CVE ID :CVE-2026-128067 Published : Nov. 13, 2026, 12:20 a.m. | 56 minutes ago Description :Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through…
CVE-2026-128066 – Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data
CVE ID :CVE-2026-128066 Published : Nov. 13, 2026, 12:20 a.m. | 56 minutes ago Description :Pillow is a Python imaging library. From 1.0 through 12.3.0, ImageFileDirectory_v2.load() in src/PIL/TiffImagePlugin.py retains a separate bytes object…
CVE-2026-127275 – Linksys EA8100 JNAP API ui_server.lua SetUnsecuredWiFiWarning missing authentication
CVE ID :CVE-2026-127275 Published : Nov. 13, 2026, 12:20 a.m. | 56 minutes ago Description :A vulnerability was determined in Linksys EA8100 1.0.3.216940. This issue affects the function SetRemoteSetting/SetUnsecuredWiFiWarning of the file ui_server.lua…
CVE-2026-120868 – Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway
CVE ID :CVE-2026-120868 Published : Nov. 13, 2026, 12:20 a.m. | 56 minutes ago Description :Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler…
CVE-2026-86322 – Foreman: authorization flaw in the foreman::controller::useraware#find_user handling used by api::v2::personalaccesstokenscontroller
CVE ID :CVE-2026-86322 Published : Nov. 12, 2026, 9:17 p.m. | 1 hour, 59 minutes ago Description :A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller::UserAware#find_user resolves the target account using User.find(params[:user_id]) without applying…
CVE-2026-127208 – datamodel-code-generator < 0.84.0 Code Injection via x-python-type Annotation
CVE ID :CVE-2026-127208 Published : Nov. 12, 2026, 9:17 p.m. | 1 hour, 59 minutes ago Description :datamodel-code-generator before 0.84.0 contains a code injection vulnerability that allows attackers to achieve arbitrary code execution by…
CVE-2026-126793 – Privilege escalation in Aurora PostgreSQL dialect detection in AWS Advanced Go Wrapper
CVE ID :CVE-2026-126793 Published : Nov. 12, 2026, 9:17 p.m. | 1 hour, 59 minutes ago Description :An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from…
CVE-2026-106018 – Johnson Controls EasyIO FW Authentication Bypass Vulnerability
CVE ID :CVE-2026-106018 Published : Nov. 12, 2026, 9:17 p.m. | 1 hour, 59 minutes ago Description :Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO FW allows Authentication Bypass….
CVE-2026-68548 – Algernon: Case-insensitive filesystem lets unauthenticated requests bypass /admin,/repo,/data permission-prefix gate
CVE ID :CVE-2026-68548 Published : Nov. 12, 2026, 8:18 p.m. | 2 hours, 57 minutes ago Description :Algernon is a small self-contained pure-Go web server. Prior to version 1.17.10, Algernon’s URL-prefix authorization gate matches…
CVE-2026-67548 – taOS: Non-Admin Users Can Access System Settings and Update Actions
CVE ID :CVE-2026-67548 Published : Nov. 11, 2026, 10:17 p.m. | 58 minutes ago Description :taOS is a self-hosted AI agent OS. Prior to version 1.0.0-beta.25, tinyagentos (taOS) registers all system settings routes…