CVE Vulnerability Catalog

Temporal Server includes a Worker Controller Instance module (go.temporal.io/auto-scaled-workers) that registers a 'k8s' compute provider which builds its Kubernetes client from the caller's request configuration rather than operator configuration. An authenticated caller with only read access in a single namespace can invoke ValidateWorkerDeploymentVersionComputeConfig, leading to arbitrary command execution on the Worker Service host under the server process account. Since the process holds persistence credentials for all namespaces and cluster TLS material, the impact extends beyond the caller's namespace to the entire cluster.

In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, built with BSD raw socket and IPv6 support, the IPv6 raw send path uses the destination-table entry it adds without checking that the add succeeded. When the destination table is full and an off-link destination is reached through a default router whose neighbour cache entry is unknown, sending on an IPv6 raw socket with header inclusion dereferences a NULL pointer.

In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the NetX Secure DTLS server allocates a session from its fixed session pool for the first datagram from any unrecognised address and port, before the cookie exchange, and never releases a session whose handshake stalls. A remote, unauthenticated attacker can exhaust the pool with one spoofed datagram per source.

In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow. A remote attacker can corrupt stack memory by supplying a crafted DFF audio file with an oversized PROP chunk size that is used unvalidated to allocate a variable-length stack array and read file data into it.

CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. An authenticated attacker can cause a persistent denial of service when connecting for the first time.

CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61. An authenticated attacker can cause a persistent denial of service.

CVE-2026-116766 is an improper input handling vulnerability in Secure Access server versions between 13.0 and prior to 14.61. An attacker can cause a persistent denial of service of the server.

Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges.

cPanel contains improper neutralization of a NUL byte, allowing remote attackers to read calendar and contact data of any mail account.

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Elevation of Privilege.

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering.

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege.

In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed; user interaction is not required.

In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed.

In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed.

In multiple locations, there is memory corruption due to a use-after-free. This could lead to local privilege escalation without additional execution privileges and without user interaction.

In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed.

In handleAudioEffectBroadcast of MusicFxHelper.java, there is a permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed.

In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.