VulDB Recent Entries

A vulnerability classified as problematic was found in GitLab Community Edition and Enterprise Edition up to 18.7.4/18.8.4/18.9.0. The affected element is an unknown function. Executing a manipulation can lead to allocation of resources. The identification of this vulnerability is CVE-2026-2845. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in FreeRDP up to 3.22.x. Impacted is the function xf_rail_server_execute_result. Performing a manipulation of the argument execResult results in out-of-bounds read. This vulnerability was named CVE-2026-25942. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in n8n-io n8n up to 1.123.21/2.9.2/2.10.0. This issue affects some unknown processing. Such manipulation leads to code injection. This vulnerability is uniquely identified as CVE-2026-27495. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in n8n-io n8n up to 1.123.21/2.9.2/2.10.0. This vulnerability affects unknown code of the component Environment Variable Handler. This manipulation of the argument NODES_EXCLUDE causes basic cross site scripting. This vulnerability is handled as CVE-2026-27578. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as critical has been found in n8n-io n8n up to 1.123.21/2.9.2/2.10.0. This affects an unknown part of the component Expressions Handler. The manipulation results in code injection. This vulnerability is known as CVE-2026-27577. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

A vulnerability identified as problematic has been detected in n8n-io n8n up to 1.123.21/2.9.2/2.10.0. Affected by this issue is some unknown functionality of the component Environment Variable Handler. The manipulation of the argument N8N_RUNNERS_ENABLED leads to exposure of sensitive system information to an unauthorized control sphere. This vulnerability is traded as CVE-2026-27494. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability categorized as critical has been discovered in n8n-io n8n up to 1.123.7/2.1.x. Affected by this vulnerability is an unknown functionality of the component Environment Variable Handler. Executing a manipulation of the argument NODES_EXCLUDE can lead to code injection. This vulnerability appears as CVE-2026-27498. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability was found in maximmasiutin TinyWeb up to 2.0 on Win32. It has been rated as critical. Affected is an unknown function of the file php-cgi.exe. Performing a manipulation results in os command injection. This vulnerability is reported as CVE-2026-27613. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability was found in n8n-io n8n up to 1.123.21/2.9.2/2.10.0. It has been declared as critical. This impacts an unknown function of the component Environment Variable Handler. Such manipulation of the argument NODES_EXCLUDE leads to code injection. This vulnerability is documented as CVE-2026-27497. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in pgvector 0.6.0/0.7.0/0.8.0/0.8.1. It has been classified as critical. This affects an unknown function. This manipulation causes integer underflow. This vulnerability is registered as CVE-2026-3172. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in Rucio up to 35.8.2/38.5.3/39.3.0 and classified as problematic. The impacted element is an unknown function. The manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2026-25736. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in Rucio up to 35.8.2/38.5.3/39.3.0 and classified as problematic. The affected element is an unknown function. The manipulation leads to cross site scripting. This vulnerability is listed as CVE-2026-25735. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in Rucio up to 35.8.2/38.5.3/39.3.0. Impacted is an unknown function. Executing a manipulation can lead to cross site scripting. This vulnerability is tracked as CVE-2026-25734. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Rucio up to 35.8.2/38.5.3/39.3.0. This issue affects some unknown processing. Performing a manipulation results in cross site scripting. This vulnerability is identified as CVE-2026-25136. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in Rucio up to 35.8.2/38.5.3/39.3.0. This vulnerability affects unknown code. Such manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2026-25733. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in OpenEMR up to 7.x. This affects an unknown part. This manipulation causes cross site scripting. The identification of this vulnerability is CVE-2026-25743. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linksys MR9600 and MX4200. This impacts an unknown function of the component Firewall Rule Handler. Performing a manipulation results in improper access controls. This vulnerability is cataloged as CVE-2026-27850. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability described as problematic has been identified in langchain-ai langgraph-checkpoint up to 3.x. This affects an unknown function. Such manipulation leads to deserialization. This vulnerability is listed as CVE-2026-27794. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in angular angular-cli up to 19.2.20/20.3.16/21.1.4. The impacted element is an unknown function of the component Relative URL Handler. This manipulation causes server-side request forgery. This vulnerability is tracked as CVE-2026-27739. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability labeled as critical has been found in OpenSIPS up to 3.6.3. The affected element is the function jwt_db_authorize of the file modules/auth_jwt/authorize.c of the component JWT Handler. The manipulation results in sql injection. This vulnerability is identified as CVE-2026-25554. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.