CVE ID :CVE-2026-93991 Published : Sept. 19, 2026, 11:17 p.m. | 28 minutes ago Description :Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped…
CVE-2026-93990 – Expat through 2.8.4 Malformed UTF-16 Acceptance via Unchecked Surrogate
CVE ID :CVE-2026-93990 Published : Sept. 19, 2026, 11:17 p.m. | 28 minutes ago Description :Expat through 2.8.4 fails to validate low surrogates following high surrogates in UTF-16 input, allowing malformed UTF-16 sequences…
CVE-2026-93985 – OpenPanel js-runtime JavaScript Template Sandbox Escape RCE
CVE ID :CVE-2026-93985 Published : Sept. 19, 2026, 12:16 p.m. | 11 hours, 29 minutes ago Description :OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webhook template validator that…
CVE-2026-93923 – SiYuan through 3.8.4 Stored XSS via Heading Style Attribute
CVE ID :CVE-2026-93923 Published : Sept. 18, 2026, 11:12 p.m. | 28 minutes ago Description :SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored…
CVE-2026-93922 – SiYuan through 3.8.4 Stored XSS via notebook names
CVE ID :CVE-2026-93922 Published : Sept. 18, 2026, 11:12 p.m. | 28 minutes ago Description :SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing…
CVE-2026-93740 – Totolink A3002MU formWlEncrypt buffer overflow
CVE ID :CVE-2026-93740 Published : Sept. 18, 2026, 10:17 p.m. | 1 hour, 23 minutes ago Description :A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt….
CVE-2026-93739 – Totolink A3002MU formWlAc buffer overflow
CVE ID :CVE-2026-93739 Published : Sept. 18, 2026, 10:17 p.m. | 1 hour, 23 minutes ago Description :A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc….
CVE-2026-75885 – Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint
CVE ID :CVE-2026-75885 Published : Sept. 18, 2026, 10:17 p.m. | 1 hour, 23 minutes ago Description :A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows…
CVE-2026-79954 – NASA CryptoLib 1.5.0 – TC receive path accepts Security Associations from the wrong GVCID
CVE ID :CVE-2026-79954 Published : Sept. 18, 2026, 1:16 a.m. | 18 minutes ago Description :NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path. The receiver selects the…
CVE-2026-93453 – SOGo before 5.12.11 Password Reset Token Interception via Origin Header
CVE ID :CVE-2026-93453 Published : Sept. 18, 2026, 12:17 a.m. | 1 hour, 17 minutes ago Description :SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as the authority, allowing unauthenticated attackers…