CVE-2026-96594 - Gitea repository media API stored XSS
CVE ID :CVE-2026-96594
Published : Oct. 6, 2026, 10:17 p.m. | 1 hour, 32 minutes ago
Description :The Gitea API endpoint `GET /api/v1/repos/{owner}/{repo}/media/{filepath}` wrote files of up to 1 KiB that are stored directly in Git, not in LFS, to the response without the content type and disposition headers Gitea uses for user content. An HTML file committed to a repository was therefore rendered by the browser on the Gitea origin. A user who can push to a repository could run JavaScript in the session of a victim who opens the media URL and act with the victim's permissions.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-96594
Published : Oct. 6, 2026, 10:17 p.m. | 1 hour, 32 minutes ago
Description :The Gitea API endpoint `GET /api/v1/repos/{owner}/{repo}/media/{filepath}` wrote files of up to 1 KiB that are stored directly in Git, not in LFS, to the response without the content type and disposition headers Gitea uses for user content. An HTML file committed to a repository was therefore rendered by the browser on the Gitea origin. A user who can push to a repository could run JavaScript in the session of a victim who opens the media URL and act with the victim's permissions.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-97208 - Gitea push mirror API bypass of DISABLE_NEW_PUSH policy
CVE ID :CVE-2026-97208
Published : Oct. 6, 2026, 10:17 p.m. | 1 hour, 32 minutes ago
Description :The Gitea API endpoint for creating push mirrors (`POST /api/v1/repos/{owner}/{repo}/push_mirrors`) checked only whether mirroring was enabled and not the `[mirror] DISABLE_NEW_PUSH` setting that the web interface enforces. A repository administrator could therefore create new push mirrors on instances where the site administrator had disabled them. A push mirror pushes all refs of the repository to a remote chosen by the caller, on each commit or on a schedule.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-97208
Published : Oct. 6, 2026, 10:17 p.m. | 1 hour, 32 minutes ago
Description :The Gitea API endpoint for creating push mirrors (`POST /api/v1/repos/{owner}/{repo}/push_mirrors`) checked only whether mirroring was enabled and not the `[mirror] DISABLE_NEW_PUSH` setting that the web interface enforces. A repository administrator could therefore create new push mirrors on instances where the site administrator had disabled them. A push mirror pushes all refs of the repository to a remote chosen by the caller, on each commit or on a schedule.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-97626 - Gitea profile feed disclosure bypassing user visibility
CVE ID :CVE-2026-97626
Published : Oct. 6, 2026, 10:17 p.m. | 1 hour, 32 minutes ago
Description :Requesting a user or organization profile page (`GET /{username}`) with an `Accept: application/rss+xml` or `Accept: application/atom+xml` header returned the owner's activity feed without the visibility check that the profile page and the `.rss` and `.atom` routes apply. Anonymous users, restricted users and non-members could confirm the existence of limited or private users and private organizations and read their profile details and public activity, also when `[other] ENABLE_FEED` was disabled. Activity in private repositories was not included.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-97626
Published : Oct. 6, 2026, 10:17 p.m. | 1 hour, 32 minutes ago
Description :Requesting a user or organization profile page (`GET /{username}`) with an `Accept: application/rss+xml` or `Accept: application/atom+xml` header returned the owner's activity feed without the visibility check that the profile page and the `.rss` and `.atom` routes apply. Anonymous users, restricted users and non-members could confirm the existence of limited or private users and private organizations and read their profile details and public activity, also when `[other] ENABLE_FEED` was disabled. Activity in private repositories was not included.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-80048 - Sssd: sssd-kcm: local denial of service via excessive memory preallocation
CVE ID :CVE-2026-80048
Published : Oct. 6, 2026, 11:28 p.m. | 21 minutes ago
Description :A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory exhaustion within the `sssd-kcm` responder, resulting in a Denial of Service (DoS) for affected deployments.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-80048
Published : Oct. 6, 2026, 11:28 p.m. | 21 minutes ago
Description :A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory exhaustion within the `sssd-kcm` responder, resulting in a Denial of Service (DoS) for affected deployments.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-106583 - OpenSSH Username Command Injection Vulnerability
CVE ID :CVE-2026-106583
Published : Oct. 6, 2026, 11:42 p.m. | 7 minutes ago
Description :In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
Severity: 2.5 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-106583
Published : Oct. 6, 2026, 11:42 p.m. | 7 minutes ago
Description :In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
Severity: 2.5 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-105324 - An HTTP header injection vulnerability was found in the ADM
CVE ID :CVE-2026-105324
Published : Oct. 7, 2026, 1:12 a.m. | 59 minutes ago
Description :An HTTP header injection vulnerability in start-page-loader.cgi of ADM allows an unauthenticated remote attacker to read arbitrary files on the host system. By sending a crafted HTTP request with injected headers via the state parameter, the attacker can leverage the underlying web server's X-Sendfile mechanism to retrieve sensitive files without authentication. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RWC1 as well as from ADM 5.0.0 through ADM 5.1.4.RL21.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-105324
Published : Oct. 7, 2026, 1:12 a.m. | 59 minutes ago
Description :An HTTP header injection vulnerability in start-page-loader.cgi of ADM allows an unauthenticated remote attacker to read arbitrary files on the host system. By sending a crafted HTTP request with injected headers via the state parameter, the attacker can leverage the underlying web server's X-Sendfile mechanism to retrieve sensitive files without authentication. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RWC1 as well as from ADM 5.0.0 through ADM 5.1.4.RL21.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-101329 - Langflow OSS is affected by multiple vulnerabilities
CVE ID :CVE-2026-101329
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper access control.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-101329
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper access control.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-101331 - Langflow OSS is affected by multiple vulnerabilities
CVE ID :CVE-2026-101331
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials.
Severity: 7.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-101331
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials.
Severity: 7.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-103360 - Langflow OSS is affected by multiple vulnerabilities
CVE ID :CVE-2026-103360
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-103360
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-104334 - Langflow OSS is affected by multiple vulnerabilities
CVE ID :CVE-2026-104334
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of code generation.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-104334
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of code generation.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-88962 - Langflow OSS is affected by multiple vulnerabilities
CVE ID :CVE-2026-88962
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-88962
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-93443 - Langflow OSS is affected by multiple vulnerabilities
CVE ID :CVE-2026-93443
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-93443
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-93445 - Langflow OSS is affected by multiple vulnerabilities
CVE ID :CVE-2026-93445
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-93445
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-93447 - Langflow OSS is affected by multiple vulnerabilities
CVE ID :CVE-2026-93447
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to submit a malicious serialized cache value. When the value was retrieved, deserialization could have executed attacker-controlled code with the privileges of the service process.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-93447
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to submit a malicious serialized cache value. When the value was retrieved, deserialization could have executed attacker-controlled code with the privileges of the service process.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-93448 - Langflow OSS is affected by multiple vulnerabilities
CVE ID :CVE-2026-93448
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-93448
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-93449 - Langflow OSS is affected by multiple vulnerabilities
CVE ID :CVE-2026-93449
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.
Severity: 8.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-93449
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.
Severity: 8.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-93674 - Langflow OSS is affected by multiple vulnerabilities
CVE ID :CVE-2026-93674
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-93674
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-93675 - Langflow OSS is affected by multiple vulnerabilities
CVE ID :CVE-2026-93675
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected dependency confusion.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-93675
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected dependency confusion.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-93677 - Langflow OSS is affected by multiple vulnerabilities
CVE ID :CVE-2026-93677
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to exposure of sensitive information to an unauthorized actor.
Severity: 7.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-93677
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to exposure of sensitive information to an unauthorized actor.
Severity: 7.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-93678 - Langflow OSS is affected by multiple vulnerabilities
CVE ID :CVE-2026-93678
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization.
Severity: 7.6 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-93678
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization.
Severity: 7.6 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-93679 - Langflow OSS is affected by multiple vulnerabilities
CVE ID :CVE-2026-93679
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption during ZIP file extraction.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-93679
Published : Oct. 7, 2026, 1:16 a.m. | 55 minutes ago
Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption during ZIP file extraction.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...