CVE Notifier

CVE-2026-10841 CWE-444 4.2

Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.

IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smuggling.

cve.org IBM:CICS · TX · Advanced 1 hari lalu

CVE-2026-88259 CWE-306 7.5

CareCam CM2507 Missing Authentication for Critical Function

CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to the affected device could retrieve live camera video.

cve.org CareCam:HMT.CM2507 · Firmware 1 hari lalu

CVE-2026-84450 CWE-617 4.3

libheif: `clap` + oversized `ispe` aborts on an assert in `Fraction::Fraction` (incomplete fix for CVE-2026-62289)

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, a crafted image item containing a clap property and an ispe width or height greater than INT32_MAX + 1 can reach crop calculations thr…

cve.org strukturag:libheif 1 hari lalu

CVE-2026-93737 CWE-862 6.5

Azkaban through 4.0.0 Authorization Bypass via ScheduleServlet

Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticated users to read any project's schedule configuration. Attackers can supply arbitrary project and flo…

cve.org azkaban:azkaban 1 hari lalu

CVE-2026-93736 CWE-639 4.3

Mealie before 3.21.0 Information Disclosure via Ratings Endpoint

Mealie before 3.21.0 fails to validate user ownership in the ratings and favorites endpoints, allowing authenticated attackers to read any user's recipe ratings and favorites by specifying arbitrary user IDs in the URL p…

cve.org mealie-recipes:mealie 1 hari lalu

CVE-2026-84449 CWE-190 3.7

libheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, Op_RGB24_32_to_YCbCr::convert_colorspace() stores image-plane strides in an integer width that can overflow for extremely large RGB images crea…

cve.org strukturag:libheif 1 hari lalu

CVE-2026-84451 CWE-125 6.5

libheif: Incomplete fix for CVE-2026-62292 leaves libheif vulnerable to an out-of-bounds read

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full-item branch of unc_decoder::get_compressed_image_data_uncompressed() in libheif/codecs/uncompressed/unc_decoder.cc re…

cve.org strukturag:libheif 1 hari lalu

CVE-2026-84447 CWE-770 7.5

libheif: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle limits, causing CPU/memory amplification DoS

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden reference graphs can repeatedly decode the same base image because processed_ids is copied per branch and Im…

cve.org strukturag:libheif 1 hari lalu

CVE-2026-84384 CWE-409 7.5

libheif: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata and unci image data can cause decompress_brotli() and do_inflate() to grow accumulated output witho…

cve.org strukturag:libheif 1 hari lalu

CVE-2026-10751 CWE-502 7.5

IBM MQ Java messaging is vulnerable to remote code execution

IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling.

cve.org IBM:MQ 1 hari lalu

CVE-2026-84444 CWE-787 7.4

libheif uncompressed tiled image encoding allows out-of-bounds write

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITH_UNCOMPRESSED_CODEC is enabled, heif_context_add_image_tile() accepts an independently constructed tile whose component-plane dimensio…

cve.org strukturag:libheif 1 hari lalu

CVE-2026-84383 CWE-787 9.8

libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items

libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item graph using nested iden and auxl references can make HeifPixelImage::transfer_channel_from_image_as…

cve.org strukturag:libheif 1 hari lalu