CVE ID :CVE-2026-15720 Published : July 14, 2026, 6:20 p.m. | 40 minutes ago Description :In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler may result in subscriber-wide denial of service. Severity: 8.6 | HIGH Visit…
CVE ID :CVE-2026-6875 Published : July 13, 2026, 6:17 p.m. | 37 minutes ago Description :ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances,…
CVE ID :CVE-2026-61500 Published : July 13, 2026, 6:16 p.m. | 38 minutes ago Description :Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs of the same generator to unauthenticated clients during…
CVE ID :CVE-2026-61462 Published : July 13, 2026, 6:16 p.m. | 38 minutes ago Description :mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply…
CVE ID :CVE-2026-61463 Published : July 13, 2026, 6:16 p.m. | 38 minutes ago Description :Shiori contains a privilege escalation vulnerability in the account update endpoint that allows authenticated users to modify the owner field without authorization checks. Attackers can escalate…
CVE ID :CVE-2026-49972 Published : July 13, 2026, 6:16 p.m. | 38 minutes ago Description :Laravel-Mediable before 7.0.0 contains a file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading a file with an embedded PHP extension…
CVE ID :CVE-2026-10666 Published : July 12, 2026, 5:16 p.m. | 1 hour, 29 minutes ago Description :parse_ipv4() in subsys (reached via net_ipaddr_parse() for strings of the form “a.b.c.d:port”) copies the port substring into a fixed 17-byte stack buffer (char ipaddr[NET_IPV4_ADDR_LEN +…
CVE ID :CVE-2026-58596 Published : July 12, 2026, 4:16 p.m. | 2 hours, 29 minutes ago Description :Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. Severity: 8.3 | HIGH Visit the link for…
CVE ID :CVE-2026-61875 Published : July 12, 2026, 12:16 p.m. | 6 hours, 29 minutes ago Description :luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN clients to inject JavaScript via UPnP IGD AddPortMapping SOAP requests. Attackers can send malicious…
CVE ID :CVE-2026-61876 Published : July 12, 2026, 12:16 p.m. | 6 hours, 29 minutes ago Description :LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent network attackers to inject HTML markup. Attackers can send…