CVE-2026-11326

creationtimestamp| type| source ---|---|--- 2026-06-05 04:48:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnjditl4jc2h...

CVE-2026-11326

OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on .openai.com origins. A cross-site scripting vulnerability in forum.openai.com could be used to access these functions, allowing access to browser history information and the ability to open or close tabs. OpenAI...

CVE-2019-11326

An issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2. The web interface of the product is protected by a login. A guest is allowed to login. Once logged in as a guest, an attacker can browse a URL to read the password of the administrative user. The same...

CVE-2025-11326

creationtimestamp| type| source ---|---|--- 2025-10-06 13:59:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115327577399848313...

CVE-2024-11326

The Campaign Monitor Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary...

CVE-2024-11326

creationtimestamp| type| source ---|---|--- 2024-12-03 11:09:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113588581122828277 2024-12-03 13:09:23+00:00| seen| https://t.me/cvedetector/11880...

CVE-2024-11326 Campaign Monitor Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting

The Campaign Monitor Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary...

CVE-2020-11326

CVE-2020-11326 is rejected/not used and does not represent an active vulnerability entry.

CVE-2019-11326

An issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2. The web interface of the product is protected by a login. A guest is allowed to login. Once logged in as a guest, an attacker can browse a URL to read the password of the administrative user. The same...

Joomla! < 3.8.8 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.8.8. It is, therefore, affected by a multiple vulnerabilities. Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's...

CVE-2018-11326

Joomla! Core prior to 3.8.8 is affected by multiple XSS vulnerabilities caused by inadequate input filtering. The issue may be exacerbated by default filtering settings that could let users in the default Administrator group perform an XSS attack. Affected versions are Joomla! Core up to 3.8.7 (b...

CVE-2017-11326

CVE-2017-11326 affects Tilde CMS 1.0.1, where the arbitrary file upload restrictions can be bypassed via filename.+php manipulation. The issue enables bypass of upload controls and could allow unrestricted file uploads under the stated version. No concrete remediation or fix is provided in the co...