Source intelligence
425 collected source records. Original advisories and security research.
308 matching sources · Newest published first
Open CVE tracker →Original publisher records, awaiting Egret editorial review. Headlines open the original source; CVE identifiers open the tracker.
Scroll across the table to see all columns.
| Published | Finding / research | Publisher | Identifiers |
|---|---|---|---|
| CVE-2026-8332 - TimePictra root password hardcoded in installation files CVE-2026-8332 TimePictra root password hardcoded in installation files Description A vulnerability in Microchip TimePictra. This issue affects TimePictra: before 12.0. INFO Published Date : Nov. 12, 2026, 6:19 a.m. Last … |
CVE Feed | ||
| CVE-2026-8331 - TimePictra ermote code execution via file upload CVE-2026-8331 TimePictra ermote code execution via file upload Description An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrai… |
CVE Feed | ||
| CVE-2026-8333 - TimePictra Stored Cross-site Scripting CVE-2026-8333 TimePictra Stored Cross-site Scripting Description A vulnerability in Microchip TimePictra. This issue affects TimePictra: before 12.0. INFO Published Date : Nov. 12, 2026, 6:18 a.m. Last Modified : Nov. 12… |
CVE Feed | ||
| CVE-2026-87772 - Unauthenticated Polkit Privilege Escalation in TÜBİTAK BİLGEM's Pardus About CVE-2026-87772 Unauthenticated Polkit Privilege Escalation in TÜBİTAK BİLGEM's Pardus About Description Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows… |
CVE Feed | ||
| Symlink swap after validation lets read_text_file return files outside allowedDirectories GHSA: GHSA-p9cv-8g75-4xcg Reported severity: medium Advisory package entry 1: Affected package: @modelcontextprotocol/server-filesystem (npm) Affected versions: < 2.3.0 Patched version: 2.3.0 Advisory package entry 2: Af… |
MCP server advisories | GHSA-53MR-W429-C597GHSA-P9CV-8G75-4XCG |
|
| mcp-server-git: Incomplete Fix for GHSA-w766-5x43-whvw in validate_opened_repo() Allows --repository Confinement Bypass via objects/info/alternates and Linked-Worktree common_dir Confusion GHSA: GHSA-q74p-4wrc-q7w6 Reported severity: medium Advisory package entry 1: Affected package: mcp-server-git (pip) Affected versions: >= 2026.10.28, < 2026.11.11 Patched version: 2026.11.11 Advisory description: Patche… |
MCP server advisories | GHSA-Q74P-4WRC-Q7W6GHSA-W766-5X43-WHVW |
|
| mcp-server-fetch: robots.txt path-canonicalization bypass (e.g. //private fetched while Disallow: /private) GHSA: GHSA-f9hh-cmx9-2f23 Reported severity: low Advisory package entry 1: Affected package: mcp-server-fetch (pip) Affected versions: >= 0.6.1, < 2026.11.11 Patched version: 2026.11.11 Advisory description: Summary mcp-… |
MCP server advisories | GHSA-3JQG-R5PP-RMP2GHSA-F9HH-CMX9-2F23 |
|
| mcp-server-git: arbitrary command execution via a repository's own Git configuration (core.fsmonitor) during read-only tools GHSA: GHSA-6hqx-gqrx-c5r2 Reported severity: high Advisory package entry 1: Affected package: mcp-server-git (pip) Affected versions: < 2026.11.11 Patched version: 2026.11.11 Advisory description: Patched versions Fixed … |
MCP server advisories | ||
| mcp-server-fetch: IPv6 site-local fec0::/10 classified as public (SSRF guard classifier gap, CWE-918) GHSA: GHSA-3rxj-6jhw-qfv7 Reported severity: low Advisory package entry 1: Affected package: mcp-server-fetch (pip) Affected versions: >= 2026.10.10, < 2026.11.11 Patched version: 2026.11.11 Advisory description: Summary… |
MCP server advisories | GHSA-3RXJ-6JHW-QFV7 |
|
| server-filesystem: `move_file`'s same-device rename leaves the source unpinned — a swapped source parent moves an outside file into the allowed directories, where it becomes readable GHSA: GHSA-7m4x-rv66-mxhh Reported severity: medium Advisory package entry 1: Affected package: @modelcontextprotocol/server-filesystem (npm) Affected versions: < 2.3.0 Patched version: 2.3.0 Advisory package entry 2: Af… |
MCP server advisories | GHSA-7M4X-RV66-MXHH |
|
| Microsoft Security Advisory CVE-2026-118745 - Visual Studio Remote Code Execution Vulnerability GHSA: GHSA-x8x8-p968-x646 CVE: CVE-2026-118745 Reported severity: high Advisory package entry 1: Affected package: Microsoft.NETCore.App.Runtime.win-x86 (nuget) Affected versions: >= 8.0.0, < 8.0.34 Patched version: 8.0.… |
GitHub Advisory Database | CVE-2026-118745GHSA-X8X8-P968-X646 |
|
| Microsoft Security Advisory CVE-2026-114152 - Visual Studio Remote Code Execution Vulnerability GHSA: GHSA-xf35-v9jh-g65w CVE: CVE-2026-114152 Reported severity: high Advisory package entry 1: Affected package: Microsoft.NETCore.App.Runtime.win-x86 (nuget) Affected versions: >= 8.0.0, < 8.0.34 Patched version: 8.0.… |
GitHub Advisory Database | CVE-2026-114152GHSA-XF35-V9JH-G65W |
|
| Microsoft Security Advisory CVE-2026-105544 - .NET Elevation of Privilege Vulnerability GHSA: GHSA-6856-87hx-p5x7 Reported severity: medium Advisory package entry 1: Affected package: Microsoft.TestPlatform.CLI (nuget) Affected versions: >= 17.2.0-preview-20220301-01, < 17.3.0 Patched version: 17.3.4 Adviso… |
GitHub Advisory Database | CVE-2026-105544GHSA-6856-87HX-P5X7 |
|
| Microsoft Security Advisory CVE-2026-114151 - Visual Studio Remote Code Execution Vulnerability GHSA: GHSA-fpxj-5c99-g7vj CVE: CVE-2026-114151 Reported severity: high Advisory package entry 1: Affected package: Microsoft.NETCore.App.Runtime.win-x86 (nuget) Affected versions: >= 8.0.0, < 8.0.34 Patched version: 8.0.… |
GitHub Advisory Database | CVE-2026-114151GHSA-FPXJ-5C99-G7VJ |
|
| Microsoft Security Advisory CVE-2026-114158 - Visual Studio Remote Code Execution Vulnerability GHSA: GHSA-r8h3-p8p6-ggp7 CVE: CVE-2026-114158 Reported severity: high Advisory package entry 1: Affected package: Microsoft.NETCore.App.Runtime.win-x86 (nuget) Affected versions: >= 8.0.0, < 8.0.34 Patched version: 8.0.… |
GitHub Advisory Database | CVE-2026-114158GHSA-R8H3-P8P6-GGP7 |
|
| Microsoft Security Advisory CVE-2026-114159 - Visual Studio Remote Code Execution Vulnerability GHSA: GHSA-3cgx-w6gm-fqrx CVE: CVE-2026-114159 Reported severity: high Advisory package entry 1: Affected package: Microsoft.NETCore.App.Runtime.win-x86 (nuget) Affected versions: >= 8.0.0, < 8.0.34 Patched version: 8.0.… |
GitHub Advisory Database | CVE-2026-114159GHSA-3CGX-W6GM-FQRX |
|
| Microsoft Security Advisory CVE-2026-120792 - Aspire Information Disclosure Vulnerability GHSA: GHSA-q6jf-24jf-m3cg CVE: CVE-2026-120792 Reported severity: high Advisory package entry 1: Affected package: Aspire.Cli (nuget) Affected versions: >= 13.2.0, < 13.6.5 Patched version: 13.6.5 Advisory package entry … |
GitHub Advisory Database | CVE-2026-120792GHSA-Q6JF-24JF-M3CG |
|
| Microsoft Security Advisory CVE-2026-120778 - Aspire Elevation of Privilege Vulnerability GHSA: GHSA-m63f-xhvm-6mv5 CVE: CVE-2026-120778 Reported severity: high Advisory package entry 1: Affected package: Aspire.Cli (nuget) Affected versions: >= 13.2.0, < 13.6.5 Patched version: 13.6.5 Advisory package entry … |
GitHub Advisory Database | CVE-2026-120778GHSA-M63F-XHVM-6MV5 |
|
| Microsoft Security Advisory CVE-2026-114154 - ASP.NET Core Denial of Service Vulnerability GHSA: GHSA-3893-7fxc-qvff CVE: CVE-2026-114154 Reported severity: medium Advisory package entry 1: Affected package: Microsoft.AspNetCore.Server.HttpSys (nuget) Affected versions: = 2.3.10 Patched version: 2.3.14 Advisor… |
GitHub Advisory Database | CVE-2026-114154GHSA-3893-7FXC-QVFF |
|
| Microsoft Security Advisory CVE-2026-114157 - ASP.NET Core Security Feature Bypass Vulnerability GHSA: GHSA-7phj-vgxq-r67h CVE: CVE-2026-114157 Reported severity: medium Advisory package entry 1: Affected package: Microsoft.AspNetCore.App.Runtime.win-arm64 (nuget) Affected versions: >= 8.0.0-preview.1.23112.2, <= 8.… |
GitHub Advisory Database | CVE-2026-114157GHSA-7PHJ-VGXQ-R67H |
|
| Microsoft Security Advisory CVE-2026-114156 - ASP.NET Core Security Feature Bypass Vulnerability GHSA: GHSA-8w29-6cjc-h6w4 CVE: CVE-2026-114156 Reported severity: medium Advisory package entry 1: Affected package: Microsoft.AspNetCore.App.Runtime.linux-arm (nuget) Affected versions: >= 11.0.0-preview.7.26381.103, <=… |
GitHub Advisory Database | CVE-2026-114156GHSA-8W29-6CJC-H6W4 |
|
| Microsoft Security Advisory CVE-2026-114147 - ASP.NET Core Denial of Service Vulnerability GHSA: GHSA-wr8v-9x5q-ggcm CVE: CVE-2026-114147 Reported severity: high Advisory package entry 1: Affected package: Microsoft.AspNetCore.SignalR.StackExchangeRedis (nuget) Affected versions: >= 8.0.0-preview.1.23112.2, <=… |
GitHub Advisory Database | CVE-2026-114147GHSA-WR8V-9X5Q-GGCM |
|
| Microsoft Security Advisory CVE-2026-109478 - ASP.NET Core Denial of Service Vulnerability GHSA: GHSA-r3qf-p3jm-8h4p CVE: CVE-2026-109478 Reported severity: medium Advisory package entry 1: Affected package: Microsoft.AspNetCore.App.Runtime.linux-arm (nuget) Affected versions: >= 8.0.0-preview.1.23112.2, <= 8.… |
GitHub Advisory Database | CVE-2026-109478GHSA-R3QF-P3JM-8H4P |
|
| Microsoft Security Advisory CVE-2026-114146 - ASP.NET Core Elevation of Privilege Vulnerability GHSA: GHSA-67wp-ghc2-fw2g CVE: CVE-2026-114146 Reported severity: high Advisory package entry 1: Affected package: Microsoft.AspNetCore.Http.Connections (nuget) Affected versions: >= 1.2.0, <= 1.2.13 Patched version: 1.2… |
GitHub Advisory Database | CVE-2026-114146GHSA-67WP-GHC2-FW2G |