{"kind": "feed", "path": "vulns/feed", "name": "", "items": [{"id": "CVE-2026-116104", "noindex": false, "published": "2026-10-26T01:00:15.928Z", "modified": "2026-10-26T01:00:15.928Z", "cvss": 5.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": null, "kev": false, "exploits": [], "stacks": [], "path": "vulns/cve-2026-116104", "title": "Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection", "description": "A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func_set_nnabla_version_decorate of the file python/src/nnabla/utils/converter/utils.py of the component NNP Converter. Performing a manipulation of the argument function.type results in code injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.", "references": ["https://vuldb.com/vuln/426172", "https://vuldb.com/vuln/426172/cti", "https://vuldb.com/cve/CVE-2026-116104"], "fixes": [], "products": [{"name": "neural network libraries", "path": "vulns/neural-network-libraries", "ecosystem": ""}]}, {"id": "CVE-2026-116103", "noindex": false, "published": "2026-10-26T00:45:29.142Z", "modified": "2026-10-26T00:45:29.142Z", "cvss": 5.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": null, "kev": false, "exploits": [], "stacks": [], "path": "vulns/cve-2026-116103", "title": "Sony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection", "description": "A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python/src/nnabla/utils/cli/encode_decode_param.py of the component Encode Param Command Handler. Such manipulation leads to code injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.", "references": ["https://vuldb.com/vuln/426171", "https://vuldb.com/vuln/426171/cti", "https://vuldb.com/cve/CVE-2026-116103"], "fixes": [], "products": [{"name": "neural network libraries", "path": "vulns/neural-network-libraries", "ecosystem": ""}]}, {"id": "CVE-2026-116099", "noindex": false, "published": "2026-10-25T23:45:16.547Z", "modified": "2026-10-25T23:45:16.547Z", "cvss": 5.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": null, "kev": false, "exploits": [], "stacks": [], "path": "vulns/cve-2026-116099", "title": "Fusion Creators Studio SCP Containment Breach Multiplayer Skynet++ Virtual Machine BlitzBanks out-of-bounds write", "description": "A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks of the component Skynet++ Virtual Machine. Executing a manipulation can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 1.3R is capable of addressing this issue. It is recommended to upgrade the affected component.", "references": ["https://vuldb.com/vuln/426167", "https://vuldb.com/vuln/426167/cti", "https://vuldb.com/cve/CVE-2026-116099"], "fixes": [], "products": [{"name": "scp containment breach multiplayer", "path": "vulns/scp-containment-breach-multiplayer", "ecosystem": ""}]}, {"id": "CVE-2026-116098", "noindex": false, "published": "2026-10-25T23:30:20.866Z", "modified": "2026-10-25T23:30:20.866Z", "cvss": 5.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X", "severity": "medium", "epss": null, "kev": false, "exploits": [], "stacks": [], "path": "vulns/cve-2026-116098", "title": "SteelRaven7 Ravenfield RFL Custom Map Handler/RFLD Custom Map cacheCoverPoints deserialization", "description": "A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoints of the component RFL Custom Map Handler/RFLD Custom Map Handler. Performing a manipulation results in deserialization. Remote exploitation of the attack is possible. The patch is named EA39 Security Patch. Applying a patch is the recommended action to fix this issue.", "references": ["https://vuldb.com/vuln/426166", "https://vuldb.com/vuln/426166/cti", "https://vuldb.com/cve/CVE-2026-116098"], "fixes": [], "products": [{"name": "ravenfield", "path": "vulns/ravenfield", "ecosystem": ""}]}, {"id": "CVE-2026-116097", "noindex": false, "published": "2026-10-25T23:15:07.201Z", "modified": "2026-10-25T23:15:07.201Z", "cvss": 5.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": null, "kev": false, "exploits": [], "stacks": [], "path": "vulns/cve-2026-116097", "title": "CloudClassroom-PHP-Project addnewstudent.php cross site scripting", "description": "A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an unknown part of the file addnewstudent.php. Such manipulation of the argument fname leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The vendor was contacted early about this disclosure but did not respond in any way.", "references": ["https://vuldb.com/vuln/426165", "https://vuldb.com/vuln/426165/cti", "https://vuldb.com/cve/CVE-2026-116097"], "fixes": [], "products": [{"name": "cloudclassroom-php-project", "path": "vulns/cloudclassroom-php-project", "ecosystem": ""}]}, {"id": "CVE-2026-116096", "noindex": false, "published": "2026-10-25T23:00:24.282Z", "modified": "2026-10-25T23:00:24.282Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": null, "kev": false, "exploits": [], "stacks": [], "path": "vulns/cve-2026-116096", "title": "ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write", "description": "A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function list_pockettts_state_slots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access. The exploit has been made available to the public and could be used for attacks. Upgrading to version b11796 can resolve this issue. Patch name: 0a1ef309cdbb9f2024f58a38fb4c42352c5db569. The affected component should be upgraded. The reported heap out‑of‑bounds write (gen‑audio / pocket‑tts state_out path) is no longer a silent exploitable heap wri", "references": ["https://vuldb.com/vuln/426164", "https://vuldb.com/vuln/426164/cti", "https://vuldb.com/cve/CVE-2026-116096"], "fixes": [], "products": [{"name": "llama.cpp", "path": "vulns/llama.cpp", "ecosystem": ""}]}, {"id": "CVE-2026-116095", "noindex": false, "published": "2026-10-25T22:45:20.931Z", "modified": "2026-10-25T22:45:20.931Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": null, "kev": false, "exploits": [], "stacks": [], "path": "vulns/cve-2026-116095", "title": "smg-project smg llm-multimodal jpeg_turbo.rs decode_jpeg_rgb memory allocation", "description": "A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jpeg_turbo::decode_jpeg_rgb of the file crates/multimodal/src/jpeg_turbo.rs of the component llm-multimodal. The manipulation leads to uncontrolled memory allocation. The attack can be initiated remotely. The exploit is publicly available and might be used. Upgrading to version 1.11.0 is able to address this issue. The identifier of the patch is 8f51b57e219a914089e345b704c3c8de37a3bb8e. It is advisable to upgrade the affected component.", "references": ["https://vuldb.com/vuln/426162", "https://vuldb.com/vuln/426162/cti", "https://vuldb.com/cve/CVE-2026-116095"], "fixes": ["1.11.0"], "products": [{"name": "smg", "path": "vulns/smg", "ecosystem": ""}]}, {"id": "CVE-2026-116094", "noindex": false, "published": "2026-10-25T21:45:13.041Z", "modified": "2026-10-25T21:45:13.041Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": null, "kev": false, "exploits": [], "stacks": [], "path": "vulns/cve-2026-116094", "title": "EyouCMS function.php remote_file_to_local server-side request forgery", "description": "A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remote_file_to_local of the file application/function.php. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.", "references": ["https://vuldb.com/vuln/426161", "https://vuldb.com/vuln/426161/cti", "https://vuldb.com/cve/CVE-2026-116094"], "fixes": [], "products": [{"name": "eyoucms", "path": "vulns/eyoucms", "ecosystem": ""}]}, {"id": "CVE-2026-115627", "noindex": false, "published": "2026-10-25T19:49:50.510Z", "modified": "2026-10-25T19:49:50.510Z", "cvss": 6.0, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": null, "kev": false, "exploits": [], "stacks": [], "path": "vulns/cve-2026-115627", "title": "AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows", "description": "Incorrect Authorization vulnerability in ash-project ash_postgres allows a user to load destination records linked to a source record only through another tenant's join rows.\n\nWhen a many_to_many relationship, or a through relationship, is loaded with a lateral join (for example with a per-record limit or sort), AshPostgres.DataLayer builds the query for the join resource, and for each resource along a through path, in lateral_join_query/3 and through_step_queries/4 without running that resource's read action, which is where attribute multitenancy is applied. When those resources use strategy :attribute multitenancy, rows belonging to other t", "references": ["https://github.com/ash-project/ash/security/advisories/GHSA-gr2r-f49c-9gm2", "https://cna.erlef.org/cves/CVE-2026-115627.html", "https://osv.dev/vulnerability/EEF-CVE-2026-115627"], "fixes": ["2.15.2"], "products": [{"name": "ash_postgres", "path": "vulns/ash_postgres", "ecosystem": ""}, {"name": "ash_postgres", "path": "vulns/ash_postgres", "ecosystem": ""}]}, {"id": "CVE-2026-115635", "noindex": false, "published": "2026-10-25T19:48:43.829Z", "modified": "2026-10-25T19:48:43.829Z", "cvss": 6.0, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": null, "kev": false, "exploits": [], "stacks": [], "path": "vulns/cve-2026-115635", "title": "AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set", "description": "Incorrect Authorization vulnerability in ash-project ash_postgres allows a user to read another tenant's record through a skipped upsert.\n\nWhen Ash.bulk_create/4 or a single create runs as an upsert with return_skipped_upsert?: true and the upsert is skipped (for example because its upsert_condition does not hold), AshPostgres.DataLayer reads the existing row back by the upsert identity in do_bulk_create/3 and upsert/4. That lookup did not apply the resource's attribute multitenancy, so on a resource using strategy :attribute it could match and return the row of another tenant with the same identity values, exposing its fields to the caller.\n", "references": ["https://github.com/ash-project/ash/security/advisories/GHSA-36hg-wwp2-fg8w", "https://cna.erlef.org/cves/CVE-2026-115635.html", "https://osv.dev/vulnerability/EEF-CVE-2026-115635"], "fixes": ["2.15.2"], "products": [{"name": "ash_postgres", "path": "vulns/ash_postgres", "ecosystem": ""}, {"name": "ash_postgres", "path": "vulns/ash_postgres", "ecosystem": ""}]}, {"id": "CVE-2026-114214", "noindex": false, "published": "2026-10-25T19:47:30.612Z", "modified": "2026-10-25T19:47:30.612Z", "cvss": 6.0, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": null, "kev": false, "exploits": [], "stacks": [], "path": "vulns/cve-2026-114214", "title": "Loading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records", "description": "Incorrect Authorization vulnerability in ash-project ash allows a client to read destination records unrelated to the source record through a through relationship.\n\nWhen a has_many relationship declared with through: was loaded for a single record with a limit of 1, or an unsorted has_one through relationship was loaded with a limit of 1, lateral_join?/4 in lib/ash/actions/read/relationships.ex chose the path that reads the destination without any filter linking it to the source. The load returned the first destination record by sort, or any other record with an offset. The read still runs the destination's policies but carries the relationsh", "references": ["https://github.com/ash-project/ash/security/advisories/GHSA-g2h4-xp57-q863", "https://cna.erlef.org/cves/CVE-2026-114214.html", "https://osv.dev/vulnerability/EEF-CVE-2026-114214"], "fixes": ["3.37.1"], "products": [{"name": "ash", "path": "vulns/ash", "ecosystem": ""}, {"name": "ash", "path": "vulns/ash", "ecosystem": ""}]}, {"id": "CVE-2026-116063", "noindex": false, "published": "2026-10-25T17:45:12.345Z", "modified": "2026-10-25T17:45:12.345Z", "cvss": 5.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": null, "kev": false, "exploits": [], "stacks": [], "path": "vulns/cve-2026-116063", "title": "DedeCMS update_guide.php require_once code injection", "description": "A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require_once of the file dede/update_guide.php. This manipulation of the argument vtime causes code injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.", "references": ["https://vuldb.com/vuln/426146", "https://vuldb.com/vuln/426146/cti", "https://vuldb.com/cve/CVE-2026-116063"], "fixes": [], "products": [{"name": "dedecms", "path": "vulns/dedecms", "ecosystem": ""}]}, {"id": "CVE-2026-116062", "noindex": false, "published": "2026-10-25T17:30:15.803Z", "modified": "2026-10-25T17:30:15.803Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": null, "kev": false, "exploits": [], "stacks": [], "path": "vulns/cve-2026-116062", "title": "SourceCodester Performance Indicator System save_profile.php sql injection", "description": "A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/save_profile.php. The manipulation of the argument Contact results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.", "references": ["https://vuldb.com/vuln/426145", "https://vuldb.com/vuln/426145/cti", "https://vuldb.com/cve/CVE-2026-116062"], "fixes": [], "products": [{"name": "performance indicator system", "path": "vulns/performance-indicator-system", "ecosystem": ""}]}, {"id": "CVE-2026-116061", "noindex": false, "published": "2026-10-25T17:15:16.161Z", "modified": "2026-10-25T17:15:16.161Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": null, "kev": false, "exploits": [], "stacks": [], "path": "vulns/cve-2026-116061", "title": "SourceCodester Performance Indicator System edit_dealer.php sql injection", "description": "A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_dealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.", "references": ["https://vuldb.com/vuln/426144", "https://vuldb.com/vuln/426144/cti", "https://vuldb.com/cve/CVE-2026-116061"], "fixes": [], "products": [{"name": "performance indicator system", "path": "vulns/performance-indicator-system", "ecosystem": ""}]}, {"id": "CVE-2026-115825", "noindex": false, "published": "2026-10-25T16:51:54.897Z", "modified": "2026-10-25T16:51:54.897Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-115825", "title": "HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length", "description": "HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length.\n\nThe request body is read with sysread() calls sized by the remaining Content-Length. Perl grows the read buffer to the requested length before any data arrives, so the server tries to allocate as much memory as the client declares.\n\nA remote attacker can send one request with a large Content-Length and a few body bytes, and perl exits with an out-of-memory error before the application is called. HTTP::Server::PSGI runs as a single process, so the server stays down until restarted.", "references": ["https://github.com/plack/Plack/commit/11545871cadc5df1b744cebb429cfeb4ebc1069a.patch", "https://metacpan.org/release/MIYAGAWA/Plack-1.0056/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-115825"], "fixes": [], "products": [{"name": "libplack-perl", "path": "vulns/debian-12/libplack-perl", "ecosystem": "Debian:12"}, {"name": "libplack-perl", "path": "vulns/debian-13/libplack-perl", "ecosystem": "Debian:13"}, {"name": "libplack-perl", "path": "vulns/debian-14/libplack-perl", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-115824", "noindex": false, "published": "2026-10-25T16:51:39.510Z", "modified": "2026-10-25T16:51:39.510Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-115824", "title": "Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies", "description": "Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies.\n\nThe chunked body decoder keeps each chunk in memory until the whole chunk and its CRLF have arrived, and sets no limit on the length of a chunk-size line. A client that declares a huge chunk size and streams data, or sends a chunk-size line that never ends, grows the buffer for as long as it keeps sending.\n\nA remote attacker can exhaust worker memory with a single connection.", "references": ["https://github.com/miyagawa/Starman/commit/d789a02dbe5408ef5f7a4659078d0008dd84c308.patch", "https://github.com/miyagawa/Starman/commit/0f33f9b132b5e410d6cce722ff71988e22476acf.patch", "https://metacpan.org/release/MIYAGAWA/Starman-0.4019/changes"], "fixes": [], "products": [{"name": "starman", "path": "vulns/debian-12/starman", "ecosystem": "Debian:12"}, {"name": "starman", "path": "vulns/debian-13/starman", "ecosystem": "Debian:13"}, {"name": "starman", "path": "vulns/debian-14/starman", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-115823", "noindex": false, "published": "2026-10-25T16:51:19.961Z", "modified": "2026-10-25T16:51:19.961Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-115823", "title": "Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections", "description": "Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections.\n\nFor a HEAD request Starman omits chunked framing but still writes the body returned by the application, on both the array and streaming response paths. Responses with a 1xx, 204 or 304 status also carry the body.\n\nOn a keep-alive or pipelined connection the client reads those bytes as the start of the next response. A front-end proxy that reuses upstream connections may then pair responses with the wrong requests.", "references": ["https://github.com/miyagawa/Starman/commit/91c47c529cd1e100f938486896ea9083ec3ec7bf.patch", "https://metacpan.org/release/MIYAGAWA/Starman-0.4019/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-115823"], "fixes": [], "products": [{"name": "starman", "path": "vulns/debian-12/starman", "ecosystem": "Debian:12"}, {"name": "starman", "path": "vulns/debian-13/starman", "ecosystem": "Debian:13"}, {"name": "starman", "path": "vulns/debian-14/starman", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-115822", "noindex": false, "published": "2026-10-25T16:51:00.241Z", "modified": "2026-10-25T16:51:00.241Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-115822", "title": "Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies", "description": "Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies.\n\nStarman decodes chunked request bodies before calling the application, matching each chunk-size line with `s/^(([0-9a-fA-F]+).*\\015\\012)//`. A line of hex digits followed by a bare LF and then CRLF never matches, because `.` does not match LF, and each failed attempt backtracks in time quadratic in the length of the hex run. Nothing limits the length of the line.\n\nA remote attacker can exhaust worker CPU by sending such requests to any route.", "references": ["https://github.com/miyagawa/Starman/commit/0f33f9b132b5e410d6cce722ff71988e22476acf.patch", "https://metacpan.org/release/MIYAGAWA/Starman-0.4019/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-115822"], "fixes": [], "products": [{"name": "starman", "path": "vulns/debian-12/starman", "ecosystem": "Debian:12"}, {"name": "starman", "path": "vulns/debian-13/starman", "ecosystem": "Debian:13"}, {"name": "starman", "path": "vulns/debian-14/starman", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-115817", "noindex": false, "published": "2026-10-25T16:50:33.914Z", "modified": "2026-10-25T16:50:33.914Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-115817", "title": "Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout covers only the headers", "description": "Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout covers only the headers.\n\nContent-Length and chunked request bodies are read with blocking reads and no deadline. A client that sends complete headers and then stalls or trickles the body keeps the worker waiting until it disconnects.\n\nA remote attacker can take every worker with a few such connections, five with the default worker count, so the server stops answering requests.\n\nVersion 0.4019 applies read_timeout to each wait for body data and adds a body_timeout limit, 300 seconds by default, on the total time to read a body.", "references": ["https://github.com/miyagawa/Starman/commit/89dffd3bdc9baa1cbe1b48a43615586ba2588558.patch", "https://github.com/miyagawa/Starman/commit/a30533c03051502d6b67cd48b3a95a61e129691b.patch", "https://metacpan.org/release/MIYAGAWA/Starman-0.4019/changes"], "fixes": [], "products": [{"name": "starman", "path": "vulns/debian-12/starman", "ecosystem": "Debian:12"}, {"name": "starman", "path": "vulns/debian-13/starman", "ecosystem": "Debian:13"}, {"name": "starman", "path": "vulns/debian-14/starman", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-116060", "noindex": false, "published": "2026-10-25T16:30:18.104Z", "modified": "2026-10-25T16:30:18.104Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": null, "kev": false, "exploits": [], "stacks": [], "path": "vulns/cve-2026-116060", "title": "SourceCodester Performance Indicator System adddealer.php sql injection", "description": "A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.", "references": ["https://vuldb.com/vuln/426143", "https://vuldb.com/vuln/426143/cti", "https://vuldb.com/cve/CVE-2026-116060"], "fixes": [], "products": [{"name": "performance indicator system", "path": "vulns/performance-indicator-system", "ecosystem": ""}]}], "total": 484522, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 200, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "neural network libraries", "path": "vulns/neural-network-libraries", "ecosystem": ""}, {"name": "scp containment breach multiplayer", "path": "vulns/scp-containment-breach-multiplayer", "ecosystem": ""}, {"name": "ravenfield", "path": "vulns/ravenfield", "ecosystem": ""}, {"name": "cloudclassroom-php-project", "path": "vulns/cloudclassroom-php-project", "ecosystem": ""}, {"name": "llama.cpp", "path": "vulns/llama.cpp", "ecosystem": ""}, {"name": "smg", "path": "vulns/smg", "ecosystem": ""}, {"name": "eyoucms", "path": "vulns/eyoucms", "ecosystem": ""}, {"name": "ash_postgres", "path": "vulns/ash_postgres", "ecosystem": ""}, {"name": "ash", "path": "vulns/ash", "ecosystem": ""}, {"name": "dedecms", "path": "vulns/dedecms", "ecosystem": ""}, {"name": "performance indicator system", "path": "vulns/performance-indicator-system", "ecosystem": ""}, {"name": "libplack-perl", "path": "vulns/debian-12/libplack-perl", "ecosystem": "Debian:12"}, {"name": "libplack-perl", "path": "vulns/debian-13/libplack-perl", "ecosystem": "Debian:13"}, {"name": "libplack-perl", "path": "vulns/debian-14/libplack-perl", "ecosystem": "Debian:14"}, {"name": "starman", "path": "vulns/debian-12/starman", "ecosystem": "Debian:12"}, {"name": "starman", "path": "vulns/debian-13/starman", "ecosystem": "Debian:13"}, {"name": "starman", "path": "vulns/debian-14/starman", "ecosystem": "Debian:14"}, {"name": "node.js", "path": "vulns/node.js", "ecosystem": ""}, {"name": "php", "path": "vulns/php", "ecosystem": ""}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 18331, "kev": 20}, "lastmod": "2026-10-26T01:00:15.928Z", "early_advisories": [{"fixes": [], "id": "EA-auto-4bff2f84a4193db76ba2e9516480ce082aff4b257b52d171", "cves": ["CVE-2026-111497"], "texts": {"ru": {"title": "Node.js: удалённое выполнение кода", "description": "По данным OpenNet, в Node.js найдена уязвимость — удалённое выполнение кода (CVE-2026-111497). Точные затронутые версии не указаны. Версия с исправлением в сообщении не указана.", "action": "Проверьте, вышло ли обновление Node.js с исправлением, и установите его."}}, "affected": {"all_supported": false, "branches": [], "ranges": []}, "updated_at": "2026-10-25T06:34:44.314509Z", "candidate_id": "a37e75e35b2b428b3d695bbb722cf7a5a6cb270f98b9a69a0fb5008f4155b333", "sources": [{"name": "opennet", "url": "https://www.opennet.ru/opennews/art.shtml?num=66537"}, {"name": "oss-security", "url": "https://seclists.org/oss-sec/2026/q4/373"}], "fix_status": "unfixed", "created_at": "2026-10-24T19:15:10.159140Z", "fixed_version": "", "product": "node.js", "state": "published"}, {"fixes": [], "id": "EA-auto-43744e2e5c9a208ed806e57a9b42af7ed13757e08dcfc2e8", "cves": ["CVE-2026-115560"], "texts": {"ru": {"title": "PHP: удалённое выполнение кода", "description": "По данным OpenNet, в PHP найдена уязвимость — удалённое выполнение кода (CVE-2026-115560). Точные затронутые версии не указаны. Версия с исправлением в сообщении не указана.", "action": "Проверьте, вышло ли обновление PHP с исправлением, и установите его."}}, "affected": {"all_supported": false, "branches": [], "ranges": []}, "updated_at": "2026-10-24T17:08:02.545120Z", "candidate_id": "63ebe2e680c5dd94d54a881dabfd180796897bf3bf44a3b15d1ec396cb8a181a", "sources": [{"name": "opennet", "url": "https://www.opennet.ru/opennews/art.shtml?num=66534"}, {"name": "the-hacker-news", "url": "https://thehackernews.com/2026/10/urgent-php-warns-of-another-unpatched.html"}], "fix_status": "unfixed", "created_at": "2026-10-24T17:05:52.430295Z", "fixed_version": "", "product": "php", "state": "published"}], "license": "Подборку PatchFirst и наши дополнения (приоритеты, ранние предупреждения, тексты, сводки и агрегаты) можно свободно использовать для собственных целей, включая внутренние задачи бизнеса. Перепродажа, коммерческое распространение и массовое зеркалирование этой подборки или дополнений допускаются только по письменному соглашению с оператором. При любом использовании или публикации подборки или наших дополнений указывайте PatchFirst (https://ru.patchfirst.dev/vulns/) с этой ссылкой на страницу ленты своего региона. Исходные записи открытых источников остаются под их лицензиями и условиями. Эти условия не ограничивают ваши права на исходные данные, которые можно получить у источников напрямую.", "terms_url": "https://ru.patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://ru.patchfirst.dev/vulns/"}, "source_changes": "PatchFirst отбирает, нормализует и объединяет записи; могут добавляться сводки и переводы. Новости указываются ссылкой на первоисточник в самой записи.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Лицензии исходных баз различаются; см. каталог источников."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Оценки доступны свободно; запрашивается указание источника (FIRST EPSS, оценки подготовлены Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}