CVE Notifier

CVE-2026-53708 CWE-350 6.6

ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)

ContextForge is an AI gateway, registry, and proxy that provides centralized discovery, guardrails, and management for MCP, A2A, and REST or gRPC APIs. Prior to 1.0.3, the /admin/gateways/test call site in mcpgateway/adm…

cve.org IBM:mcp-context-forge · IBM:mcp-contextforge-gateway 14 Sep 2026

CVE-2026-90996 CWE-191 4.0

Sssd: sssd: denial of service in nss responder via crafted zero-length requests

A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to the Network Security Services (NSS) responder. This could lead to a denial-of-service condition, causi…

cve.org Red · Hat:Red · Hat 14 Sep 2026

CVE-2026-90995 CWE-476 5.5

Sssd: sssd: local denial of service due to null pointer dereference in pam responder

A flaw was found in SSSD (System Security Services Daemon). A local attacker with privileges to connect to the PAM (Pluggable Authentication Modules) responder socket can send a specially crafted protocol request. If the…

cve.org Red · Hat:Red · Hat 14 Sep 2026

CVE-2026-90994 CWE-125 4.0

Sssd: sssd: denial of service via malformed pam v1 requests

A flaw was found in sssd, specifically within the PAM (Pluggable Authentication Modules) responder's protocol v1 parser, pam_parse_in_data(). A local client with access to the PAM responder's UNIX socket can exploit this…

cve.org Red · Hat:Red · Hat 14 Sep 2026

CVE-2026-55795 CWE-307 N/A

Craft Commerce: Coupon Code Brute-Force via Rate Limit Bypass

Craft Commerce is an ecommerce platform for Craft CMS. From 4.0.0 until 4.11.2 and 5.6.5, CartController in src/controllers/CartController.php activates its RateLimiter only when the number POST or GET parameter is suppl…

cve.org craftcms:commerce 14 Sep 2026

CVE-2026-4103 CWE-79 6.4

Cross-Site Scripting via HTML Sanitization in WSO2 Publisher and Developer Portals Allows Malicious Script Execution

Insufficient HTML sanitization in the Publisher Portal and Developer Portal allows untrusted user input to be rendered without proper encoding or neutralization. This enables the injection and execution of malicious Java…

cve.org WSO2:WSO2 · API · Control 14 Sep 2026

CVE-2026-55235 CWE-287 5.9

langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication

langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.10.0, langgraph-api permits a run or cron to specify a relative webhook target that is delivered through an in-process loopback tra…

cve.org langchain-ai:langgraph-api 14 Sep 2026

CVE-2026-81301 CWE-926 N/A

Ekia File Manager 1.2.7 - Exported ContentProvider allows unauthorized file access

Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps the caller-controlled URI path directly to a fi…

cve.org Ekia:File · Manager 14 Sep 2026

CVE-2026-55236 CWE-285 5.9

langgraph-api: Incomplete assistant authorization in LangGraph Server run creation

langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.10.0, the langgraph-api run-creation path authorizes the assistant attached to a run by dispatching assistants.search with an incom…

cve.org langchain-ai:langgraph-api 14 Sep 2026

CVE-2026-90795 CWE-79 4.3

itsourcecode Loan Management System navbar.php cross site scripting

A vulnerability was determined in itsourcecode Loan Management System 1.0. The impacted element is an unknown function of the file navbar.php. Executing a manipulation of the argument page can lead to cross site scriptin…

cve.org itsourcecode:Loan · Management · System 14 Sep 2026

CVE-2026-54529 CWE-20 5.3

SQLAdmin: Unvalidated sortBy parameter in `ModelView` bypasses `column_sortable_list`

SQLAdmin is a flexible Admin interface for SQLAlchemy models. Prior to 0.27.1, ModelView.sort_query in sqladmin/models.py accepts the attacker-controlled sortBy list-view query parameter without enforcing the configured …

cve.org smithyhq:sqladmin 14 Sep 2026

CVE-2026-90943 CWE-79 8.7

parallax filament-comments through 3.0.0 Stored XSS via Comment Body

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads …

cve.org parallax:filament-comments 14 Sep 2026