Permalink CVE-2026-62993

6.9 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): Present (P)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): High (H)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): Present (P)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): High (H)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 4 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 5 days ago
• @LeSuisse ignored
  6 packages

  • smarty3-i18n
  • haskellPackages.HSmarty
  • python313Packages.pysmarty2
  • python314Packages.pysmarty2
  • python313Packages.smartypants
  • python314Packages.smartypants
  1 week, 4 days ago
• @LeSuisse accepted 1 week, 4 days ago
• @LeSuisse published on GitHub 1 week, 4 days ago

Smarty: SSRF via redirect bypass of trusted_uri using {fetch}

• https://github.com/smarty-php/smarty/security/advisories/GHSA-cq55-c7wv-pxmq x_refsource_CONFIRM
• https://github.com/smarty-php/smarty/pull/1194 x_refsource_MISC
• https://github.com/smarty-php/smarty/commit/31e06fc087a8b5a9b236c1e5dacc1c2850a2c115 x_refsource_MISC
• https://github.com/smarty-php/smarty/commit/a1ccdb0518021a559b4066c37b76a42c86bbce90 x_refsource_MISC
• https://github.com/smarty-php/smarty/releases/tag/v4.5.7 x_refsource_MISC
• https://github.com/smarty-php/smarty/releases/tag/v5.8.2 x_refsource_MISC

---

smarty

• ==>= 5.0.0, < 5.8.2
• ==< 4.5.7

Permalink CVE-2026-82805

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 4 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 5 days ago
• @LeSuisse accepted 1 week, 4 days ago
• @LeSuisse published on GitHub 1 week, 4 days ago

Typora Mermaid Rendering cross site scripting

• VDB-397225 | Typora Mermaid Rendering cross site scripting technical-descriptionvdb-entry
• VDB-397225 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature
• CVE-2026-82805 | CVE Analysis and Report third-party-advisory
• Submit #863528 | Typora <=1.13.7 Code Injection third-party-advisory
• https://github.com/zzk6th/cve/issues/5 issue-trackingexploit
• https://typora.io/releases/all patch
• https://typora.io/#download patch

---

Typora

• ==1.14.0
• ==1.14.8
• ==1.13.0
• ==1.13.2
• ==1.13.7
• ==1.13.4
• ==1.14.4
• ==1.13.6
• ==1.13.3
• ==1.14.6
• ==1.14.1
• ==1.13.1
• ==1.14.5
• ==1.14.3
• ==1.14.2
• ==1.13.5
• ==1.13.8

Needs a backport.

Permalink CVE-2026-83497

8.7 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 4 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 5 days ago
• @LeSuisse ignored
  18 packages

  • opensearch-cli
  • python313Packages.opensearch-py
  • python314Packages.opensearch-py
  • haskellPackages.amazonka-opensearch
  • python313Packages.mypy-boto3-opensearch
  • python314Packages.mypy-boto3-opensearch
  • grafanaPlugins.grafana-opensearch-datasource
  • python313Packages.pysigma-backend-opensearch
  • python314Packages.pysigma-backend-opensearch
  • haskellPackages.amazonka-opensearchserverless
  • python313Packages.aliyun-python-sdk-opensearch
  • python313Packages.types-aiobotocore-opensearch
  • python314Packages.aliyun-python-sdk-opensearch
  • python314Packages.types-aiobotocore-opensearch
  • python313Packages.mypy-boto3-opensearchserverless
  • python314Packages.mypy-boto3-opensearchserverless
  • python313Packages.types-aiobotocore-opensearchserverless
  • python314Packages.types-aiobotocore-opensearchserverless
  1 week, 4 days ago
• @LeSuisse accepted 1 week, 4 days ago
• @LeSuisse published on GitHub 1 week, 4 days ago

Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor Pagination

• https://opensearch.org/artifacts/by-version/#release-3-7-0 patchrelease-notes
• https://opensearch.org/artifacts/by-version/#release-2-19-6 patchrelease-notes
• https://aws.amazon.com/security/security-bulletins/2026-092-aws/ vendor-advisory

---

OpenSearch

• =<3.6

Amazon OpenSearch Service

• =<3.5

Permalink CVE-2026-19873

7.5 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 1 week, 4 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 5 days ago
• @LeSuisse ignored
  4 packages

  • perlPackages.HTMLFormFuMultiForm
  • perl5Packages.HTMLFormFuMultiForm
  • perlPackages.CatalystControllerHTMLFormFu
  • perl5Packages.CatalystControllerHTMLFormFu
  1 week, 4 days ago
• @LeSuisse accepted 1 week, 4 days ago
• @LeSuisse published on GitHub 1 week, 4 days ago

HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements

• https://github.com/FormFu/HTML-FormFu/issues/71 issue-tracking
• https://security.metacpan.org/patches/H/HTML-FormFu/2.08/CVE-2026-19873-r1.patch patch
• http://www.openwall.com/lists/oss-security/2026/08/31/7

---

HTML-FormFu

• =<2.08

Permalink CVE-2026-82393

7.5 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): High (H)

updated 1 week, 4 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 5 days ago
• @LeSuisse ignored
  5 packages

  • pnpm_8
  • pnpmBuildHook
  • pnpmConfigHook
  • pnpm-fixup-state-db
  • pnpm-shell-completion
  1 week, 4 days ago
• @LeSuisse accepted 1 week, 4 days ago
• @LeSuisse published on GitHub 1 week, 4 days ago

pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on install

• https://github.com/pnpm/pnpm/security/advisories/GHSA-vq4v-j7r6-jq4m x_refsource_CONFIRM
• https://github.com/pnpm/pnpm/pull/12872 x_refsource_MISC
• https://github.com/pnpm/pnpm/pull/12890 x_refsource_MISC
• https://github.com/pnpm/pnpm/commit/51300fd41c5e4c8f47635108e373cc3d1f324fa7 x_refsource_MISC
• https://github.com/pnpm/pnpm/commit/78e29fe5583a1e5d69ea05e414eff310f78d5ed9 x_refsource_MISC
• https://github.com/pnpm/pnpm/releases/tag/v10.34.5 x_refsource_MISC
• https://github.com/pnpm/pnpm/releases/tag/v11.11.0 x_refsource_MISC

---

pnpm

• ==>= 11.0.0, < 11.11.0
• ==< 10.34.5

Permalink CVE-2026-72001

8.6 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 4 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 5 days ago
• @LeSuisse ignored package pangolin-cli 1 week, 4 days ago
• @LeSuisse accepted 1 week, 4 days ago
• @LeSuisse published on GitHub 1 week, 4 days ago

Pangolin < 1.22.0 Authentication Bypass via Share-Link Endpoint

• Release Notes release-notes
• https://www.vulncheck.com/advisories/pangolin-authentication-bypass-via-share-l… third-party-advisory

---

Pangolin

• <1.22.0

Permalink CVE-2026-82392

7.1 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): High (H)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): Low (L)

updated 1 week, 4 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 5 days ago
• @LeSuisse ignored
  4 packages

  • pnpmBuildHook
  • pnpmConfigHook
  • pnpm-fixup-state-db
  • pnpm-shell-completion
  1 week, 4 days ago
• @LeSuisse accepted 1 week, 4 days ago
• @LeSuisse published on GitHub 1 week, 4 days ago

pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraph

• https://github.com/pnpm/pnpm/security/advisories/GHSA-c59q-g84q-2gj5 x_refsource_CONFIRM
• https://github.com/pnpm/pnpm/pull/12872 x_refsource_MISC
• https://github.com/pnpm/pnpm/pull/12890 x_refsource_MISC
• https://github.com/pnpm/pnpm/commit/51300fd41c5e4c8f47635108e373cc3d1f324fa7 x_refsource_MISC
• https://github.com/pnpm/pnpm/commit/78e29fe5583a1e5d69ea05e414eff310f78d5ed9 x_refsource_MISC
• https://github.com/pnpm/pnpm/releases/tag/v10.34.5 x_refsource_MISC
• https://github.com/pnpm/pnpm/releases/tag/v11.11.0 x_refsource_MISC

---

pnpm

• ==>= 11.0.0, < 11.11.0
• ==< 10.34.5

Permalink CVE-2026-78156

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): Low (L)
• Subsequent System Impact Integrity (SI): Low (L)
• Subsequent System Impact Availability (SA): Low (L)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Low (L)
• Modified Subsequent System Impact Integrity (MSI): Low (L)
• Modified Subsequent System Impact Availability (MSA): Low (L)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @mweinelt Activity log

• Created suggestion 2 weeks, 6 days ago
• @mweinelt ignored package open5gs-webui 1 week, 5 days ago
• @mweinelt accepted 1 week, 5 days ago
• @mweinelt published on GitHub 1 week, 5 days ago

Open5GS S6a Authentication-Information-Request hss-s6a-path.c hss_ogs_diam_s6a_air_cb heap-based overflow

• VDB-394539 | Open5GS S6a Authentication-Information-Request hss-s6a-path.c hss_ogs_diam_s6a_air_cb heap-based overflow vdb-entrytechnical-description
• VDB-394539 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-required
• CVE-2026-78156 | CVE Analysis and Report third-party-advisory
• Submit #882951 | Open5GS 2.8.0 Heap Buffer Overflow third-party-advisory
• https://github.com/open5gs/open5gs/issues/4661 issue-tracking
• https://github.com/open5gs/open5gs/commit/a9c82ee0b590d76a581b0580cb46b598984e2… patch
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.8.0

Permalink CVE-2026-82589

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @mweinelt Activity log

• Created suggestion 1 week, 6 days ago
• @mweinelt ignored package open5gs-webui 1 week, 5 days ago
• @mweinelt accepted 1 week, 5 days ago
• @mweinelt published on GitHub 1 week, 5 days ago

Open5GS N1-N2 Message namf-handler.c amf_namf_comm_handle_n1_n2_message_transfer denial of service

• VDB-397084 | Open5GS N1-N2 Message namf-handler.c amf_namf_comm_handle_n1_n2_message_transfer denial of service technical-descriptionvdb-entry
• VDB-397084 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature
• CVE-2026-82589 | CVE Analysis and Report third-party-advisory
• Submit #891892 | Open5GS AMF v2.7.7 Denial of Service third-party-advisory
• https://github.com/open5gs/open5gs/issues/4396 issue-trackingexploit
• https://github.com/open5gs/open5gs/commit/abf8a836564b966b5141110fc25ed413c4f17… patch
• https://github.com/open5gs/open5gs/releases/tag/v2.8.0 patch
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.7.7
• ==2.7.5
• ==2.7.0
• ==2.7.6
• ==2.7.3
• ==2.7.2
• ==2.8.0
• ==2.7.1
• ==2.7.4

Permalink CVE-2026-82587

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @mweinelt Activity log

• Created suggestion 1 week, 6 days ago
• @mweinelt ignored package open5gs-webui 1 week, 5 days ago
• @mweinelt accepted 1 week, 5 days ago
• @mweinelt published on GitHub 1 week, 5 days ago

Open5GS AMF namf-handler.c amf_namf_comm_decode_ue_mm_context_list memory corruption

• VDB-397082 | Open5GS AMF namf-handler.c amf_namf_comm_decode_ue_mm_context_list memory corruption technical-descriptionvdb-entry
• VDB-397082 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• CVE-2026-82587 | CVE Analysis and Report third-party-advisory
• Submit #891890 | Open5gs AMF v2.7.7 Denial of Service third-party-advisory
• https://github.com/open5gs/open5gs/issues/4398 issue-trackingexploit
• https://github.com/open5gs/open5gs/commit/abf8a836564b966b5141110fc25ed413c4f17… patch
• https://github.com/open5gs/open5gs/releases/tag/v2.8.0 patch
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.7.7
• ==2.7.5
• ==2.7.0
• ==2.7.6
• ==2.7.3
• ==2.7.2
• ==2.8.0
• ==2.7.1
• ==2.7.4

Permalink CVE-2026-82590

5.3 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): Not Defined (X)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @mweinelt Activity log

• Created suggestion 1 week, 6 days ago
• @mweinelt ignored package open5gs-webui 1 week, 5 days ago
• @mweinelt accepted 1 week, 5 days ago
• @mweinelt published on GitHub 1 week, 5 days ago

Open5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertion

• VDB-397085 | Open5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertion technical-descriptionvdb-entry
• VDB-397085 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• CVE-2026-82590 | CVE Analysis and Report third-party-advisory
• Submit #891893 | Open5gs SMF v2.7.7 Denial of Service third-party-advisory
• https://github.com/open5gs/open5gs/issues/4455 issue-tracking
• https://github.com/open5gs/open5gs/commit/4554405f29bffd7562abedbee63484825bd90… patch
• https://github.com/open5gs/open5gs/releases/tag/v2.8.0 patch
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.7.7
• ==2.7.5
• ==2.7.0
• ==2.7.6
• ==2.7.3
• ==2.7.2
• ==2.8.0
• ==2.7.1
• ==2.7.4

Permalink CVE-2026-1522

5.3 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): Low (L)
• Exploit Code Maturity (E): Proof-of-Concept (P)
• Remediation Level (RL): Official Fix (O)
• Report Confidence (RC): Confirmed (C)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): Low (L)

updated 1 week, 5 days ago by @mweinelt Activity log

• Created suggestion 7 months, 2 weeks ago
• @LeSuisse ignored package open5gs-webui 7 months ago
• @mweinelt accepted 1 week, 5 days ago
• @mweinelt published on GitHub 1 week, 5 days ago

Open5GS SGWC s5c-handler.c sgwc_s5c_handle_modify_bearer_response denial of service

• VDB-343193 | Open5GS SGWC s5c-handler.c sgwc_s5c_handle_modify_bearer_response denial of service technical-descriptionvdb-entry
• VDB-343193 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature
• Submit #738371 | Open5GS SGWC v2.7.6 Denial of Service third-party-advisory
• https://github.com/open5gs/open5gs/issues/4266 issue-tracking
• https://github.com/open5gs/open5gs/issues/4266#event-21968568116 issue-tracking
• https://github.com/open5gs/open5gs/issues/4266#issue-3794991595 issue-trackingexploit
• https://github.com/open5gs/open5gs/commit/b19cf6a patch

---

Open5GS

• ==2.7.0
• ==2.7.6
• ==2.7.1
• ==2.7.5
• ==2.7.2
• ==2.7.4
• ==2.7.3

Permalink CVE-2026-1586

5.3 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): Low (L)
• Exploit Code Maturity (E): Proof-of-Concept (P)
• Remediation Level (RL): Official Fix (O)
• Report Confidence (RC): Confirmed (C)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): Low (L)

updated 1 week, 5 days ago by @mweinelt Activity log

• Created suggestion 7 months, 2 weeks ago
• @LeSuisse ignored package open5gs-webui 7 months ago
• @mweinelt accepted 1 week, 5 days ago
• @mweinelt published on GitHub 1 week, 5 days ago

Open5GS SGWC s11-handler.c ogs_gtp2_f_teid_to_ip denial of service

• VDB-343349 | Open5GS SGWC s11-handler.c ogs_gtp2_f_teid_to_ip denial of service technical-descriptionvdb-entry
• VDB-343349 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature
• Submit #738375 | Open5GS SGWC v2.7.6 Denial of Service third-party-advisory
• https://github.com/open5gs/open5gs/issues/4273 issue-tracking
• https://github.com/open5gs/open5gs/issues/4273#event-21968643659 issue-tracking
• https://github.com/open5gs/open5gs/issues/4273#issue-3796030721 issue-trackingexploit

---

Open5GS

• ==2.7.0
• ==2.7.1
• ==2.7.5
• ==2.7.2
• ==2.7.4
• ==2.7.3

Permalink CVE-2026-1738

5.3 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): Low (L)
• Exploit Code Maturity (E): Proof-of-Concept (P)
• Remediation Level (RL): Official Fix (O)
• Report Confidence (RC): Confirmed (C)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): Low (L)

updated 1 week, 5 days ago by @mweinelt Activity log

• Created suggestion 7 months, 1 week ago
• @LeSuisse ignored package open5gs-webui 7 months ago
• @mweinelt accepted 1 week, 5 days ago
• @mweinelt published on GitHub 1 week, 5 days ago

Open5GS SGWC context.c sgwc_tunnel_add assertion

• VDB-343637 | Open5GS SGWC context.c sgwc_tunnel_add assertion technical-descriptionvdb-entry
• VDB-343637 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• Submit #741193 | Open5gs SGWC v2.7.6 Denial of Service third-party-advisory
• https://github.com/open5gs/open5gs/issues/4261 issue-tracking
• https://github.com/open5gs/open5gs/issues/4261#event-21968563677 issue-tracking
• https://github.com/open5gs/open5gs/issues/4261#issue-3787803578 issue-trackingexploit
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.7.0
• ==2.7.6
• ==2.7.1
• ==2.7.5
• ==2.7.2
• ==2.7.4
• ==2.7.3

Permalink CVE-2026-4240

5.3 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): Low (L)
• Exploit Code Maturity (E): Proof-of-Concept (P)
• Remediation Level (RL): Official Fix (O)
• Report Confidence (RC): Confirmed (C)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): Low (L)

updated 1 week, 5 days ago by @mweinelt Activity log

• Created suggestion 5 months, 3 weeks ago
• @mweinelt ignored package open5gs-webui 1 week, 5 days ago
• @mweinelt accepted 1 week, 5 days ago
• @mweinelt published on GitHub 1 week, 5 days ago

Open5GS CCA smf_s6b_sta_cb denial of service

• VDB-351182 | Open5GS CCA smf_s6b_sta_cb denial of service technical-descriptionvdb-entry
• VDB-351182 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature
• Submit #771361 | Open5GS MME v2.7.6 Improper Authentication third-party-advisory
• https://github.com/open5gs/open5gs/issues/4343 issue-tracking
• https://github.com/open5gs/open5gs/issues/4343#issue-4021871895 issue-trackingexploit
• https://github.com/open5gs/open5gs/commit/80eb484a6ab32968e755e628b70d1a9c64f01… patch
• https://github.com/open5gs/open5gs/releases/tag/v2.7.7 patch
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.7.0
• ==2.7.6
• ==2.7.1
• ==2.7.5
• ==2.7.7
• ==2.7.2
• ==2.7.4
• ==2.7.3

Permalink CVE-2025-15685

5.3 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): Not Defined (X)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @mweinelt Activity log

• Created suggestion 1 month ago
• @mweinelt ignored package open5gs-webui 1 week, 5 days ago
• @mweinelt accepted 1 week, 5 days ago
• @mweinelt published on GitHub 1 week, 5 days ago

Open5GS freeDiameter memory corruption

• VDB-387278 | Open5GS freeDiameter memory corruption vdb-entry
• VDB-387278 | CTI Indicators (IOB, IOC) signaturepermissions-required
• CVE-2025-15685 | CVE Analysis and Report third-party-advisory
• Submit #867103 | Open5GS v2.7.1 Memory Corruption third-party-advisory
• https://github.com/open5gs/open5gs/issues/4156 exploitissue-tracking
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.7.1
• ==2.7.0

Permalink CVE-2025-15687

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @mweinelt Activity log

• Created suggestion 1 month ago
• @mweinelt ignored package open5gs-webui 1 week, 5 days ago
• @mweinelt accepted 1 week, 5 days ago
• @mweinelt published on GitHub 1 week, 5 days ago

Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service

• VDB-387283 | Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service technical-descriptionvdb-entry
• VDB-387283 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-required
• CVE-2025-15687 | CVE Analysis and Report third-party-advisory
• Submit #867119 | Open5GS v2.7.5 Denial of Service third-party-advisory
• https://github.com/open5gs/open5gs/issues/4027 issue-tracking
• https://github.com/open5gs/open5gs/pull/4034 patchissue-tracking
• https://github.com/user-attachments/files/21515527/SMF.crashes.zip exploit
• https://github.com/open5gs/open5gs/commit/f23d7a5e959acd8f37b925dc29b85f26b7d39… patch
• https://github.com/open5gs/open5gs/releases/tag/v2.7.7 patch
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.7.4
• ==2.7.0
• ==2.7.3
• ==2.7.2
• ==2.7.1
• ==2.7.6
• ==2.7.7
• ==2.7.5

Permalink CVE-2026-78186

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @mweinelt Activity log

• Created suggestion 2 weeks, 5 days ago
• @mweinelt ignored package open5gs-webui 1 week, 5 days ago
• @mweinelt accepted 1 week, 5 days ago
• @mweinelt published on GitHub 1 week, 5 days ago

Open5GS HSS hss-cx-path.c assertion

• VDB-394568 | Open5GS HSS hss-cx-path.c assertion vdb-entrytechnical-description
• VDB-394568 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-required
• CVE-2026-78186 | CVE Analysis and Report third-party-advisory
• Submit #885203 | open5gs Open5GS 2.8.0 and earlier Reachable Assertion third-party-advisory
• https://github.com/open5gs/open5gs/issues/4675 exploitissue-tracking
• https://github.com/open5gs/open5gs/commit/c9abe09421eb99bbf1cd7862a3d375e58a4eb… patch
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.0
• ==2.2
• ==2.3
• ==2.5
• ==2.4
• ==2.7
• ==2.8.0
• ==2.1
• ==2.6

Permalink CVE-2026-78157

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): Low (L)
• Subsequent System Impact Integrity (SI): Low (L)
• Subsequent System Impact Availability (SA): Low (L)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Low (L)
• Modified Subsequent System Impact Integrity (MSI): Low (L)
• Modified Subsequent System Impact Availability (MSA): Low (L)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @mweinelt Activity log

• Created suggestion 2 weeks, 5 days ago
• @mweinelt ignored package open5gs-webui 1 week, 5 days ago
• @mweinelt accepted 1 week, 5 days ago
• @mweinelt published on GitHub 1 week, 5 days ago

Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-bounds

• VDB-394540 | Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-bounds vdb-entrytechnical-description
• VDB-394540 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-required
• CVE-2026-78157 | CVE Analysis and Report third-party-advisory
• Submit #882953 | Open5GS 2.8.0 Out-of-Bounds Read third-party-advisory
• https://github.com/open5gs/open5gs/issues/4663 exploitissue-tracking
• https://github.com/open5gs/open5gs/commit/c18dc6938bf63cc7374315d3dca303d92066e… patch
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.8.0

Permalink CVE-2026-78158

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @mweinelt Activity log

• Created suggestion 2 weeks, 1 day ago
• @mweinelt ignored package open5gs-webui 1 week, 5 days ago
• @mweinelt accepted 1 week, 5 days ago
• @mweinelt published on GitHub 1 week, 5 days ago

Open5GS AMF UEContextReleaseRequest Path improper authorization

• VDB-394541 | Open5GS AMF UEContextReleaseRequest Path improper authorization vdb-entry
• VDB-394541 | CTI Indicators (IOB, IOC, TTP) permissions-requiredsignature
• CVE-2026-78158 | CVE Analysis and Report third-party-advisory
• Submit #883023 | Open5GS v2.8.0 Improper Authorization third-party-advisory
• https://github.com/open5gs/open5gs/security/advisories/GHSA-mg8r-2cvv-xq9j related
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.8.0

Permalink CVE-2026-82588

5.3 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): Not Defined (X)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @mweinelt Activity log

• Created suggestion 1 week, 6 days ago
• @mweinelt ignored package open5gs-webui 1 week, 5 days ago
• @mweinelt accepted 1 week, 5 days ago
• @mweinelt published on GitHub 1 week, 5 days ago

Open5GS Transfer Endpoint namf-handler.c null pointer dereference

• VDB-397083 | Open5GS Transfer Endpoint namf-handler.c null pointer dereference vdb-entry
• VDB-397083 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• CVE-2026-82588 | CVE Analysis and Report third-party-advisory
• Submit #891891 | Open5GS AMF v2.7.7 Denial of Service third-party-advisory
• https://github.com/open5gs/open5gs/issues/4397 issue-tracking
• https://github.com/open5gs/open5gs/commit/abf8a836564b966b5141110fc25ed413c4f17… patch
• https://github.com/open5gs/open5gs/releases/tag/v2.8.0 patch
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.7.7
• ==2.7.5
• ==2.7.0
• ==2.7.6
• ==2.7.3
• ==2.7.2
• ==2.8.0
• ==2.7.1
• ==2.7.4

Permalink CVE-2026-54134

7.0 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Adjacent (A)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Adjacent (A)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 5 days ago by @mweinelt Activity log

• Created suggestion 3 weeks, 1 day ago
• @mweinelt ignored
  2 packages

  • python313Packages.pyoctoprintapi
  • python314Packages.pyoctoprintapi
  1 week, 5 days ago
• @mweinelt accepted 1 week, 5 days ago
• @mweinelt published on GitHub 1 week, 5 days ago

OctoPrint: File exfiltration possible via query parameters on upload endpoints

• https://github.com/OctoPrint/OctoPrint/security/advisories/GHSA-j4h9-pm27-4rfw x_refsource_CONFIRM
• https://github.com/OctoPrint/OctoPrint/commit/579148beeb6d6e9b3d41b1cf32309b47218ed380 x_refsource_MISC
• https://github.com/OctoPrint/OctoPrint/commit/8e3348197db867c30a32d13984f0bd0d664be413 x_refsource_MISC
• https://github.com/OctoPrint/OctoPrint/releases/tag/1.11.8 x_refsource_MISC
• https://github.com/OctoPrint/OctoPrint/releases/tag/2.0.0rc3 x_refsource_MISC

---

OctoPrint

• ==< 1.11.8
• ==>= 2.0.0rc1, < 2.0.0rc3

Permalink CVE-2026-35163

4.6 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): Active (A)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): Low (L)
• Subsequent System Impact Integrity (SI): Low (L)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Active (A)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Low (L)
• Modified Subsequent System Impact Integrity (MSI): Low (L)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 5 days ago by @mweinelt Activity log

• Created suggestion 3 weeks, 1 day ago
• @mweinelt ignored
  2 packages

  • python313Packages.pyoctoprintapi
  • python314Packages.pyoctoprintapi
  1 week, 5 days ago
• @mweinelt accepted 1 week, 5 days ago
• @mweinelt published on GitHub 1 week, 5 days ago

OctoPrint: XSS in Suppressed Command Notifications

• https://github.com/OctoPrint/OctoPrint/security/advisories/GHSA-p6qx-ghxm-389h x_refsource_CONFIRM
• https://github.com/OctoPrint/OctoPrint/commit/42e0f9863935e136f04ed3c560cb96483a580d1b x_refsource_MISC
• https://github.com/OctoPrint/OctoPrint/commit/6e3db9096f8a94f7c2249be24b6d03a7d9c12bc7 x_refsource_MISC
• https://github.com/OctoPrint/OctoPrint/releases/tag/1.11.8 x_refsource_MISC
• https://github.com/OctoPrint/OctoPrint/releases/tag/2.0.0rc3 x_refsource_MISC

---

OctoPrint

• ==< 1.11.8
• ==>= 2.0.0rc1, < 2.0.0rc3

Permalink CVE-2026-74802

0.0 NONE

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Attack Requirement (AT): Present (P)
• Privileges Required (PR): Low (L)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Attack Requirement (MAT): Present (P)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 3 weeks, 5 days ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy

• GitHub Security Advisory (GHSA-3cc2-h3v6-rqpq) vendor-advisoryexploit
• VulnCheck Advisory: SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy third-party-advisory

---

siyuan

• <3.7.4
• ==3.7.4

Permalink CVE-2026-73053

9.4 CRITICAL

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): High (H)
• Subsequent System Impact Integrity (SI): High (H)
• Subsequent System Impact Availability (SA): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): High (H)
• Modified Subsequent System Impact Integrity (MSI): High (H)
• Modified Subsequent System Impact Availability (MSA): High (H)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 4 weeks ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

SiYuan before v3.7.4 Cross-Site Scripting via unicode2Emoji

• GitHub Security Advisory (GHSA-vx5w-qrvp-mmcq) vendor-advisory
• VulnCheck Advisory: SiYuan before v3.7.4 Cross-Site Scripting via unicode2Emoji third-party-advisory

---

siyuan

• <3.7.4
• ==3.7.4

Permalink CVE-2026-73046

9.3 CRITICAL

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 4 weeks ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

SiYuan before v3.7.4 Authentication Bypass via HTTP Basic Auth

• GitHub Security Advisory (GHSA-w3xh-mmmh-r54v) vendor-advisory
• VulnCheck Advisory: SiYuan before v3.7.4 Authentication Bypass via HTTP Basic Auth third-party-advisory

---

siyuan

• <3.7.4
• ==3.7.4

Permalink CVE-2026-73045

8.7 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 4 weeks ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

SiYuan before 3.7.4 Brute-Force via authFilePublishAccess

• GitHub Security Advisory (GHSA-v362-968x-gp2v) vendor-advisory
• VulnCheck Advisory: SiYuan before 3.7.4 Brute-Force via authFilePublishAccess third-party-advisory

---

siyuan

• <3.7.4
• ==3.7.4

Permalink CVE-2026-73044

9.4 CRITICAL

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): High (H)
• Subsequent System Impact Integrity (SI): High (H)
• Subsequent System Impact Availability (SA): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): High (H)
• Modified Subsequent System Impact Integrity (MSI): High (H)
• Modified Subsequent System Impact Availability (MSA): High (H)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 4 weeks ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

SiYuan before v3.7.4 Stored Cross-Site Scripting via Column Width

• GitHub Security Advisory (GHSA-rj55-w3xr-gj62) vendor-advisory
• VulnCheck Advisory: SiYuan before v3.7.4 Stored Cross-Site Scripting via Column Width third-party-advisory

---

siyuan

• <3.7.4
• ==3.7.4

Permalink CVE-2026-73050

9.4 CRITICAL

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): High (H)
• Subsequent System Impact Integrity (SI): High (H)
• Subsequent System Impact Availability (SA): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): High (H)
• Modified Subsequent System Impact Integrity (MSI): High (H)
• Modified Subsequent System Impact Availability (MSA): High (H)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 4 weeks ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

SiYuan before v3.7.4 Stored XSS via select option color

• GitHub Security Advisory (GHSA-m7cc-jh9q-wxg8) vendor-advisory
• VulnCheck Advisory: SiYuan before v3.7.4 Stored XSS via select option color third-party-advisory

---

siyuan

• <3.7.4
• ==3.7.4

Permalink CVE-2026-73052

9.4 CRITICAL

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): High (H)
• Subsequent System Impact Integrity (SI): High (H)
• Subsequent System Impact Availability (SA): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): High (H)
• Modified Subsequent System Impact Integrity (MSI): High (H)
• Modified Subsequent System Impact Availability (MSA): High (H)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 4 weeks ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

SiYuan before v3.7.4 Stored XSS via Attribute-View Field Names

• GitHub Security Advisory (GHSA-g3jx-227v-x2x4) vendor-advisory
• VulnCheck Advisory: SiYuan before v3.7.4 Stored XSS via Attribute-View Field Names third-party-advisory

---

siyuan

• <3.7.4
• ==3.7.4

Permalink CVE-2026-73042

9.4 CRITICAL

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): High (H)
• Subsequent System Impact Integrity (SI): High (H)
• Subsequent System Impact Availability (SA): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): High (H)
• Modified Subsequent System Impact Integrity (MSI): High (H)
• Modified Subsequent System Impact Availability (MSA): High (H)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 4 weeks ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

SiYuan before v3.7.4 Remote Code Execution via Menu Metadata

• GitHub Security Advisory (GHSA-gcm3-qcq3-72rv) vendor-advisory
• VulnCheck Advisory: SiYuan before v3.7.4 Remote Code Execution via Menu Metadata third-party-advisory

---

siyuan

• <3.7.4
• ==3.7.4

Permalink CVE-2026-73043

9.4 CRITICAL

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): High (H)
• Subsequent System Impact Integrity (SI): High (H)
• Subsequent System Impact Availability (SA): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): High (H)
• Modified Subsequent System Impact Integrity (MSI): High (H)
• Modified Subsequent System Impact Availability (MSA): High (H)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 4 weeks ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

SiYuan before v3.7.4 Remote Code Execution via Template Calculation

• GitHub Security Advisory (GHSA-rwh7-gm74-67h6) vendor-advisory
• VulnCheck Advisory: SiYuan before v3.7.4 Remote Code Execution via Template Calculation third-party-advisory

---

siyuan

• <3.7.4
• ==3.7.4

Permalink CVE-2026-73041

9.4 CRITICAL

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): High (H)
• Subsequent System Impact Integrity (SI): High (H)
• Subsequent System Impact Availability (SA): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): High (H)
• Modified Subsequent System Impact Integrity (MSI): High (H)
• Modified Subsequent System Impact Availability (MSA): High (H)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 4 weeks ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

SiYuan before v3.7.4 Remote Code Execution via PDF Annotations

• GitHub Security Advisory (GHSA-fqpw-c3pj-w8g9) vendor-advisory
• VulnCheck Advisory: SiYuan before v3.7.4 Remote Code Execution via PDF Annotations third-party-advisory

---

siyuan

• <3.7.4
• ==3.7.4

Permalink CVE-2026-73056

9.3 CRITICAL

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 3 weeks, 6 days ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

SiYuan kernel before 3.7.4 Unthrottled Brute-Force via API Token

• GitHub Security Advisory (GHSA-m6w6-p7pc-fpg2) vendor-advisory
• VulnCheck Advisory: SiYuan kernel before 3.7.4 Unthrottled Brute-Force via API Token third-party-advisory

---

siyuan

• <3.7.4
• ==3.7.4

Permalink CVE-2026-74801

8.6 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): High (H)
• Subsequent System Impact Integrity (SI): High (H)
• Subsequent System Impact Availability (SA): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): High (H)
• Modified Subsequent System Impact Integrity (MSI): High (H)
• Modified Subsequent System Impact Availability (MSA): High (H)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 3 weeks, 5 days ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

SiYuan before 3.7.4 Local Privilege Escalation via elevator.exe

• GitHub Security Advisory (GHSA-vmp7-pm7g-ghcc) vendor-advisoryexploit
• VulnCheck Advisory: SiYuan before 3.7.4 Local Privilege Escalation via elevator.exe third-party-advisory

---

siyuan

• <3.7.4
• ==3.7.4

Permalink CVE-2026-73054

8.7 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 4 weeks ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

SiYuan before v3.7.4 Authentication Bypass via WebSocket

• GitHub Security Advisory (GHSA-c8w8-3pqp-wr83) vendor-advisory
• VulnCheck Advisory: SiYuan before v3.7.4 Authentication Bypass via WebSocket third-party-advisory

---

siyuan

• <3.7.4
• ==3.7.4

Permalink CVE-2026-73047

8.6 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 4 weeks ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

siyuan before v3.7.4 Server-Side Template Injection via attribute-view

• GitHub Security Advisory (GHSA-v97v-gxxg-rhmq) vendor-advisory
• VulnCheck Advisory: siyuan before v3.7.4 Server-Side Template Injection via attribute-view third-party-advisory

---

siyuan

• <3.7.4
• ==3.7.4

Permalink CVE-2026-74800

9.4 CRITICAL

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): High (H)
• Subsequent System Impact Integrity (SI): High (H)
• Subsequent System Impact Availability (SA): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): High (H)
• Modified Subsequent System Impact Integrity (MSI): High (H)
• Modified Subsequent System Impact Availability (MSA): High (H)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 3 weeks, 5 days ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

SiYuan before v3.7.4 Stored XSS via assets endpoint

• GitHub Security Advisory (GHSA-mjf3-jwmf-r6wf) vendor-advisory
• VulnCheck Advisory: SiYuan before v3.7.4 Stored XSS via assets endpoint third-party-advisory

---

siyuan

• <3.7.4
• ==3.7.4