Advisories

Found by Cipher, fixed upstream.

Name: Cipher
Availability: OnlineOnly

Original vulnerabilities Cipher reported in widely deployed open-source and embedded software: identity infrastructure, a 5G core, data platforms, building automation, and the tools developers live in. Each row links to its upstream advisory. New entries publish as embargoes lift.

← Field reports & writeups

Advisory ledger Ordered by severity, then date · Latest entry Jul 14, 2026

StackGres
Critical Tenant-to-pod RCE via metrics-exporter superuser search_path

CVSS 9.4 CWE-426 affected ≤ 1.18.8 fixed 1.19.0-rc1 Jun 26, 2026

work item #3177 ↗ Read the writeup →
Hasura GraphQL
High Row-level authorization bypass via computed-field predicates

CVE-2026-54698 CVSS 7.7 CWE-863 affected < 2.49.2, 2.45.0-2.45.4 fixed 2.49.2, 2.45.5 Jun 29, 2026

GHSA-r27x-gc74-qmxh ↗ Read the writeup →
GraphicsMagick
High Attacker-controlled heap overflow in the PCD image decoder

CVE-2026-13606 CVSS 8.1 CWE-787 affected ≤ 1.3.47 fixed changeset 937cdd99 Jun 24, 2026

changeset 937cdd99 ↗ Read the writeup →
ZITADEL
High Privilege escalation in OAuth2 token exchange

CVE-2026-56668 CVSS 8.1 CWE-863 affected 4.0.0-4.15.2, 3.0.0-3.4.12 fixed 4.15.3 Jun 22, 2026

GHSA-vrh8-c9cm-wh8v ↗
ZITADEL
High Missing client_id binding in OIDC code and refresh-token exchange

CVE-2026-55672 CVSS 7.4 CWE-287 affected 4.0.0-4.15.1, 3.0.0-3.4.11 fixed 4.15.2, 3.4.12 Jun 17, 2026

GHSA-xqxv-4jc2-x56x ↗ Read the writeup →
Open5GS
High Pre-auth out-of-bounds read in the 5G core AMF

CVE-2026-15720 CVSS 8.6 CWE-125 affected ≤ 2.7.7 fixed 2.8.0 Jun 5, 2026

GHSA-f4mx-3x6p-cfwp ↗ Read the writeup →
Yamcs
Moderate Missing privilege checks in WebSocket subscription topics

CVE-2026-55545 CVSS 6.5 CWE-862 affected ≤ 5.12.7, 5.13.0-5.13.1 fixed 5.12.8, 5.13.2 Jul 14, 2026

GHSA-fwww-cp23-7f5g ↗
BACnet Stack
Moderate Pre-auth out-of-bounds read in the BACnetXYColor decoder

CVSS 5.3 CWE-125 affected ≤ 1.5.0 fixed 1.4.5, 1.5.1, 1.6.0 Jul 5, 2026

GHSA-mmg6-p4pr-cj6h ↗
Vim
Moderate Arbitrary code execution in C omni-completion

CVE-2026-59858 CWE-94 affected < 9.2.0735 fixed 9.2.0735 Jun 26, 2026

GHSA-mf92-v4xw-j45x ↗ Read the writeup →
7-Zip
Moderate Heap out-of-bounds read in the ext2/3/4 image handler

CVSS 6.5 CWE-125 affected ≤ 26.01 fixed 26.02 Jun 25, 2026

7-Zip 26.02 ↗ Read the writeup →
Supabase Realtime
Moderate Presence metadata leak via unchecked presence_diff

CVE-2026-62247 CVSS 6.5 CWE-863 affected ≤ 2.111.1 fixed 2.111.2 Jun 25, 2026

GHSA-rcr8-2525-4r7p ↗ Read the writeup →
Vim
Moderate Out-of-bounds write in SOFO soundfolding

CVE-2026-57455 CWE-787 affected < 9.2.0698 fixed 9.2.0698 Jun 21, 2026

GHSA-q8mh-6qm3-25g4 ↗ Read the writeup →
Vim
Moderate Out-of-bounds read in libsodium file decryption

CVE-2026-57452 CVSS 5.5 CWE-191 affected < 9.2.0671 fixed 9.2.0671 Jun 18, 2026

GHSA-c4j9-wr9j-4486 ↗ Read the writeup →
Vim
Moderate Out-of-bounds read in text-property count

CVE-2026-57451 CVSS 5.3 CWE-125 affected < 9.2.0670 fixed 9.2.0670 Jun 17, 2026

GHSA-f36c-2qcp-7gpw ↗ Read the writeup →
Vim
Moderate Out-of-bounds write in spell-file prefix dump

CVE-2026-55892 CVSS 5.5 CWE-787 affected < 9.2.0662 fixed 9.2.0662 Jun 16, 2026

GHSA-qm9w-fmpj-879h ↗ Read the writeup →
Vim
Moderate Command injection in netrw file deletion

CVE-2026-55895 CWE-78 affected < 9.2.0663 fixed 9.2.0663 Jun 16, 2026

GHSA-vhh8-v6wx-hjjh ↗ Read the writeup →
Vim
Moderate Out-of-bounds write in spell-file word count

CVE-2026-55693 CWE-787 affected < 9.2.0653 fixed 9.2.0653 Jun 15, 2026

GHSA-wgh4-64f7-q3jq ↗ Read the writeup →

All field reports & writeups →