CVE ID :CVE-2026-90779 Published : Sept. 13, 2026, 12:17 p.m. | 7 hours, 41 minutes ago Description :SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can…
CVE ID :CVE-2026-90556 Published : Sept. 12, 2026, 6:16 p.m. | 1 hour, 34 minutes ago Description :Freeciv versions before 3.2.6 contain a heap buffer overflow in worklist_load() when processing savegame files with declared worklist lengths exceeding the fixed array bound of…
CVE ID :CVE-2026-90559 Published : Sept. 12, 2026, 6:16 p.m. | 1 hour, 34 minutes ago Description :snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompress(ByteBuffer, ByteBuffer) because destination buffer capacity is never validated against decompressed size. Attackers can supply valid…
CVE ID :CVE-2026-90560 Published : Sept. 12, 2026, 6:16 p.m. | 1 hour, 34 minutes ago Description :zstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdDictDecompress constructor because offset and length arguments are never validated against the dictionary…
CVE ID :CVE-2026-90558 Published : Sept. 12, 2026, 6:16 p.m. | 1 hour, 34 minutes ago Description :sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild. Details of the vulnerabilities…
CVE ID :CVE-2026-62102 Published : Sept. 11, 2026, 7:17 p.m. | 27 minutes ago Description :Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline,…
CVE ID :CVE-2026-62106 Published : Sept. 11, 2026, 7:17 p.m. | 27 minutes ago Description :Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected…
CVE ID :CVE-2026-62103 Published : Sept. 11, 2026, 7:17 p.m. | 27 minutes ago Description :Unauthenticated PHP Object Injection in Everest Forms <= 3.6.0 versions. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products,…
CVE ID :CVE-2026-62105 Published : Sept. 11, 2026, 7:17 p.m. | 27 minutes ago Description :Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products,…