CVE Vulnerability Catalog

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by IMAP command injection. A remote authenticated attacker can exploit CRLF sequences injected into the _uid parameter of the mail/headers and mail/viewsource actions to execute arbitrary IMAP commands.

In Apache Airflow Amazon provider, the AWS auth manager's SAML login flow does not bind the authentication response to the browser that began it. The login handler discards the AuthnRequest ID and the callback validates the assertion without requiring a matching InResponseTo, allowing an unauthenticated attacker to silently log a victim into the attacker's Airflow account.

Certain ASUS router models contain a buffer copy without checking input size. An adjacent authenticated user can corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length.

Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy did not remove the Connection header, other hop-by-hop headers, or headers nominated by Connection, despite RFC 9110 requirements. A client could nominate a header added by the application in upstream_request_filter (e.g., X-Forwarded-For), which would then be stripped by an HTTP/1 intermediary before reaching the origin.

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges by replacing a DLL that is later loaded by a high-privilege process.

An authorization issue was addressed with improved network restrictions. The issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages.

A race condition was addressed with additional validation. The flaw affects iOS 27, iPadOS 27 and macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.

This issue was addressed by enforcing library validation on the affected binaries. The flaw affects Xcode 27. A malicious app may be able to break out of its sandbox.

A vulnerability in Xcode 27 allowed an app to break out of its sandbox due to missing library validation on affected binaries. The issue was fixed by enforcing library validation.

A type confusion issue in Safari 27, iOS/iPadOS 27, macOS Golden Gate 27 and visionOS 27 may lead to arbitrary code execution when processing maliciously crafted web content. It was fixed with improved state management.

A stack overflow in iOS/iPadOS 26.7 and 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7 and visionOS 27 allowed an attacker with a paired Bluetooth device to execute arbitrary code. It was fixed with improved input validation.

A logic issue in macOS was addressed with improved checks. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8 and macOS Tahoe 26.7. Opening a file referencing a network share may lead to unexpected software execution.

Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-asserted user_id HTTP header. Attackers can set user_id to another tenant's ID, even with LETTA_SERVER_SECURE enabled, to read and modify that user's agents, memory and configuration.

Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, update_meta, batch_delete, canvas, test_run and nodeDebug routes to read, run, overwrite or delete workflows.

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subprocess') to run commands, stealing environment variables, model API keys, and accessing MySQL, MinIO, Redis and etcd.

Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool. Attackers can send crafted chat input to POST /dify/get_answer or upload documents with malicious text to run host commands, exposing datasource credentials and model API keys.

A vulnerability in macOS Golden Gate 27 related to app bundle integrity checks. A maliciously modified app may not be prevented from launching.

A vulnerability in macOS Sequoia 15.8 and macOS Tahoe 26.7 due to improper checks. An app may be able to elevate privileges.

JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system commands via an unsandboxed execute tool in Copilot standard mode. Attackers can self-register, select standard mode in the WebSocket chat.start extension, and have the agent invoke subprocess.run with shell=True on the host to access other tenants' data and server secrets.

LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCode lack an allow-list and human-in-the-loop approval, attackers can run code in the workspace sandbox and exfiltrate vault secrets from _internal/.vault_secrets.json.