Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 5.4 CVE-2026-42547

IRIS Alerts Can be Falsely Attributed to Customers_CVE-2026-42547

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. In versions prior to 2.4.28, use...

dfir-iris iris-web < 2.4.28 CVE
MEDIUM 4.3 CVE-2026-42543

IRIS has a Cross-Site Request Forgery (CSRF) issue_CVE-2026-42543

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 are vul...

dfir-iris iris-web < 2.4.28 CVE
MEDIUM 4.3 CVE-2026-42540

IRIS has a Mass Assignment issue_CVE-2026-42540

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 allow a...

dfir-iris iris-web < 2.4.28 CVE
MEDIUM 6.5 CVE-2026-42539

IRIS has an Excessive Data Exposure issue_CVE-2026-42539

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 return ...

dfir-iris iris-web < 2.4.28 CVE
HIGH 7.4 CVE-2026-44393

CVE-2026-44393_CVE-2026-44393

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verifica...

n/a n/a n/a CVE
HIGH 8.8 CVE-2026-43985

Taultulli has CSRF in /configUpdate via missing anti-CSRF and method restriction that allows admin credential takeover_CVE-2026-43985

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose `configUpdate` as a state-changing a...

Tautulli Tautulli < 2.17.1 CVE
HIGH 8.9 CVE-2026-43984

Tautulli has stored XSS in logFile via guest-controlled log_js_errors input_CVE-2026-43984

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose `log_js_errors` to any authenticated...

Tautulli Tautulli < 2.17.1 CVE
CRITICAL 9.1 CVE-2026-50076

Apache Fory: Java ReplaceResolverSerializer deserialization checks bypass_CVE-2026-50076

Deserialization of Untrusted Data in the Java replace-resolve path in Apache Fory fory-core Java SDK before 1.1.0 on Java/JVM platforms allows a re...

Apache Software Foundation Apache Fory CVE
HIGH 7.3 CVE-2026-49942

Net::CIDR::Set versions through 0.20 for Perl did not validate network masks_CVE-2026-49942

Net::CIDR::Set versions through 0.20 for Perl did not validate network masks. The mask portion of a network mask could contain Unicode digits such...

RRWO Net::CIDR::Set CVE
HIGH 7.5 CVE-2026-49941

Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses_CVE-2026-49941

Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses. The add method called the _encode method to parse addresses. If the a...

RRWO Net::CIDR::Set CVE