CVE Explorer

Exact snapshot results

353,537 CVE records

CVE ID descending · no relevance ranking

CVE-2026-34983

Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can result in use-after-free bugs. This bug is not controllable by guest Wasm programs. It can only be triggered by a specific sequence of embedder API calls made by the host. Specifically, the following steps must occur to trigger the bug clone a wasmtime::Linker, drop the original linker instance, use the new, cloned linker instance, resulting in a use-after-free. This vulnerability is fixed in 43.0.1.

PUBLISHED

Vendor: bytecodealliance
Product: wasmtime
Provider severity: LOW
Conflicts: 0

CVE-2026-34982

A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the `complete`, `guitabtooltip`, `printheader` options and the `mapset` function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution.

PUBLISHED

Vendor: Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, vim, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat
Product: Red Hat Insights proxy 1.5, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Update Infrastructure 5, Red Hat Enterprise Linux 8, Red Hat AI Inference Server 3.3, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat AI Inference Server 3.2, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat AI Inference Server 3.3, Red Hat AI Inference Server 3.3, Red Hat OpenShift Container Platform 4, Red Hat Update Infrastructure 5, Red Hat Update Infrastructure 5, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 6, vim, Red Hat AI Inference Server 3.3, Red Hat Update Infrastructure 5, Red Hat AI Inference Server 3.2, Red Hat AI Inference Server 3.2, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Provider severity: HIGH
Conflicts: 2

CVE-2026-34981

The whisperX API is a tool for enhancing and analyzing audio content. From 0.3.1 to 0.5.0, FileService.download_from_url() in app/services/file_service.py calls requests.get(url) with zero URL validation. The file extension check occurs AFTER the HTTP request is already made, and can be bypassed by appending .mp3 to any internal URL. The /speech-to-text-url endpoint is unauthenticated. This vulnerability is fixed in 0.6.0.

PUBLISHED

Vendor: pavelzbornik
Product: whisperX-FastAPI
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-34980

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a network-exposed cupsd with a shared target queue, an unauthorized client can send a Print-Job to that shared PostScript queue without authentication. The server accepts a page-border value supplied as textWithoutLanguage, preserves an embedded newline through option escaping and reparse, and then reparses the resulting second-line PPD: text as a trusted schedule

PUBLISHED

Vendor: OpenPrinting
Product: cups
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-3498

The BlockArt Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'clientId' block attribute in all versions up to, and including, 2.2.15. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PUBLISHED

Vendor: wpblockart
Product: BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-34979

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, there is a heap-based buffer overflow in the CUPS scheduler when building filter option strings from job attribute. At time of publication, there are no publicly available patches.

PUBLISHED

Vendor: OpenPrinting
Product: cups
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-34978

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, the RSS notifier allows .. path traversal in notify-recipient-uri (e.g., rss:///../job.cache), letting a remote IPP client write RSS XML bytes outside CacheDir/rss (anywhere that is lp-writable). In particular, because CacheDir is group-writable by default (typically root:lp and mode 0770), the notifier (running as lp) can replace root-managed state files via temp-fi

PUBLISHED

Vendor: OpenPrinting
Product: cups
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-34977

Aperi'Solve is an open-source steganalysis web platform. In versions 3.1.3 through 3.2.0, when uploading a JPEG, a user can specify an optional password to accompany the JPEG. This password is then directly passed into an expect command, which is then subsequently passed into a bash -c command, without any form of sanitization or validation. An unauthenticated attacker can achieve root-level RCE inside the worker container with a single HTTP request, enabling full read/write access to all user-u

PUBLISHED

Vendor: Zeecka
Product: AperiSolve
Provider severity: CRITICAL
Conflicts: 0

CVE-2026-34976

Dgraph is an open source distributed GraphQL database. Prior to 25.3.1, the restoreTenant admin mutation is missing from the authorization middleware config (admin.go), making it completely unauthenticated. Unlike the similar restore mutation which requires Guardian-of-Galaxy authentication, restoreTenant executes with zero middleware. This mutation accepts attacker-controlled backup source URLs (including file:// for local filesystem access), S3/MinIO credentials, encryption key file paths, and

PUBLISHED

Vendor: dgraph-io
Product: dgraph
Provider severity: CRITICAL
Conflicts: 0

CVE-2026-34975

Plunk is an open-source email platform built on top of AWS SES. Prior to 0.8.0, a CRLF header injection vulnerability was discovered in SESService.ts, where user-supplied values for from.name, subject, custom header keys/values, and attachment filenames were interpolated directly into raw MIME messages without sanitization. An authenticated API user could inject arbitrary email headers (e.g. Bcc, Reply-To) by embedding carriage return/line feed characters in these fields, enabling silent email f

PUBLISHED

Vendor: useplunk
Product: plunk
Provider severity: HIGH
Conflicts: 0

CVE-2026-34974

phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, the regex-based SVG sanitizer in phpMyFAQ (SvgSanitizer.php) can be bypassed using HTML entity encoding in javascript: URLs within SVG <a href> attributes. Any user with edit_faq permission can upload a malicious SVG that executes arbitrary JavaScript when viewed, enabling privilege escalation from editor to full admin takeover. This issue has been patched in version 4.1.1.

PUBLISHED

Vendor: thorsten
Product: phpMyFAQ
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-34973

phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, the searchCustomPages() method in phpmyfaq/src/phpMyFAQ/Search.php uses real_escape_string() (via escape()) to sanitize the search term before embedding it in LIKE clauses. However, real_escape_string() does not escape SQL LIKE metacharacters % (match any sequence) and _ (match any single character). An unauthenticated attacker can inject these wildcards into search queries, causing them to match unintended records — includi

PUBLISHED

Vendor: thorsten
Product: phpMyFAQ
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-34972

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. From 1.8.0 to 1.13.1, under specific conditions, BatchCheck calls with multiple checks sent for the same object, relation, and user combination can result in improper policy enforcement. This vulnerability is fixed in 1.14.0.

PUBLISHED

Vendor: openfga
Product: openfga
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-34971

Wasmtime is a runtime for WebAssembly. From 32.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Cranelift compilation backend contains a bug on aarch64 when performing a certain shape of heap accesses which means that the wrong address is accessed. When combined with explicit bounds checks a guest WebAssembly module this can create a situation where there are two diverging computations for the same address: one for the address to bounds-check and one for the address to load. This difference

PUBLISHED

Vendor: Red Hat, Red Hat, bytecodealliance
Product: Red Hat Connectivity Link 1, Red Hat Enterprise Linux 10, wasmtime
Provider severity: CRITICAL, HIGH
Conflicts: 3

CVE-2026-34970

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow a bugnote author to access the note's Revisions page after losing access to the parent private issue. This issue has been fixed in version 2.28.2.

PUBLISHED

Vendor: mantisbt
Product: mantisbt
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-3497

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program with

PUBLISHED

Vendor: Red Hat, Siemens, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Siemens, Red Hat, Red Hat, Red Hat, Siemens, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Siemens, Siemens, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Ubuntu, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat
Product: Red Hat OpenShift Container Platform 4.16, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Red Hat Update Infrastructure 5, Red Hat Enterprise Linux 8, Red Hat AI Inference Server 3.3, Red Hat Advanced Cluster Management for Kubernetes 2, RHEL-8 based Middleware Containers, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat OpenShift Container Platform 4.17, OpenShift Pipelines, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, RHEL-8 based Middleware Containers, Red Hat OpenShift Container Platform 4.18, Red Hat AI Inference Server 3.2, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, RHEL-8 based Middleware Containers, RHEL-8 based Middleware Containers, Red Hat Enterprise Linux 6, RHEL-8 based Middleware Containers, Red Hat AI Inference Server 3.2, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Multicluster Engine for Kubernetes, Red Hat Enterprise Linux 10, Red Hat OpenShift Container Platform 4.14, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIPLUS S7-1500 CPU 1518-4 PN/DP MFP, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat AI Inference Server 3.3, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, RHEL-8 based Middleware Containers, Red Hat AI Inference Server 3.2, openssh, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.15, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, RHEL-8 based Middleware Containers, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Update Infrastructure 5, Red Hat OpenShift Container Platform 4.19, Red Hat OpenShift Container Platform 4.13, Red Hat Hardened Images, Red Hat AI Inference Server 3.3, Red Hat AI Inference Server 3.3, Red Hat Enterprise Linux 8.6 Telecommunications Update Service
Provider severity: HIGH, LOW
Conflicts: 3

CVE-2026-34969

Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the auth service's OAuth provider callback flow places the refresh token directly into the redirect URL as a query parameter. Refresh tokens in URLs are logged in browser history, server access logs, HTTP Referer headers, and proxy/CDN logs. Note that the refresh token is one-time use and all of these leak vectors are on owned infrastructure or services integrated by the application developer. This vulnerability is fixed

PUBLISHED

Vendor: nhost
Product: nhost
Provider severity: LOW
Conflicts: 1

CVE-2026-34965

Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that allows authenticated attackers with collection management privileges to inject arbitrary PHP code into collection rules parameters. Attackers can inject malicious PHP code through rule parameters which is written directly to server-side PHP files and executed via include() to achieve arbitrary command execution on the underlying server.

PUBLISHED

Vendor: Cockpit
Product: Cockpit CMS
Provider severity: HIGH
Conflicts: 1

CVE-2026-34963

barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation using 32-bit arithmetic on section VirtualAddress and size values allows undersized heap allocation, and PE section loading logic fails to validate that PointerToRawData plus copied size remains within the PE file buffer. An attacker can supply a malicious EFI PE binary via TFTP, USB, SD card, or network boot to trigge

PUBLISHED

Vendor: barebox
Product: barebox
Provider severity: HIGH
Conflicts: 1

CVE-2026-34962

barebox version prior to 2026.04.0 contains a denial-of-service vulnerability in ext4 directory parsing in fs/ext4/ext4_common.c where the ext4fs_iterate_dir() function fails to validate that directory entry length values are non-zero. Attackers can supply a malicious ext4 filesystem image with a crafted directory entry containing a direntlen value of 0 to cause an infinite loop during directory listing or path resolution, resulting in the boot process hanging indefinitely.

PUBLISHED

Vendor: barebox
Product: barebox
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-34961

barebox prior to version 2026.04.0 contains out-of-bounds read vulnerabilities in ext4 extent parsing due to missing validation of the eh_entries field against buffer capacity in fs/ext4/ext4_common.c. Attackers can supply a malicious ext4 filesystem image via USB, SD card, or network boot to trigger heap out-of-bounds reads during boot-time filesystem parsing, potentially redirecting reads to arbitrary disk offsets.

PUBLISHED

Vendor: barebox
Product: barebox
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-34960

barebox prior to version 2026.04.0 contains an out-of-bounds read vulnerability in DHCP option parsing within the dhcp_message_type() function that fails to verify the options pointer remains within received packet bounds. An attacker on the same broadcast domain can send a crafted DHCP Offer or ACK packet without a proper 0xff end marker to cause the parser to read past valid packet data and potentially crash the system.

PUBLISHED

Vendor: barebox
Product: barebox
Provider severity: HIGH, MEDIUM
Conflicts: 1

CVE-2026-3496

The JetBooking plugin for WordPress is vulnerable to SQL Injection via the 'check_in_date' parameter in all versions up to, and including, 4.0.3. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

PUBLISHED

Vendor: Crocoblock
Product: JetBooking
Provider severity: HIGH
Conflicts: 0

CVE-2026-34956

A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access error can lead to a crash, resulting in a Denial of Service (DoS) for the affected system.

PUBLISHED

Vendor: Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat
Product: Red Hat OpenStack Platform 18.0, Fast Datapath for RHEL 8, Fast Datapath for RHEL 8, Fast Datapath for RHEL 8, Fast Datapath for RHEL 7, Red Hat OpenStack Platform 13 (Queens), Fast Datapath for RHEL 7, Red Hat OpenStack Platform 16.2, Fast Datapath for RHEL 9, Fast Datapath for RHEL 7, Fast Datapath for RHEL 8, Red Hat OpenShift Container Platform 4, Red Hat OpenStack Platform 17.1, Red Hat OpenStack Platform 13 (Queens), Fast Datapath for RHEL 9, Red Hat OpenShift Container Platform 4, Fast Datapath for RHEL 9, Fast Datapath for RHEL 7, Red Hat OpenStack Platform 13 (Queens), Red Hat OpenStack Platform 16.2, Fast Datapath for RHEL 8, Fast Datapath for RHEL 9, Fast Datapath for RHEL 8, Fast Datapath for RHEL 7, Fast Datapath for RHEL 7, Red Hat OpenShift Container Platform 4, Fast Datapath for RHEL 9, Red Hat OpenShift Container Platform 4, Fast Datapath for RHEL 7, Fast Datapath for RHEL 8, Fast Datapath for RHEL 9, Fast Datapath for RHEL 9, Fast Datapath for RHEL 8, Fast Datapath for RHEL 9, Red Hat OpenStack Platform 17.1, Red Hat Enterprise Linux 7, Fast Datapath for RHEL 9, Fast Datapath for RHEL 8, Fast Datapath for RHEL 8, Fast Datapath for RHEL 7
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-34955

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, SubprocessSandbox in all modes (BASIC, STRICT, NETWORK_ISOLATED) calls subprocess.run() with shell=True and relies solely on string-pattern matching to block dangerous commands. The blocklist does not include sh or bash as standalone executables, allowing trivial sandbox escape in STRICT mode via sh -c '<command>'. This issue has been patched in version 4.5.97.

PUBLISHED

Vendor: MervinPraison
Product: PraisonAI
Provider severity: HIGH
Conflicts: 0

CVE-2026-34954

PraisonAI is a multi-agent teams system. Prior to version 1.5.95, FileTools.download_file() in praisonaiagents validates the destination path but performs no validation on the url parameter, passing it directly to httpx.stream() with follow_redirects=True. An attacker who controls the URL can reach any host accessible from the server including cloud metadata services and internal network services. This issue has been patched in version 1.5.95.

PUBLISHED

Vendor: MervinPraison
Product: PraisonAI
Provider severity: HIGH
Conflicts: 0

CVE-2026-34953

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, OAuthManager.validate_token() returns True for any token not found in its internal store, which is empty by default. Any HTTP request to the MCP server with an arbitrary Bearer token is treated as authenticated, granting full access to all registered tools and agent capabilities. This issue has been patched in version 4.5.97.

PUBLISHED

Vendor: MervinPraison
Product: PraisonAI
Provider severity: CRITICAL
Conflicts: 0

CVE-2026-34952

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This issue has been patched in version 4.5.97.

PUBLISHED

Vendor: MervinPraison
Product: PraisonAI
Provider severity: CRITICAL
Conflicts: 0

CVE-2026-34951

Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains a reflected cross-site scripting vulnerability via the footerScripts parameter, which does not sanitize user-supplied input before rendering it in the page response. Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Workbench allows XSS Targeting Error Pages. This vulnerability

PUBLISHED

Vendor: forceworkbench
Product: forceworkbench
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-34950

fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.1.0 and earlier, the publicKeyPemMatcher regex in fast-jwt/src/crypto.js uses a ^ anchor that is defeated by any leading whitespace in the key string, re-enabling the exact same JWT algorithm confusion attack that CVE-2023-48223 patched.

PUBLISHED

Vendor: nearform
Product: fast-jwt
Provider severity: CRITICAL
Conflicts: 0

CVE-2026-3495

Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to escape some variables that could contain malicious content during error page composition which allows an attacker with access to edit some site configuration to execute some malicious code via injecting some JS as part of those values.. Mattermost Advisory ID: MMSA-2026-00622

PUBLISHED

Vendor: Mattermost
Product: Mattermost
Provider severity: LOW
Conflicts: 0

CVE-2026-34947

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, staged user custom fields and username are exposed on public invite pages without email verification. This issue has been patched in versions 2026.1.3, 2026.2.2, and 2026.3.0.

PUBLISHED

Vendor: discourse
Product: discourse
Provider severity: LOW
Conflicts: 0

CVE-2026-34946

Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Winch compiler contains a vulnerability where the compilation of the table.fill instruction can result in a host panic. This means that a valid guest can be compiled with Winch, on any architecture, and cause the host to panic. This represents a denial-of-service vulnerability in Wasmtime due to guests being able to trigger a panic. The specific issue is that a historical refactoring changed how c

PUBLISHED

Vendor: bytecodealliance
Product: wasmtime
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-34945

Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Winch compiler contains a bug where a 64-bit table, part of the memory64 proposal of WebAssembly, incorrectly translated the table.size instruction. This bug could lead to disclosing data on the host's stack to WebAssembly guests. The host's stack can possibly contain sensitive data related to other host-originating operations which is not intended to be disclosed to guests. This bug specifically

PUBLISHED

Vendor: bytecodealliance
Product: wasmtime
Provider severity: LOW
Conflicts: 0

CVE-2026-34944

Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, On x86-64 platforms with SSE3 disabled Wasmtime's compilation of the f64x2.splat WebAssembly instruction with Cranelift may load 8 more bytes than is necessary. When signals-based-traps are disabled this can result in a uncaught segfault due to loading from unmapped guard pages. With guard pages disabled it's possible for out-of-sandbox data to be loaded, but this data is not visible to WebAssembly guests. This v

PUBLISHED

Vendor: bytecodealliance
Product: wasmtime
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-34943

Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime contains a possible panic which can happen when a flags-typed component model value is lifted with the Val type. If bits are set outside of the set of flags the component model specifies that these bits should be ignored but Wasmtime will panic when this value is lifted. This panic only affects wasmtime's implementation of lifting into Val, not when using the flags! macro. This additionally only affects

PUBLISHED

Vendor: bytecodealliance
Product: wasmtime
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-34942

Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of transcoding strings into the Component Model's utf16 or latin1+utf16 encodings improperly verified the alignment of reallocated strings. This meant that unaligned pointers could be passed to the host for transcoding which would trigger a host panic. This panic is possible to trigger from malicious guests which transfer very specific strings across components with specific addresses. H

PUBLISHED

Vendor: bytecodealliance
Product: wasmtime
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-34941

Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime contains a vulnerability where when transcoding a UTF-16 string to the latin1+utf16 component-model encoding it would incorrectly validate the byte length of the input string when performing a bounds check. Specifically the number of code units were checked instead of the byte length, which is twice the size of the code units. This vulnerability can cause the host to read beyond the end of a WebAssembly'

PUBLISHED

Vendor: bytecodealliance
Product: wasmtime
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-34940

KubeAI is an AI inference operator for kubernetes. Prior to 0.23.2, the ollamaStartupProbeScript() function in internal/modelcontroller/engine_ollama.go constructs a shell command string using fmt.Sprintf with unsanitized model URL components (ref, modelParam). This shell command is executed via bash -c as a Kubernetes startup probe. An attacker who can create or update Model custom resources can inject arbitrary shell commands that execute inside model server pods. This vulnerability is fixed i

PUBLISHED

Vendor: kubeai-project
Product: kubeai
Provider severity: HIGH
Conflicts: 0

CVE-2026-3494

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

PUBLISHED

Vendor: Amazon, Amazon, MariaDB Foundation, Amazon
Product: RDS for MariaDB, RDS for MySQL, MariaDB Server, Aurora MySQL
Provider severity: MEDIUM
Conflicts: 2

CVE-2026-34939

PraisonAI is a multi-agent teams system. Prior to version 4.5.90, MCPToolIndex.search_tools() compiles a caller-supplied string directly as a Python regular expression with no validation, sanitization, or timeout. A crafted regex causes catastrophic backtracking in the re engine, blocking the Python thread for hundreds of seconds and causing a complete service outage. This issue has been patched in version 4.5.90.

PUBLISHED

Vendor: MervinPraison
Product: PraisonAI
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-34938

PraisonAI is a multi-agent teams system. Prior to version 1.5.90, execute_code() in praisonai-agents runs attacker-controlled Python inside a three-layer sandbox that can be fully bypassed by passing a str subclass with an overridden startswith() method to the _safe_getattr wrapper, achieving arbitrary OS command execution on the host. This issue has been patched in version 1.5.90.

PUBLISHED

Vendor: MervinPraison
Product: PraisonAI
Provider severity: CRITICAL
Conflicts: 0

CVE-2026-34937

PraisonAI is a multi-agent teams system. Prior to version 1.5.90, run_python() in praisonai constructs a shell command string by interpolating user-controlled code into python3 -c "<code>" and passing it to subprocess.run(..., shell=True). The escaping logic only handles \ and ", leaving $() and backtick substitutions unescaped, allowing arbitrary OS command execution before Python is invoked. This issue has been patched in version 1.5.90.

PUBLISHED

Vendor: MervinPraison
Product: PraisonAI
Provider severity: HIGH
Conflicts: 0

CVE-2026-34936

PraisonAI is a multi-agent teams system. Prior to version 4.5.90, passthrough() and apassthrough() in praisonai accept a caller-controlled api_base parameter that is concatenated with endpoint and passed directly to httpx.Client.request() when the litellm primary path raises AttributeError. No URL scheme validation, private IP filtering, or domain allowlist is applied, allowing requests to any host reachable from the server. This issue has been patched in version 4.5.90.

PUBLISHED

Vendor: MervinPraison
Product: PraisonAI
Provider severity: HIGH
Conflicts: 0

CVE-2026-34935

PraisonAI is a multi-agent teams system. From version 4.5.15 to before version 4.5.69, the --mcp CLI argument is passed directly to shlex.split() and forwarded through the call chain to anyio.open_process() with no validation, allowlist check, or sanitization at any hop, allowing arbitrary OS command execution as the process user. This issue has been patched in version 4.5.69.

PUBLISHED

Vendor: MervinPraison
Product: PraisonAI
Provider severity: CRITICAL
Conflicts: 0

CVE-2026-34934

PraisonAI is a multi-agent teams system. Prior to version 4.5.90, the get_all_user_threads function constructs raw SQL queries using f-strings with unescaped thread IDs fetched from the database. An attacker stores a malicious thread ID via update_thread. When the application loads the thread list, the injected payload executes and grants full database access. This issue has been patched in version 4.5.90.

PUBLISHED

Vendor: MervinPraison
Product: PraisonAI
Provider severity: CRITICAL
Conflicts: 0

CVE-2026-34933

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.

PUBLISHED

Vendor: avahi
Product: avahi
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-34932

hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability that can lead to CSRF. This issue has been patched in version 2026.3.0.

PUBLISHED

Vendor: hoppscotch
Product: hoppscotch
Provider severity: HIGH
Conflicts: 0

CVE-2026-34931

hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is an open redirect vulnerability that leads to token exfiltration. With these tokens, the attacker can sign in as the victim to takeover their account. This issue has been patched in version 2026.3.0.

PUBLISHED

Vendor: hoppscotch
Product: hoppscotch
Provider severity: HIGH
Conflicts: 0

CVE-2026-34930

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different process protection mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

PUBLISHED

Vendor: Trend Micro, Inc., Trend Micro, Inc.
Product: TrendAI Apex One, TrendAI Apex One as a Service
Provider severity: HIGH
Conflicts: 1