m. | 49 minutes ago Description :Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability. A high privileged attacker…
CVE ID :CVE-2026-76784 Published : Aug. 26, 2026, 6:17 p.m. | 57 minutes ago Description :Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally…
CVE ID :CVE-2026-58474 Published : Aug. 26, 2026, 6:16 p.m. | 57 minutes ago Description :whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote attacker who controls a HuggingFace repository to achieve…
CVE ID :CVE-2026-19485 Published : Aug. 26, 2026, 6:06 p.m. | 1 hour, 8 minutes ago Description :A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud Platform…
CVE ID :CVE-2026-32257 Published : Aug. 26, 2026, 5:16 p.m. | 1 hour, 57 minutes ago Description :Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Prior to 1.2.13, custom CSS supplied through the Brand Settings…
CVE ID :CVE-2026-80104 Published : Aug. 25, 2026, 8:18 p.m. | 29 minutes ago Description :DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload directory. skill_upload in packages takes file.filename as…
CVE ID :CVE-2026-45018 Published : Aug. 25, 2026, 8:16 p.m. | 31 minutes ago Description :Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to true in .chainlit expose the…
CVE ID :CVE-2026-65105 Published : Aug. 25, 2026, 8:15 p.m. | 32 minutes ago Description :NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit…
CVE ID :CVE-2026-65084 Published : Aug. 25, 2026, 8:15 p.m. | 32 minutes ago Description :NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might…