110152 matches found
CVE-2026-33591
A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated attacker to bypass security restriction using a specially crafted packet and retrieve a valid session token for the targeted account...
CVE-2026-33591
A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated attacker to bypass security restrictions and retrieve a valid session token for the targeted account. The CVE-2026-33591 entry shows a CRITICAL (CVSS v4.0: 10.0) impact with network access and no user intera...
CVE-2026-60011
Sharp and Toshiba Tec MFPs multifunction printers fail to properly authorize requests to directly access certain image data stored to the affected product...
CVE-2026-69078
CVE-2026-69078 affects CTI-Transmute: server-side request forgery via the evaluation report PDF rendering using WeasyPrint. User-supplied Markdown renders to HTML/PDF with unrestricted URL fetches, allowing retrieval of internal network resources and local files, and potential exposure through th...
CVE-2026-18593
A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is possible to launch the attack remotel...
CVE-2026-60011
Sharp and Toshiba Tec MFPs multifunction printers fail to properly authorize requests to directly access certain image data stored to the affected product...
CVE-2026-18592
CVE-2026-18592 affects osCommerce version 4.14.63493, specifically the function EmailController in app/lib/backend/controllers/EmailController.php of the Email Template Configuration component. The issue arises from manipulating the email_templates_key argument, which leads to a SQL injection vul...
Vulnerabilities are hidden in N-able N-central
N-able has hidden vulnerabilities in N-able N-central up to version 2026.3.1. The vulnerabilities involve bypassing authentication in N-able N-central. In versions up to 2026.1, an attacker could circumvent authentication checks by using an alternative route within the application. In versions up...
Important: Red Hat Security Advisory: yelp security update
An update for yelp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Important: Red Hat Security Advisory: compat-libtiff3 security update
An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
ROOT-APP-PYPI-CVE-2026-48525 CVE-2026-48525 in rootio-PyJWT - Patched by Root
Root has patched CVE-2026-48525 in the rootio-PyJWT package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-48523 CVE-2026-48523 in rootio-PyJWT - Patched by Root
Root has patched CVE-2026-48523 in the rootio-PyJWT package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-48522 CVE-2026-48522 in rootio-PyJWT - Patched by Root
Root has patched CVE-2026-48522 in the rootio-PyJWT package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-48524 CVE-2026-48524 in rootio-PyJWT - Patched by Root
Root has patched CVE-2026-48524 in the rootio-PyJWT package for Root:PyPI. Multiple fixed versions available...
CVE-2026-16060
The CVE concerns the WordPress plugin “Insert or Embed Articulate Content” up to version 4.3000000027. It fails to validate uploaded archives, relying on a bypassable check, enabling an Editor-level user to upload a server-executable file into a public directory, which can lead to remote code exe...
ROOT-OS-UBUNTU-2204-CVE-2026-23000 CVE-2026-23000 in rootio-linux - Patched by Root
Root has patched CVE-2026-23000 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-23003 CVE-2026-23003 in rootio-linux - Patched by Root
Root has patched CVE-2026-23003 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-23089 CVE-2026-23089 in rootio-linux - Patched by Root
Root has patched CVE-2026-23089 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...