CVE Notifier

CVE-2026-85234 CWE-125 7.5

Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine

A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the `genmatchstring()` function.…

cve.org Red · Hat:Red · Hat 15 Sep 2026

CVE-2026-81899 CWE-79 N/A

Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS via group folder name on the Members > Groups dashboard

Concrete CMS 9.0.0 to 9.5.2 stored group folder names without sanitization and printed them unescaped on the Members > Groups dashboard page, resulting in stored cross-site scripting. The add and edit group-folder handle…

cve.org Concrete · CMS:Concrete · CMS 15 Sep 2026

CVE-2026-57442 CWE-22 N/A

MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested

MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.5, PathFilter in src/pathfilter.ts uses root-anchored deny-list patterns, so nested .git, .obsidian, an…

cve.org bitbonsai:mcpvault 15 Sep 2026

CVE-2026-57441 CWE-41 N/A

MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence

MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.4, PathFilter in src/pathfilter.ts compiles restricted-directory patterns case-sensitively and compares…

cve.org bitbonsai:mcpvault 15 Sep 2026

CVE-2026-58483 CWE-400 7.5

mcp-searxng: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read`

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, web_url_read in src/index.ts passes a caller-supplied URL to readUrlContent…

cve.org ihor-sokoliuk:mcp-searxng 15 Sep 2026

CVE-2026-40058 CWE-367 8.8

Vulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for Windows

CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro Removal Windows policy setting is enabled a…

cve.org CrowdStrike:Falcon · sensor · for 15 Sep 2026

CVE-2026-81237 CWE-287 6.5

CVE-2026-81237

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauth…

cve.org Dell:Wyse · Management · Suite 15 Sep 2026

CVE-2026-58485 CWE-918 7.1

mcp-searxng: DNS-resolved Private Hostname SSRF in `web_url_read`

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, web_url_read receives its caller-controlled URL through src/index.ts and va…

cve.org ihor-sokoliuk:mcp-searxng 15 Sep 2026

CVE-2026-54688 CWE-918 6.5

mcp-searxng: SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.2.0, web_url_read passes a caller-supplied URL to the server-side fetch path whi…

cve.org ihor-sokoliuk:mcp-searxng 15 Sep 2026

CVE-2026-81238 CWE-306 7.5

CVE-2026-81238

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerabilit…

cve.org Dell:Wyse · Management · Suite 15 Sep 2026

CVE-2026-54689 CWE-200 6.3

mcp-searxng hardened-mode SSRF bypasses permit internal URL access

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.2.0, the web_url_read URL policy in src/url-reader.ts can be bypassed while MCP_…

cve.org ihor-sokoliuk:mcp-searxng 15 Sep 2026

CVE-2026-56830 CWE-862 6.5

Shopper: Incomplete fix for GHSA-h4mp-g9c6-xwph: Media sub-form store() still lacks authorization

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, an earlier product sub-form hardening change left store() in packages/admin/src/Livewire/Components/Products/Form/Media.php without the edit_products authoriz…

cve.org shopperlabs:shopper 15 Sep 2026