CVE-2026-86253

h3 before 1.15.6 Path Traversal via Percent-Encoded Dot Segments

h3 (npm package) versions <= 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic(). On Node.js deployments, event.url.pathname is not normalized, so percent-encoded dot segments (%2e%2e) are passed to decodeURI() and decoded to ../ sequences without sanitization. An unauthenticated remote attacker can send crafted requests to endpoints served by serveStatic() to read arbitrary files outside the intended static directory. Fixed in 1.15.6 and 2.0.1-rc.15.

CVSS 4.0 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

H3js

Products

H3

CVE-2026-86197

Grav before 2.0.20 Cross-Site Scripting via Assets Sandbox

Grav before 2.0.20 contains a cross-site scripting vulnerability in the Twig sandbox policy that allowlists addJs and addCss methods on Grav\Common\Assets without proper output escaping. Page editors can inject arbitrary script by registering malicious assets or injecting attributes, which are rendered unescaped into document head tags and executed for all visitors including administrators.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Getgrav

Products

Grav

CVE-2026-86192

SiYuan before v3.8.2 Information Disclosure via Attribute-View

SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the getAttributeViewKeys endpoint. Publish readers can retrieve hidden KeyValues payloads from rows bound to inaccessible documents, exposing private database contents without authorization.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

B3log Siyuan

Products

Siyuan Siyuan

CVE-2026-86187

WWBN AVideo Weak PRNG Password Generation via External Login

WWBN AVideo generates passwords for external-login accounts using rand() instead of a cryptographic generator, producing only 31-bit integers. Attackers with access to password hashes can recover plaintext passwords in minutes through offline brute-force attacks due to unsalted MD5-based hashing.

CVSS 4.0 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Wwbn

Products

Avideo

CVE-2026-86174

Plane through 1.4.2 Arbitrary Comment Write via Public Deploy Board

Plane through 1.4.2 fails to validate that issues belong to the deploy board's project in the public comment endpoint. Authenticated attackers can post comments to arbitrary issues across workspaces by supplying an issue_id parameter to the public deploy-board comment endpoint.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Plane

Products

Plane

CVE-2026-86122

Rowboat through 0.9.1 Server-Side Request Forgery via Custom MCP Server

Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure arbitrary destinations. Attackers can point these URLs at internal services and cloud metadata endpoints to perform server-side request forgery and enumerate internal network topology.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Rowboatlabs

Products

Rowboat

CVE-2026-86117

Coolify through 4.3.17 OAuth Account Takeover via Unverified Email Matching

Coolify through 4.3.17 contains an authentication bypass vulnerability in the OAuth callback handler that signs users into existing accounts based solely on email address without verifying provider assertions or binding OAuth identities. Attackers can register a victim's email address on any enabled OAuth provider to obtain authenticated sessions as that user, bypassing password requirements and two-factor authentication.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed

Vendors

Coollabs

Products

Coolify

CVE-2026-86112

BookWyrm through 0.9.1 Missing Authorization on the Favorite and Unfavorite Endpoints

BookWyrm through 0.9.1 fails to validate user visibility permissions in the Favorite and Unfavorite views, allowing authenticated attackers to favorite or unfavorite followers-only and direct statuses they cannot access. Attackers can POST to the favorite endpoint with a status ID to create unauthorized interactions, trigger ActivityPub broadcasts, and enumerate private status IDs through response differentiation.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Bookwyrm-social Joinbookwyrm

Products

Bookwyrm Bookwyrm

CVE-2026-86096

PX4 Autopilot through 1.17.0 Use-After-Free via Temperature Calibration Task Startup

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration::start() due to a race condition between task spawning and object deletion. Attackers can trigger the calibration process via shell commands to write to freed heap memory, corrupting unrelated objects or allocator metadata and destabilizing heap operations.

CVSS 4.0 · 6 Medium EPSS < 1% KEV · Not listed

Vendors

Px4

Products

Autopilot

CVE-2026-85696

SadTalker OS Command Injection via Audio Filename

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to break out of quoted arguments and execute arbitrary system commands when video generation occurs.

CVSS 4.0 · 9.3 Critical EPSS 2.6% KEV · Not listed

Vendors

Opentalker

Products

Sadtalker

CVE-2026-85691

MegaParse 0.0.55 Server-Side Request Forgery via POST /v1/url

MegaParse 0.0.55 contains an unauthenticated server-side request forgery vulnerability in the POST /v1/url endpoint that fetches caller-supplied URLs server-side. Attackers can supply internal service URLs or metadata endpoints without authentication to read their responses directly from the JSON response.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

The-vibe-company

Products

Megaparse

CVE-2026-85686

ms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLs

ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that fetches multimodal media URLs without validation or redirect filtering. Unauthenticated attackers can supply arbitrary image_url, audio_url, or video_url parameters to make the server issue requests to internal services and cloud metadata endpoints.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Modelscope

Products

Ms-swift

CVE-2026-85674

aider 0.86.2 Remote Code Execution via .aider.conf.yml

aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd (executed at startup) or lint-cmd (executed on the first file edit), which aider runs through a shell (subprocess with shell=True) without any user confirmation, LLM interaction, or API key. Consequently, a user who clones and runs aider inside an attacker-supplied repository achieves arbitrary command execution on their machine. The behavior is long-standing and was confirmed on 0.86.3.dev (current main).

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Aider-ai

Products

Aider

CVE-2026-85669

potpie through 2.0.0 Missing Ownership Check via code-changes sync

potpie through 2.0.0 fails to verify user ownership on the POST /conversations/{conversation_id}/code-changes/sync endpoint. Authenticated attackers can write arbitrary file changes into other users' conversations by supplying their conversation IDs, allowing unauthorized modification of pending changes.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Potpie-ai

Products

Potpie

CVE-2026-85664

Chroma 1.5.9 Unbounded HNSW Index Parameters Memory Exhaustion

Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_search in collection-create requests. Unauthenticated attackers can supply arbitrarily large parameter values to exhaust server memory and cause denial of service during index compaction.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Chroma-core

Products

Chroma

CVE-2026-85651

Trigger.dev before 4.5.2 Unauthorized Environment Access via Run Replay

Trigger.dev versions before 4.5.2 fail to validate environment membership during run replay operations, allowing authenticated attackers to inject task runs into arbitrary environments. Attackers can replay their own runs into other organizations' or projects' environments to consume victim resources and pollute run history.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Triggerdotdev

Products

Trigger.dev

CVE-2026-85623

goose 1.37.0 Arbitrary Command Execution via Recipe Extensions

goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry configurations.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Aaif-goose

Products

Goose

CVE-2026-85618

ConvertX 0.17.0 Arbitrary File Read via LaTeX Input Directives

ConvertX 0.17.0 contains an arbitrary file read vulnerability in the xelatex converter that allows authenticated users to read files by uploading LaTeX files with input directives. Attackers can upload .tex files containing \\input{path} or \\verbatiminput{path} directives to have the TeX engine read arbitrary files accessible to the server process and include them in downloadable PDF output.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

C4illin

Products

Convertx

CVE-2026-85601

Grav Admin before 2.0.20 Cross-Site Scripting via marked.js

Grav Admin before 2.0.20 fails to sanitize output from marked.parse() before injecting it into the DOM via Svelte's {@html} directive in MarkdownEditor and MarkdownModal components. Attackers can inject javascript: URI schemes in plugin or theme changelogs to execute arbitrary code in authenticated admin sessions without requiring site access.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Getgrav

Products

Grav

CVE-2026-85591

phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Change

phpMyFAQ versions before 4.1.8 contain an authentication bypass vulnerability in the user control panel API endpoint that allows authenticated attackers to change account passwords without verifying the current password. Attackers with session access can submit a PUT request to the user data update endpoint with only a CSRF token to silently change any user's password, including administrators, causing irreversible account takeover and victim lockout.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Phpmyfaq Thorsten

Products

Phpmyfaq Phpmyfaq