CVE-2026-106429

A flaw was found in libmongocrypt. An integer underflow in the Key Management Service KMS endpoint-parsing logic can cause a memory allocation failure when processing a malformed endpoint. An authenticated user can trigger this flaw by modifying a key document in the key vault collection or by...

CVE-2026-106433

A flaw was found in libmongocrypt. This vulnerability allows an authenticated attacker with permissions to modify key vault documents, or a malicious server returning crafted documents, to cause process memory corruption or a Denial of Service DoS by crashing the application. The issue occurs...

CVE-2026-104079

Envira Gallery Lite before 1.16.2 contains a missing authorization vulnerability in its gallery conversion REST endpoint that allows lower-privileged authenticated users to create and publish Envira galleries without the required capabilities, because the endpoint only checks edit permissions on...

CVE-2026-103413 Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

CVE-2026-103413 Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

CVE-2026-104079

The Envira Gallery Lite plugin (versions prior to 1.16.2 ) is vulnerable to a missing authorization flaw in its gallery conversion REST endpoint. This flaw allows lower-privileged authenticated users to create and publish galleries without proper capabilities because the endpoint only verifies ed...

cacti-rce-snmp-options-vulnerable-application

Cacti v1.2.24 inyección de comandos autenticada CVE-2023-39362 aplicación vulnerable Esta es una aplicación vulnerable para probar el exploit de la vulnerabilidad Cacti CVE-2023-39362. ¡ADVERTENCIA! ¡Esta aplicación contiene vulnerabilidades de seguridad graves. Úsela bajo su propio riesgo! Se...

BIT-GRAFANA-2026-13719 Alert rules in restricted folders disclosed via the alert rules list API

An authenticated user can list alert rules stored in folders they are not allowed to read through the alert rules API list endpoint. When the set of folders the user may read was empty, the folder restriction was dropped and every alert rule in the organization was returned. From Grafana 13.1.0,...

BIT-GHOST-2026-104418 Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Files

Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary...

BIT-GHOST-2026-104417 Ghost 1.20.0 before 6.64.0 Path Traversal via Locale Setting

Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposin...

BIT-GHOST-2026-103291 Ghost 3.20.2 before 6.51.0 SSRF via image-size fetch

Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff users to trigger outbound HTTP requests to arbitrary URLs. Attackers can point image cards at attacker-controlled hosts or internal network...

BIT-GHOST-2026-103290 Ghost 6.14.0 before 6.27.0 Path Traversal via ImageSize

Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insufficient input validation of user-supplied file paths may allow authenticated staff users to access local files outside the intended data storage directories on the server...

CVE-2026-106506

A flaw was found in plugin-scaffolder-backend. This vulnerability allows an authenticated user with permission to create and view tasks to access confidential task secrets, resulting in information disclosure. Due to improper input validation in task list ordering, an attacker can submit repeated...

CVE-2026-93548

The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user a request names, allowing any authenticated user to have the FooSales WordPress plugin before 1.43.3 act as an arbitrary other user, including an administrator, resulting in tha...

WordPress Redux Framework plugin <= 4.5.11 - Redux Framework <= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation vulnerability

Redux Framework = 4.5.11 – Authenticated Subscriber+ Privilege Escalation vulnerability discovered by shark3y in WordPress Plugin Redux Framework versions = 4.5.11...

EUVD-2026-95508

The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user a request names, allowing any authenticated user to have the FooSales WordPress plugin before 1.43.3 act as an arbitrary other user, including an administrator, resulting in tha...

EUVD-2026-95501

The SendPress Newsletters WordPress plugin through 1.26.1.20 does not check the user's capability on several newsletter-management actions, allowing any authenticated subscriber-level user to synchronise all site users into a mailing list and to drive the newsletter send queue...

CVE-2026-92989

The SendPress Newsletters WordPress plugin, in versions up to and including 1.26.1.20 , is vulnerable to an improper access control flaw (CWE-284 ). The plugin fails to validate user capabilities on specific newsletter-management actions. This allows any authenticated user with subscriber-level p...

CVE-2026-87109 Ops Manager Sensitive MFA Enrollment Information Exposure in User Listings

An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to another member of the same organizatio...

CVE-2026-87108

The MongoDB Ops Manager is vulnerable to an improper authorization flaw where an authenticated user with a read-only project role can retrieve daily host monitoring records from different projects. By providing a specific record identifier, the attacker can bypass ownership validation to access s...