# cve Published articles for cve. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Libreboot 20241206, 11th revision released! (fixes to GRUB regressions) DevFeed: [Libreboot 20241206, 11th revision released! (fixes to GRUB regressions)]() Original publisher: [Read original article]() Author: Leah Rowe Published: 2026-09-17T04:32:50.666044Z Content type: release Language: en Sources: [News about Libreboot releases and development]() Topics: [libreboot](), [releases](), [coreboot](), [systems]() Tags: [bios](), [canoeboot](), [coreboot](), [cve](), [free-software](), [grub](), [libre](), [libreboot](), [open-source](), [opensource](), [regression](), [release](), [uefi]() ### AI overview Libreboot 20241206 revision 11 is announced as a stable-release revision containing fixes for regressions introduced in revision 10, including GRUB and filesystem-driver issues that could prevent very large files from loading or systems from booting. ### Source excerpt Article: Libreboot 20241206, 11th revision released! (fixes to GRUB regressions) Web link: https://libreboot.org/news/libreboot20241206rev11.html ## Keycloak 26.7.4 released DevFeed: [Keycloak 26.7.4 released]() Original publisher: [Read original article]() Author: Keycloak Team Published: 2026-09-16T00:00:00Z Content type: release Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [Security](), [Quarkus](), [MariaDB](), [MySQL](), [saml]() Tags: [cve](), [idm](), [kerberos](), [keycloak](), [keycloak-release](), [ldap](), [mariadb](), [mysql](), [openid-connect](), [quarkus](), [release](), [saml](), [security](), [sso]() ### AI overview Keycloak 26.7.4 was released on September 16, 2026. The release includes security fixes for several CVEs, an upgrade to Quarkus 3.33.3.2, and fixes for performance, testing, documentation, administration, and UI issues. ### Source excerpt To download the release go to Keycloak downloads. Upgrading Before upgrading refer to the migration guide for a complete list of changes. All resolved issues Security fixes #52834 [CVE-2026-90997] Default MySQL/MariaDB row counts make stateless replay gates accept reused artifacts #52835 [CVE-2026-79651] Keycloak Unauthenticated Denial of Service via Unbounded Locale Caching #52836 [CVE-2026-74909] Incomplete fix: percent-encoded semicolon bypasses matrix parameter stripping in PathMatcher #52837 [CVE-2026-19607] Username Takeover Leading to Account Lockout #52838 [CVE-2026-17526] Privilege escalation: the "impersonation" role can impersonate a realm administrator #52839 [CVE-2026-18212] SAML Redirect DEFLATE helpers leak native zlib state Enhancements #52354 Upgrade to Quarkus 3.33.3.2 dist/quarkus Bugs #49635 Performance issue with 26.6.2 dist/quarkus #51102 Flaky test: org.keycloak.testsuite.oauth.AccessTokenTest#accessTokenRequest ci #52015 New links errors for https://quarkus.io/guides docs #52172 Cached `RealmAdapter.isUserManagedAccessAllowed()` returns `isEnabled()` infinispan #52173 `realm_client` is computed into a client's attributes and then persisted on save admin/api #52233 Oracle 19 full client OCI driver crashes on startup since 26.6.0 -- SQLFeatureNotSupportedException on setNetworkTimeout dist/quarkus #52241 Clicking on a sub group in the admin console throws an exception admin/ui #52283 Flaky test SessionRestServiceTest.testGetDevicesSessions testsuite #52430 Flaky test: userprofile.spec.ts fails with timeout on "no-users-found-empty-action" in serial suite testsuite ## Emacs arbitrary code execution flaw DevFeed: [Emacs arbitrary code execution flaw]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-14T15:20:00Z Content type: news Language: en Sources: [LWN.net]() Topics: [Lisp](), [vulnerability](), [Maintainers]() Tags: [cve](), [emacs](), [maintainers](), [release](), [vulnerability]() ### AI overview An incomplete fix for the Emacs arbitrary code execution flaw CVE-2024-53920 has been identified. Viewing or editing untrusted files in modes other than Emacs's Lisp mode can also trigger arbitrary code execution. The issue affects Emacs 24 and newer, with a minimal fix queued for Emacs 31.2; upstream maintainers do not expect to backport it to older releases. ### Source excerpt Sean Whitton has announced that the original fix for an arbitrary code execution flaw in Emacs (CVE-2024-53920) was incomplete. Bas Alberts discovered that viewing or editing untrusted files in modes other than Emacs's Lisp mode can also result in arbitrary code execution. This problem affects all Emacs versions affected by CVE-2024-53920. This means Emacs 24 and newer, and possibly also older versions. A minimal fix, attached, is queued up for release with Emacs 31.2. We (the Emacs upstream maintainers) don't expect to backport the fix to older Emacs releases ourselves. LWN covered the original vulnerability in December 2024. ## Security Week 2638: опасные уязвимости в роутерах MikroTik DevFeed: [Security Week 2638: опасные уязвимости в роутерах MikroTik]() Original publisher: [Read original article]() Author: Kaspersky\_Lab ("Лаборатория Касперского") Published: 2026-09-14T15:06:43Z Content type: news Language: ru Sources: ["Лаборатория Касперского" RU]() Topics: [MikroTik](), [Security](), [CVE-2026-86060](), [ssh]() Tags: [2026](), [chromium](), [cve](), [cve-2026-86060](), [gpt](), [microsoft](), [mikrotik](), [openai](), [security](), [ssh](), [tag-9fe8963de219]() ### AI overview The article reports three vulnerabilities in MikroTik routers, including SSH authentication bypass, privilege escalation, and a denial-of-service issue. Two vulnerabilities were actively exploited, and MikroTik released patches for affected RouterOS versions. The report also describes AI-assisted vulnerability discovery involving OpenAI GPT models and briefly mentions vulnerabilities in WeChat and a large Microsoft patch release involving Chromium. ### Source excerpt На прошлой неделе команда CERT из Польши обнародовала информацию о трех уязвимостях в роутерах MikroTik, две из которых активно используются в реальных атаках как минимум со второго сентября. Взлом роутеров возможен в том случае, если на устройстве разрешен доступ по протоколу SSH из Интернета. По данным на пятое сентября в сети наблюдалось более 122 тысяч потенциально уязвимых устройств. Две наиболее опасные уязвимости имеют одинаковый рейтинг 9,2 балла по шкале CVSS. Проблема CVE-2026-67276 позволяет обойти аутентификацию по SSH в том случае, если атакующему известно имя пользователя и модуль публичного ключа. Ошибка CVE-2026-86060, в свою очередь, открывает возможность эскалации привилегий при использовании имени пользователя, содержащего некорректные символы. Читать далее ## RBP Tracker: Counting the CVE IDs the CVE List Cannot See DevFeed: [RBP Tracker: Counting the CVE IDs the CVE List Cannot See]() Original publisher: [Read original article]() Author: jgamblin Published: 2026-09-14T14:16:42Z Content type: article Language: en Sources: [Jerry Gamblin]() Topics: [data](), [NVD](), [API](), [GitHub]() Tags: [api](), [cve](), [cve-list](), [data](), [ids](), [list](), [nvd](), [report](), [scanner](), [source](), [state](), [uncategorized]() ### AI overview The article examines a corrected RogoLabs tracker for Reserved but Public CVE IDs. It explains that the CVE Services API returns 404 for reserved IDs, while a separate unauthenticated endpoint reveals their RESERVED state. The tracker lists IDs from public advisory feeds and describes how reserved records are absent from the bulk CVE List until publication. ### Source excerpt A new RogoLabs site lists Reserved but Public CVE IDs: 2,315 of them on September 14, drawn from 17 public advisory feeds, refreshed every six hours, and held a week before they appear. The first version of this tracker reported that none of the CVE IDs it found existed in the CVE List, in any ... Read more ## Uptime Kuma 2.5.4 Patches Critical JSONata Code Execution Flaw DevFeed: [Uptime Kuma 2.5.4 Patches Critical JSONata Code Execution Flaw]() Original publisher: [Read original article]() Author: Christian Rakoot Published: 2026-09-14T06:55:25Z Content type: article Language: en Sources: [Self Host Lab]() Topics: [Security](), [vulnerability](), [Monitoring](), [configuration]() Tags: [2026](), [cve](), [dependency](), [monitoring](), [monitoring-news](), [news](), [security](), [update](), [uptime-kuma-2-5-4](), [vulnerability]() ### AI overview Uptime Kuma 2.5.4 fixes a critical JSONata vulnerability that could enable arbitrary code execution on the monitor host, along with a second denial-of-service issue. The release updates jsonata to 2.2.2 and also adds an SFTP monitor type and three notification providers. ### Source excerpt Uptime Kuma 2.5.4 patches a critical-rated code execution flaw in the JSONata library (CVE-2026-77415, CVSS 9.3) plus a second denial-of-service fix, and adds an SFTP monitor type and three new notification providers. Here's what the flaw actually requires to exploit, and how to update. ## \[remote\] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS \< 9.22, 10.0 \< 10.10, 11.0 \< 11.3 - RCE DevFeed: [\[remote\] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS \< 9.22, 10.0 \< 10.10, 11.0 \< 11.3 - RCE]() Original publisher: [Read original article]() Author: DigiProSec Published: 2026-09-11T00:00:00Z Content type: news Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [Exploit](), [PHP]() Tags: [cve](), [cve-2026-80428](), [exploit](), [multiple](), [object](), [php](), [rce](), [remote]() ### AI overview CVE-2026-80428 is an unauthenticated PHP object injection vulnerability via Shibboleth in ILIAS versions earlier than 9.22, 10.10, and 11.3, with remote code execution indicated. ### Source excerpt CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE ## September 2026 Security Updates #1 for XCP-ng 8.3 LTS DevFeed: [September 2026 Security Updates #1 for XCP-ng 8.3 LTS]() Original publisher: [Read original article]() Author: David Morel Published: 2026-09-08T14:07:29Z Content type: article Language: en Sources: [XCP-ng Blog]() Topics: [Security](), [Vulnerabilities](), [DDoS](), [Memory Leaks]() Tags: [2026](), [cve](), [lts](), [maintenance-updates](), [memory-leak](), [release](), [security](), [september-2026](), [updates](), [vulnerabilities]() ### AI overview This article announces September 2026 security updates for XCP-ng 8.3 LTS. The fixes address vulnerabilities in Xen, oxenstored, and Tapdisk, including memory leaks, denial-of-service conditions, and out-of-bounds accesses that could allow code execution with administrator privileges in dom0. One Xen issue does not affect supported XCP-ng 8.3 LTS installations and is deferred for defense in depth. ### Source excerpt New security and maintenance updates are available for XCP-ng 8.3 LTS. This includes update to Xen, oxenstored and blktap. ## How financial services companies can modernize their software supply chain DevFeed: [How financial services companies can modernize their software supply chain]() Original publisher: [Read original article]() Published: 2026-09-04T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [open-source-security](), [Security](), [Vulnerabilities](), [Business Security]() Tags: [cve](), [dependency](), [financial-services](), [legacy](), [security](), [software-supply-chain-security](), [vulnerabilities]() ### AI overview This article argues that financial services organizations should modernize software supply chain security while preserving business-critical systems. It explains that legacy infrastructure, regulatory obligations, and downtime concerns have encouraged deferred vulnerability remediation, but AI-assisted exploitation is making that risk increasingly dangerous. ### Source excerpt Modernize your financial software supply chain without disrupting critical systems. See how trusted open source reduces risk without major migrations. ## \[webapps\] Metabase 0.61.0 - Authenticated Remote Code Execution DevFeed: [\[webapps\] Metabase 0.61.0 - Authenticated Remote Code Execution]() Original publisher: [Read original article]() Author: Gutierre0x80 Published: 2026-09-03T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [Exploit](), [webapps]() Tags: [2026](), [cve](), [cve-2026-59827](), [execution](), [exploit](), [multiple](), [remote](), [remote-code-execution](), [webapps]() ### AI overview An Exploit-DB entry identifies authenticated remote code execution affecting Metabase 0.61.0 and associates it with CVE-2026-59827. ### Source excerpt Metabase 0.61.0 - Authenticated Remote Code Execution ## \[webapps\] FreePBX 17.0.2 - Remote Code Execution (RCE) DevFeed: [\[webapps\] FreePBX 17.0.2 - Remote Code Execution (RCE)]() Original publisher: [Read original article]() Author: Jared Brits Published: 2026-09-03T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [Exploit](), [webapps](), [Code]() Tags: [cve](), [cve-2025-57819](), [exploit](), [multiple](), [platform](), [remote-code-execution](), [webapps]() ### AI overview An exploit entry describing remote code execution affecting FreePBX 17.0.2, associated with CVE-2025-57819. ### Source excerpt FreePBX 17.0.2 - Remote Code Execution (RCE) ## curl 8.22.0 DevFeed: [curl 8.22.0]() Original publisher: [Read original article]() Author: Daniel Stenberg Published: 2026-09-02T05:52:46Z Content type: release Language: en Sources: [Daniel Stenberg]() Topics: [cURL](), [Security](), [HTTP](), [openssl](), [API](), [TLS (Transport Layer Security)](), [Command-line interface]() Tags: [bugfixes](), [command-line](), [curl](), [curl-and-libcurl](), [cve](), [cves](), [http](), [openssl](), [release](), [security](), [tls]() ### AI overview The curl 8.22.0 release includes six changes, 302 bug fixes, and nine curl/libcurl security fixes plus one wcurl fix. It adds Apple GSS Framework support, API guards, experimental HTTP Message Signatures support, and Apple fast UDP, while blocking NTLM fallback in SPNEGO and dropping TLS-SRP support. ### Source excerpt Welcome to this new release. Get it as always from https://curl.se. If you rather want a security-patched older release branch, stay tuned for the follow-up Rock-solid curl announcement within a few days. Release presentation Numbers the 276th release6 changes70 days (total: 10,887)302 bugfixes (total: 14,489)525 commits (total: 39,608)0 new public libcurl function (total: 100)4 new ... Continue reading curl 8.22.0 -> ## \[hardware\] Fullhan FH8626V100 - Multiple Vulnerabilities DevFeed: [\[hardware\] Fullhan FH8626V100 - Multiple Vulnerabilities]() Original publisher: [Read original article]() Author: Amir Aliu Published: 2026-09-02T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [Vulnerabilities](), [Exploit](), [Hardware]() Tags: [cve](), [cve-2026-51407cve-2026-51406cve-2026-51405cve-2026-51404cve-2026-51403cve-2026-51402](), [exploit](), [hardware](), [multiple](), [vulnerabilities]() ### AI overview This exploit record concerns multiple vulnerabilities in the Fullhan FH8626V100 hardware platform. It lists CVE-2026-51407 through CVE-2026-51402. ### Source excerpt Fullhan FH8626V100 - Multiple Vulnerabilities ## \[webapps\] Langflow 1.10.0 - RCE DevFeed: [\[webapps\] Langflow 1.10.0 - RCE]() Original publisher: [Read original article]() Author: Richard Howe Published: 2026-09-02T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [webapps](), [Exploit]() Tags: [2026](), [cve](), [cve-2026-9198](), [exploit](), [multiple](), [platform](), [rce](), [webapps]() ### AI overview An entry describing a remote code execution exploit affecting Langflow 1.10.0, identified as CVE-2026-9198. ### Source excerpt Langflow 1.10.0 - RCE ## \[webapps\] Ghost\_CMS 6.19.0 - Remote Code Execution DevFeed: [\[webapps\] Ghost\_CMS 6.19.0 - Remote Code Execution]() Original publisher: [Read original article]() Author: Maksim Rogov Published: 2026-09-02T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [Exploit](), [webapps]() Tags: [cve](), [cve-2026-29053](), [exploit](), [multiple](), [remote-code-execution](), [webapps]() ### AI overview An Exploit Database entry identifies a remote code execution exploit affecting Ghost_CMS 6.19.0, associated with CVE-2026-29053 and listed for multiple platforms. ### Source excerpt Ghost_CMS 6.19.0 - Remote Code Execution ## Abliterated Models Show Verdict Bias in FreeBSD Kernel Bug Hunting DevFeed: [Abliterated Models Show Verdict Bias in FreeBSD Kernel Bug Hunting]() Original publisher: [Read original article]() Author: clearbluejar Published: 2026-09-01T06:00:00Z Content type: article Language: en Sources: [clearbluejar]() Topics: [freebsd](), [vulnerability](), [bug](), [Kernel](), [gemma4](), [Testing](), [gemma]() Tags: [bug](), [bug-hunting](), [cve](), [false-positives](), [freebsd](), [gemma](), [gemma-4](), [kernel](), [llms](), [testing](), [vulnerability](), [vulnerability-research]() ### AI overview The article examines local abliterated open-weight models during vulnerability scanning of FreeBSD kernel source. Compared with base models of the same family and size, the modified models produced substantially more candidate and VALID findings, including false positives, while the most aggressive build did not surface the real CVE in a 28-file scan. The article describes this tendency as verdict bias: a greater willingness to return positive findings under uncertainty. ### Source excerpt Abliterated models never refuse, which makes them tempting for bug hunting. But on the same kernel source, they graduate three to four times as many findings to VALID, including false positives the base correctly rejects, and across a 28-file scan of FreeBSD's sys/rpc the most aggressive build never surfaced the real CVE at all. ## Wolf CMS 0.8.3.1 RCE Exploit (CVE-2026-67206) DevFeed: [Wolf CMS 0.8.3.1 RCE Exploit (CVE-2026-67206)]() Original publisher: [Read original article]() Author: Balachandar Gowrisankar Published: 2026-09-01T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [Content Management System](), [Exploit]() Tags: [cms](), [cve](), [cve-2026-67206](), [exploit](), [multiple](), [platform](), [rce](), [webapps]() ### AI overview An exploit entry for Wolf CMS 0.8.3.1 describing a remote code execution issue identified as CVE-2026-67206. ### Source excerpt Wolf CMS 0.8.3.1 - RCE v ## \[webapps\] Grav CMS 2.0.7 - RCE DevFeed: [\[webapps\] Grav CMS 2.0.7 - RCE]() Original publisher: [Read original article]() Author: zer0dayf Published: 2026-09-01T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [Content Management System](), [Exploit]() Tags: [2026](), [cms](), [cve](), [cve-2026-65008](), [exploit](), [multiple](), [platform](), [rce](), [webapps]() ### AI overview An Exploit Database entry identifies a remote code execution exploit affecting Grav CMS 2.0.7 and references CVE-2026-65008. ### Source excerpt Grav CMS 2.0.7 - RCE ## \[webapps\] EasyAppointments 1.5.1 - Blind SQL Injection DevFeed: [\[webapps\] EasyAppointments 1.5.1 - Blind SQL Injection]() Original publisher: [Read original article]() Author: Michael Chesang Published: 2026-09-01T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [SQL](), [Exploit]() Tags: [cve](), [cve-2025-50455](), [exploit](), [multiple](), [sql](), [webapps]() ### AI overview An Exploit Database entry describes a blind SQL injection affecting EasyAppointments 1.5.1, identified as CVE-2025-50455. ### Source excerpt EasyAppointments 1.5.1 - Blind SQL Injection ## \[webapps\] miniOrange 5.4.3 - Unauthenticated Auth Bypass DevFeed: [\[webapps\] miniOrange 5.4.3 - Unauthenticated Auth Bypass]() Original publisher: [Read original article]() Author: zer0dayf Published: 2026-09-01T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [Exploit]() Tags: [auth](), [bypass](), [cve](), [cve-2026-15013](), [exploit](), [multiple](), [platform](), [webapps]() ### AI overview The entry identifies an unauthenticated authentication bypass affecting miniOrange 5.4.3, tracked as CVE-2026-15013. It is categorized as a web application exploit for multiple platforms. ### Source excerpt miniOrange 5.4.3 - Unauthenticated Auth Bypass ## \[webapps\] Linksys E1200\_2.0.04 - Unauthenticated OS Command Injection DevFeed: [\[webapps\] Linksys E1200\_2.0.04 - Unauthenticated OS Command Injection]() Original publisher: [Read original article]() Author: jarrett Published: 2026-08-31T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [Exploit](), [Hardware](), [webapps]() Tags: [command](), [cve](), [cve-2025-60689](), [exploit](), [hardware](), [os](), [platform](), [webapps]() ### AI overview This exploit listing identifies an unauthenticated OS command injection affecting Linksys E1200 version 2.0.04 and references CVE-2025-60689. ### Source excerpt Linksys E1200_2.0.04 - Unauthenticated OS Command Injection ## \[webapps\] CubeCart 6.7.4 - Stored XSS DevFeed: [\[webapps\] CubeCart 6.7.4 - Stored XSS]() Original publisher: [Read original article]() Author: Mikail KOCADAĞ Published: 2026-08-31T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [XSS](), [Exploit]() Tags: [cve](), [cve-2026-54645](), [exploit](), [multiple](), [platform](), [stored](), [webapps](), [xss]() ### AI overview An exploit entry for CubeCart 6.7.4 describing a stored cross-site scripting vulnerability identified as CVE-2026-54645. It is categorized as a web applications exploit for multiple platforms. ### Source excerpt CubeCart 6.7.4 - Stored XSS ## \[webapps\] Langflow 1.8.4 - Path Traversal to Remote Code Execution DevFeed: [\[webapps\] Langflow 1.8.4 - Path Traversal to Remote Code Execution]() Original publisher: [Read original article]() Author: cardosource Published: 2026-08-31T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [Exploit]() Tags: [cve](), [cve-2026-5027](), [exploit](), [multiple](), [remote-code-execution](), [webapps]() ### AI overview An exploit record identifies a path traversal vulnerability in Langflow 1.8.4 that can lead to remote code execution. It references CVE-2026-5027. ### Source excerpt Langflow 1.8.4 - Path Traversal to Remote Code Execution ## \[webapps\] C-MOR 6.0104 - Cross-Site Scripting (XSS) DevFeed: [\[webapps\] C-MOR 6.0104 - Cross-Site Scripting (XSS)]() Original publisher: [Read original article]() Author: Samir Shamdin Published: 2026-08-31T00:00:00Z Content type: article Language: en Sources: [Exploit-DB.com RSS Feed]() Topics: [webapps](), [XSS](), [Exploit](), [Hardware]() Tags: [cve](), [cve-2026-51133](), [exploit](), [hardware](), [webapps](), [xss]() ### AI overview A C-MOR 6.0104 entry documenting a Cross-Site Scripting (XSS) exploit identified as CVE-2026-51133. ### Source excerpt C-MOR 6.0104 - Cross-Site Scripting (XSS) [Next page]()