Rocky Linux 9.6 [TuxCare] Security Update: cockpit / cockpit-bridge / cockpit-doc / cockpit-packagekit / etc (ALMALINUX9.6:CLSA-2026:1777452220)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777452220 advisory. - Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation o...

The vulnerability of the configuration of Wi-Fi router software from TP-Link, such as the Archer NX200, NX210, NX500, and NX600 models, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the configuration of Wi-Fi router microprogramming software from TP-Link, such as the Archer NX200, NX210, NX500, and NX600 models, lies in the use of rigidly encrypted login credentials. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality...

PT-2026-103255

Name of the Vulnerable Software and Affected Versions OAuth Single Sign On – SSO OAuth Client versions prior to 7.1.3 Description An authentication bypass exists in the OAuth Single Sign On – SSO OAuth Client plugin that is reachable pre-login. This allows unauthenticated attackers to forge a...

PT-2026-103166

Unauthenticated Cross Site Scripting XSS in WordPress Persistent Login = 3.1.3 versions...

CVE-2026-94081: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WordPress Persistent Login = 3.1.3 versions...

CVE-2026-86101 Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request...

CVE-2026-86101 Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request...

CVE-2026-86101

A remote, authenticated SAML user can exploit an improper authorization vulnerability in the WatchGuard Fireware OS SAML login process. By sending a specially crafted request, an attacker with legitimate access only to the Access Portal can obtain unauthorized Mobile VPN with SSL access . No spec...

CVE-2026-67993

basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in the static credentials callback...

CVE-2026-22094

The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network...

CVE-2026-22094 Weak root password in EVbee DC 80

The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network...

CVE-2026-22094 Weak root password in EVbee DC 80

The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network...

EUVD-2026-88973

The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network...

CVE-2026-22094

The firmware for the EVbee DC-80 contains a weak hardcoded root password . This vulnerability allows an attacker to gain root access by authenticating through the SSH daemon , which is exposed to the network. No specific remediation or exploit details are provided in the documents.

CVE-2026-41875

Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request that changes admin's login and password. This software does implement simple protection against this...

EUVD-2026-88741

Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request that changes admin's login and password. This software does implement simple protection against this...

BIT-JUPYTERHUB-2026-54338 JupyterHub: Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...

CVE-2026-8732-EXPLOIT

CVE-2026-8732 – WordPress WP Maps Pro Exploit 인증되지 않은 관리자 계정 탈취 | CVSS 9.8 | 즉시 사용 가능 🔥 제공 내용 CVE-2026-8732용 완전 작동 Python 익스플로잇 인증 없는 관리자 계정 생성 매직 로그인 URL 반환 – 즉시 사이트 장악 WP Maps Pro ≤ 6.1.0에서 작동 무흔적, 깔끔, 기본적으로 로그 미남김 ⚡ 왜 저희를 선택해야 하나요 50개 이상의 취약한 대상에서 테스트 완료 불필요한 코드 없음 – 순수 익스플로잇 레드 팀, 모의 침투, 버그...

CVE-2026-102248

A vulnerability was identified in Rebuild up to 4.4.7/4.5.0-beta5. This affects an unknown part of the file /user/login of the component Login Endpoint. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit is publicly available and might b...

CVE-2026-102248

A vulnerability exists in the Login Endpoint component of Rebuild up to versions 4.4.7/4.5.0-beta5 . The flaw is located within an unspecified part of the /user/login file and results in improper authentication . Attackers can initiate this attack remotely . While the exploit is publicly availabl...