<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent vulnerabilities from the mitre CNA root</title>
    <link>https://db.gcve.eu</link>
    <description>Latest vulnerabilities published by the CNAs operating under the mitre root of the CVE Program.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 27 Aug 2026 23:19:17 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-81731 (VulnCheck)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-81731</link>
      <description>Frappe 15.11.0 through 16.32.0 Stored XSS via Workspace Link Description</description>
      <content:encoded>Frappe 15.11.0 through 16.32.0 Stored XSS via Workspace Link Description</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-81731</guid>
      <pubDate>Thu, 27 Aug 2026 20:07:35 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-81730 (VulnCheck)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-81730</link>
      <description>Dolibarr 9.0.0 through 23.0.4 Path Traversal via EmailCollector Attachment Filename</description>
      <content:encoded>Dolibarr 9.0.0 through 23.0.4 Path Traversal via EmailCollector Attachment Filename</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-81730</guid>
      <pubDate>Thu, 27 Aug 2026 20:07:34 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-81729 (VulnCheck)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-81729</link>
      <description>Dolibarr before 23.0.4 Incorrect Authorization on REST API Document Deletion</description>
      <content:encoded>Dolibarr before 23.0.4 Incorrect Authorization on REST API Document Deletion</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-81729</guid>
      <pubDate>Thu, 27 Aug 2026 20:07:34 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-81728 (VulnCheck)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-81728</link>
      <description>Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keys</description>
      <content:encoded>Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keys</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-81728</guid>
      <pubDate>Thu, 27 Aug 2026 20:07:33 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-81838 (AMZN)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-81838</link>
      <description>Zip Slip Arbitrary File Write in AWS diagram-as-code (awsdac)</description>
      <content:encoded>Zip Slip Arbitrary File Write in AWS diagram-as-code (awsdac)</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-81838</guid>
      <pubDate>Thu, 27 Aug 2026 20:03:59 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-81834 (VulDB)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-81834</link>
      <description>RooCodeInc Roo-Code README File ExecaTerminalProcess code injection</description>
      <content:encoded>RooCodeInc Roo-Code README File ExecaTerminalProcess code injection</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-81834</guid>
      <pubDate>Thu, 27 Aug 2026 20:00:08 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-77438 (GitHub_M)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-77438</link>
      <description>Trilium unauthenticated share-search discloses password-protected and hidden shared notes</description>
      <content:encoded>Trilium unauthenticated share-search discloses password-protected and hidden shared notes</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-77438</guid>
      <pubDate>Thu, 27 Aug 2026 19:52:55 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-53580 (GitHub_M)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-53580</link>
      <description>Trilium arbitrary file read and denial of service via file:// URLs in the automatic image-download feature</description>
      <content:encoded>Trilium arbitrary file read and denial of service via file:// URLs in the automatic image-download feature</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-53580</guid>
      <pubDate>Thu, 27 Aug 2026 19:46:12 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-81833 (VulDB)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-81833</link>
      <description>RooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injection</description>
      <content:encoded>RooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injection</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-81833</guid>
      <pubDate>Thu, 27 Aug 2026 19:45:10 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-10036 (VulnCheck)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-10036</link>
      <description>SpeechBrain &lt; 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsing</description>
      <content:encoded>SpeechBrain &lt; 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsing</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-10036</guid>
      <pubDate>Thu, 27 Aug 2026 19:36:57 +0000</pubDate>
    </item>
  </channel>
</rss>
