CVE Notifier

CVE-2026-90828 CWE-476 5.3

GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference

A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation result…

cve.org GNU:Binutils 14 Sep 2026

CVE-2026-73449 CWE-290 5.9

On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authorization, a low-privileged attacker on an adjacent network segment who induces a RADIUS packet through a configured RADI

On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authorization, a low-privileged attacker on an adjacent network segment who induces a RAD…

cve.org Arista · Networks:EOS 14 Sep 2026

CVE-2026-91146 CWE-79 6.1

Takahe through 0.11.0 Cross-Site Scripting via javascript: URL Scheme

Takahe through 0.11.0 fails to restrict URL schemes in link hrefs within federated post content and profile summaries, allowing remote actors to inject javascript: links. Attackers can deliver federated content with mali…

cve.org jointakahe:takahe 14 Sep 2026

CVE-2026-91145 CWE-917 7.1

Activiti through 7.1.0.M6 Expression Injection via Mail Task

Activiti through 7.1.0.M6 fails to validate hash-brace deferred expressions in process variables, allowing attackers to bypass expression filtering. Attackers can inject expressions beginning with #{ that are stored and …

cve.org Activiti:Activiti 14 Sep 2026

CVE-2026-91144 CWE-639 7.5

ZFile through 5.0.5 Share Entry Filter Bypass via Download Endpoint

ZFile through 5.0.5 fails to validate requested file paths against a share link's allowed entries on the download endpoint. Attackers holding a share link can supply arbitrary file paths as query parameters to download a…

cve.org zfile-dev:zfile 14 Sep 2026

CVE-2026-91143 CWE-288 7.2

goproxy through 15.3 Authentication Bypass via CONNECT

goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests, allowing unauthenticated clients to bypass credential requirements. Attackers can issue CONNECT requests to establish tunnel…

cve.org snail007:goproxy 14 Sep 2026

CVE-2026-90827 CWE-416 3.3

GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free

A vulnerability was identified in GPAC 26.07.0. This affects the function gf_node_deactivate_ex of the file scenegraph/base_scenegraph.c of the component MP4Box. Such manipulation leads to use after free. The attack must…

cve.org n/a:GPAC 14 Sep 2026

CVE-2026-12944 CWE-918 9.6

Incomplete Security Scanner Blocklist Enables Network-Based Code Execution

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow server by submitting components containing socket or urllib imports. This enables: (…

cve.org IBM:Langflow · OSS 14 Sep 2026

CVE-2026-76081 CWE-193 5.5

ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions

ZITADEL is an open source identity management platform. Prior to version 4.16.0, a bug in how ZITADEL updates permissions when multiple project roles are deleted at the same time can cause some user permissions to be mis…

cve.org zitadel:zitadel 14 Sep 2026

CVE-2026-90826 CWE-125 2.8

GPAC MP4Box base_scenegraph.c gf_node_del out-of-bounds

A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gf_node_del of the file scenegraph/base_scenegraph.c of the component MP4Box. This manipulation causes out-of-bounds read. The attack…

cve.org n/a:GPAC 14 Sep 2026

CVE-2026-18117 CWE-79 N/A

Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Custom Page Alias Name

Concrete CMS 9.0.0 through 9.5.3 is vulnerable to stored XSS via the custom page alias name (customAliasName) because the Edit Alias dialog applied only trim() to the submitted value and performed no input neutralization…

cve.org Concrete · CMS:Concrete · CMS 14 Sep 2026

CVE-2026-91181 CWE-863 6.5

Data Retention Teams Endpoint Leaks Private Team Invite ID

Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 Fail to sanitize Team objects returned by the data retention teams endpoint which allows an authenticated user holding only th…

cve.org Mattermost:Mattermost 14 Sep 2026