CVE Notifier

CVE-2026-81895 CWE-89 N/A

Concrete CMS 9.5.2 and below is vulnerable to Stored SQL Injection in Concrete CMS Document Library Block via `fsID[]` in `setMode=any`

In Concrete CMS before 9.5.3, the Document Library block stored the file-set identifiers submitted through fsID[] without validating them as integers, and when the block was configured with setMode set to any it concaten…

cve.org Concrete · CMS:Concrete · CMS 15 Sep 2026

CVE-2026-54503 CWE-80 4.3

plone.app.textfield: Stored XSS by spoofing mime type

plone.app.textfield provides a zope.schema-style field type called RichText for storing a value with a related MIME type. Prior to 2.0.2, 3.0.2, and 4.0.1, depending on the release line, RichTextValue.output returns an u…

cve.org plone:plone.app.textfield 15 Sep 2026

CVE-2026-53658 CWE-90 N/A

Fabric CA: LDAP Injection via Unescaped Username in GetUser Filter

Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric-ca is configured with an LDAP backend, Client.GetUser in lib/server/ldap/client.go inserts the username from HTTP Basic authentica…

cve.org hyperledger:fabric-ca 15 Sep 2026

CVE-2026-59160 CWE-306 8.8

Yeger: Unauthenticated Network-Exposed Turborepo Task Execution via /api/run

Yeger is a monorepo for npm packages maintained under the yeger scope. Prior to 2.8.9, the turbo-graph package starts its embedded Next.js server from packages/turbo-graph/src/index.ts on all interfaces, including 0.0.0.…

cve.org DerYeger:yeger 15 Sep 2026

CVE-2026-81894 CWE-89 N/A

Concrete CMS 9.5.2 and below is vulnerable to Stored DOM-based Cross-site Scripting (XSS) in the Gallery block image Caption field

Concrete CMS 9.5.2 and below is vulnerable to stored DOM-based Cross-site Scripting (XSS) via the Gallery block's per-image Caption field because the bundled Magnific Popup lightbox script (concrete/js/features/imagery/f…

cve.org Concrete · CMS:Concrete · CMS 15 Sep 2026

CVE-2026-55691 CWE-79 8.6

EmbedVideo Extension : Stored XSS via unsanitized class passed to template

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. Prior to 4.1.0, EmbedHtmlFormatter::toHtml …

cve.org StarCitizenWiki:mediawiki-extensions-EmbedVideo 15 Sep 2026

CVE-2026-55690 CWE-79 7.5

EmbedVideo Extension: Stored XSS via unsanitized service name in exception text

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. Prior to 4.1.0, EmbedServiceFactory::newFro…

cve.org StarCitizenWiki:mediawiki-extensions-EmbedVideo 15 Sep 2026

CVE-2026-18110 CWE-862 N/A

Concrete CMS 9.0.0 through 9.5.2 is vulnerable to missing authorization in the user selector autocomplete endpoint (/ccm/system/user/autocomplete), allowing an unauthenticated attacker to retrieve the complete backend user directory — internal ID, username

Concrete CMS 9 (9.0.0 through 9.5.2) does not perform an authorization check on the user selector autocomplete endpoint (/ccm/system/user/autocomplete), which backs the "Preview as User" panel and other user-selector com…

cve.org Concrete · CMS:Concrete · CMS 15 Sep 2026

CVE-2026-55692 CWE-79 7.5

EmbedVideo Extension: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabled

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. Prior to 4.1.0, with the default $wgEmbedVi…

cve.org StarCitizenWiki:mediawiki-extensions-EmbedVideo 15 Sep 2026

CVE-2026-54561 CWE-22 6.2

MCP Memory Keeper: Arbitrary local file read in mcp-memory-keeper context_import via unvalidated filePath

MCP Memory Keeper is an MCP server for persistent context management in AI coding assistants. Prior to 0.13.0, context_import in src/index.ts passes the caller-controlled filePath directly to fs.readFileSync without rest…

cve.org mkreyman:mcp-memory-keeper 15 Sep 2026

CVE-2026-55149 CWE-789 7.5

Vouch Proxy: Unbounded Multipart Cookie Allocation DoS

Vouch Proxy is an SSO and OAuth/OIDC login solution for Nginx using the auth_request module. Prior to 0.48.0, Cookie in pkg/cookie/cookie.go parses the total part count from an attacker-controlled multipart cookie name a…

cve.org vouch:vouch-proxy 15 Sep 2026

CVE-2026-91854 CWE-79 4.3

code-projects Record Management System reg.php cross site scripting

A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads to cross site scripting. The attack may…

cve.org code-projects:Record · Management · System 15 Sep 2026