CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In systeminformation prior to 5.33.16, services() in lib/processes.js inserts a caller-supplied service name into a PowerShell Get-CimInstance filter after sanitizeShellString(). On Windows the sanitizer removes ASCII quotes but permits Unicode quotation marks PowerShell accepts as delimiters, allowing crafted input to terminate the filter and inject a PowerShell expression executed by util.powerShell() with the Node.js process account's permissions.
Mem0, persistent memory infrastructure for AI agents, prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6 joins caller-controlled user_id, agent_id and run_id values using unescaped & and = delimiters, allowing another scope component to be embedded in an identifier so distinct tenant tuples produce the same session_scope key. Memory.add(), AsyncMemory.add() and REST POST /memories use that key to read and save raw messages, enabling cross-tenant conversation disclosure and eviction or interleaving of another tenant's history.
In TOTOLINK A950RG version 4.1.2cu.5268_B20221104, the apmib_set function in firewall.so is vulnerable to command injection. The vulnerability can be exploited remotely, and a public exploit is available.
In TOTOLINK A950RG version 4.1.2cu.5268_B20221104, the getDeviceInfo function in /var/lib/misc/udhcpd.leases is vulnerable to command injection via manipulation of the MAC address argument. The attack can be launched remotely, and the exploit is publicly available.
In TOTOLINK A950RG version 4.1.2cu.5268_B20221104, the setCloudUpgradeFW function in lib/cste_modules/upgrade.so is vulnerable to command injection via manipulation of the FileName argument. The attack can be initiated remotely, and the exploit has been publicly disclosed.
In ExLlamaV2 up to 0.3.2, the function QMatrix::make_sequential in exllamav2/exllamav2_ext/cuda/q_matrix.cu (GPTQ Index Handler component) can cause an out-of-bounds write when the g_idx argument is manipulated. The attack requires local access. The project was informed but has not responded.
A logic issue in Safari and Apple systems was addressed with improved checks. The issue affects Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, and macOS Golden Gate 27.2. A website may be able to use a media format that should be restricted in Lockdown Mode.
An out-of-bounds write issue was addressed with improved bounds checking. The issue affects iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.
A type confusion issue in Safari and Apple operating systems was addressed with improved state management. Processing maliciously crafted web content may lead to memory corruption.
A permissions issue in macOS was addressed with additional restrictions. An app may be able to modify protected parts of the file system.
This issue in macOS Golden Gate 27.2 was addressed with improved access restrictions. Unpacking a maliciously crafted archive may lead to unexpected app termination or arbitrary code execution.
An out-of-bounds write issue in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination or corrupt kernel memory.
An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination.
An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination or read kernel memory.
An out-of-bounds write issue was addressed with improved bounds checking. The issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination or read kernel memory.
An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination or read kernel memory.
An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination.
An out-of-bounds write issue was addressed with improved bounds checking. The issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS