IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write in the RFC2047 encoded-word

This vulnerability (CVE-2026-105110) affects Iskratel Innbox GPON ONT devices. The flaw exists in the login.xgi CGI endpoint where improper neutralization of special elements in the CLI parameter allows an unauthenticated remote attacker to

This vulnerability in Infoblox NIOS allows an authenticated user with high privileges to perform argument injection in troubleshooting commands. This injection can result in privilege escalation, enabling the attacker to gain higher privile

SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, tim

CVE-2026-107459 describes an OS Command Injection vulnerability in Openfind SecuShare Pro version 4. The flaw allows unauthenticated remote attackers to execute arbitrary OS commands on the affected server, due to improper neutralization of

CVE-2026-17609 is a critical vulnerability in the Super Forms – Drag & Drop Form Builder WordPress plugin (versions <=6.3.316). The vulnerability is due to insufficient validation of attacker-controlled JSON field declarations against the f

An authenticated user in Backstage with permission to read Scaffolder tasks can access internal execution data from other users' tasks. If this data contains credentials for external services, it may lead to unauthorized disclosure and unau

This vulnerability (CVE-2026-76465) arises from improper validation of MPLS echo-request packets in the MPLS OAM feature of Cisco NX-OS Software on Nexus 3000 and 9000 Series Switches. An attacker can exploit this by sending a specially cra

CVE-2026-76485 describes a vulnerability in the NGOAM feature of Cisco NX-OS Software caused by improper input validation of IP traffic when NGOAM is enabled. An attacker can exploit this by sending specially crafted packets to an IP interf

CVE-2026-95606 is a deserialization of untrusted data vulnerability in The Events Calendar plugin by Liquid Web / StellarWP. This flaw allows an attacker to perform object injection, which can lead to remote code execution or other severe i

This vulnerability in Movable Type Cloud Edition's upgrade script permits unauthenticated code injection, enabling execution of arbitrary Perl code or SQL queries. It affects versions >=2.0 <=2.17, >=8.0.0 <=8.0.12, >=8.8.0 <=8.8.5, >=9.0.0

The Chrome 155 update patches a total of 247 vulnerabilities, among which four are critical use-after-free defects impacting Chromecast, Browser, Navigation, and Track components. These critical vulnerabilities are identified as CVE-2026-10

This vulnerability (CWE-787) involves an out-of-bounds write in the TLS 1.3 handshake message cache within Eclipse ThreadX NetX Duo versions up to 6.5.1.202602. When a handshake message exceeds the allocated cache size, it overwrites memory

This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted data to the

The October 2026 Android security patches resolve 25 vulnerabilities: seven in the Framework and eighteen in the System components. Among these, seven are critical severity, including a critical local privilege escalation vulnerability in t

This vulnerability (CWE-79) in ASUS router modules involves improper neutralization of input during web page generation, enabling cross-site scripting attacks. An attacker can exploit this by crafting a URL that, when visited by an authenti

A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to obtain a privileged administrator session

wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches the algorithm negotiated during key exchange. In ParseECCPubKey() (src/internal.c), the blob's algorithm string is used to derive the curve via

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a code injection vulnerability (CWE-94) due to improper neutralization of special elements used in OS commands. This flaw allows remote attackers to execute arbitrary code on affected s

Between 2018 and 2026, Rockstar Games experienced four distinct confirmed compromises: (1) In 2022, the Lapsus$ group used MFA fatigue and plaintext credentials in Slack and Confluence to exfiltrate source code. (2) In early 2023, GTA Onlin

CVE-2026-82531 is a critical code injection vulnerability in smarty-php's Smarty template engine. The issue arises because the top-level nocache_hash is not restored during extends:/multi-component template inheritance, leaving it null. Att

This vulnerability (CVE-2026-41555) involves improper neutralization of special elements used in an SQL command (CWE-89) within the Newsletter Subscription Form – User Subscriptions Form, Capture Email component of Weblizar WordPress themes

This vulnerability (CVE-2026-42415) involves improper neutralization of special elements used in SQL commands (CWE-89) in the Porto Theme - Functionality product by p-themes. It affects versions up to 3.9.3 and allows unauthenticated attack

Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions.

The vulnerability CVE-2026-105778 affects Tenda AC5 firmware version 02.03.01.111_multi. It is a stack-based buffer overflow in the Wifi Handler component's /goform/setWifi functionality. The issue arises from improper manipulation of the w

The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_email' parameter in all versions up to, and in

The vulnerability identified as CVE-2026-91107 affects openSIS Classic version 9.3. It involves an authorization bypass (CWE-639) where an authenticated user assigned the built-in teacher role can manipulate the staff_id parameter to select

This vulnerability affects TOTOLINK X6000R version 9.4.0cu.652_B20230116. The issue is an OS command injection in the firmware_check function of the /cgi-bin/cstecgi.cgi file, part of the UploadFirmwareFile Handler. By manipulating the file

This vulnerability impacts Atlassian Data Center products such as Bitbucket, Confluence, Crowd, Jira Software, Jira Service Management, Bamboo, Crucible, and Fisheye. It enables unauthenticated remote attackers to perform arbitrary file rea

CVE-2026-105763 is a critical vulnerability in the twentyhq twenty CRM platform affecting versions >=1.20.10 and <2.7.0. The vulnerability arises because the /metadata GraphQL connectedAccounts query returns connectionParameters including p

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially expos

The vulnerability CVE-2026-105284 exists in the Totolink A3002MU router firmware version 1.0.0-B20230403.1455. It is located in the function sub_40FCFC within the /bin/boa executable, which handles authentication checks. Due to improper aut

CVE-2026-105285 is a stack-based buffer overflow vulnerability in Totolink A3002MU firmware version 1.0.0-B20230403.1455. The vulnerability arises from improper handling of the addQos/comment/entry_name argument in the QoS Rule Handler comp

CVE-2026-104706 is a path traversal vulnerability discovered by DigitalCanion in Mitel MiVoice Office 400 version 11.0.96.0. The vulnerability allows an attacker with high privileges and local access to the web portal (https://<ip>:8443) to

Saif al-Din Khader, known as Rey and a member of the ShinyHunters and Scattered Lapsus$ Hunters groups, was arrested in Jordan and is assisting the FBI in identifying other members of the extortion group. ShinyHunters recently hacked the FB

CVE-2026-105134 is a critical remote OS command injection vulnerability in Ahsay AhsayCBS affecting versions up to 10.3.2. The vulnerability resides in the Replication Receiver component's /rps/api/json/UpdateReceivers.do endpoint, where im

The vulnerability in ZITADEL affects versions 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3. It arises because the system creates links between user accounts and external identity providers without proper verification of a primary authentica

The gist RubyGem versions from 4.0.0 up to but not including 6.1.0 contain an improper certificate validation vulnerability. The vulnerability arises because the http_connection method in lib/gist.rb sets SSL verification to VERIFY_NONE, ef

The maclof kubernetes-client versions 0.17.0 through 0.31.x disable TLS certificate verification in the parseKubeconfig() and parseKubeconfigFile() functions when the kubeconfig file does not contain certificate-authority-data. This behavio

The alexpechkarev/google-maps Laravel package versions from 1.0.3 through 12.16 disable TLS certificate verification by default because the bundled configuration sets ssl_verify_peer to FALSE, which is passed to CURLOPT_SSL_VERIFYPEER. This

CVE-2026-105129 describes an incorrect authorization vulnerability in LaraDashboard prior to version 1.4.8. Authenticated users possessing only the settings.view permission can exploit this flaw to retrieve sensitive stored secrets by query

The vulnerability identified as CVE-2026-97307 in StylemixThemes Cost Calculator Builder allows an attacker to cause sensitive information to be inserted into data sent by the plugin, enabling retrieval of embedded sensitive data. This affe

Ahsay AhsayCBS up to version 10.3.2 contains an OS command injection vulnerability in the Replication Receiver component, specifically in the /rps/api/json/UpdateReceivers.do file. An attacker can remotely manipulate the 'random' argument t

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Blind SQL In

This vulnerability in InternLM MindSearch 0.1.0 arises from improper handling of the inputs argument in the ExecutionAction.run function within the Planner Agent component. An attacker can remotely manipulate this argument to perform code i

In Bouncy Castle for Java versions prior to 1.86, the OpenPGP certificate API's methods getCertificationBy() and getDelegationBy() accepted third-party signatures from any component key of the issuing certificate without verifying that the

This vulnerability affects NetScaler ADC and NetScaler Gateway versions prior to 14.1-73.41, 13.1-64.28, and 13.1-37.282. The CVSS 4.0 vector indicates a network attack vector with low attack complexity, no privileges or user interaction re

The ShinyHunters hacking group, involved in extensive data theft and extortion campaigns targeting organizations worldwide, has suffered a significant law enforcement setback with the detention of a suspected member, Saif al-Din Khader (ali

The vulnerability in vincent-peugnet wcms (up to 3.18.0) allows authenticated users with editor privileges to upload files without proper validation of file types or paths. This enables attackers to upload malicious .php files that the web

In Bouncy Castle for Java versions prior to 1.86, the MLS implementation did not enforce that the X.509 certificate's public key matched the LeafNode's signature_key as required by RFC 9420 section 5.3. The LeafNode.verify() method validate