CVE Notifier

CVE-2026-81829 CWE-22 5.3

Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolver

A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed by AWS Application Load Balancers. When the AWS_ALB key provider is configured, the resolver constructs…

cve.org Red · Hat:Exploit · Intelligence 6 hari lalu

CVE-2026-92879 CWE-400 4.3

vgmstream mus_acm.c parse_mus resource consumption

A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parse_mus of the file src/meta/mus_acm.c. The manipulation results in resource consumption. The attack may be launched remotel…

cve.org n/a:vgmstream 6 hari lalu

CVE-2026-81443 CWE-918 6.4

CVE-2026-81443

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, le…

cve.org Dell:OpenManage · Server · Administrator 6 hari lalu

CVE-2026-81442 CWE-269 8.1

CVE-2026-81442

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leadin…

cve.org Dell:OpenManage · Server · Administrator 6 hari lalu

CVE-2026-92963 CWE-227 5.3

vm2 before 3.11.2 Information Disclosure via Internal State

vm2 versions before 3.11.2 fail to properly restrict access to the VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL global variable. Attackers can access this internal state object through globalThis to retrieve sensit…

cve.org patriksimek:vm2 6 hari lalu

CVE-2026-92962 CWE-693 N/A

vm2 before 3.11.4 Defense Invariant Violation via setup-sandbox.js

vm2 is a sandbox for running untrusted JavaScript. In vm2 versions up to and including 3.11.3, the defaultSandboxPrepareStackTrace function in lib/setup-sandbox.js builds its output array using prototype-walking index as…

cve.org patriksimek:vm2 6 hari lalu

CVE-2026-92961 CWE-770 7.5

vm2 before 3.11.6 Memory Exhaustion DoS via bufferAllocLimit Bypass

vm2 before 3.11.6 fails to enforce bufferAllocLimit on ArrayBuffer, SharedArrayBuffer, and TypedArray constructors, allowing attackers to allocate arbitrary host memory. Attackers can bypass the buffer allocation cap by …

cve.org patriksimek:vm2 6 hari lalu

CVE-2026-92960 CWE-200 10.0

vm2 before 3.11.6 Process-wide State Exposure via os and dns

vm2 before 3.11.6 fails to restrict access to os and dns builtins under the builtin: ['*'] configuration, allowing sandbox code to read host process identity and network topology. Attackers can invoke dns.setServers() to…

cve.org patriksimek:vm2 6 hari lalu

CVE-2026-92959 CWE-693 7.1

vm2 before 3.11.8 allowAsync Bypass via Promise Thenable

vm2 before 3.11.8 does not fully enforce the allowAsync: false option in VM and NodeVM. While localPromise.prototype.then is replaced with a handler that throws 'Async not available', the sandbox's Promise static methods…

cve.org patriksimek:vm2 6 hari lalu

CVE-2026-71568 CWE-306 5.3

BMCtest exposes Ironic without authentication and TLS during the test

In BMCtest, Ironic is started without authentication and TLS for the duration of the test. Exploiting the problem requires winning the race with bmctest itself, which reduces the attack window and significantly increases…

cve.org openshift-metal3:bmctest 6 hari lalu

CVE-2026-92958 CWE-269 8.5

vm2 before 3.11.7 Denylist Bypass via fs/promises

vm2 through 3.11.6 contains a builtin-module denylist bypass in NodeVM. When the embedder uses the builtin wildcard together with negative entries (e.g. require: { builtin: ['*', '-fs', '-child_process'] }), negative ent…

cve.org patriksimek:vm2 6 hari lalu

CVE-2026-92957 CWE-269 9.9

vm2 before 3.11.7 Authentication Bypass via node: Prefix

vm2 through 3.11.6 does not normalize `node:`-prefixed builtin specifiers when evaluating user-supplied negative (deny) entries in a NodeVM wildcard require policy. Although NodeVM strips the `node:` prefix during requir…

cve.org patriksimek:vm2 6 hari lalu