CVE-2026-122050: Campcodes Complete Sales and Inventory System with Credit Management: A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.0

A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.0. This issue affects some unknown processing of the file /ahira/login.php. Performing a manipulation of the argument branch results in sql injection. The attack is possible to be carried out...

CVE-2026-122313: kyverno: Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to…

Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to modify resources in other namespaces through NamespacedMutatingPolicy targetMatchConstraints.expression CEL output lacking namespace checks. Attackers can emit a literal target...

CVE-2026-111771: modelcontextprotocol, @modelcontextprotocol: The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context…

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.6.0 until 1.32.0 in @modelcontextprotocol/sdk, from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, from 2.0.0 until 2.0.2 in @modelcontextprotocol/express, and...

CVE-2026-111494: TPC Software Matchpoint: Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any…

Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a permissive hostname validator. Additionally, the app allows unencrypted HTTP traffic. An attacker capable of intercepting the victim's traffic could read and modify...

CVE-2026-122144: nliautaud pico-content-editor: A security flaw has been discovered in nliautaud pico-content-editor up to 02d5ad6c820c5050c542ab9505819b5e0a0ba1af

A security flaw has been discovered in nliautaud pico-content-editor up to 02d5ad6c820c5050c542ab9505819b5e0a0ba1af. This vulnerability affects unknown code. The manipulation results in cross-site request forgery. The attack may be performed from remote. The exploit has been released to the publi...

CVE-2026-122190: SourceCodester Online Food Ordering System: A vulnerability was found in SourceCodester Online Food Ordering System 1.0

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file admin/addcategory.php of the component Category Management. Performing a manipulation of the argument categorytitle results in cross site scripting. The attack may ...

CVE-2026-48183: Samsung Semiconductor: Improper permission handling during buffer operations allows untrusted applications to create memory mappings with…

Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions...

CVE-2026-122302: kyverno: Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace admins to create resources…

Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace admins to create resources beyond their RBAC because generate-rule admission checks verify the controller's permissions, not the author's. Attackers can create a namespaced Policy with generate rules targeti...

CVE-2026-122310: kyverno: Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlPath after cleaning it but executes the raw…

Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlPath after cleaning it but executes the raw path, whose fragment or query the Kubernetes client discards. A namespace-scoped user who can create a Policy can hide ../ segments behind or ? to reach cluster-scoped endpoints...

CVE-2026-69005: Samsung Semiconductor: Integer overflow in NPU driver parameter processing due to insufficient bounds checking.

Integer overflow in NPU driver parameter processing due to insufficient bounds checking...

CVE-2026-48178: Samsung Semiconductor: Out of bound access in PPC due to race condition in global variable access

Out of bound access in PPC due to race condition in global variable access...

CVE-2026-61813: owasp-modsecurity ModSecurity: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx

ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. Prior to 2.9.15 and 3.0.17, the HttpsClient::download function in src/utils/httpsclient.cc sets libcurl CURLOPTSSLVERIFYHOST to 1 instead of the strict value 2L. Under...

CVE-2026-107773: Unknown Dokan: AI Powered WooCommerce Multivendor Marketplace Solution: The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not correctly…

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not correctly verify authorization when serving a single order and its order notes, allowing unauthenticated attackers to read customer and order information and to add or delete order notes for ...

CVE-2026-111492: TPC Software Matchpoint: SQL injection in the push notification handler of the MatchPoint Android app, which processes messages from Firebase…

SQL injection in the push notification handler of the MatchPoint Android app, which processes messages from Firebase Cloud Messaging and constructs queries by concatenating untrusted data. An attacker capable of interacting with the component could manipulate queries and access sensitive...

CVE-2026-105325: Apache Software Foundation Apache OFBiz: Missing check for ACCOUNTING_UPDATE / ACCOUNTING_CREATE in accounting in allows user with only ACCOUNTING_VIEW…

Missing check for ACCOUNTINGUPDATE / ACCOUNTINGCREATE in accounting in allows user with only ACCOUNTINGVIEW permission to update/create PaymentApplication. Affected versions before : 24.09.08 Users are recommended to upgrade to version 24.09.08 which fixes this issue...

CVE-2026-16304: Unknown WP Event Manager: The WP Event Manager WordPress plugin before 3.4.2 does not properly validate ownership or the type of the…

The WP Event Manager WordPress plugin before 3.4.2 does not properly validate ownership or the type of the user-supplied post identifiers processed by one of its frontend forms, allowing any user with a Subscriber account or above to reassign the authorship of arbitrary posts to themselves and to...

CVE-2026-102927: hedgedoc: HedgeDoc is an open source, real-time collaborative markdown notes application

HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1.11.1, the WebSocket permission handler allows a note owner to store strings outside the supported freely, editable, limited, locked, protected, and private permission values. The viewing and editing checks...

CVE-2026-65983: openemr: OpenEMR is a free and open source electronic health records and medical practice management application

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.2.0, interface/modules/custommodules/oe-module-faxsms/src/Controller/SignalWireClient.php decrypts a selected patient document with Document::getdata and...

CVE-2026-96677: Apache Software Foundation Apache Juneau: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Juneau

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Juneau. HTML document serialization does not HTML-encode variable substitutions in the page chrome header, nav, aside, footer and similar fields. Applications whose chrome includes...

CVE-2026-88984: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.16.1, the multi-user API server treats the empty namespace used by shared or global pipelines as an authorization exception for modification and deletion operations. An authenticated use...