VulDB Recent Entries

A vulnerability has been found in Red Hat Enterprise Linux and classified as critical. This impacts the function soup_filter_input_stream_read_until of the component libsoup. This manipulation causes integer underflow. The identification of this vulnerability is CVE-2026-66337. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as very critical, was found in Red Hat Enterprise Linux. This affects an unknown function of the component Chunked Transfer Encoding Parser. The manipulation results in encoding error. This vulnerability was named CVE-2026-66338. The attack may be performed from remote. There is no available exploit.

A vulnerability, which was classified as critical, has been found in Weintek cMT3092X and EasyWeb. The impacted element is an unknown function. The manipulation leads to improper privilege management. This vulnerability is uniquely identified as CVE-2026-61892. The attack is possible to be carried out remotely. No exploit exists. To fix this issue, it is recommended to deploy a patch.

A vulnerability classified as problematic was found in Weintek cMT3092X and EasyWeb. The affected element is an unknown function. Executing a manipulation can lead to missing encryption of sensitive data. This vulnerability is handled as CVE-2026-61886. The attack can be executed remotely. There is not any exploit available. A patch should be applied to remediate this issue.

A vulnerability classified as problematic has been found in Weintek cMT3092X and EasyWeb. Impacted is an unknown function. Performing a manipulation results in improper validation of integrity check value. This vulnerability is known as CVE-2026-60135. Remote exploitation of the attack is possible. No exploit is available. It is suggested to install a patch to address this issue.

A vulnerability described as problematic has been identified in Weintek cMT3092X and EasyWeb. This issue affects some unknown processing. Such manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-60134. The attack may be launched remotely. There is no exploit available. Applying a patch is advised to resolve this issue.

A vulnerability marked as problematic has been reported in Tycon Systems TPDIN-Monitor-WEB2 2.3.9. This vulnerability affects unknown code of the component Web Management Interface. This manipulation causes missing encryption of sensitive data. This vulnerability appears as CVE-2026-55985. The attack may be initiated remotely. There is no available exploit.

A vulnerability labeled as critical has been found in Imagination Graphics DDK up to 1.18 RTM2/23.2 RTM2/24.2 RTM2/25.3 RTM/26.1 RTM1. This affects an unknown part. The manipulation results in integer overflow. This vulnerability is reported as CVE-2026-16280. The attack requires a local approach. No exploit exists. The affected component should be upgraded.

A vulnerability identified as very critical has been detected in Tycon Systems TPDIN-Monitor-WEB2. Affected by this issue is some unknown functionality of the component Login Endpoint. The manipulation leads to improper authentication. This vulnerability is documented as CVE-2026-61884. The attack can be initiated remotely. There is not any exploit available.

A vulnerability categorized as problematic has been discovered in NLTK up to 3.9.2. Affected by this vulnerability is the function eval of the file collocations.py of the component collocations. Executing a manipulation can lead to os command injection. This vulnerability is registered as CVE-2025-71408. The attack needs to be launched locally. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in FFmpeg up to 8.1.2. It has been rated as critical. Affected is the function av_image_copy_plane of the component vf_quirc filter. Performing a manipulation results in out-of-bounds write. This vulnerability is cataloged as CVE-2026-66041. It is possible to initiate the attack remotely. There is no exploit available. To fix this issue, it is recommended to deploy a patch.

A vulnerability was found in FFmpeg up to 8.1.2. It has been declared as critical. This impacts the function mace_decode_frame of the component MACE6 Audio Decoder. Such manipulation of the argument bytes_per_packet leads to integer overflow. This vulnerability is listed as CVE-2026-66039. The attack may be performed from remote. There is no available exploit. A patch should be applied to remediate this issue.

A vulnerability was found in FFmpeg up to 8.1.2. It has been classified as problematic. This affects the function zlib_decomp of the file lcldec.c of the component LCL/ZLIB Video Decoder. This manipulation causes information disclosure. This vulnerability is tracked as CVE-2026-66038. The attack is possible to be carried out remotely. No exploit exists. It is suggested to install a patch to address this issue.

A vulnerability was found in FFmpeg up to 8.1.2 and classified as critical. The impacted element is the function png_write_chunk of the component PNG/APNG encoders. The manipulation results in out-of-bounds write. This vulnerability is identified as CVE-2026-66040. The attack can be executed remotely. There is not any exploit available. Applying a patch is advised to resolve this issue.

A vulnerability has been found in Microsoft Azure Portal and classified as problematic. The affected element is an unknown function. The manipulation leads to improper authorization. This vulnerability is referenced as CVE-2026-62835. Remote exploitation of the attack is possible. No exploit is available. This product is a managed service, therefore users are not responsible for maintaining vulnerability countermeasures.

A vulnerability, which was classified as problematic, was found in Milkdown up to 7.21.2. Impacted is the function parseDOM.getAttrs of the component plugin-emoji. Executing a manipulation can lead to cross site scripting. The identification of this vulnerability is CVE-2026-57531. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Milkdown up to 7.21.2. This issue affects the function DOMPurify.sanitize of the file edit-view.ts of the component Link-Tooltip Preview Component. Performing a manipulation results in cross site scripting. This vulnerability was named CVE-2026-57530. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in FFmpeg up to 8.1.2. This vulnerability affects the function vf_hqdn3d.config_input/denoise_spatial of the component vf_hqdn3d filter. Such manipulation leads to heap-based buffer overflow. This vulnerability is uniquely identified as CVE-2026-66036. The attack can be launched remotely. No exploit exists. It is advisable to implement a patch to correct this issue.

A vulnerability classified as problematic has been found in FFmpeg up to 8.1.1. This affects the function mix_presentation_obu of the file libavformat/iamf_parse.c of the component IAMF demuxer. This manipulation of the argument count_label causes resource consumption. This vulnerability is handled as CVE-2026-66037. The attack can be initiated remotely. There is not any exploit available. To fix this issue, it is recommended to deploy a patch.

A vulnerability described as critical has been identified in kerberosmansour hulumi up to 1.3.x. Affected by this issue is some unknown functionality. The manipulation results in algorithm downgrade. This vulnerability is known as CVE-2026-48037. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.