CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.19)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Discourse prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0. The discourse-local-dates plugin rendered crafted local-date format data as HTML on sites with a modified or disabled default Content Security Policy.
A vulnerability in Python's csv.Sniffer where attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing, consuming significant CPU.
An Open Redirect vulnerability in phoenix_live_view from 0.5.0 before 1.0.19, from 1.1.0-rc.0 before 1.1.33, and from 1.2.0-rc.0 before 1.2.9. An attacker can redirect a victim's browser to an external site via a :to value containing ASCII tab, LF, or CR.
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.
The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through version 3.1.0 does not validate the amount actually paid against the order total in its PayPal Data Transfer return handler, allowing a customer to pay less than the order total and still have the order marked as fully paid when the PayPal Data Transfer feature is enabled.
The Booking for Appointments and Events Calendar WordPress plugin before version 9.7 does not verify that an authenticated employee (provider) is related to the customer whose record is being accessed, allowing any employee with an Employee Panel login to read and modify the stored personal data of any customer by enumerating sequential identifiers.
The LearnPress WordPress plugin before version 4.4.4 does not validate a user-supplied URL before the server fetches it, allowing users with the instructor role to induce the server to issue requests to arbitrary external hosts, a blind and bounded server-side request forgery.
A weakness has been identified in Almico Speedfan 4.52, affecting the function KiSystemCall64 in the library speedfan.sys, within the MSR Index Handler component. Manipulation can lead to a memory leak. The attack requires local access, and the exploit is publicly available.
A vulnerability was identified in Mullvad wireguard.sys 0.10.1, affecting the function AdapterState in the IOCTL Handler component. Manipulation leads to improper update of reference count. Local access is required, and the exploit is publicly available.
A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The nltk.pathsec.validate_network_url() function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (100.64.0.0/10). This occurs because Python's ipaddress module does not classify such addresses as is_private or is_global, and the current guard only checks is_private and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.
A vulnerability in PV-Bhat gemsuite-mcp 1.0.0 affects some unknown functionality in src/handlers/unified-gemini.ts of the gemini_search/gemini_reason/gemini_process/gemini_analyze component. Manipulation of the argument file_path/file_paths results in path traversal. The attack must be initiated from a local position. The project was informed but has not responded.
Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash allows an attacker to forge a relationship to a record they cannot name, and to recover the secret value used to look it up. When manage_relationship is used with on_lookup: :relate on a belongs_to relationship, the client-supplied lookup value is passed to Ash.Query.filter/2 without being cast to the attribute type. A nested map submitted where a scalar is expected is therefore interpreted as a filter predicate rather than a literal, so a lookup for a specific record becomes a query for any record matching a condition. The same path omits Ash.Query.limit(1), leaving Ash.read_one/2 able to distinguish no match from one match from several, which turns comparison predicates into an oracle for the lookup value. Authorization is unaffected; the destination read policy still applies.
A flaw has been found in macrozheng mall 0504e86. This vulnerability affects unknown code in /sso/getAuthCode of the mall-portal module. Executing a manipulation can lead to weak password recovery. The attack may be launched remotely. This attack is characterized by high complexity. It is stated that the exploitability is difficult. The exploit has been published and may be used. The vendor deleted the GitHub issue without explanation and did not respond to email contact.
A vulnerability was found in lossless-cut up to version 3.69.0, leading to server-side request forgery (SSRF) in an unknown functionality of the file src/main/httpServer.ts in the Built-in HTTP API Service component. The attack requires access to the local network and is characterized by high complexity. The exploit has been publicly disclosed.
The Nexter Blocks WordPress plugin before version 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing.
The Slim SEO WordPress plugin before version 4.9.11 does not restrict a post-meta preview feature to posts the user is allowed to edit, verifying only read access, allowing users with the Contributor role to read arbitrary post meta, including protected and private keys, of published posts they do not own, including password-protected posts and posts of non-public post types.
A weakness has been identified in shadcn-vue-mcp up to version e170e277b94235cde627803277fc8c41103a4d38. The issue affects the fs.promises.readFile function in src/server/callback-server.ts, where manipulation of the filepath argument causes path traversal. The attack is restricted to local execution.
A vulnerability in the Zephyr kernel's z_queue_node_peek() in kernel/queue.c reads a node from the data_q list without holding the queue spinlock. A concurrent k_queue_get() can free the node during the operation, leading to use-after-free and a dangling pointer. This affects k_fifo and k_lifo queues used in net_buf, Bluetooth, USB, and networking subsystems.
A vulnerability in HKUDS nanobot up to 0.2.1 affects the ExecTool._prepare_command function in nanobot/agent/tools/shell.py of the Login-shell Environment Handler component. Executing a manipulation can lead to information disclosure. The attack requires local access, and the exploit has been published.
Hono is a web application framework supporting any JavaScript runtime. From 4.7.0 to 4.12.33, the proxy() function in hono/proxy does not remove response headers named by the origin's Connection header. Per RFC 9110, an intermediary must remove these headers before forwarding, but the function only removes standard hop-by-hop headers, potentially leading to disclosure of internal metadata.