VulDB Recent Entries

A vulnerability was found in MervinPraison PraisonAI up to 4.6.77. It has been declared as critical. This issue affects some unknown processing of the component Prompt Injection Defense. The manipulation results in injection. This vulnerability is reported as CVE-2026-60086. The attack can be launched remotely. No exploit exists.

A vulnerability was found in Dell Unisphere for PowerMax up to 10.3.0. It has been classified as very critical. This vulnerability affects unknown code of the component Deserialization. The manipulation leads to deserialization. This vulnerability is documented as CVE-2026-54469. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in JetBrains YouTrack up to 2026.2.17011 and classified as problematic. This affects an unknown part of the component Mermaid. Executing a manipulation can lead to injection. This vulnerability is registered as CVE-2026-59791. It is possible to launch the attack remotely. No exploit is available.

A vulnerability has been found in n8n and classified as problematic. Affected by this issue is some unknown functionality of the component Form Node. Performing a manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2026-56354. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in JetBrains IntelliJ IDEA. Affected by this vulnerability is an unknown functionality of the component ID Handler. Such manipulation leads to path traversal. This vulnerability is listed as CVE-2026-59792. The attack must be carried out locally. There is no available exploit.

A vulnerability, which was classified as critical, has been found in n8n. Affected is an unknown function of the component Data-Table File Upload Endpoint. This manipulation causes unrestricted upload. This vulnerability is tracked as CVE-2026-58661. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability classified as critical was found in Vikunja up to 2.2.0. This impacts an unknown function of the component ReadAll Endpoint. The manipulation results in improper authorization. This vulnerability is identified as CVE-2026-56765. The attack can be executed remotely. There is not any exploit available.

A vulnerability classified as critical has been found in ImageMagick up to 7.1.1.x. This affects an unknown function of the component PDB Decoder. The manipulation leads to use after free. This vulnerability is referenced as CVE-2026-56373. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability described as critical has been identified in Capgo up to 12.128.1. The impacted element is an unknown function of the component Configuration. Executing a manipulation can lead to authorization bypass. The identification of this vulnerability is CVE-2026-56335. The attack may be launched remotely. There is no exploit available.

A vulnerability marked as problematic has been reported in ImageMagick up to 7.1.2-17. The affected element is an unknown function of the component META Reader. Performing a manipulation results in memory leak. This vulnerability was named CVE-2026-56366. The attack may be initiated remotely. There is no available exploit.

A vulnerability labeled as problematic has been found in phpMyFAQ up to 4.1.4. Impacted is an unknown function of the file /api/v3 of the component FAQ API Endpoint. Such manipulation leads to improper authentication. This vulnerability is uniquely identified as CVE-2026-57994. The attack can be launched remotely. No exploit exists.

A vulnerability identified as problematic has been detected in phpMyFAQ up to 4.1.4. This issue affects the function concatenatePaths of the file src/phpMyFAQ/Export/Pdf/Wrapper.php of the component PDF Generation. This manipulation of the argument path causes path traversal. This vulnerability is handled as CVE-2026-57961. The attack can be initiated remotely. There is not any exploit available.

A vulnerability categorized as critical has been discovered in Capgo up to 12.128.1. This vulnerability affects unknown code of the component Parsing. The manipulation results in improper access controls. This vulnerability is known as CVE-2026-56329. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in Crawl4AI up to 0.8.6. It has been rated as problematic. This affects an unknown part of the file /crawl/job of the component Docker API. The manipulation leads to server-side request forgery. This vulnerability is traded as CVE-2026-56261. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in capgo capacitor-updater up to 12.128.1. It has been declared as critical. Affected by this issue is some unknown functionality of the component End-to-End Encryption Scheme. Executing a manipulation can lead to channel accessible by non-endpoint. This vulnerability appears as CVE-2026-56254. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in Capgo up to 12.128.1. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the file /files/upload/attachments of the component Upload Endpoint. Performing a manipulation results in unrestricted upload. This vulnerability is reported as CVE-2026-56309. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in Lucee up to 7.0.0.395 and classified as problematic. Affected is an unknown function of the component URL Path Parser. Such manipulation leads to cross site scripting. This vulnerability is documented as CVE-2026-29519. The attack can be executed remotely. There is not any exploit available.

A vulnerability has been found in Capgo and classified as critical. This impacts an unknown function of the component Password Change Endpoint. This manipulation causes improper authentication. This vulnerability is registered as CVE-2026-56305. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability, which was classified as problematic, was found in ST Engineering iDirect Evolution iQ-Series terminals, 3315-Series and 9-Series Terminals up to 4.5.2.1. This affects an unknown function of the file /api/identity of the component REST API Endpoint. The manipulation results in information disclosure. This vulnerability is cataloged as CVE-2026-38059. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Capgo up to 12.128.1. The impacted element is an unknown function of the component Accept Invitation Endpoint. The manipulation leads to information disclosure. This vulnerability is listed as CVE-2026-56312. The attack may be initiated remotely. There is no available exploit.