HackZoneLabs News
Newsletter

CVE records

39770 records, newest first. We hold CVEs that were published recently, that are in the CISA KEV catalogue, or that an article mentions.

CVETitlePublishedTop scoreKEV
CVE-2026-128124AIOHTTP: Event loop stall in add_domain() wildcard matching13 Nov 20268.2
CVE-2025-4386713 Nov 20268.5
CVE-2026-128100Vault vulnerable to ACL deny bypass via case-variant auth method user and group names13 Nov 20266.5
CVE-2026-127215Kanbanz WordPress Plugin < 1.0.3 Broken Access Control via admin-ajax Handlers13 Nov 20268.6
CVE-2026-128123SvelteKit: `@sveltejs/adapter-node` crashes when proxying certain requests via `fetch`13 Nov 20265.9
CVE-2026-128122SvelteKit: Prerendered redirect paths can inject arbitrary rules into the `_redirects` file generated by `@sveltejs/adapter-cloudflare`13 Nov 20265.9
CVE-2026-128121SvelteKit: Prerendered paths are interpreted as regular expressions in Vercel route config generated by @sveltejs/adapter-vercel and @sveltejs/adapter-static13 Nov 20265.9
CVE-2026-128120SvelteKit: DoS while parsing form data from a remote functions `form`13 Nov 20267.5
CVE-2026-128119SvelteKit: Private `query.batch` functions could collide, producing unexpected parameter / function combinations13 Nov 20265.9
CVE-2026-128118SvelteKit: Build-time server-only module import guard could fail, resulting in server secrets being statically replaced in client bundle13 Nov 20267.5
CVE-2026-128117SvelteKit: Unhandled URIError when `reroute` rewrites a malformed pathname crashes adapter-node13 Nov 20265.9
CVE-2026-127214Flowise 3.1.4 SSRF Bypass via Custom Function Sandbox13 Nov 20268.5
CVE-2026-128116SvelteKit: Protocol-relative module import during server-side route resolution allows cross-origin script execution13 Nov 20265.3
CVE-2026-128089dnspython excessive memory and CPU use13 Nov 20267.5
CVE-2026-68905Hugo Blog: Unauthenticated AI Proxy Allows Abuse of Server-Side API Key13 Nov 20268.2
CVE-2026-127213LearnPress Course Wishlist < 4.1.2 IDOR via render_button13 Nov 20266.9
CVE-2026-68551Budget Board's OIDC login links to an existing local account by email alone, with no email_verified check, enabling account takeover of pre-existing users13 Nov 20268.3
CVE-2026-128088russh try_sign: asynchronous confirmation can sign after agent lock13 Nov 20262.2
CVE-2026-129217bgpd: out-of-bounds heap read and crash on NOTIFICATION Cease/Hard Reset with one data byte13 Nov 20266.0
CVE-2026-68541PolicyPress: Sensitive content disclosed via CSS-only web redaction and insecure starter workflow defaults13 Nov 20265.2
CVE-2026-128087russh kex_done: shared-secret callback runs before server host-key verification13 Nov 20263.7
CVE-2026-67444Hubleys: Stored XSS via unrestricted background-image upload, served with an attacker-chosen Content-Type and no CSP protection13 Nov 20267.1
CVE-2026-68510bit-vec: unsoundness arising with `deserialize` then `get_unchecked`13 Nov 20266.9
CVE-2026-128086OpenTelemetry-Go: Eager W3C baggage-property materialization causes bounded memory-allocation amplification13 Nov 20265.3
CVE-2026-128085opentelemetry-go: AttributeValueLengthLimit is fully bypassed by attribute values composed of valid U+FFFD runes13 Nov 20265.3
CVE-2026-64675BACnet Stack: Pre-auth OOB read in xy_color_decode (BACnetXYColor) via WriteGroup/WriteProperty13 Nov 20265.3
CVE-2026-128084sqlite3-ruby: SQL Query Truncation13 Nov 20264.8
CVE-2026-128083Laravel: Task Output Injection - Concurrency Process13 Nov 20262.3
CVE-2026-104204BACnet Stack: Structured View subordinate-list[0] WriteProperty allows unbounded synchronous resize and remote unauthenticated DoS13 Nov 20268.7
CVE-2026-102612BACnet Stack: BACnet/SC hub never requires a client cert, so any host joins the mesh unauthenticated13 Nov 20268.1
CVE-2026-97692BACnet Stack: pre-auth out-of-bounds read that escalates to an out-of-bounds write into global memory13 Nov 20267.7
CVE-2026-102537bacnet-stack BACnet/SC node always accepts a self-signed hub cert, so an attacker can MITM it13 Nov 20267.7
CVE-2026-100403BACnet Stack: BACnet/SC hub grows its WebSocket reassembly buffer without limit, so a peer can exhaust its memory13 Nov 20267.5
CVE-2026-82414BACnet Stack: MS/TP COBS decode overflow13 Nov 20268.8
CVE-2026-62977BACnet Stack: `WriteProperty(File_Size)` can bypass read-only protection and expose uninitialized RAMFS tail bytes through `AtomicReadFile`13 Nov 20266.9
CVE-2026-62976BACnet Stack: Consecutive AtomicWriteFile(record-access) appends can trigger a heap out-of-bounds read in the RAMFS file backend13 Nov 20268.7
CVE-2026-62975BACnet Stack: Replacing a RAMFS record with a shorter one via `AtomicWriteFile(record-access)` can trigger a heap out-of-bounds read13 Nov 20266.9
CVE-2026-128082AutoMapper: Uncontrolled Recursion with Constructor Parameters13 Nov 20267.5
CVE-2026-128081AutoMapper: Denial of Service via uncontrolled recursion that bypasses MaxDepth13 Nov 20267.5
CVE-2026-128080OpenTelemetry JavaScript: Insertion of Sensitive Information into Log File and Exposure of Sensitive Information to an Unauthorized Actor in @opentelemetry/instrumentation-http13 Nov 20265.8
CVE-2026-97361Improper Privilege Management on B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus13 Nov 20268.5
CVE-2026-97358Inclusion of Web Functionality from an Untrusted Source on B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus13 Nov 20267.0
CVE-2026-97357Out-of-bounds write on B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus13 Nov 20266.9
CVE-2026-128079envd: Host file disclosure through requirements path traversal and TOCTOU13 Nov 20266.8
CVE-2026-124679Apache APISIX: jwe-decrypt and forward-auth may pass a client-supplied identity header13 Nov 20267.8
CVE-2026-124716Apache APISIX: authz-keycloak authorization scope mismatch13 Nov 20266.4
CVE-2026-107398Indico: Local file disclosure through offline-copy path traversal13 Nov 20267.1
CVE-2026-124666Apache APISIX: Multi-auth preserves client-supplied Wolf identity headers13 Nov 20266.4
CVE-2026-124680Apache APISIX: Route-level authentication bypass via path normalization mismatch between routing and upstream forwarding13 Nov 20267.0
CVE-2026-124719Apache APISIX: identity spoofing in openapi-to-mcp13 Nov 20262.3