CVE Notifier

CVE-2026-90786 CWE-617 5.3

Dvidelabs flatcc Duplicate Symbol semantics.c align_order_members assertion

A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function align_order_members of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reach…

cve.org Dvidelabs:flatcc 14 Sep 2026

CVE-2026-73191 CWE-601 N/A

Apache Syncope: CAS service URL injection via Forwarded HTTP headers

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Syncope. When the Syncope SRA is configured for CAS authentication, the target Apereo CAS instance's URL is calculated by unconditionally l…

cve.org Apache · Software · Foundation:Apache 14 Sep 2026

CVE-2026-7208 CWE-362 5.3

Yealink SIP-T33G < 124.87.0.0 Race Condition via Diagnostic File Deletion

Yealink SIP-T33G firmware versions 124.86.x.x prior to 124.87.0.0 contain a race condition vulnerability that allows authenticated attackers to interrupt active diagnostic processes by concurrently deleting output files …

cve.org Yealink:SIP-T33G 14 Sep 2026

CVE-2026-73195 CWE-116 N/A

Apache Syncope: CSV export spreadsheet formula injection

Improper Encoding or Escaping of Output vulnerability in Apache Syncope. Authenticated users can store a spreadsheet formula payload in one of their own plain attributes. When such users are included in a CSV export a…

cve.org Apache · Software · Foundation:Apache 14 Sep 2026

CVE-2026-73236 CWE-863 N/A

Apache Syncope: Cross-Realm authorization bypass in delegated administration

Incorrect Authorization vulnerability in Apache Syncope. Delegated administration security checks are based on Realm hierarchy and enforced via prefix matches. Due to incorrect implementation, two sibling Realms whose…

cve.org Apache · Software · Foundation:Apache 14 Sep 2026

CVE-2026-90961 CWE-287 N/A

MISP LdapAuth and LinOTPAuth Authentication Bypass via Empty or Non-String Credentials

The LdapAuth and LinOTPAuth authentication plugins in MISP contain an authentication bypass vulnerability. Both LdapAuthenticate and LinOTPAuthenticate replace CakePHP's FormAuthenticate class but fail to replicate its _…

cve.org MISP:MISP 14 Sep 2026

CVE-2026-90949 CWE-787 7.8

Gimp: gimp: heap-based buffer overflow in psp loader due to selection-channel geometry mismatch

A flaw was found in GIMP's PSP (Paint Shop Pro) file loader. When processing a compressed selection channel, a heap-based buffer overflow can occur due to a mismatch between the allocated buffer size and the amount of da…

cve.org Red · Hat:Red · Hat 14 Sep 2026

CVE-2026-90948 CWE-787 7.8

Gimp: gimp: heap-based buffer overflow in ico loader via integer overflow in embedded png dimensions

A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buff…

cve.org Red · Hat:Red · Hat 14 Sep 2026

CVE-2026-90785 CWE-617 5.3

Dvidelabs flatcc Struct Analysis semantics.c analyze_struct assertion

A vulnerability was found in Dvidelabs flatcc up to 0.6.3. This affects the function analyze_struct of the file src/compiler/semantics.c of the component Struct Analysis. The manipulation results in reachable assertion. …

cve.org Dvidelabs:flatcc 14 Sep 2026

CVE-2026-73370 CWE-863 N/A

Apache Syncope: Cross-Realm boundaries reconciliation bypass

Incorrect Authorization vulnerability in Apache Syncope. Delegated administration security checks performed by Reconciliation service's pull and push, being incomplete, could accept calls by administrator not provided…

cve.org Apache · Software · Foundation:Apache 14 Sep 2026

CVE-2026-73178 CWE-200 N/A

Apache Syncope: JWT Access Token takeover

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Syncope. An administrator with adequate entitlements can get access via REST to the list of existing Access Tokens, including their sign…

cve.org Apache · Software · Foundation:Apache 14 Sep 2026

CVE-2026-90957 CWE-79 N/A

MISP: Stored XSS via Inline-Served SVG Organisation Logos and Report Pictures

Affected versions of MISP serve uploaded SVG images inline without a restrictive browser sandbox. The commit explains that SVG files are XML documents rather than passive bitmap images. While scripts inside SVG do not …

cve.org MISP:MISP 14 Sep 2026