CVE-2026-41242

protobufjs has an arbitrary code execution issue

protobufjs compiles protobuf definitions into JavaScript (JS) functions. In versions prior to 8.0.1, 7.5.5, and 6.11.6, attackers can inject arbitrary code in the "type" fields of protobuf definitions, which will then execute during object decoding using that definition. Versions 8.0.1, 7.5.5, and 6.11.6 patch the issue.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed

Vendors

Protobuf Protobufjs Project

Products

Protobuf Protobufjs

CVE-2026-86955

Authorization flaw enabling apps to access sensitive user data on iOS/iPadOS

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Ios And Ipados Ipados Iphone Os

CVE-2025-12767

Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to cause a denial of service using a specially crafted regular expression that would cause excessive resource consumption.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm Linux

Products

Concert Linux Kernel

CVE-2025-36084

Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm Linux

Products

Concert Linux Kernel

CVE-2026-15915

Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of build context directories into container images.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm Linux

Products

Concert Linux Kernel

CVE-2026-118760

Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact reads

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.17.0, the frontend artifact routes did not check whether an authenticated user was authorized to access the requested namespace. A user who can reach the frontend and knows an artifact location can select another tenant's namespace, or omit the namespace and reach an unguarded direct handler, to read artifact contents such as datasets, models, or pipeline outputs. The issue applies to multi-user deployments that rely on Kubeflow Pipelines authorization for tenant isolation. Authentication at ingress identifies the caller but does not authorize access to the selected artifact namespace. The issue does not establish arbitrary Kubernetes Secret disclosure, storage modification, or server-side code execution. This issue is fixed in version 2.17.0.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Kubeflow

Products

Pipelines

CVE-2026-16426

Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm Linux

Products

Concert Linux Kernel

CVE-2026-119144

Frappe Framework before 15.111.0 and 16.x before 16.21.0 Server-Side Template Injection via Message Fields

Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template injection vulnerability because user-controlled message fields are rendered as templates without neutralization. An authenticated attacker holding a common operational role can inject template expressions that the server evaluates in an unrestricted context.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Frappe

Products

Frappe

CVE-2026-17465

Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper enforcement of storage limits.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm Linux

Products

Concert Linux Kernel

CVE-2026-17472

Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify unauthorized resources due to the use of wildcards in RBAC permission definitions.

CVSS 3.1 · 9.6 Critical EPSS < 1% KEV · Not listed

Vendors

Ibm Linux

Products

Concert Linux Kernel

CVE-2026-105947

Arbitrary File Read in Innotim Software's Logsign SIEM

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.120 before 6.4.122.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Innotim Software Telecommunications And Consulting Trade Ltd. Co.

Products

Logsign Siem

CVE-2026-116215

MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption

MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated members to redeem one recharge card multiple times via the user/buy endpoint. Attackers can send many concurrent flag=card requests that pass the non-locking card read before it is marked used, inflating user_points to buy VIP upgrades and paid content.

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed

Vendors

Maccms Magicblack

Products

Maccms Maccms10

CVE-2026-116216

MacCMS v10 through 2026.1000.4056 Comment Impersonation via user_id Mass Assignment

MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData() that allows unauthenticated attackers to set arbitrary mac_comment columns including user_id. Attackers can submit anonymous comments with a crafted user_id parameter to attribute them to any registered member, displaying that member's avatar and impersonating them.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Maccms Magicblack

Products

Maccms Maccms10

CVE-2026-15661

IBM Concert Software Improper Output Neutralization for Logs

IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm Linux

Products

Concert Linux Kernel

CVE-2026-6930

IBM Concert Software Risky Cryptographic Algorithm

IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed

Vendors

Ibm Linux

Products

Concert Linux Kernel

CVE-2026-1501

IBM Concert Software Improper Certificate Validation

IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed

Vendors

Ibm Linux

Products

Concert Linux Kernel

CVE-2026-1510

IBM Concert Software Improper Clearing of Heap Memory

IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm Linux

Products

Concert Linux Kernel

CVE-2026-3303

IBM Concert Software Permissive Cross-domain Security Policy

IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed

Vendors

Ibm Linux

Products

Concert Linux Kernel

CVE-2026-3628

IBM Concert Software Information Disclosure

IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm Linux

Products

Concert Linux Kernel

CVE-2026-119379

SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()

SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count, causing sessionUpdateFind() to memset past the undersized aUpdateMask allocation.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Sqlite

Products

Sqlite