Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 5 CVE-2026-28385

SSRF via image import from URL allows internal network probing by authenticated users_CVE-2026-28385

In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery (SSRF) vulnerability in the image import functionality allows authenticat...

Canonical lxd 6.0 CVE
MEDIUM 4.9 CVE-2026-13434

Virt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled_CVE-2026-13434

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, th...

Red Hat Red Hat OpenShift Virtualization 4 CVE
MEDIUM 5.3 CVE-2026-11779

PayloadCMS 3.84.1 – Authenticated account lockout bypass through default unlock access_CVE-2026-11779

An Improper Authorization vulnerability exists in PayloadCMS version 3.84.1 due to insufficient access control on the account unlock operation.

PayloadCMS PayloadCMS 3.84.1 CVE
MEDIUM 5.3 CVE-2025-32423

AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock_CVE-2025-32423

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there i...

Significant-Gravitas AutoGPT < 0.6.32 CVE
MEDIUM 5.3 CVE-2025-32394

AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock_CVE-2025-32394

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there i...

Significant-Gravitas AutoGPT < 0.6.32 CVE
MEDIUM 6.1 CVE-2025-60465

CVE-2025-60465_CVE-2025-60465

A use-after-free in the gf_filter_pid_inst_swap function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to caus...

n/a n/a n/a CVE
MEDIUM 6.5 CVE-2026-57914

Apache Kerby: StackOverflow on parsing deeply nested ASN1 structures_CVE-2026-57914

By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to...

Apache Software Foundation Apache Kerby CVE
MEDIUM 4.3 CVE-2026-57925

CVE-2026-57925_CVE-2026-57925

In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries and tags

JetBrains YouTrack CVE
MEDIUM 4.3 CVE-2026-57924

CVE-2026-57924_CVE-2026-57924

In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user profile details

JetBrains YouTrack CVE
MEDIUM 5.3 CVE-2026-57923

CVE-2026-57923_CVE-2026-57923

In JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations endpoint allowed modifying project settings

JetBrains YouTrack CVE