CVE-2026-5241CRITICALAug 19, 2026

A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the `trust_remote_code` parameter, intended to prevent remote code execution, is overridden by untrusted serialized configuration data in a nested code path. Specifically, when loading a LightGlue model using `AutoModel.from_pretrained()` with `trust_remote_code=False`, the `Lig

CVE-2026-5241CRITICALAug 19, 2026

CVE-2025-61140CRITICALAug 19, 2026

The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution.

CVE-2026-72210CRITICALAug 19, 2026

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one in mapping pairs decoding bounds checks In ntfs_mapping_pairs_decompress(), attr_end points one byte past the end of the attribute record: attr_end = (u8 *)attr + le32_to_cpu(attr->length); The two bounds checks validating that mapping pair data bytes fit within the attribute use strict greater-than (>), which allows a one-byte out-of-bounds read when the data extends exactly to attr_end: b = *buf

CVE-2026-72200CRITICALAug 19, 2026

In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping-pairs LCN accumulator overflow The NTFS mapping-pairs parser accumulates relative LCN deltas in a signed integer. A corrupted attribute can drive that addition past the representable range. One corrupt runlist shape sets the accumulated LCN to S64_MAX and then adds a delta of 1 in the next mapping-pairs entry. Signed overflow is undefined and can turn an invalid runlist into a different set of physical

CVE-2026-67271CRITICALAug 19, 2026

Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in the SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and Remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for Remote Code executi

CVE-2026-59310CRITICALAug 19, 2026

KEV2 exploits101830

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

CVE-2026-55040CRITICALAug 19, 2026

KEV2 exploits102750

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

vm2: Sandbox Breakout Using Dangerous Host Proto MutatorsCRITICALAug 19, 2026

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.js fail to block stacked indirection through Function.prototype.call around dangerous host prototype getter and setter mutators, allowing sandbox code to sever a host intrinsic's prototype chain and reach e.constructor.constructor for arbitrary host command execution. This issue is fixed in version 3.11.6.

VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCECRITICALAug 19, 2026

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException() in lib/setup-sandbox.js sanitizes SuppressedError.error, SuppressedError.suppressed, and AggregateError.errors but does not sanitize Error.cause, allowing sandbox code to obtain a powerful host object such as process from an embedder-exposed host function that throws an error with that object as its cause and then execute arbitrary host commands. This issue is fixed in version 3.11.6.

CVE-2026-76008CRITICALAug 19, 2026

A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get_para_from_uri of the file /cgi-bin/mbox-config of the component URI Parameter Parsing. This manipulation of the argument width/height causes stack-based buffer overflow. The attack can be initiated remotely.

CVE-2026-76004CRITICALAug 19, 2026

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfigUrcp of the component HTTP Handler. The manipulation of the argument pvid leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

CVE-2026-74956CRITICALAug 19, 2026

Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVE-2026-74938CRITICALAug 19, 2026

Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVE-2026-74015CRITICALAug 18, 2026

Unauthenticated SQL Injection in Readabler < 2.0.18 versions.

CVE-2026-73392CRITICALAug 18, 2026

Unauthenticated SQL Injection in Super Store Finder <= 7.8 versions.

CVE-2026-73365CRITICALAug 18, 2026

Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.

CVE-2026-73339CRITICALAug 18, 2026

Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions.

CVE-2026-66627CRITICALAug 18, 2026

Contributor Arbitrary File Upload in GP Premium <= 2.5.5 versions.

CVE-2026-32444CRITICALAug 18, 2026

Contributor Remote Code Execution (RCE) in Cwicly <= 1.4.4 versions.

Security Feed