CVE-2026-89007: Missing Authorization

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform a capability check in one of its appointment-deletion functions, allowing users with its low-privileged custom Staff role to delete arbitrary appointments...

PT-2026-95253

Name of the Vulnerable Software and Affected Versions Bookit — Booking & Appointment Calendar WordPress plugin versions prior to 2.6.0.5 Description An issue exists where the plugin fails to perform a capability check within an appointment-deletion function. This allows users assigned to the...

PT-2026-95260

Name of the Vulnerable Software and Affected Versions Hide My WP Ghost versions prior to 7.0.11 Description An issue exists where the plugin fails to properly validate loopback security-check requests. When a request's verification value is missing or incorrect, the plugin disables its login and...

PT-2026-95284

Name of the Vulnerable Software and Affected Versions Printcart Web to Print Product Designer for WooCommerce versions prior to 2.8.6 Description This issue involves a Directory Traversal flaw that allows unauthenticated attackers to read arbitrary files on the server, potentially exposing...

PT-2026-95393

Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 5.5.3-182 Description Authenticated users can extract arbitrary data from the database via a blind SQL injection. This occurs when the check photo parameter is submitted as an array, bypassing the clean requests...

EulerOS Virtualization 2.11.1 : samba (EulerOS-SA-2026-3471)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Upstream Security Advisories: https://www.samba.org/samba/security/CVE-2007-2447.html...

EulerOS Virtualization 2.11.0 : samba (EulerOS-SA-2026-3558)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Upstream Security Advisories: https://www.samba.org/samba/security/CVE-2007-2447.html...

ROS-20260918-73-0005

The vulnerability in the arch/loongarch/include/asm/topology.h component of the Linux operating system’s kernel is related to incorrect checking of the specified index, position, or offset in input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-92495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/bnxtre: Clear VMMAYWRITE on DBR/toggle page mmap bnxtremmap rejects VMWRITE for the DBRPAGE and TOGGLEPAGE mmap flags, but a read-only mapping can still...

Linux Distros Unpatched Vulnerability : CVE-2026-92516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix offset warn check for bpfresspinlock Sashiko pointed out correctly that the case statement for BPFRESSPINLOCK incorrectly checks offset for BPFSPINLOCK...

EulerOS Virtualization 2.12.1 : samba (EulerOS-SA-2026-3618)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers tha...

EulerOS Virtualization 2.12.0 : samba (EulerOS-SA-2026-3672)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers tha...

Linux Distros Unpatched Vulnerability : CVE-2026-90146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, xdp: move offload check into devxdpinstall bpfxdplinkupdate calls devxdpinstall directly and skips devxdpattach, so the checks in devxdpattach do not run. ...

EulerOS Virtualization 2.11.0 : libsodium (EulerOS-SA-2026-3518)

According to the versions of the libsodium package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to...

PT-2026-95509

Name of the Vulnerable Software and Affected Versions spatie Scotty versions prior to 1.4.3 Description A remote attack is possible through the Self Update Handler component. The SelfUpdater::update function in the app/Updater/SelfUpdater.php file allows the download of code without an integrity...

PT-2026-95547

Name of the Vulnerable Software and Affected Versions LubeLogger versions prior to 1.6.8 Description An authenticated user can exploit a missing authorization check in the DuplicateRecordsToOtherVehicles endpoint. While the system verifies the destination vehicles, it fails to call the...

VulnCheck KEV: CVE-2023-46359

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature...

VulnCheck KEV: CVE-2025-39682

Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rxlist to bypass the intended recvmsg record-type handling, potentially causing subsequent TLS records to be processed using...

ROS-20260918-73-0023

The vulnerability in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c module of Broadcom’s wireless adapter driver for the Linux operating system is related to an improper check of a specified index, position, or offset in the input data. Exploiting this vulnerability could allow an...

EulerOS 2.0 SP10 : samba (EulerOS-SA-2026-3722)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the 'pri...