π¨ CVE-2026-61387
In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a `CreateMonitoredItems` event filter can trigger a `StackOverflowError` during decoding, allowing an unauthenticated remote client to exhaust a finite global monitored-item quota and prevent all clients from creating new monitored items until restart. Existing monitored items and other server functions remain unaffected.
π@cveNotify
In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a `CreateMonitoredItems` event filter can trigger a `StackOverflowError` during decoding, allowing an unauthenticated remote client to exhaust a finite global monitored-item quota and prevent all clients from creating new monitored items until restart. Existing monitored items and other server functions remain unaffected.
π@cveNotify
GitHub
Bound recursive ExtensionObject decoding (#1806) Β· eclipse-milo/milo@587e356
Share recursion accounting across nested ExtensionObject bodies so eager
decoding cannot reset the configured limit.
decoding cannot reset the configured limit.
π¨ CVE-2026-62927
In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authorization, allowing an anonymous or otherwise low-privileged client to execute a denied method by batching it with an allowed method.
π@cveNotify
In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authorization, allowing an anonymous or otherwise low-privileged client to execute a denied method by batching it with an allowed method.
π@cveNotify
GitHub
Restrict Call dispatch to authorized methods (#1802) Β· eclipse-milo/milo@59b50be
Mixed authorization batches must never pass denied methods to address-space
handlers. Dispatch only the allowed group and cover denial propagation,
response ordering, and side-effect isolation.
handlers. Dispatch only the allowed group and cover denial propagation,
response ordering, and side-effect isolation.
π¨ CVE-2026-63248
In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization. An anonymous client can enable diagnostics over a None/None endpoint without a certificate; with a trusted client application certificate over SignAndEncrypt, it can read security diagnostics for other active sessions, exposing usernames, login history, authentication mechanisms, security modes and policies, and public client certificates.
π@cveNotify
In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization. An anonymous client can enable diagnostics over a None/None endpoint without a certificate; with a trusted client application certificate over SignAndEncrypt, it can read security diagnostics for other active sessions, exposing usernames, login history, authentication mechanisms, security modes and policies, and public client certificates.
π@cveNotify
GitHub
Restrict session security diagnostics access (#1803) Β· eclipse-milo/milo@a5dae1b
Enforce standard role permissions for security diagnostics and the
diagnostics enabled flag, and propagate role and channel restrictions
to dynamically created security nodes. Keep ordinary session...
diagnostics enabled flag, and propagate role and channel restrictions
to dynamically created security nodes. Keep ordinary session...
π¨ CVE-2026-63252
In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel disconnects, allowing a remote unauthenticated client to exhaust pooled direct memory by repeatedly sending incomplete chunks and disconnecting, potentially terminating the server.
π@cveNotify
In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel disconnects, allowing a remote unauthenticated client to exhaust pooled direct memory by repeatedly sending incomplete chunks and disconnecting, potentially terminating the server.
π@cveNotify
GitHub
Release pending UASC chunks on teardown (#1800) Β· eclipse-milo/milo@4597157
Retained partial chunks could outlive disconnected channels and keep pooled
direct memory unavailable for reuse. Centralize lifecycle cleanup and make
ChunkDecoder ownership transfer exception-safe...
direct memory unavailable for reuse. Centralize lifecycle cleanup and make
ChunkDecoder ownership transfer exception-safe...
π¨ CVE-2026-17070
Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects Liman MYS: from 2.2.3 before 2.3.1.
π@cveNotify
Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects Liman MYS: from 2.2.3 before 2.3.1.
π@cveNotify
siberguvenlik.gov.tr
T.C. Siber GΓΌvenlik BaΕkanlΔ±ΔΔ±
TΓΌrkiye Cumhuriyeti CumhurbaΕkanlΔ±ΔΔ± Siber GΓΌvenlik BaΕkanlΔ±ΔΔ± resmi web sitesi.
π¨ CVE-2026-70367
A Server-Side Request Forgery (SSRF) bypass vulnerability exists in βstunnelβ 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses (e.g., β::ffff:127.0.0.1β) or unspecified addresses ("0.0.0.0", "::"), enabling access to loopback-only services on the "stunnel" host that should not be network-reachable.
π@cveNotify
A Server-Side Request Forgery (SSRF) bypass vulnerability exists in βstunnelβ 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses (e.g., β::ffff:127.0.0.1β) or unspecified addresses ("0.0.0.0", "::"), enabling access to loopback-only services on the "stunnel" host that should not be network-reachable.
π@cveNotify
Redhat
CVE-2026-70367 - Red Hat Customer Portal
CVE Details App
π¨ CVE-2026-18770
A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code of the component Python Validation Handler. The manipulation leads to code injection. Remote exploitation of the attack is possible. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.
π@cveNotify
A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code of the component Python Validation Handler. The manipulation leads to code injection. Remote exploitation of the attack is possible. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.
π@cveNotify
asciinema.org
VibeSurf Unauthenticated Remote Code Execution
VibeSurf(https://github.com/vibesurf-ai/VibeSurf) is vulnerable to an unauthenticated remote code execution vulnerability that allows an attacker to execute arbitrary python code.
π¨ CVE-2026-67195
Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer backend, which passes client-supplied input directly to Python's eval() with only __builtins__={} cleared. Attackers can exploit Python object attribute traversal through the interpreter's loaded class list to reach subprocess.Popen via a TableValidateExprReq or TableMakeViewReq protobuf message, achieving arbitrary command execution in the Perspective host process.
π@cveNotify
Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer backend, which passes client-supplied input directly to Python's eval() with only __builtins__={} cleared. Attackers can exploit Python object attribute traversal through the interpreter's loaded class list to reach subprocess.Popen via a TableValidateExprReq or TableMakeViewReq protobuf message, achieving arbitrary command execution in the Perspective host process.
π@cveNotify
Christbowel
From One Row of Data to a Root Shell: Five CVEs in Perspective 5.0.0 | Security Research
Offensive Security Researcher β CVE author & bug hunter.
π¨ CVE-2026-67618
marimo before 0.23.15 contains a configuration injection vulnerability that allows notebook authors to exfiltrate operator API keys by embedding a malicious base_url in PEP-723 inline script metadata, which is merged into session configuration with higher precedence than the operator's own settings due to insufficient sanitization in sanitize_pyproject_dict. When an operator opens the crafted notebook and makes an AI request, marimo resolves the attacker-controlled base_url from the notebook config while falling back to the operator's OPENAI_API_KEY environment variable for authentication, transmitting the API key to the attacker-controlled endpoint without requiring any cell execution.
π@cveNotify
marimo before 0.23.15 contains a configuration injection vulnerability that allows notebook authors to exfiltrate operator API keys by embedding a malicious base_url in PEP-723 inline script metadata, which is merged into session configuration with higher precedence than the operator's own settings due to insufficient sanitization in sanitize_pyproject_dict. When an operator opens the crafted notebook and makes an AI request, marimo resolves the attacker-controlled base_url from the notebook config while falling back to the operator's OPENAI_API_KEY environment variable for authentication, transmitting the API key to the attacker-controlled endpoint without requiring any cell execution.
π@cveNotify
GitHub
fix: additional pep 723 sanitization (#10281) Β· marimo-team/marimo@1a21bd7
## Summary
Hardening of pep 723 config options
---------
Co-authored-by: Grg0rry <80577604+Grg0rry@users.noreply.github.com>
Hardening of pep 723 config options
---------
Co-authored-by: Grg0rry <80577604+Grg0rry@users.noreply.github.com>
π¨ CVE-2026-69251
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrary TypeORM DataSource options through the additionalConfig input in packages/components/nodes/recordmanager/MySQLRecordManager/MySQLrecordManager.ts, packages/components/nodes/recordmanager/PostgresRecordManager/PostgresRecordManager.ts, packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts, packages/components/nodes/memory/AgentMemory/MySQLAgentMemory/MySQLAgentMemory.ts, and packages/components/nodes/memory/AgentMemory/AgentMemory.ts. TypeORM DataSource options such as entities, subscribers, and migrations can load local JavaScript files, allowing an authenticated user to execute arbitrary code on the server by uploading a JavaScript payload and referencing it from additionalConfig.entities. This issue is fixed in version 3.1.3.
π@cveNotify
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrary TypeORM DataSource options through the additionalConfig input in packages/components/nodes/recordmanager/MySQLRecordManager/MySQLrecordManager.ts, packages/components/nodes/recordmanager/PostgresRecordManager/PostgresRecordManager.ts, packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts, packages/components/nodes/memory/AgentMemory/MySQLAgentMemory/MySQLAgentMemory.ts, and packages/components/nodes/memory/AgentMemory/AgentMemory.ts. TypeORM DataSource options such as entities, subscribers, and migrations can load local JavaScript files, allowing an authenticated user to execute arbitrary code on the server by uploading a JavaScript payload and referencing it from additionalConfig.entities. This issue is fixed in version 3.1.3.
π@cveNotify
GitHub
Flowise RCE via TypeORM DataSource
=============================================================================
Security Advisory
...
Security Advisory
...
π¨ CVE-2026-10032
The openUrl function in @a2ui/web_core passes an agent-controlled URL directly to window.open() without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitrary JavaScript executes in the victim application's browser origin, constituting a stored/reflected XSS with Critical severity. No non-default configuration is required; the Basic Catalog is enabled by default.
π@cveNotify
The openUrl function in @a2ui/web_core passes an agent-controlled URL directly to window.open() without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitrary JavaScript executes in the victim application's browser origin, constituting a stored/reflected XSS with Critical severity. No non-default configuration is required; the Basic Catalog is enabled by default.
π@cveNotify
GitHub
`openUrl` permits `javascript:` URI execution via agent-supplied button actions
## `openUrl` permits `javascript:` URI execution via agent-supplied button actions
### Summary
The `openUrl` function in `@a2ui/web_core` passes an agent-controlled URL directly to `window.op...
### Summary
The `openUrl` function in `@a2ui/web_core` passes an agent-controlled URL directly to `window.op...
π¨ CVE-2026-18773
A vulnerability was detected in NousResearch hermes-agent up to 2026.6.5. Affected by this issue is the function _check_slash_access of the file gateway/run.py of the component Quick Command Handler. The manipulation results in incorrect authorization. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
π@cveNotify
A vulnerability was detected in NousResearch hermes-agent up to 2026.6.5. Affected by this issue is the function _check_slash_access of the file gateway/run.py of the component Quick Command Handler. The manipulation results in incorrect authorization. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
π@cveNotify
Gist
hermes-agent: Hermes gateway quick commands bypass admin-only slash command restrictions
hermes-agent: Hermes gateway quick commands bypass admin-only slash command restrictions - hermes-agent-Hermes-gateway-quick-commands-bypass-admin-only-slash-command-restrictions.md
π¨ CVE-2026-21366
Memory corruption while processing a packet with a size close to the maximum allowed value.
π@cveNotify
Memory corruption while processing a packet with a size close to the maximum allowed value.
π@cveNotify
π¨ CVE-2026-24076
Memory Corruption when processing registry values with incorrect types using a direct query method.
π@cveNotify
Memory Corruption when processing registry values with incorrect types using a direct query method.
π@cveNotify
π¨ CVE-2026-24077
Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.
π@cveNotify
Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.
π@cveNotify
π¨ CVE-2026-24078
Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.
π@cveNotify
Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.
π@cveNotify
π¨ CVE-2026-24079
Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.
π@cveNotify
Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.
π@cveNotify
π¨ CVE-2026-24080
Memory Corruption when handling malformed request parameters in the fingerprint TA.
π@cveNotify
Memory Corruption when handling malformed request parameters in the fingerprint TA.
π@cveNotify
π¨ CVE-2026-24083
Memory Corruption while processing IOCTL device driver requests with invalid arguments.
π@cveNotify
Memory Corruption while processing IOCTL device driver requests with invalid arguments.
π@cveNotify
π¨ CVE-2026-24084
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.
π@cveNotify
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.
π@cveNotify
π¨ CVE-2026-25288
Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.
π@cveNotify
Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.
π@cveNotify