CVE ID :CVE-2026-122134 Published : Nov. 4, 2026, 8:36 p.m. | 45 minutes ago Description :Mistral Vibe before 2.25.7 contains a remote code execution vulnerability that allows attackers to run commands by configuring malicious Git clean or process filter drivers in…
CVE ID :CVE-2026-122135 Published : Nov. 4, 2026, 8:36 p.m. | 45 minutes ago Description :Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by abusing repository-configured gpg.program during project context collection. A crafted…
CVE ID :CVE-2026-122133 Published : Nov. 4, 2026, 8:36 p.m. | 45 minutes ago Description :Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute code by placing git.exe in a repository root. Attackers…
CVE ID :CVE-2026-82033 Published : Nov. 4, 2026, 6:42 p.m. | 39 minutes ago Description :DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication vulnerability in its web profile HTTP and WebSocket RPC control plane, allowing any…
CVE ID :CVE-2026-122148 Published : Nov. 4, 2026, 6:22 p.m. | 58 minutes ago Description :In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM…
CVE ID :CVE-2026-57853 Published : Nov. 4, 2026, 6:17 p.m. | 1 hour, 3 minutes ago Description :DataGerry before 3.3.0 contains a server-side template injection vulnerability that allows authenticated attackers with base.docapi.template.add permission to store arbitrary Jinja2 payloads in the template_data field…
CVE ID :CVE-2026-121971 Published : Nov. 4, 2026, 6:17 p.m. | 1 hour, 3 minutes ago Description :The component ScopingHttpClient in Symfony HttpClient merges the options of its default scope (such as auth_bearer or auth_basic) into a request before resolving a relative URL against…
CVE ID :CVE-2026-122120 Published : Nov. 4, 2026, 6 p.m. | 1 hour, 20 minutes ago Description :In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote…
CVE ID :CVE-2026-82158 Published : Nov. 3, 2026, 8:52 p.m. | 20 minutes ago Description :Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability. A low privileged attacker with…
CVE ID :CVE-2026-82159 Published : Nov. 3, 2026, 8:50 p.m. | 22 minutes ago Description :Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability. A low privileged attacker with…