CVE-2026-90952 WP Edit Password Protected 2.0.0 - 2.0.6 - Unauthenticated Site-Wide Access Mode Bypass via REST API

The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of published posts and pages that the site's access mode was configured to hide...

WordPress WP Edit Password Protected plugin 2.0.0-2.0.6 - Unauthenticated Site-Wide Access Mode Bypass vulnerability

Unauthenticated Site-Wide Access Mode Bypass vulnerability discovered by Artus KG in WordPress Plugin Wp Edit Password Protected – Create Member/User Only Page & Design Password Protected Form versions 2.0.0-2.0.6...

ThinVNC 1.0b1 - Authentication Bypass

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a...

EUVD-2026-91075

Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52...

CVE-2026-94541: Missing Authorization

The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.82 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attacke...

PT-2026-104278

YesWiki before 4.6.7 contains an insufficient session expiration vulnerability that allows attackers to reuse old password reset links because tokens lack expiry timestamps. Attackers who obtain an unused reset URL from mailboxes, logs, backups, or browser history can submit a new password throug...

CVE-2026-90952: Missing Authorization

The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of published posts and pages that the site's access mode was configured to hide...

CVE-2026-92899

Apache WSS4J remembers the Nonce of each UsernameToken it accepts, so a captured token cannot be reused. It stored the Nonce as raw base64 text, but authentication decodes that text and uses the bytes.The same bytes can be written as base64 in several ways. An attacker who captured an authenticat...

PT-2026-104111

The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of published posts and pages that the site's access mode was configured to hide...

PT-2026-104437

Name of the Vulnerable Software and Affected Versions Armatura One affected versions not specified Description The database initialization routine assigns a fixed, vendor-defined password to the database superuser account during creation instead of generating a unique password for each...

PT-2026-104272

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which concatenates the unescaped tags attribute into a raw SQL IN clause. Attackers with page-write access unauthenticated on default installs can embed a nuagetag tag ending in a backslash to break quote...

CVE-2026-104055: Insertion of Sensitive Information into Log File

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2026-104468: Insufficient Session Expiration

YesWiki before 4.6.7 contains an insufficient session expiration vulnerability that allows attackers to reuse old password reset links because tokens lack expiry timestamps. Attackers who obtain an unused reset URL from mailboxes, logs, backups, or browser history can submit a new password throug...

CVE-2026-104457: Improper Neutralization of Special Elements used in an SQL Command

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar filtertags action, which wraps unescaped filterN attribute tokens in quotes and concatenates them into a raw tags.value IN ... clause. Unauthenticated attackers on default installs can save filtertags markup in a page with ...

CVE-2026-94593: Insertion of Sensitive Information into Log File

Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host. Credentials disclosed by this finding can be used to access the database when access to the server operating system is available...

CVE-2026-82043: Observable Response Discrepancy

UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...

JetBrains TeamCity < 2025.11.8 / 2026.1.x < 2026.1.4 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.8, or 2026.1.x prior to 2026.1.4. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the...

PT-2026-104267

Name of the Vulnerable Software and Affected Versions YesWiki versions prior to 4.6.7 Description An SQL injection issue exists in the Bazar filtertags action. The system wraps unescaped filterN attribute tokens in quotes and concatenates them into a raw tags.value IN ... clause. Unauthenticated...

PT-2026-104438

Name of the Vulnerable Software and Affected Versions Armatura One affected versions not specified Description The backup and restore routine records the full database connection command in plain text within a log file on the host. This includes the superuser password, which can be used to gain...

PT-2026-104445

Name of the Vulnerable Software and Affected Versions UTMStack versions prior to 11.2.16 Description An account enumeration issue exists that allows unauthenticated attackers to identify registered email addresses. By sending requests to the 'POST /api/account/reset-password/init' endpoint,...