CVE Vulnerability Catalog

In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This leads to local escalation of privilege with no additional execution privileges needed and no user interaction.

Critical vulnerability in Oracle Payments (Oracle E-Business Suite) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can fully compromise the system without any privileges.

Nx Console, the user interface for Nx and Lerna, had a malicious version 18.95.0 available for about 18 minutes in Visual Studio Marketplace and about 36 minutes in OpenVSX. Users should upgrade to version 18.100.0, which is not compromised.

Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP Host request header was not validated before being used to reconstruct request.url. Because the routing algorithm relies on the raw HTTP path while request.url is rebuilt from the Host header, a malformed header could make request.url.path differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on request.url (rather than the raw scope path) could therefore be bypassed.

Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie.

In the Linux kernel, during skb coalescing in skb_try_coalesce(), the SKBFL_SHARED_FRAG marker is not propagated, breaking an invariant for later in-place writers. This can cause ESP processing errors where data is decrypted in place over page-cache backed frags.

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code remotely over a network.

Command Injection vulnerability in UniFi OS devices. Improper input validation allows an attacker with network access to execute arbitrary system commands.

Path Traversal vulnerability in UniFi OS devices. An attacker with network access can read system files and potentially gain access to a user account.

Improper Access Control vulnerability in UniFi OS devices. An attacker with network access can make unauthorized changes to the system.

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents. The attack requires access to the server and prior administrative credentials.

Privilege escalation vulnerability in LiteSpeed User-End cPanel Plugin before version 2.4.5. An attacker can gain root privileges. The vulnerability is being actively exploited in the wild.

SQL Injection vulnerability in Drupal core. Improper neutralization of special elements in SQL commands allows an attacker to execute arbitrary SQL statements.

Microsoft Defender Denial of Service Vulnerability.

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.

A supply chain attack compromised the official installation packages of DAEMON Tools Lite in versions 12.5.0.2421 to 12.5.0.2434, distributed from the legitimate website daemon-tools.cc between April 8, 2026, and May 5, 2026. Attackers gained unauthorized access to the vendor's build or distribution infrastructure and trojanized three binaries.

Microsoft Exchange Server has an improper neutralization of input during web page generation, leading to a cross-site scripting vulnerability. This flaw allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-20182 identifies an issue with the authentication mechanism in Cisco Catalyst SD-WAN Controller, Manager, and Validator that allows an unauthenticated attacker to bypass authentication and gain administrative privileges. An attacker could exploit this vulnerability by sending crafted requests to the system.

CVE-2026-0257 describes authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software, allowing an attacker to bypass security restrictions and establish an unauthorized VPN connection.

W dniu 11 maja 2026 roku opublikowano 84 złośliwe wersje w 42 pakietach @tanstack/* w rejestrze npm. Atakujący wykorzystał trzy znane klasy podatności, aby opublikować złośliwe oprogramowanie kradnące dane uwierzytelniające pod zaufaną tożsamością.