VulDB Recent Entries

A vulnerability classified as problematic has been found in ci4-cms-erp CI4MS up to 0.31.8.0. This vulnerability affects the function deleteFileOrFolder/renameFile of the file app/Config/Routes.php of the component Fileeditor. The manipulation of the argument hiddenItems leads to improper input validation. This vulnerability is listed as CVE-2026-45139. The attack may be initiated remotely. There is no available exploit.

A vulnerability described as very critical has been identified in Red Hat QEMU. This affects the function guest-ssh-add-authorized-keys of the component Command Handler. Executing a manipulation can lead to time-of-check time-of-use. This vulnerability is tracked as CVE-2026-12080. The attack can be launched remotely. No exploit exists.

A vulnerability marked as critical has been reported in Jovancoding Network-AI up to 5.13.3. Affected by this issue is some unknown functionality of the component APSAdapter. Performing a manipulation results in improper verification of cryptographic signature. This vulnerability is identified as CVE-2026-64623. The attack can be initiated remotely. There is not any exploit available.

A vulnerability labeled as critical has been found in FreeRDP up to 3.27.1. Affected by this vulnerability is the function freerdp_client_rdp_file_apply_to_settings of the file client/common/file.c of the component RDP File Parser. Such manipulation of the argument selectedmonitors leads to double free. This vulnerability is referenced as CVE-2026-64621. It is possible to launch the attack remotely. No exploit is available.

A vulnerability identified as critical has been detected in FreeRDP up to 3.27.9. Affected is an unknown function of the component Buffer. This manipulation of the argument out_length causes heap-based buffer overflow. The identification of this vulnerability is CVE-2026-64620. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability categorized as problematic has been discovered in SurrealDB up to 2.4.x/3.0.0-beta.2. This impacts an unknown function of the component Closures. The manipulation results in permission issues. This vulnerability was named CVE-2026-63763. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in Jovancoding Network-AI up to 5.13.3. It has been rated as problematic. This affects an unknown function of the component ApprovalInbox. The manipulation of the argument secret leads to permissive cross-domain policy with untrusted domains. This vulnerability is uniquely identified as CVE-2026-64622. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in SurrealDB up to 2.6.0/3.0.0-beta.2. It has been declared as problematic. The impacted element is an unknown function of the component Scripting Engine. Executing a manipulation can lead to null pointer dereference. This vulnerability is handled as CVE-2026-63762. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in SurrealDB up to 3.0.x. It has been classified as problematic. The affected element is an unknown function of the component Jwt Access. Performing a manipulation of the argument ALGORITHM results in risky cryptographic algorithm. This vulnerability is known as CVE-2026-63761. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in SurrealDB up to 3.0.x and classified as critical. Impacted is an unknown function of the component Permission Check. Such manipulation leads to permission issues. This vulnerability is traded as CVE-2026-63755. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in SurrealDB up to 3.0.x and classified as problematic. This issue affects some unknown processing of the component Kill Statement. This manipulation of the argument uuid causes authorization bypass. This vulnerability appears as CVE-2026-63758. The attack may be initiated remotely. There is no available exploit.

A vulnerability, which was classified as problematic, was found in SurrealDB up to 3.0.0. This vulnerability affects unknown code of the component Session Management. The manipulation results in information disclosure. This vulnerability is reported as CVE-2026-63757. The attack can be launched remotely. No exploit exists.

A vulnerability, which was classified as problematic, has been found in SurrealDB up to 3.0.x. This affects an unknown part of the file state.in of the component Live Select. The manipulation leads to session expiration. This vulnerability is documented as CVE-2026-63753. The attack can be initiated remotely. There is not any exploit available.

A vulnerability classified as critical was found in SurrealDB up to 3.0.x. Affected by this issue is some unknown functionality of the component RPC Endpoint. Executing a manipulation can lead to race condition. This vulnerability is registered as CVE-2026-63756. It is possible to launch the attack remotely. No exploit is available.

A vulnerability classified as problematic has been found in SurrealDB up to 3.0.x. Affected by this vulnerability is an unknown functionality of the component JSON parser. Performing a manipulation results in uncontrolled recursion. This vulnerability is cataloged as CVE-2026-63760. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability described as problematic has been identified in SurrealDB up to 3.0.x. Affected is an unknown function of the component Parser. Such manipulation leads to uncontrolled recursion. This vulnerability is listed as CVE-2026-63759. The attack may be performed from remote. There is no available exploit.

A vulnerability marked as problematic has been reported in JCD Windu CMS up to 4.1. This impacts an unknown function of the component Hashing. This manipulation causes password hash with insufficient computational effort. This vulnerability is tracked as CVE-2026-57310. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability labeled as critical has been found in JCD Windu CMS 4.1. This affects an unknown function of the component URL Path. The manipulation results in sql injection. This vulnerability is identified as CVE-2026-57309. The attack can be executed remotely. There is not any exploit available.

A vulnerability identified as problematic has been detected in SurrealDB up to 3.0.x. The impacted element is an unknown function of the component Live Select. The manipulation of the argument value/before/after/event leads to permission issues. This vulnerability is referenced as CVE-2026-63749. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability categorized as critical has been discovered in SurrealDB up to 3.0.x. The affected element is an unknown function of the component Relate. Executing a manipulation can lead to authorization bypass. The identification of this vulnerability is CVE-2026-63752. The attack may be launched remotely. There is no exploit available.