CVE-2026-63197: traPtitech traQ: traQ is a messenger application built for Digital Creators Club traP

traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, instances configured with TRAQSTORAGETYPE=local can return user-uploaded SVG or HTML content from the /files/fileId retrieval endpoint for direct browser rendering. An attacker with file-upload capability can...

CVE-2026-63418: monitoring-plugins: Monitoring Plugins is a suite of plugins for monitoring applications

Monitoring Plugins is a suite of plugins for monitoring applications. From 3.0.0-rc1 until 3.0.1, checkicmp stores the number of hosts supplied through -H or --Host on the command line, or through --extra-opts files containing Host= entries, in an unsigned short. More than 65,535 hosts wrap the...

CVE-2026-63417: armurox loggingredactor: Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or…

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to 0.0.7, personally identifiable information returned by custom object str or repr methods is not redacted when such non-primitive objects are logged, causing...

CVE-2026-44266: enspirit elo: Elo is a purely functional expression language for no-code tools

Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, the Ruby backend in src/compilers/ruby.ts embeds attacker-controlled text in Ruby double-quoted strings without escaping , so Ruby interpolation forms in the string-literal emitter or the labelled subtype-constraint...

CVE-2026-44267: enspirit elo: Elo is a purely functional expression language for no-code tools

Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, plain Elo strings supplied to defaultFormats.elo.parse, bin/elo, or elo-lang.org/try can use .constructor.constructor to reach JavaScript Function because the memberaccess handler in src/transform.ts does not reject...

CVE-2026-44265: enspirit elo: Elo is a purely functional expression language for no-code tools

Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, Elo's programmatic AST API accepts arbitrary values from JSON-deserialized input, plugin output, or other untyped sources and interpolates them into generated JavaScript, Ruby, Python, or SQL without runtime syntax...

CVE-2026-119521: Cozmoslabs Paid Member Subscriptions: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Paid…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Stored XSS.This issue affects Paid Member Subscriptions: from n/a through 3.1.3...

CVE-2026-119641: Apache Software Foundation Apache Oozie: ** UNSUPPORTED WHEN ASSIGNED ** Improper input validation vulnerability in Apache Oozie

UNSUPPORTED WHEN ASSIGNED Improper input validation vulnerability in Apache Oozie. An authenticated Oozie user can reconfigure another tenant's workflow job and change its ownership. This issue affects Apache Oozie: all versions. As this project is retired, we do not plan to release a version tha...

CVE-2026-118865: TP-Link Systems Inc. Archer AX3000 v2: An authenticated OS command injection vulnerability exists in the Offline Download component (USB storage allocation)…

An authenticated OS command injection vulnerability exists in the Offline Download component USB storage allocation of Archer AX3000 v2. When a USB storage device is attached, an authenticated administrator can submit a crafted path value containing shell metacharacters that is not properly...

CVE-2026-116652: Tanium Threat Response: Tanium addressed a business logic error in Threat Response.

Tanium addressed a business logic error in Threat Response...

CVE-2026-116665: Tanium Discover: Tanium addressed an information disclosure vulnerability in Discover.

Tanium addressed an information disclosure vulnerability in Discover...

CVE-2026-116668: Tanium Discover: Tanium addressed an uncontrolled resource consumption vulnerability in Discover.

Tanium addressed an uncontrolled resource consumption vulnerability in Discover...

CVE-2026-116654: Tanium Threat Response: Tanium addressed an improper input validation vulnerability in Threat Response.

Tanium addressed an improper input validation vulnerability in Threat Response...

CVE-2026-116661: Tanium Enforce: Tanium addressed an improper access controls vulnerability in Enforce.

Tanium addressed an improper access controls vulnerability in Enforce...

CVE-2026-116858: WPMU DEV Forminator: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPMU DEV Forminator…

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in WPMU DEV Forminator forminator allows Code Injection.This issue affects Forminator: from n/a through 1.58.3...

CVE-2026-116859: WPMU DEV Forminator: Missing Authorization vulnerability in WPMU DEV Forminator forminator allows Exploiting Incorrectly Configured Access…

Missing Authorization vulnerability in WPMU DEV Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Forminator: from n/a through 1.58.3...

CVE-2026-115731: Perforce Puppet Enterprise: Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected…

Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by submitting a report containing a crafted...

CVE-2026-115715: Elastic Elasticsearch: Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to denial of service via a…

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to denial of service via a specially crafted input value that is processed by an affected phonetic encoder of the analysis-phonetic plugin. An authenticated user with permission to write documents to or run...

CVE-2026-115716: Elastic APM Server: Allocation of Resources Without Limits or Throttling (CWE-770) in APM Server can lead to denial of service via…

Allocation of Resources Without Limits or Throttling CWE-770 in APM Server can lead to denial of service via Oversized Serialized Data Payloads CAPEC-231. An attacker who can send OpenTelemetry OTLP data to APM Server over HTTP can cause APM Server to exhaust its memory and terminate. This stops...

CVE-2026-115714: Elastic Elastic Docker images: Improper Certificate Validation (CWE-295) in the operating system certificate bundle shipped in the Docker images of…

Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating syste...