CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.20)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A memory management vulnerability in Secure Access clients and servers prior to version 14.55 allows attackers with intimate knowledge and full control over the tunnel protocol to perform a non-persistent DoS against the server.
A memory management vulnerability in Secure Access servers prior to version 14.55. Attackers with intimate knowledge and full control over the tunnel protocol can cause a non-persistent denial of service (DoS) against the server.
CVE-2026-40958 is an input validation error in Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against their client.
CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cause a small amount of random memory to leak.
CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against their client.
CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to version 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cause a non-persistent denial of service (DoS) against their client.
In File Browser before version 2.63.17, deleting a directory with a trailing slash (e.g., /a/) does not remove the existing public share for that directory (e.g., /a). The bug is caused by improper path normalization in the Bolt database query, leaving a stale share entry. Recreating the same directory re-exposes its content through the old share.
A vulnerability in NGINX Plus with the MQTT filter module (ngx_stream_mqtt_filter_module) enabled allows unauthenticated attackers to send crafted requests causing a heap buffer over-read in the NGINX worker process, leading to a restart.
ImageMagick before versions 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when an invalid tiff:tile-geometry is specified. Supplying malformed tile geometry parameters causes allocated memory not to be released, which can lead to increased memory consumption.
ImageMagick before versions 7.1.2-26 and 6.9.13-51 contains a memory leak in the ICON decoder that occurs when a memory allocation fails. Processing a crafted ICON file that triggers an allocation failure leaks memory, which may lead to a denial of service.
ImageMagick before versions 7.1.2-26 and 6.9.13-51 contains a memory leak in the MIFF encoder that occurs when a memory allocation fails during MIFF image processing, potentially leading to denial of service (DoS).
A vulnerability in ImageMagick before versions 7.1.2-26 and 6.9.13-51 causes a memory leak in the YUV decoder when blob opening fails. Repeated triggering can lead to resource exhaustion (denial of service).
ImageMagick before version 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory allocation fails. Attackers can trigger allocation failures during TIFF image processing to cause memory exhaustion and denial of service.
A vulnerability in ImageMagick before version 7.1.2-26 causes a memory leak in the JNG encoder when a blob cannot be opened. Attackers can trigger resource exhaustion by providing malformed JNG files that fail blob operations.
ImageMagick before versions 7.1.2-26 and 6.9.13-51 contains a memory leak in the Hough line detection operation. When a specific operation fails, a small memory leak occurs.
ImageMagick before versions 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation to the log colorspace. When the operation fails, a small amount of memory is not released.
In ImageMagick before version 7.1.2-26 (and 6.x before 6.9.13-51) there is a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak.
In ImageMagick before versions 7.1.2-26 and 6.9.13-51, there is an information disclosure vulnerability. When a profile is displayed with the identify command and the profile value is not printable, a single byte past the profile boundary can be read. This behavior occurs when debug output is enabled.
ImageMagick before versions 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when freetype initialization fails. The method does not exit and continues to use already freed memory, which can lead to a denial of service.
A vulnerability in ImageMagick before versions 7.1.2-26 and 6.9.13-51 allows bypassing security policy in the -script operation. Missing security policy checks enable reading files from paths that are otherwise disallowed.