Skip to content
Fencer Intel

Latest vulnerabilities

Newest first, late arrivals on top. Also a feed.

  1. 2.3
    CVE-2026-123119 Symfony: NoPrivateNetworkHttpClient Does Not Pin the Checked IP of Cached Hosts, Letting DNS Rebinding Enumerate Internal Ports (Incomplete Fix for CVE-2024-50342)
    maintainer advisory
  2. 8.2
    CVE-2026-121623 Symfony: DataUriNormalizer Opens Data URIs With a Non-Lowercase Scheme as Local Files, Letting a Client Read Any Server File
    maintainer advisory
  3. 8.7
    CVE-2026-123792 Symfony: Exponential and Quadratic Parse Times in the YAML Parser Let a Single Document Hold a Process
    maintainer advisory
  4. 4.3
    GHSA-9x85-gx46-6522 Potential IDOR in playlist management
    unreviewed · maintainers only
    published 2026-09-22
  5. 6.6
    CVE-2026-121925 Buffer overflow in SAML authentication post-back URL handling in libsnowflakeclient and Snowflake PHP PDO Driver
  6. 8.8
    CVE-2026-104799 Mobile builder <= 1.4.2 - Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parameters
    WordPress
  7. 7.2
    CVE-2026-97397 Remove Google Fonts <= 1.7 - Unauthenticated Stored Cross-Site Scripting via Comment Field via Regex-Mangled Output Buffer
    WordPress
  8. 6.5
    CVE-2026-114456 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers
  9. 7.8
    CVE-2026-59267 Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption
  10. 5.5
    CVE-2026-90632 Apache OpenOffice: Local file inclusion via GStreamer plugin
  11. 7.3
    CVE-2026-90634 Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
  12. 3.3
    CVE-2026-90631 Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables
  13. 7.3
    CVE-2026-90629 Apache OpenOffice: Out of bounds memory access during WMF import
  14. 7.3
    CVE-2026-90628 Apache OpenOffice: Stack overflow in CFF hint handling
  15. 5.5
    CVE-2026-90627 Apache OpenOffice: Local file inclusion via SQL provider and flat file database references
  16. 7.3
    CVE-2026-90626 Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
  17. 7.3
    CVE-2026-90624 Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability
  18. 7.3
    CVE-2026-59268 Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader
  19. 7.8
    CVE-2026-59264 Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer
  20. 5.5
    CVE-2026-59263 Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.
  21. 7.1
    CVE-2026-100302 Apache ZooKeeper: Denial of service through unbounded memory allocation in multiRead request handling
    maven
  22. 8.7
    CVE-2026-115448 Apache ZooKeeper: Unbounded recursion in snapshot serialization allows a client to render the server unrecoverable
    maven
  23. 8.7
    CVE-2026-100300 Apache ZooKeeper: Unauthenticated persistent denial of service via unvalidated quota-node data and paths crashing the transaction-apply thread
    maven
  24. 8.6
    CVE-2026-100252 Apache ZooKeeper: SASL authorization bypass on the client port through a client-supplied authorization ID
    maven
  25. 6.0
    CVE-2026-100235 Apache ZooKeeper: ACL enforcement bypass allows unauthorized operations to commit after an ACL revocation
    maven
  26. 6.5
    CVE-2026-108500 Apache ActiveMQ: LDAPAuthorizationMap allows authorization bypass via DN injection
  27. 4.4
    CVE-2026-102704 arbitrary read/write via grant copy
  28. 4.4
    CVE-2026-102703 arbitrary read/write via grant copy
  29. 7.5
    CVE-2026-103582 Apache ActiveMQ NMS OpenWire Client Library: Unbounded/Unvalidated Length Fields in Apache.NMS.OpenWire Unmarshalling (DoS)
  30. 6.5
    CVE-2026-108946 Apache ActiveMQ, ActiveMQ Broker: The broker does not verify user provided connection id matches connection
    maven