CVE Notifier

CVE-2026-91946 CWE-908 6.5

FreeRDP before 3.31.0 Information Disclosure via RDPGFX ResetGraphics

FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server's ResetGraphics PDU serializer that fails to initialize padding bytes in the fixed 340-byte wire format. Attackers can r…

cve.org FreeRDP:FreeRDP 15 Sep 2026

CVE-2026-91945 CWE-125 6.5

FreeRDP before 3.31.0 Out-of-bounds Read via Smartcard ATR

FreeRDP versions before 3.31.0 contain an out-of-bounds read vulnerability in smartcard response decoders that fail to validate ATR length fields against fixed inline arrays. Authenticated RDP clients can send oversized …

cve.org FreeRDP:FreeRDP 15 Sep 2026

CVE-2026-91944 CWE-79 6.1

crawl4ai before 0.9.3 DOM-based XSS via Playground UI

crawl4ai versions before 0.9.3 contain a DOM-based cross-site scripting vulnerability in the Playground UI where the forceHighlightElement() function assigns textContent back to innerHTML, re-parsing JSON responses as HT…

cve.org unclecode:crawl4ai 15 Sep 2026

CVE-2026-91943 CWE-918 7.7

Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategy

Crawl4AI before 0.9.3 contains a server-side request forgery vulnerability in PDFContentScrapingStrategy where _get_pdf_path() re-downloads targets with Python requests without egress validation. Authenticated attackers …

cve.org unclecode:crawl4ai 15 Sep 2026

CVE-2026-91942 CWE-79 5.4

crawl4ai before 0.9.3 Cross-Site Scripting via innerHTML

crawl4ai before 0.9.3 contains a DOM-based cross-site scripting vulnerability in the Docker Playground UI that assigns untrusted crawl results to element.innerHTML. Attackers can craft malicious PDFs with event-handler m…

cve.org unclecode:crawl4ai 15 Sep 2026

CVE-2026-91941 CWE-400 7.5

Crawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategy

Crawl4AI before 0.9.3 contains an uncontrolled resource consumption vulnerability in PDFContentScrapingStrategy that allows untrusted clients to cause denial of service. Attackers can select the PDF scraping strategy in …

cve.org unclecode:crawl4ai 15 Sep 2026

CVE-2026-91940 CWE-22 7.5

crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategy

crawl4ai before 0.9.3 contains an arbitrary file write vulnerability in PDFContentScrapingStrategy where the _filter_untrusted_fields function fails to validate untrusted configuration fields. Attackers can submit crafte…

cve.org unclecode:crawl4ai 15 Sep 2026

CVE-2026-91938 CWE-918 7.1

Flowise before 3.1.4 Server-Side Request Forgery via document loaders

Flowise versions before 3.1.4 contain a server-side request forgery vulnerability in Cheerio, Playwright, and Puppeteer document loader nodes that bypass SSRF protection. Attackers can provide arbitrary URLs to fetch clo…

cve.org FlowiseAI:Flowise · FlowiseAI:Flowise 15 Sep 2026

CVE-2026-91937 CWE-943 7.5

Flowise before 3.1.4 NoSQL Injection via sessionId

Flowise before 3.1.4 fails to sanitize the overrideConfig.sessionId parameter before using it in MongoDB queries within the MongoDBMemory node. Unauthenticated attackers can submit MongoDB operator objects through the pr…

cve.org FlowiseAI:Flowise 15 Sep 2026

CVE-2026-91936 CWE-78 6.8

Flowise before 3.1.4 Script Injection via Docker Workflows

Flowise versions before 3.1.4 contain a script injection vulnerability in Docker image build workflows where workflow_dispatch inputs are directly interpolated into shell run blocks. Attackers with repository write acces…

cve.org FlowiseAI:Flowise 15 Sep 2026

CVE-2026-91935 CWE-918 8.3

Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes

Flowise before 3.1.4 fails to validate baseURL parameters in chat-model nodes, allowing authenticated users to redirect requests to arbitrary hosts. Attackers with chatflows:create or chatflows:update permissions can exf…

cve.org FlowiseAI:Flowise · FlowiseAI:Flowise 15 Sep 2026

CVE-2026-91934 CWE-22 8.8

Flowise before 3.1.4 Remote Code Execution via SQL Database Chain

Flowise versions before 3.1.4 fail to validate file paths in the SQL Database Chain node when connecting to SQLite databases, allowing authenticated attackers to write arbitrary files. Attackers can write malicious SQLit…

cve.org FlowiseAI:Flowise · FlowiseAI:Flowise 15 Sep 2026