CVE Vulnerability Catalog

LiteLLM versions 1.74.2 through 1.83.6 have a vulnerability in the POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list endpoints, which accept a full MCP server configuration including commands to execute. An authenticated user with any API key can run arbitrary commands on the proxy host.

In LiteLLM versions from 1.81.16 to before 1.83.7, a database query used during proxy API key checks is vulnerable to SQL injection due to mixing caller-supplied key value into the query text. An unauthenticated attacker can send a crafted Authorization header to any LLM API route, leading to reading and potentially modifying data in the proxy's database.

An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution.

CVE-2026-0300 describes a buffer overflow vulnerability in the User-ID™ Authentication Portal service of Palo Alto Networks PAN-OS software, allowing an unauthenticated attacker to execute arbitrary code with root privileges on PA-Series and VM-Series firewalls by sending specially crafted packets.

cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

A vulnerability was found in the Linux kernel's AEAD algorithm implementation via the algorithmic interface (algif_aead). It involves incorrect in-place operation, which may cause data processing errors. The patch reverts to out-of-place operation and simplifies the code.

Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

A protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. This could lead to impersonation of trusted entities.

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

An OS command injection vulnerability has been discovered in Fortinet FortiSandbox versions 4.4.0 through 4.4.8. This flaw is due to improper neutralization of special elements used in OS commands.

A Path Traversal vulnerability in Fortinet FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager. An authenticated attacker with admin profile and read-write permissions can exploit it to write or delete arbitrary files via specific CLI commands.

Wersje Acrobat Reader 24.001.30356, 26.001.21367 i wcześniejsze są podatne na lukę związaną z nieprawidłową kontrolą modyfikacji atrybutów prototypu obiektu ('zanieczyszczenie prototypu'). Wykorzystanie tej luki może prowadzić do wykonania dowolnego kodu w kontekście aktualnego użytkownika, co wymaga interakcji użytkownika poprzez otwarcie złośliwego pliku.

A missing encryption of sensitive data vulnerability was found in Apache Tomcat due to the fix for CVE-2026-29146 allowing bypass of the EncryptInterceptor. Affected versions: 11.0.20, 10.1.53, and 9.0.116.

Marimo to reaktywny notatnik Pythona, który przed wersją 0.23.0 miał podatność na zdalne wykonanie kodu (RCE) bez uwierzytelnienia. Punkt końcowy WebSocket /terminal/ws nie weryfikuje uwierzytelnienia, co pozwala nieautoryzowanemu atakującemu uzyskać pełny dostęp do powłoki PTY i wykonywać dowolne polecenia systemowe.

A vulnerability in Apache ActiveMQ allows an authenticated attacker to achieve remote code execution on the broker via the Jolokia JMX-HTTP endpoint. The attack invokes network connector operations with a crafted URI that loads a remote Spring XML context, leading to arbitrary code execution in the broker's JVM.

An improper access control vulnerability in Fortinet FortiClientEMS versions 7.4.5 through 7.4.6 allows an unauthenticated attacker to execute unauthorized code or commands via crafted requests.

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

Klient TrueConf pobiera kod aktualizacji aplikacji i stosuje go bez weryfikacji. Atakujący, który ma możliwość wpływania na ścieżkę dostarczania aktualizacji, może podmienić zmodyfikowany ładunek aktualizacji, co może prowadzić do wykonania dowolnego kodu w kontekście procesu aktualizacji lub użytkownika.

Trivy, skaner bezpieczeństwa, został wykorzystany przez atakującego, który użył skompromitowanych poświadczeń do opublikowania złośliwej wersji Trivy v0.69.4 oraz do zmiany tagów w `aquasecurity/trivy-action` i `aquasecurity/setup-trivy` na złośliwe. Incydent ten jest kontynuacją ataku na łańcuch dostaw, który rozpoczął się pod koniec lutego 2026 roku.