PT-2026-102326

Name of the Vulnerable Software and Affected Versions Wind River VxWorks 7 versions prior to 26.09 Description Specific system call arguments can cause the IPNET subsystem to fail to properly release allocated kernel memory and system file descriptors before the calling application is terminated...

CVE-2026-102006: Missing Release of Memory after Effective Lifetime

In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09...

CVE-2026-102004: Out-of-bounds Write

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...

PT-2026-102336

Name of the Vulnerable Software and Affected Versions Wind River VxWorks 7 versions prior to 26.09 Description Specific system call arguments can lead to memory corruption within the memory management subsystem. Recommendations Update to version 26.09...

PT-2026-102349

Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09...

CVE-2026-97686: Missing Release of Resource after Effective Lifetime

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09...

CVE-2026-102005: Missing Release of Memory after Effective Lifetime

Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09...

PT-2026-102372

Name of the Vulnerable Software and Affected Versions Wind River VxWorks 7 versions prior to 26.09 Description Specific system call arguments can cause the process management subsystem to fail to properly release allocated kernel memory before the calling application is terminated. Recommendation...

CLSA-2026-1790488353 TuxCare security update for @angular (4 CVEs)

TuxCare rebuilt 17 @angular packages to address 4 CVEs. Fixed in 19.2.21-tuxcare.7...

RHEL 7 : unbound (RHSA-2026:72199)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72199 advisory. The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Heap buffer overflow and...

Exploit for CVE-2026-82901

CVE-2026-82901 — Ultra Addons for Contact Form 7 File Upload...

CVE-2026-82901

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the 'uacf7wpcf7mailcomponents' function in all versions up to, and including, 3.5.50. This makes it possible for unauthenticated attackers to upload arbitrar...

EUVD-2026-87790

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the 'uacf7wpcf7mailcomponents' function in all versions up to, and including, 3.5.50. This makes it possible for unauthenticated attackers to upload arbitrar...

CVE-2026-82901

The Ultra Addons for Contact Form 7 WordPress plugin (versions ≤ 3.5.50 ) is vulnerable to unauthenticated arbitrary file upload (CWE-434) due to insufficient validation in the uacf7_wpcf7_mail_components function. This flaw is specifically exploitable when the PDF Generator module is enabled (wh...

CVE-2026-82901 Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Field

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the 'uacf7wpcf7mailcomponents' function in all versions up to, and including, 3.5.50. This makes it possible for unauthenticated attackers to upload arbitrar...

CVE-2026-82901 Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Field

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the 'uacf7wpcf7mailcomponents' function in all versions up to, and including, 3.5.50. This makes it possible for unauthenticated attackers to upload arbitrar...

Critical: Red Hat Security Advisory: unbound security update

An update for unbound is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CLSA-2026-1790431292 TuxCare security update for @angular (3 CVEs)

TuxCare rebuilt 19 @angular packages to address 3 CVEs. Fixed in 10.1.0-tuxcare.7...

CVE-2026-82901: Unrestricted Upload of File with Dangerous Type

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the 'uacf7wpcf7mailcomponents' function in all versions up to, and including, 3.5.50. This makes it possible for unauthenticated attackers to upload arbitrar...

PT-2026-99421

Name of the Vulnerable Software and Affected Versions Ultra Addons for Contact Form 7 versions prior to 3.5.51 Description Insufficient file type validation in the uacf7 wpcf7 mail components function allows unauthenticated attackers to upload arbitrary files to the server, potentially leading to...