CVE-2026-39830 affecting package telegraf for versions less than 1.31.0-21

CVE-2026-39830 affecting package telegraf for versions less than 1.31.0-21. A patched version of the package is available...

CVE-2026-39821 affecting package gh for versions less than 2.62.0-16

CVE-2026-39821 affecting package gh for versions less than 2.62.0-16. A patched version of the package is available...

CVE-2026-39830 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-39830 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

CVE-2026-39821 affecting package cf-cli for versions less than 8.7.11-6

CVE-2026-39821 affecting package cf-cli for versions less than 8.7.11-6. A patched version of the package is available...

📄 Grav CMS Shell Upload

The Grav CMS Direct Install feature in the Admin plugin allows administrators to upload plugins as ZIP files. The system failed to adequately validate the contents of the ZIP archive or prevent path traversal Zip Slip during extraction. By crafting a malicious plugin that hooks into Grav events...

CVE-2026-7862 Eupago Gateway For Woocommerce < 4.7.2 - Unauthenticated Arbitrary Refund Initiation

The Eupago Gateway For Woocommerce WordPress plugin before 4.7.2 does not properly restrict access to its refund request handler, allowing unauthenticated attackers to initiate refunds against any WooCommerce order using the merchant's payment gateway credentials, and for applicable payment...

GitLab 17.1 < 18.10.7 / 18.11 < 18.11.4 / 19.0 < 19.0.1 (CVE-2026-1402)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Allocation of Resources Without Limits or Throttling in GitLab CVE-2026-1402 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version numbe...

CVE-2026-48906

CVE-2026-48906 affects the Tassos Framework Plugin (Novarain/Tassos Framework) used with Joomla. The CVE records describe an arbitrary file deletion vulnerability in the plugin prior to version 6.1.0, enabling deletion of arbitrary files on affected sites. The CVSS analysis indicates remote acces...

CVE-2026-8711 affecting package nginx for versions less than 1.28.3-3

CVE-2026-8711 affecting package nginx for versions less than 1.28.3-3. A patched version of the package is available...

CVE-2026-41054 affecting package haveged for versions less than 1.9.22-1

CVE-2026-41054 affecting package haveged for versions less than 1.9.22-1. An upgraded version of the package is available that resolves this issue...

PT-2026-43665

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Path Traversal.This issue affects WebinarIgnition: from n/a through 4.08.253...

PT-2026-44128

Name of the Vulnerable Software and Affected Versions Langroid versions prior to 0.63.0 Description SQLChatAgent executes SQL produced by a Large Language Model LLM, which can be influenced by prompt injection. When configured with a database role possessing privileges for code execution or...

WordPress Genemy theme <= 1.6.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Genemy versions = 1.6.6...

CVE-2026-32389

The CVE affects WordPress NanoCare theme prior to version 1.2.2, where a Missing Authorization vulnerability enables Broken Access Control due to incorrectly configured access control security levels in NanoCare. Affected component is the NanoCare WordPress theme; root cause is improper authoriza...

CVE-2026-42960 affecting package unbound for versions less than 1.25.1-1

CVE-2026-42960 affecting package unbound for versions less than 1.25.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-5946 affecting package bind for versions less than 9.20.23-1

CVE-2026-5946 affecting package bind for versions less than 9.20.23-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-43617 affecting package rsync for versions less than 3.4.3-1

CVE-2026-43617 affecting package rsync for versions less than 3.4.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-3592 affecting package bind for versions less than 9.20.23-1

CVE-2026-3592 affecting package bind for versions less than 9.20.23-1. A patched version of the package is available...

CVE-2026-41292 affecting package unbound for versions less than 1.25.1-1

CVE-2026-41292 affecting package unbound for versions less than 1.25.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-42923 affecting package unbound for versions less than 1.25.1-1

CVE-2026-42923 affecting package unbound for versions less than 1.25.1-1. An upgraded version of the package is available that resolves this issue...