Unofficial account to notify You about new CVE id's CVE is a program that identifies, defines, and catalogs publicly disclosed cybersecurity vulnerabilities. check out @infosec.skyfleet.blue 🆘 @skyfleet.bluehttps://bsky.app/profile/cve.skyfleet.bluehttps://bsky.app/profile/cve.skyfleet.blue/post/gqpjg3sghknhtCVE-2026-113663 - AG2: Newline injection in SandboxShellTool bypasses allowed=[...] and readonly=True, enabling arbitrary command execution CVE ID : CVE-2026-113663 Published : Nov. 5, 2026, 10:53 p.m. | 16 minutes ago Description : AG2 is an open-source AgentOS. From 0.... https://cvefeed.io/vuln/detail/CVE-2026-11366305 Nov 2026 23:45 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/gqpjg3sghknhthttps://bsky.app/profile/cve.skyfleet.blue/post/ae6cyk7fb3pgiCVE-2026-102943 - Dagu MCP DAG specification read bypasses path containment and workspace isolation CVE ID : CVE-2026-102943 Published : Nov. 5, 2026, 10:48 p.m. | 21 minutes ago Description : Dagu is a workflow engine with a built-in Web user interface. Prior to version... https://cvefeed.io/vuln/detail/CVE-2026-10294305 Nov 2026 23:43 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/ae6cyk7fb3pgihttps://bsky.app/profile/cve.skyfleet.blue/post/hpeczi3x4p35gCVE-2026-68509 - FairEmail: Path traversal in shared attachment handling can write files outside the intended shared directory CVE ID : CVE-2026-68509 Published : Nov. 5, 2026, 10:45 p.m. | 24 minutes ago Description : FairEmail is a fully featured, open source, privacy-... https://cvefeed.io/vuln/detail/CVE-2026-6850905 Nov 2026 23:37 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/hpeczi3x4p35ghttps://bsky.app/profile/cve.skyfleet.blue/post/ai7tezraa56m6CVE-2026-92698 - FastNetMon: sFlow header_size field trusted as parser capture length causes remote out-of-bounds read CVE ID : CVE-2026-92698 Published : Nov. 5, 2026, 10:35 p.m. | 34 minutes ago Description : FastNetMon is a high-performance DDoS detector and sensor. I... https://cvefeed.io/vuln/detail/CVE-2026-9269805 Nov 2026 23:31 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/ai7tezraa56m6https://bsky.app/profile/cve.skyfleet.blue/post/i3goybt36vm3dCVE-2026-92697 - FastNetMon: NetFlow v9 unbounded strlen() on interface-description field causes remote out-of-bounds read CVE ID : CVE-2026-92697 Published : Nov. 5, 2026, 10:34 p.m. | 35 minutes ago Description : FastNetMon is a high-performance DDoS detector and senso... https://cvefeed.io/vuln/detail/CVE-2026-9269705 Nov 2026 23:25 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/i3goybt36vm3dhttps://bsky.app/profile/cve.skyfleet.blue/post/ew2kksmmyay5uCVE-2026-116788 - FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding CVE ID : CVE-2026-116788 Published : Nov. 5, 2026, 8:17 p.m. | 51 minutes ago Description : FreeSWITCH is an open-source software telecommunications platform. Before v... https://cvefeed.io/vuln/detail/CVE-2026-11678805 Nov 2026 21:50 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/ew2kksmmyay5uhttps://bsky.app/profile/cve.skyfleet.blue/post/ftveuu525zceaCVE-2026-116790 - FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITY CVE ID : CVE-2026-116790 Published : Nov. 5, 2026, 8:17 p.m. | 51 minutes ago Description : FreeSWITCH is a Software Defined Telecom Stack enabling the dig... https://cvefeed.io/vuln/detail/CVE-2026-11679005 Nov 2026 21:48 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/ftveuu525zceahttps://bsky.app/profile/cve.skyfleet.blue/post/g4khjt6bujetbCVE-2026-116783 - FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data CVE ID : CVE-2026-116783 Published : Nov. 5, 2026, 8:17 p.m. | 51 minutes ago Description : FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation ... https://cvefeed.io/vuln/detail/CVE-2026-11678305 Nov 2026 21:42 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/g4khjt6bujetbhttps://bsky.app/profile/cve.skyfleet.blue/post/dj5dufwklkxikCVE-2026-116785 - FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling CVE ID : CVE-2026-116785 Published : Nov. 5, 2026, 8:17 p.m. | 51 minutes ago Description : FreeSWITCH is a Software Defined Telecom Stack enabling th... https://cvefeed.io/vuln/detail/CVE-2026-11678505 Nov 2026 21:36 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/dj5dufwklkxikhttps://bsky.app/profile/cve.skyfleet.blue/post/bh6twtzdzowb7CVE-2026-116786 - FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofia CVE ID : CVE-2026-116786 Published : Nov. 5, 2026, 8:17 p.m. | 51 minutes ago Description : FreeSWITCH is a Software Defined Telecom Stack enabling the digital ... https://cvefeed.io/vuln/detail/CVE-2026-11678605 Nov 2026 21:30 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/bh6twtzdzowb7https://bsky.app/profile/cve.skyfleet.blue/post/4utbhrgvaqsr3CVE-2026-100358 - SuiteCRM: Admin OS RCE via Dropdown Editor PHP Injection CVE ID : CVE-2026-100358 Published : Nov. 5, 2026, 6:47 p.m. | 22 minutes ago Description : SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application... https://cvefeed.io/vuln/detail/CVE-2026-10035805 Nov 2026 19:50 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/4utbhrgvaqsr3https://bsky.app/profile/cve.skyfleet.blue/post/fnlgvc46y2i6yCVE-2026-100363 - SuiteCRM: Privilege escalation via V8 REST modules (ACLRoles, ACLActions, Administration) CVE ID : CVE-2026-100363 Published : Nov. 5, 2026, 6:47 p.m. | 22 minutes ago Description : SuiteCRM is an open-source, enterprise-ready Customer Relationship Mana... https://cvefeed.io/vuln/detail/CVE-2026-10036305 Nov 2026 19:48 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/fnlgvc46y2i6yhttps://bsky.app/profile/cve.skyfleet.blue/post/dv5j2c6jejl2zCVE-2026-100359 - SuiteCRM: Authenticated SQL Injection In action_get_end_date function CVE ID : CVE-2026-100359 Published : Nov. 5, 2026, 6:45 p.m. | 24 minutes ago Description : SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwar... https://cvefeed.io/vuln/detail/CVE-2026-10035905 Nov 2026 19:42 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/dv5j2c6jejl2zhttps://bsky.app/profile/cve.skyfleet.blue/post/4h25nzb5drpy2CVE-2026-123272 - mcp-go before v1.2.1 Origin Validation Error via Unvalidated Well-Known Protected Resource Metadata CVE ID : CVE-2026-123272 Published : Nov. 5, 2026, 6:45 p.m. | 24 minutes ago Description : Mark3labs mcp-go before v1.2.1 contains an improper validatio... https://cvefeed.io/vuln/detail/CVE-2026-12327205 Nov 2026 19:36 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/4h25nzb5drpy2https://bsky.app/profile/cve.skyfleet.blue/post/i6ew44kaxxwzhCVE-2026-123273 - ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder CVE ID : CVE-2026-123273 Published : Nov. 5, 2026, 6:45 p.m. | 24 minutes ago Description : ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the ... https://cvefeed.io/vuln/detail/CVE-2026-12327305 Nov 2026 19:30 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/i6ew44kaxxwzhhttps://bsky.app/profile/cve.skyfleet.blue/post/7fvnltw4zwx6pCVE-2026-120499 - h5io before 0.2.6 Arbitrary Code Execution via read_hdf5 CVE ID : CVE-2026-120499 Published : Nov. 5, 2026, 4:55 p.m. | 13 minutes ago Description : h5io before 0.2.6 contains a code injection vulnerability in read_hdf5() that allows attackers to execut... https://cvefeed.io/vuln/detail/CVE-2026-12049905 Nov 2026 17:50 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/7fvnltw4zwx6phttps://bsky.app/profile/cve.skyfleet.blue/post/i3byjh7valu7gCVE-2026-119083 - GluonTS arbitrary file write during archive extraction CVE ID : CVE-2026-119083 Published : Nov. 5, 2026, 4:34 p.m. | 34 minutes ago Description : Path traversal in the archive extraction utility in GluonTS before 0.17.0 might allow an actor who supplie... https://cvefeed.io/vuln/detail/CVE-2026-11908305 Nov 2026 17:48 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/i3byjh7valu7ghttps://bsky.app/profile/cve.skyfleet.blue/post/ds5mhyz2mymfcCVE-2026-73856 - ModSecurity: Response Body Inspection Bypass CVE ID : CVE-2026-73856 Published : Nov. 5, 2026, 4:17 p.m. | 51 minutes ago Description : ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.... https://cvefeed.io/vuln/detail/CVE-2026-7385605 Nov 2026 17:42 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/ds5mhyz2mymfchttps://bsky.app/profile/cve.skyfleet.blue/post/fdkrocemhi7czCVE-2026-123158 - OpenSSH Authentication Bypass Vulnerability CVE ID : CVE-2026-123158 Published : Nov. 5, 2026, 4:17 p.m. | 51 minutes ago Description : sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authent... https://cvefeed.io/vuln/detail/CVE-2026-12315805 Nov 2026 17:36 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/fdkrocemhi7czhttps://bsky.app/profile/cve.skyfleet.blue/post/irstsgc5vs5txCVE-2026-122329 - SDL_mixer 3.1.2 through 3.2.4 Stack-based Buffer Overflow via FetchXLaw() in AIFF Decoder CVE ID : CVE-2026-122329 Published : Nov. 5, 2026, 4:17 p.m. | 51 minutes ago Description : SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in... https://cvefeed.io/vuln/detail/CVE-2026-12232905 Nov 2026 17:30 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/irstsgc5vs5txhttps://bsky.app/profile/cve.skyfleet.blue/post/j4rasnoiqr56wCVE-2026-119744 - Cendio ThinLinc Improper Authentication via Web Access CVE ID : CVE-2026-119744 Published : Nov. 5, 2026, 2:50 p.m. | 19 minutes ago Description : Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client (tlwebac... https://cvefeed.io/vuln/detail/CVE-2026-11974405 Nov 2026 15:45 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/j4rasnoiqr56whttps://bsky.app/profile/cve.skyfleet.blue/post/4kvervpmdit7hCVE-2026-85627 - Apache OFBiz: Authenticated Code Execution Vulnerability CVE ID : CVE-2026-85627 Published : Nov. 5, 2026, 2:17 p.m. | 52 minutes ago Description : Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') i... https://cvefeed.io/vuln/detail/CVE-2026-8562705 Nov 2026 15:43 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/4kvervpmdit7hhttps://bsky.app/profile/cve.skyfleet.blue/post/62rywvhwf2pkpCVE-2026-92887 - Apache OFBiz: REST API authentication bypassed by default when the auth attribute is omitted from a .rest.xml operation CVE ID : CVE-2026-92887 Published : Nov. 5, 2026, 2:17 p.m. | 52 minutes ago Description : Incorrect default value in the REST API fra... https://cvefeed.io/vuln/detail/CVE-2026-9288705 Nov 2026 15:37 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/62rywvhwf2pkphttps://bsky.app/profile/cve.skyfleet.blue/post/3uil64omyebi4CVE-2026-97355 - Apache OFBiz: Hard-coded Credentials in AdminServer Enable Unauthenticated Denial of Service CVE ID : CVE-2026-97355 Published : Nov. 5, 2026, 2:17 p.m. | 52 minutes ago Description : Use of Hard-coded Password vulnerability in the AdminServer component ... https://cvefeed.io/vuln/detail/CVE-2026-9735505 Nov 2026 15:31 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/3uil64omyebi4https://bsky.app/profile/cve.skyfleet.blue/post/i5n2pplulqrgfCVE-2026-97356 - Apache OFBiz: Insufficiently Protected Credentials in ViewFile Enable Authentication Bypass CVE ID : CVE-2026-97356 Published : Nov. 5, 2026, 2:17 p.m. | 52 minutes ago Description : External Control of File Name or Path vulnerability in the ViewFile com... https://cvefeed.io/vuln/detail/CVE-2026-9735605 Nov 2026 15:25 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/i5n2pplulqrgfhttps://bsky.app/profile/cve.skyfleet.blue/post/6ch6v7f55hbywCVE-2026-73100 - Apache Juneau: Sensitive request headers logged in cleartext by the default request logger on server errors CVE ID : CVE-2026-73100 Published : Nov. 5, 2026, 12:17 p.m. | 50 minutes ago Description : Insertion of Sensitive Information into Log File vulne... https://cvefeed.io/vuln/detail/CVE-2026-7310005 Nov 2026 13:55 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/6ch6v7f55hbywhttps://bsky.app/profile/cve.skyfleet.blue/post/elh7xmhpjz3meCVE-2026-73101 - Apache Juneau: Internal exception class and message disclosed via error response header and body regardless of secure defaults CVE ID : CVE-2026-73101 Published : Nov. 5, 2026, 12:17 p.m. | 50 minutes ago Description : Generation of Error Message Contain... https://cvefeed.io/vuln/detail/CVE-2026-7310105 Nov 2026 13:53 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/elh7xmhpjz3mehttps://bsky.app/profile/cve.skyfleet.blue/post/h7c2cx6wufkrzCVE-2026-73116 - Apache Juneau: REST client forwards credentials to a different origin when following HTTP redirects CVE ID : CVE-2026-73116 Published : Nov. 5, 2026, 12:17 p.m. | 50 minutes ago Description : Insufficiently Protected Credentials vulnerability in Apache J... https://cvefeed.io/vuln/detail/CVE-2026-7311605 Nov 2026 13:47 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/h7c2cx6wufkrzhttps://bsky.app/profile/cve.skyfleet.blue/post/2xydsew3aulx2CVE-2026-73117 - Apache Juneau: Response header CRLF injection and open redirect when applications set headers or redirect targets from request data CVE ID : CVE-2026-73117 Published : Nov. 5, 2026, 12:17 p.m. | 50 minutes ago Description : Improper Neutralization of CRL... https://cvefeed.io/vuln/detail/CVE-2026-7311705 Nov 2026 13:41 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/2xydsew3aulx2https://bsky.app/profile/cve.skyfleet.blue/post/euuc7axxpe2pkCVE-2026-96677 - Apache Juneau: Cross-site scripting via unescaped request variables in HTML-doc chrome CVE ID : CVE-2026-96677 Published : Nov. 5, 2026, 12:17 p.m. | 50 minutes ago Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Sc... https://cvefeed.io/vuln/detail/CVE-2026-9667705 Nov 2026 13:35 +0000at://did:plc:myutg2pwkjbukv7pq2hp5mtl/app.bsky.feed.post/euuc7axxpe2pk