CVE ID :CVE-2026-93452 Published : Sept. 18, 2026, 12:17 a.m. | 1 hour, 17 minutes ago Description :snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of…
CVE-2026-93450 – go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshal
CVE ID :CVE-2026-93450 Published : Sept. 18, 2026, 12:17 a.m. | 1 hour, 17 minutes ago Description :go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to…
CVE-2026-85878 – Azure Database for PostgreSQL Elevation of Privilege Vulnerability
CVE ID :CVE-2026-85878 Published : Sept. 18, 2026, 12:17 a.m. | 1 hour, 17 minutes ago Description :Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network….
CVE-2026-93436 – vLLM through 0.29.0 Memory Exhaustion via Rejected Requests
CVE ID :CVE-2026-93436 Published : Sept. 17, 2026, 11:18 p.m. | 16 minutes ago Description :vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployments….
CVE-2026-93435 – redis-parser through 3.0.0 Denial of Service via Unbounded Recursion
CVE ID :CVE-2026-93435 Published : Sept. 17, 2026, 11:18 p.m. | 16 minutes ago Description :redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis…
CVE-2026-87701 – Azure Cosmos DB Elevation of Privilege Vulnerability
CVE ID :CVE-2026-87701 Published : Sept. 17, 2026, 11:18 p.m. | 16 minutes ago Description :Improper neutralization of special elements in output used by a downstream component (‘injection’) in Azure Cosmos DB allows…
CVE-2026-85889 – Azure AI Foundry Elevation of Privilege Vulnerability
CVE ID :CVE-2026-85889 Published : Sept. 17, 2026, 11:18 p.m. | 16 minutes ago Description :Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a…
CVE-2026-85885 – Microsoft 365 Copilot Elevation of Privilege Vulnerability
CVE ID :CVE-2026-85885 Published : Sept. 17, 2026, 11:18 p.m. | 16 minutes ago Description :Improper neutralization of special elements used in a command (‘command injection’) in M365 Copilot allows an authorized attacker…
CVE-2026-61599 – djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path
CVE ID :CVE-2026-61599 Published : Sept. 16, 2026, 11:16 p.m. | 2 hours, 13 minutes ago Description :djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the…
CVE-2026-92599 – Joi before 17.13.7 and 18.2.6 ReDoS via isoDate
CVE ID :CVE-2026-92599 Published : Sept. 16, 2026, 10:18 p.m. | 1 hour, 11 minutes ago Description :joi (npm package `joi`, hapi.js) versions >=17.2.0 =18.0.0 Severity: 8.7 | HIGH Visit the link for more…