PATCHBAY / PUBLICThreat News
Appearance
Color mode

Stronger text, borders, and focus indicators. Works with either color mode.

Online

THE LATEST / SECURITY & VULNERABILITIES

Threat News

Recent vulnerabilities and security advisories, straight from the source.

Every cached source, newest first. All entries link to the original publisher.

For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.

16,845 stories · Past 30 days · Newest first

Subscribe to this view · RSS
Source updates · Some delayed

Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.

  1. NVD

    CVE-2026-59966 — Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, execut…

    Medium · CVSS 3.1 5.7 · Assessor: [email protected]

    Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, executes user-controlled Automation regular-expression patterns with Python re.sub() without complexity validation or an execution timeout when an authenticated user stores a catastrophic-backtracking regex and any user in the same Space imports a matching recipe. Request processing uses Automation.param_2, apply_regex_replace_automation, sub, api/recipe-from-source/. The attack works because the s…

    CVE-2026-59966
    Read original (opens in a new tab)
  2. NVD

    CVE-2026-59963 — Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe…

    High · CVSS 3.1 7.1 · Assessor: [email protected]

    Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permission when an authenticated member of a shared Space supplies another member's private recipe identifier to AI import, file, external-link, or share-link endpoints. Request processing uses api/ai-import/, api/get_recipe_file/, api/get_external_file_link/, api/share-link/, CustomReci…

    CVE-2026-59963
    Read original (opens in a new tab)
  3. NVD

    CVE-2026-30971 — ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.39.2, 1.38.2, and 1.36.40, Zone…

    High · CVSS 3.1 8.8 · Assessor: [email protected]

    ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.39.2, 1.38.2, and 1.36.40, ZoneMinder interpolates an unvalidated monitor Device field into shell commands in PHP and Perl control paths when an authenticated user with monitor-create or monitor-edit permission saves a Local monitor whose Device Path contains shell metacharacters and the monitor control or startup path runs. In this attack mechanism, the stored Device value reaches Perl qx() and backtick execution before z…

    CVE-2026-30971
    Read original (opens in a new tab)
  4. NVD

    CVE-2026-108743 — Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin. Im…

    High · CVSS 3.1 8.8 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.

    CVE-2026-108743
    Read original (opens in a new tab)
  5. NVD

    CVE-2026-108709 — Authentication bypass within in-house network in Apache Kylin. Impact most to the kylin services that are directly exposed t…

    Critical · CVSS 3.1 9.8 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0

    Authentication bypass within in-house network in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.

    CVE-2026-108709
    Read original (opens in a new tab)
  6. NVD

    CVE-2026-102834 — JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries. Prior to 1.5.14, IPCameraFrameGrabber dou…

    High · CVSS 3.1 7.5 · Assessor: [email protected]

    JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries. Prior to 1.5.14, IPCameraFrameGrabber doubles a 32-bit buffer capacity without checking for overflow or bounding the parsed Content-Length. An application consumes an MJPEG response from a malicious camera endpoint or a tampered plaintext stream. The source can return an oversized Content-Length header in an MJPEG stream. Successful exploitation can trap the frame-grabbing thread in a permanent CPU-spinning loop and deny service. Th…

    CVE-2026-102834
    Read original (opens in a new tab)
  7. NVD

    CVE-2026-102608 — ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, downloadEvents() manually…

    Critical · CVSS 3.1 9.0 · Assessor: [email protected]

    ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, downloadEvents() manually wraps a monitor Name value in single quotes instead of using escapeshellarg() before placing it in shell commands when a user with monitor-create or monitor-edit permission stores a monitor Name containing shell metacharacters and a user with Events View permission exports that monitor's events. In this attack mechanism, the stored monitor Name reaches both the ffmpeg concatenation command a…

    CVE-2026-102608
    Read original (opens in a new tab)
  8. NVD

    CVE-2026-102607 — ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() functi…

    High · CVSS 3.1 8.8 · Assessor: [email protected]

    ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() function concatenates the attacker-controlled exportFile request parameter into a shell command without neutralizing shell metacharacters when an authenticated user with View Events or View Snapshots permission submits an event export request with a crafted exportFile value, a valid CSRF token, and exportDetail enabled. The affected components are exportEvents(), exportFile, web/ajax/event.php, web…

    CVE-2026-102607
    Read original (opens in a new tab)
  9. NVD

    CVE-2026-85977 — A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP re…

    Medium · CVSS 3.1 5.3 · Assessor: [email protected]

    A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that uses the pmap_getmaps() function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation, causing the client process to experience a Denial of Service (DoS) due to resource exhaustion.

    CVE-2026-85977
    Read original (opens in a new tab)
  10. NVD

    CVE-2026-85231 — A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped…

    Medium · CVSS 3.1 6.5 · Assessor: [email protected]

    A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSEC_GSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy. This can lead to unbounded memory allocation, resulting in a Denial of Service (DoS) by exhausting system resources and causing the service to become unstable or terminate.

    CVE-2026-85231
    Read original (opens in a new tab)
  16. NVD

    CVE-2026-111793 — Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to…

    Medium · CVSS 3.1 4.3 · Assessor: [email protected]

    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.

    CVE-2026-111793
    Read original (opens in a new tab)
  17. NVD

    CVE-2026-107674 — IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using…

    Medium · CVSS 3.1 4.4 · Assessor: [email protected]

    IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it to fallback to non-secure connections.

    CVE-2026-107674
    Read original (opens in a new tab)
  20. NVD

    CVE-2025-55653 — GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_parse_lfrac function (utils/error.c). Proces…

    Medium · CVSS 3.1 5.5 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0

    GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_parse_lfrac function (utils/error.c). Processing a crafted MP4 file containing a zero-denominator fraction string causes gf_parse_lfrac() to divide by zero, terminating the process with SIGFPE.

    CVE-2025-55653
    Read original (opens in a new tab)
  22. NVD

    CVE-2026-89098 — A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on…

    Medium · CVSS 3.1 5.5 · Assessor: [email protected]

    A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an assertion failure. This causes the daemon to crash, resulting in a Denial of Service (DoS) for filesystem identifier lookup services until restarted.

    CVE-2026-89098
    Read original (opens in a new tab)
  23. NVD

    CVE-2026-81452 — Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low…

    High · CVSS 3.1 7.0 · Assessor: [email protected]

    Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Denial of Service.

    CVE-2026-81452
    Read original (opens in a new tab)
  25. NVD

    CVE-2026-111723 — LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to manag…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to manage all accounts through the /admin/v1/admins API protected only by AuthAdminJWT. Attackers can self-register, read every account's bcrypt hash, reset the bootstrap administrator's password via PUT, raise their authority_id, and delete accounts.

    CVE-2026-111723
    Read original (opens in a new tab)

Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.