Analysis

CVE-2026-45689 is a critical flaw in Rocket.Chat's OAuth2 token endpoint, where grant parameters are not validated as strings before being used in MongoDB queries. According to the GitHub advisory, an unauthenticated network attacker can obtain a valid access token bound to a user, and if that user is an administrator, the token grants broad administrative API access. The record gives a CVSS 3.1 base score of 9.1, lists fixed versions in the description, and shows no confirmed exploitation in the CISA KEV catalog.

StreamRipper32 version 2.6 is described as containing a buffer overflow in the Station/Song section, reachable through the SongPattern input. The record provider, VulnCheck, scores it critical at CVSS 3.1 9.8, and the description says it could potentially allow arbitrary code execution. The record shows no KEV listing, no EPSS data and no fixed version.

CVE-2020-37074 is a buffer overflow in Remote Desktop Audit 2.3.0.157 that the record links to the Add Computers Wizard file import process. According to the record, a crafted file can bypass structured exception handling (SEH) and lead to arbitrary code execution. The record reports a CVSS 3.1 score of 9.8 from VulnCheck, but CISA KEV does not list it and no confirmed exploitation appears in the sources consulted.

CVE-2026-8666 is an OS command injection flaw in the traceroute action of the Rapid7 InsightConnect Traceroute Plugin on Linux, classified as CWE-78. NVD scores it 9.8 (CVSS 3.1, critical), while the CNA Rapid7 scores it 7.7. The record lists affected versions below 1.0.3 and does not show exploitation in the sources consulted.

CVE-2020-37075 is a buffer overflow in the file import feature of the Add Computers Wizard in LanSend 3.2, which the CNA describes as allowing remote attackers to execute arbitrary code. The CNA rates it critical, with a CVSS 3.1 score of 9.8 and CWE-120 assigned. The sources consulted do not list affected or fixed versions, and the CVE is not in the CISA KEV catalog.

CVE-2026-53176 is an integer underflow in the Linux kernel iSER target code (ib_isert). A login PDU shorter than the iSER header size can make the computed payload length negative, which the record says leads to an out-of-bounds copy and a crash of the target node. The CNA rates it CVSS v3.1 9.8 (critical), and the record lists fixes in several stable branches.

CVE-2026-53086 is a race condition (CWE-362) in the bcmgenet network driver of the Linux kernel. The timeout handler stopped all transmit queues when only one queue timed out, which could interfere with queues still working, and the fix restarts only the affected queue. The CNA assigned a CVSS 3.1 base score of 9.8 (critical), and the record shows no CISA KEV listing.

CVE-2025-69971 affects FUXA v1.2.7, where the JWT helper in server/api/jwt-helper.js signs and verifies tokens with a hard-coded secret, classified as CWE-798. According to the record, a remote attacker could forge administrator tokens and gain full administrative access. NVD rates it Critical with CVSS 3.1 score 9.8, and no confirmed exploitation appears in the sources consulted.

Fast DDS, a C++ implementation of the OMG DDS standard, contains a heap buffer overflow in its DATA_FRAG receive path that a single malformed RTPS packet from an unauthenticated sender can trigger. The record describes an immediate crash (denial of service) and a potential for memory corruption, referred to as an RCE risk. Fixed versions named in the record are 3.4.1, 3.3.1 and 2.6.11.

CVE-2020-37090 affects School ERP Pro 1.0, where the messaging attachment feature accepts arbitrary PHP files, as described in the record. The CNA-provided CVSS 3.1 score is 9.8 (critical), and the weakness is classified as CWE-434. No confirmed exploitation in the wild appears in the sources consulted, and no fixed version is listed in the record.

CVE-2025-65078 is an untrusted search path weakness (CWE-426) in the Embedded Solutions Framework used by various Lexmark devices. The consulted record gives a CVSS 4.0 score of 9.3 with a network attack vector and no privileges or user interaction required. No affected or fixed versions are listed in the record, so administrators should check the vendor advisory directly.

A fixed Linux kernel flaw in netfilter conntrack allows an out-of-bounds write (CWE-787) during SIP helper processing of SDP content used for NAT, as reported by KASAN. The CNA scores it 9.8 (Critical) with CVSS 3.1, and the record links eight stable-branch patches. No confirmed active exploitation appears in the sources consulted, and it is not listed in CISA KEV.

CVE-2026-53088 is an off-by-one error in the bcmgenet network driver of the Linux kernel, where the transmit control block cleanup returns the wrong entry. The CNA assigns a CVSS 3.1 score of 9.8, and the record lists upstream fix commits across several stable branches. The record shows no CISA KEV listing and no confirmed exploitation in the sources consulted.

CVE-2026-53216 affects the mvpp2 network driver in the Linux kernel, where the XDP path advertises PAGE_SIZE as the frame size even when a short buffer pool is smaller. The record gives a CNA-assigned CVSS 3.1 score of 9.8 and lists seven stable-tree commits as fixes. The sources consulted show no confirmed exploitation.

CVE-2026-1812 is a path traversal weakness (CWE-22) in bolo-solo up to 2.6.4, located in the importFromCnblogs function of the backup service. The record states that the attack can be started remotely, and NVD assigns a CVSS 3.1 base score of 9.8 (Critical). No fixed version is listed in the sources consulted, and the project had not yet responded to the reported issue.