CVE-2026-21113

CVE-2026-21113 is an improper export of Android application components in Samsung VisualVoicemail prior to version 20.1.00.05 . The flaw allows local attackers with low privileges to initiate a call without proper permission , resulting in low impacts to confidentiality, integrity, and availabili...

Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty

Summary IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-14525 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IB...

EUVD-2026-74625

The Eventin – Event Calendar, Event Registration, Tickets & Booking AI Powered plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.1.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...

CVE-2026-11821

The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) WordPress plugin is vulnerable to authorization bypass in all versions up to and including 4.1.17 . The root cause is a missing authorization check on the notification-flow REST API endpoint , allowing authenticated ...

AZL-100017 CVE-2026-6485 affecting package qemu 10.1.0-1

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...

CVE-2026-6485

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...

AZL-99990 CVE-2026-6485 affecting package edk2 20240524git3e722403cd16-20

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...

CVE-2026-57825

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...

MGASA-2026-0385 Updated dovecot package fixes security vulnerabilities

submission-login: Panic when mailmaxuseripconnections is reached: Panic: epollctldel, 8 failed: Bad file descriptor. CVE-2026-33263 Dovecot IMAP LIST matchsub Exponential Backtracking — CPU Denial of Service. CVE-2026-33607 DoS by sending mail with bad header. CVE-2026-27852 dsync: Mail content c...

firefox: thunderbird: Mitigation bypass in the Safe Browsing component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component...

firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Networking: Cookies component...

firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Graphics: ImageLib component...

firefox: thunderbird: Mitigation bypass in the Storage: Cache API component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Storage: Cache API component...

EUVD-2026-74613

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...

CVE-2026-6485

CVE-2026-6485 affects UEFI BIOS firmware that embeds the TianoCore EDK II UEFI Shell in SPI Flash. A logic error in the Shell boot option removal process allows an attacker with root privileges to create multiple boot entries, bypassing the Secure Boot check and gaining access to the Shell's phys...

CVE-2026-6485 UEFI BIOS embedded Shell can be used to bypass Secure Boot

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...

CVE-2026-6485 UEFI BIOS embedded Shell can be used to bypass Secure Boot

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...

CVE-2026-75966 Podlove Podcast Publisher <= 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' Parameter

The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'episodecontributor....comment' Parameter in all versions up to, and including, 4.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2026-19800

Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails (WordPress plugin) is vulnerable to SQL Injection via the status parameter in all versions up to and including 1.31.0 . The root cause is that an attacker-controlled $contact_filter_query fragment is concatenated into ...

EUVD-2026-74606

The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 1.31.0 due to insufficient escaping on the user supplied parameter and lack of sufficient...