CVE Notifier

CVE-2026-55636 CWE-863 5.7

Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.6, charts/capsule/templates/configuration.yaml configures the validating webhook with namespace/finalize instead of the Kuberne…

cve.org projectcapsule:capsule 15 Sep 2026

CVE-2026-44282 CWE-79 4.8

Election question titles allow stored script execution

Decidim is a participatory democracy framework. Prior to 0.32.0, a low-privilege process-scoped administrator or election editor with question-management rights can store HTML or script-bearing content in question.body. …

cve.org decidim:decidim 15 Sep 2026

CVE-2026-89307 CWE-601 N/A

HTML injection allows open redirection in WordPress theme design-scuole-wordpress-theme

The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-c…

cve.org Developers · Italia:design-scuole-wordpress-theme 15 Sep 2026

CVE-2026-19407 CWE-330 N/A

GCS Bucket Squatting leading to RCE in Gemini Enterprise Agent Platform Python SDK

Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution (RCE) and tenant-project token theft.

cve.org Google · Cloud:Gemini · Enterprise 15 Sep 2026

CVE-2026-87793 CWE-79 N/A

Reflected XSS in WordPress theme design-scuole-wordpress-theme

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's brows…

cve.org Developers · Italia:design-scuole-wordpress-theme 15 Sep 2026

CVE-2026-87792 CWE-862 N/A

Multiple authorization bypass in WordPress theme design-scuole-wordpress-theme

The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an unauthenticated attacker to access restricted …

cve.org Developers · Italia:design-scuole-wordpress-theme 15 Sep 2026

CVE-2026-91992 CWE-200 5.9

Tornado before 6.5.7 Credential Leak via Handle Reuse

Tornado before 6.5.7 contains a credential leak vulnerability in CurlAsyncHTTPClient where pycurl handles are reused across requests without proper state clearing. Attackers can obtain sensitive credentials by issuing re…

cve.org tornadoweb:tornado 15 Sep 2026

CVE-2026-91991 CWE-113 5.4

Tornado before 6.5.8 Cookie Attribute Injection via Capitalized kwargs

Tornado before 6.5.8 contains an incomplete fix for cookie attribute injection that allows attackers to inject arbitrary cookie attributes by passing capitalized or legacy keyword arguments to set_cookie. Attackers can e…

cve.org tornadoweb:tornado 15 Sep 2026

CVE-2026-65831 CWE-269 7.7

ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read

ArcadeDB is a Multi-Model DBMS. Prior to 26.7.1, a reader-role user can submit POST /api/v1/command/{database} with language: js because PolyglotQueryEngine.command, PolyglotQueryEngine.analyze, and PolyglotQueryEngine.r…

cve.org ArcadeData:arcadedb · com.arcadedb:arcadedb-server 15 Sep 2026

CVE-2026-91990 CWE-770 7.5

Tornado before 6.5.8 Memory Amplification DoS via multipart

Tornado before 6.5.8 contains a memory amplification vulnerability in parse_multipart_form_data that splits multipart data before validating the max_parts limit. Attackers can send crafted multipart requests with many pa…

cve.org tornadoweb:tornado 15 Sep 2026

CVE-2026-91989 CWE-22 7.5

atomic-agents-stack before 1.1.0 Path Traversal via dashboard serve.py

atomic-agents-stack before 1.1.0 contains a path traversal vulnerability in the dashboard HTTP server that allows remote attackers to read arbitrary files by supplying directory traversal sequences in request paths. Atta…

cve.org dep0we:atomic-agents-stack 15 Sep 2026

CVE-2026-91988 CWE-319 8.1

atomic-agents-stack before 1.1.0 Remote Code Execution via HTTP MCP

atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend factory, allowing network man-in-the-middle attackers to rewrite catalog responses. Attackers can inject arbitrary c…

cve.org dep0we:atomic-agents-stack 15 Sep 2026