CVE-2026-25805 - Zed does not show Parameter Values for MCP Tool Calls. Users cannot detect tool poisoning.
CVE ID : CVE-2026-25805
Published : Feb. 10, 2026, 6:16 p.m. | 1 hour ago
Description : Zed is a multiplayer code editor. Prior to 0.219.4, Zed does not show with which parameters a tool is being invoked, when asking for allowance. Further it does not show after the tool was being invoked, which parameters were used. Thus, maybe unwanted or even malicious values could be used without the user having a chance to notice it. Patched in Zed Editor 0.219.4 which includes expandable tool call details.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-25805
Published : Feb. 10, 2026, 6:16 p.m. | 1 hour ago
Description : Zed is a multiplayer code editor. Prior to 0.219.4, Zed does not show with which parameters a tool is being invoked, when asking for allowance. Further it does not show after the tool was being invoked, which parameters were used. Thus, maybe unwanted or even malicious values could be used without the user having a chance to notice it. Patched in Zed Editor 0.219.4 which includes expandable tool call details.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-25947 - Worklenz Boolean-Based Blind SQL Injection via Improper ORDER BY Clause Input Validation
CVE ID : CVE-2026-25947
Published : Feb. 10, 2026, 6:16 p.m. | 1 hour ago
Description : Worklenz is a project management tool. Prior to 2.1.7, there are multiple SQL injection vulnerabilities were discovered in backend SQL query construction affecting project and task management controllers, reporting and financial data endpoints, real-time socket.io handlers, and resource allocation and scheduling features. The vulnerability has been patched in version v2.1.7.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-25947
Published : Feb. 10, 2026, 6:16 p.m. | 1 hour ago
Description : Worklenz is a project management tool. Prior to 2.1.7, there are multiple SQL injection vulnerabilities were discovered in backend SQL query construction affecting project and task management controllers, reporting and financial data endpoints, real-time socket.io handlers, and resource allocation and scheduling features. The vulnerability has been patched in version v2.1.7.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-25950 - Apache HTTP Server Cross-Site Scripting
CVE ID : CVE-2026-25950
Published : Feb. 10, 2026, 6:16 p.m. | 1 hour ago
Description : Rejected reason: Further research determined the issue is not a vulnerability.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-25950
Published : Feb. 10, 2026, 6:16 p.m. | 1 hour ago
Description : Rejected reason: Further research determined the issue is not a vulnerability.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-25956 - Frappe Affected by XSS and Open Redirect in Sign Up
CVE ID : CVE-2026-25956
Published : Feb. 10, 2026, 6:16 p.m. | 1 hour ago
Description : Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect (or reflected XSS, depending on the crafted payload) when a user signs up. This vulnerability is fixed in 14.99.14 and 15.94.0.
Severity: 6.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-25956
Published : Feb. 10, 2026, 6:16 p.m. | 1 hour ago
Description : Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect (or reflected XSS, depending on the crafted payload) when a user signs up. This vulnerability is fixed in 14.99.14 and 15.94.0.
Severity: 6.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-25992 - SiYuan has a File Read Interface Case Bypass Vulnerability
CVE ID : CVE-2026-25992
Published : Feb. 10, 2026, 6:16 p.m. | 1 hour ago
Description : SiYuan is a personal knowledge management system. Prior to 3.5.5, the /api/file/getFile endpoint uses case-sensitive string equality checks to block access to sensitive files. On case-insensitive file systems such as Windows, attackers can bypass restrictions using mixed-case paths and read protected configuration files. This vulnerability is fixed in 3.5.5.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-25992
Published : Feb. 10, 2026, 6:16 p.m. | 1 hour ago
Description : SiYuan is a personal knowledge management system. Prior to 3.5.5, the /api/file/getFile endpoint uses case-sensitive string equality checks to block access to sensitive files. On case-insensitive file systems such as Windows, attackers can bypass restrictions using mixed-case paths and read protected configuration files. This vulnerability is fixed in 3.5.5.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-25993 - EverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keys
CVE ID : CVE-2026-25993
Published : Feb. 10, 2026, 6:16 p.m. | 1 hour ago
Description : EverShop is a TypeScript-first eCommerce platform. During category update and deletion event handling, the application embeds path / request_path values—derived from the url_key stored in the database—into SQL statements via string concatenation and passes them to execute(). As a result, if a malicious string is stored in url_key , subsequent event processing modifies and executes the SQL statement, leading to a second-order SQL injection. Patched from v2.1.1.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-25993
Published : Feb. 10, 2026, 6:16 p.m. | 1 hour ago
Description : EverShop is a TypeScript-first eCommerce platform. During category update and deletion event handling, the application embeds path / request_path values—derived from the url_key stored in the database—into SQL statements via string concatenation and passes them to execute(). As a result, if a malicious string is stored in url_key , subsequent event processing modifies and executes the SQL statement, leading to a second-order SQL injection. Patched from v2.1.1.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-26003 - FastGPT Plugin forwarding request is not authenticated, posing a serious risk of attack
CVE ID : CVE-2026-26003
Published : Feb. 10, 2026, 6:16 p.m. | 1 hour ago
Description : FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx without authentication, thereby threatening the plugin system. This may cause the plugin system to crash and the loss of plugin installation status, but it will not result in key leakage. For older versions, as there are only operation interfaces for obtaining information, the impact is almost negligible. This vulnerability is fixed in 4.14.5-fix.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-26003
Published : Feb. 10, 2026, 6:16 p.m. | 1 hour ago
Description : FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx without authentication, thereby threatening the plugin system. This may cause the plugin system to crash and the loss of plugin installation status, but it will not result in key leakage. For older versions, as there are only operation interfaces for obtaining information, the impact is almost negligible. This vulnerability is fixed in 4.14.5-fix.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-1848 - Connections received from the proxy port may not count towards total accepted connections
CVE ID : CVE-2026-1848
Published : Feb. 10, 2026, 6:22 p.m. | 54 minutes ago
Description : Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resources. This only applies to connections accepted from the proxy port, pending the proxy protocol header.
Severity: 8.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-1848
Published : Feb. 10, 2026, 6:22 p.m. | 54 minutes ago
Description : Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resources. This only applies to connections accepted from the proxy port, pending the proxy protocol header.
Severity: 8.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21347 - Bridge | Integer Overflow or Wraparound (CWE-190)
CVE ID : CVE-2026-21347
Published : Feb. 10, 2026, 6:24 p.m. | 52 minutes ago
Description : Bridge versions 15.1.3, 16.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-21347
Published : Feb. 10, 2026, 6:24 p.m. | 52 minutes ago
Description : Bridge versions 15.1.3, 16.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21346 - Bridge | Out-of-bounds Write (CWE-787)
CVE ID : CVE-2026-21346
Published : Feb. 10, 2026, 6:24 p.m. | 52 minutes ago
Description : Bridge versions 15.1.3, 16.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-21346
Published : Feb. 10, 2026, 6:24 p.m. | 52 minutes ago
Description : Bridge versions 15.1.3, 16.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-25610 - Invalid $geoNear index hint may cause server crash
CVE ID : CVE-2026-25610
Published : Feb. 10, 2026, 6:30 p.m. | 46 minutes ago
Description : An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-25610
Published : Feb. 10, 2026, 6:30 p.m. | 46 minutes ago
Description : An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21355 - DNG SDK | Out-of-bounds Read (CWE-125)
CVE ID : CVE-2026-21355
Published : Feb. 10, 2026, 6:32 p.m. | 45 minutes ago
Description : DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-21355
Published : Feb. 10, 2026, 6:32 p.m. | 45 minutes ago
Description : DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21353 - DNG SDK | Integer Overflow or Wraparound (CWE-190)
CVE ID : CVE-2026-21353
Published : Feb. 10, 2026, 6:32 p.m. | 45 minutes ago
Description : DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-21353
Published : Feb. 10, 2026, 6:32 p.m. | 45 minutes ago
Description : DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21354 - DNG SDK | Integer Overflow or Wraparound (CWE-190)
CVE ID : CVE-2026-21354
Published : Feb. 10, 2026, 6:32 p.m. | 45 minutes ago
Description : DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to cause the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-21354
Published : Feb. 10, 2026, 6:32 p.m. | 45 minutes ago
Description : DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to cause the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21352 - DNG SDK | Out-of-bounds Write (CWE-787)
CVE ID : CVE-2026-21352
Published : Feb. 10, 2026, 6:32 p.m. | 45 minutes ago
Description : DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-21352
Published : Feb. 10, 2026, 6:32 p.m. | 45 minutes ago
Description : DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-25609 - profile command may permit unauthorized configuration
CVE ID : CVE-2026-25609
Published : Feb. 10, 2026, 6:39 p.m. | 38 minutes ago
Description : Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read-only.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-25609
Published : Feb. 10, 2026, 6:39 p.m. | 38 minutes ago
Description : Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read-only.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-1850 - An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification
CVE ID : CVE-2026-1850
Published : Feb. 10, 2026, 6:49 p.m. | 27 minutes ago
Description : Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-1850
Published : Feb. 10, 2026, 6:49 p.m. | 27 minutes ago
Description : Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-1849 - Mongod can run out of stack memory when expressions create deeply nested documents
CVE ID : CVE-2026-1849
Published : Feb. 10, 2026, 6:52 p.m. | 24 minutes ago
Description : MongoDB Server may experience an out-of-memory failure while evaluating expressions that produce deeply nested documents. The issue arises in recursive functions because the server does not periodically check the depth of the expression.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-1849
Published : Feb. 10, 2026, 6:52 p.m. | 24 minutes ago
Description : MongoDB Server may experience an out-of-memory failure while evaluating expressions that produce deeply nested documents. The issue arises in recursive functions because the server does not periodically check the depth of the expression.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-25613 - An unsafe cast in the MongoDB query planner can result in a segmentation fault.
CVE ID : CVE-2026-25613
Published : Feb. 10, 2026, 6:54 p.m. | 22 minutes ago
Description : An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-25613
Published : Feb. 10, 2026, 6:54 p.m. | 22 minutes ago
Description : An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-25506 - MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery
CVE ID : CVE-2026-25506
Published : Feb. 10, 2026, 6:55 p.m. | 21 minutes ago
Description : MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged (the MUNGE authentication daemon) to leak cryptographic key material from process memory. With the leaked key material, the attacker could forge arbitrary MUNGE credentials to impersonate any user (including root) to services that rely on MUNGE for authentication. The vulnerability allows a buffer overflow by sending a crafted message with an oversized address length field, corrupting munged's internal state and enabling extraction of the MAC subkey used for credential verification. This vulnerability is fixed in 0.5.18.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-25506
Published : Feb. 10, 2026, 6:55 p.m. | 21 minutes ago
Description : MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged (the MUNGE authentication daemon) to leak cryptographic key material from process memory. With the leaked key material, the attacker could forge arbitrary MUNGE credentials to impersonate any user (including root) to services that rely on MUNGE for authentication. The vulnerability allows a buffer overflow by sending a crafted message with an oversized address length field, corrupting munged's internal state and enabling extraction of the MAC subkey used for credential verification. This vulnerability is fixed in 0.5.18.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-26009 - Catalyst Affected by Remote Code Execution as Root via Containerized Install Script Execution
CVE ID : CVE-2026-26009
Published : Feb. 10, 2026, 6:58 p.m. | 19 minutes ago
Description : Catalyst is a platform built for enterprise game server hosts, game communities, and billing panel integrations. Install scripts defined in server templates execute directly on the host operating system as root via bash -c, with no sandboxing or containerization. Any user with template.create or template.update permission can define arbitrary shell commands that achieve full root-level remote code execution on every node machine in the cluster. This vulnerability is fixed in commit 11980aaf3f46315b02777f325ba02c56b110165d.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2026-26009
Published : Feb. 10, 2026, 6:58 p.m. | 19 minutes ago
Description : Catalyst is a platform built for enterprise game server hosts, game communities, and billing panel integrations. Install scripts defined in server templates execute directly on the host operating system as root via bash -c, with no sandboxing or containerization. Any user with template.create or template.update permission can define arbitrary shell commands that achieve full root-level remote code execution on every node machine in the cluster. This vulnerability is fixed in commit 11980aaf3f46315b02777f325ba02c56b110165d.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...