<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from cvelistv5</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 26 Jul 2026 09:52:08 +0000</lastBuildDate>
    <item>
      <title>cve-2024-14040</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2024-14040</link>
      <description>net: nexthop: Increase weight to u16</description>
      <content:encoded>net: nexthop: Increase weight to u16</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2024-14040</guid>
      <pubDate>Sun, 26 Jul 2026 06:30:17 +0000</pubDate>
    </item>
    <item>
      <title>cve-2026-64530</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-64530</link>
      <description>net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle</description>
      <content:encoded>net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-64530</guid>
      <pubDate>Sun, 26 Jul 2026 06:28:42 +0000</pubDate>
    </item>
    <item>
      <title>cve-2026-63720</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-63720</link>
      <description>datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field</description>
      <content:encoded>datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-63720</guid>
      <pubDate>Sun, 26 Jul 2026 03:51:18 +0000</pubDate>
    </item>
    <item>
      <title>cve-2026-17434</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-17434</link>
      <description>nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization</description>
      <content:encoded>nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-17434</guid>
      <pubDate>Sun, 26 Jul 2026 03:00:16 +0000</pubDate>
    </item>
    <item>
      <title>cve-2026-17433</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-17433</link>
      <description>nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization</description>
      <content:encoded>nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-17433</guid>
      <pubDate>Sun, 26 Jul 2026 02:30:09 +0000</pubDate>
    </item>
    <item>
      <title>cve-2026-15962</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-15962</link>
      <description>Fluent Forms Pro Add On Pack &lt;= 6.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta Field</description>
      <content:encoded>Fluent Forms Pro Add On Pack &lt;= 6.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta Field</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-15962</guid>
      <pubDate>Sun, 26 Jul 2026 01:28:39 +0000</pubDate>
    </item>
    <item>
      <title>cve-2026-17432</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-17432</link>
      <description>NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access control</description>
      <content:encoded>NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access control</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-17432</guid>
      <pubDate>Sun, 26 Jul 2026 00:15:11 +0000</pubDate>
    </item>
    <item>
      <title>cve-2026-10681</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-10681</link>
      <description>SMP race in `thread_idx_alloc()` lets concurrent `k_object_alloc(K_OBJ_THREAD)` callers share a kernel-object permission slot</description>
      <content:encoded>SMP race in `thread_idx_alloc()` lets concurrent `k_object_alloc(K_OBJ_THREAD)` callers share a kernel-object permission slot</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-10681</guid>
      <pubDate>Sat, 25 Jul 2026 13:23:07 +0000</pubDate>
    </item>
    <item>
      <title>cve-2026-66013</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-66013</link>
      <description>OpenRemote before 1.26.2 Authentication Bypass via Console Registration</description>
      <content:encoded>OpenRemote before 1.26.2 Authentication Bypass via Console Registration</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-66013</guid>
      <pubDate>Sat, 25 Jul 2026 10:45:56 +0000</pubDate>
    </item>
    <item>
      <title>cve-2026-66012</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-66012</link>
      <description>SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP</description>
      <content:encoded>SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-66012</guid>
      <pubDate>Sat, 25 Jul 2026 10:45:56 +0000</pubDate>
    </item>
  </channel>
</rss>
