CVE-2026-92905

ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...

CVE-2026-92905 Denial of Service Vulnerability

ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...

CVE-2026-92905 Denial of Service Vulnerability

ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...

EUVD-2026-85824

ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...

CVE-2026-92905

ZohoCorp ManageEngine EventLog Analyzer and Log360 versions prior to build 13071 are susceptible to a Denial of Service (DoS) vulnerability. The root cause is the software's inability to properly handle malformed syslog packets , which allows an attacker to crash the log collector . The provided ...

CVE-2026-89004

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and run log, allowing users with contributor-level access and above to read the configuration and execution logs of campaigns created by othe...

EUVD-2026-85806

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and run log, allowing users with contributor-level access and above to read the configuration and execution logs of campaigns created by othe...

CVE-2026-89004

The WPeMatico RSS Feed Fetcher WordPress plugin, in versions before 2.8.26 , is vulnerable to an Insecure Direct Object Reference (IDOR) . The flaw exists because the plugin fails to verify ownership or authorization before returning a campaign's stored configuration and run logs. Consequently, u...

CVE-2026-89004 WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Campaign Configuration and Log Disclosure via IDOR

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and run log, allowing users with contributor-level access and above to read the configuration and execution logs of campaigns created by othe...

WordPress WPeMatico RSS Feed Fetcher plugin < 2.8.26 - Contributor+ Campaign Configuration and Log Disclosure vulnerability

Contributor+ Campaign Configuration and Log Disclosure vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin WPeMatico RSS Feed Fetcher versions 2.8.26...

CVE-2026-89004 WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Campaign Configuration and Log Disclosure via IDOR

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and run log, allowing users with contributor-level access and above to read the configuration and execution logs of campaigns created by othe...

PT-2026-97778

Name of the Vulnerable Software and Affected Versions ManageEngine EventLog Analyzer versions prior to build 13071 Log360 versions prior to build 13071 Description A Denial of Service DoS issue exists where an attacker can crash the log collector by sending malformed syslog packets. A DoS is an...

PT-2026-104981

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink log: wait for rcu grace period before freeing pernet state sashiko reports: "nfnl log net exit calls nf log unset, which clears the logger pointer without an RCU grace period. Immediately after, ops free list...

PT-2026-98202

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.1.8 Discourse versions prior to 2026.6.3 Discourse versions prior to 2026.7.2 Discourse versions prior to 2026.8.0 Description The topic small-action and nested-activity-log components interpolate the free-form...

CVE-2026-61811: Uncontrolled Recursion

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.8.0 until 4.14.7, the getattributes function in src/osxml/osxml.c recursively processes every XML attribute without a depth limit while allocating two large local buffers ...

CVE-2026-93290: Use of Hard-coded Credentials

Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...

CVE-2026-89004: Authorization Bypass Through User-Controlled Key

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and run log, allowing users with contributor-level access and above to read the configuration and execution logs of campaigns created by othe...

CVE-2026-91119: Improper Neutralization of Input During Web Page Generation

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the topic small-action and nested-activity-log components interpolated the free-form actioncodewho value into mention-link href attributes without URL encoding. A quote-bearing display name could...

CVE-2026-77825: Improper Limitation of a Pathname to a Restricted Directory

IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint GET /v1/admin/logs/file. The path confinement check uses str.startswith rather than proper boundary validation, allowing an authenticated admin to read .log, .jsonl, and .json...

CVE-2026-92905: Uncaught Exception

ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...