CVE-2026-1244: Improper Neutralization of Input During Web Page Generation

The Forms Bridge – Infinite integrations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute in the 'financoopcampaign' shortcode in all versions up to, and including, 4.2.5. This is due to insufficient input sanitization and output escaping on the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005069)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005069 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have at least eth header len bytes syzbot triggered an uninit...

kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability

A flaw was found in the Linux kernel's irqchip/gic-v2m component. This vulnerability allows a use-after-free condition via gicv2mgetfwnode being wrongly marked as init, causing it to be freed while still registered with the PCI Peripheral Component Interconnect subsystem during a PCI host bridge...

kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability

A flaw was found in the Linux kernel's irqchip/gic-v2m component. This vulnerability allows a use-after-free condition via gicv2mgetfwnode being wrongly marked as init, causing it to be freed while still registered with the PCI Peripheral Component Interconnect subsystem during a PCI host bridge...

CVE-2026-24570

Missing Authorization vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Edwiser Bridge: from n/a through = 4.3.2...

CVE-2026-24570

Missing Authorization vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Edwiser Bridge: from n/a through = 4.3.2...

CVE-2026-24570

CVE-2026-24570 is a Missing Authorization / Broken Access Control vulnerability affecting WisdmLabs Edwiser Bridge for WordPress up to version 4.3.2. The connected sources confirm an improperly configured access control mechanism that could allow an attacker to access restricted functionality or ...

CVE-2026-24570 WordPress Edwiser Bridge plugin <= 4.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Edwiser Bridge: from n/a through = 4.3.2...

CVE-2026-24570 WordPress Edwiser Bridge plugin <= 4.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Edwiser Bridge: from n/a through = 4.3.2...

CVE-2026-24570

Missing Authorization vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Edwiser Bridge: from n/a through = 4.3.2...

MAL-2026-472 Malicious code in @landing-platform/data-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b3a3c805b32428bdfb8aa77fb85675df6eaa3b1aa6ec9a36749cb64c0eb269 The package @landing-platform/data-bridge was found to contain malicious code...

Malicious code in @landing-platform/data-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b3a3c805b32428bdfb8aa77fb85675df6eaa3b1aa6ec9a36749cb64c0eb269 The package @landing-platform/data-bridge was found to contain malicious code...

EUVD-2026-4534

Malicious code in @landing-platform/data-bridge npm...

WordPress plugin Edwiser Bridge has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

CVE-2026-24570: Missing Authorization

Missing Authorization vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Edwiser Bridge: from n/a through = 4.3.2...

PT-2026-4412

Name of the Vulnerable Software and Affected Versions WisdmLabs Edwiser Bridge versions through 4.3.2 Description An authorization issue exists in WisdmLabs Edwiser Bridge. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access...

ch.qos.logback:log4j-bridge (0.9.7), ch.qos.logback:logback-access (0.9.7) +3 more potentially affected by CVE-2026-1225 via ch.qos.logback:logback-core (0.9.7)

ch.qos.logback:logback-core MAVEN version 0.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9.7 - ch.qos.logback:logback-access 0.9.7 - ch.qos.logback:logback-classic...

ch.qos.logback:log4j-bridge (0.9.2), ch.qos.logback:logback-access (0.9.2) +2 more potentially affected by CVE-2026-1225 via ch.qos.logback:logback-core (0.9.2)

ch.qos.logback:logback-core MAVEN version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9.2 - ch.qos.logback:logback-access 0.9.2 - ch.qos.logback:logback-classic...

ch.qos.logback:log4j-bridge (0.9.1), ch.qos.logback:logback-access (0.9.1) +2 more potentially affected by CVE-2026-1225 via ch.qos.logback:logback-core (0.9.1)

ch.qos.logback:logback-core MAVEN version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9.1 - ch.qos.logback:logback-access 0.9.1 - ch.qos.logback:logback-classic...

ch.qos.logback:log4j-bridge (0.8.1), ch.qos.logback:logback-access (0.8.1) +2 more potentially affected by CVE-2026-1225 via ch.qos.logback:logback-core (0.8.1)

ch.qos.logback:logback-core MAVEN version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.8.1 - ch.qos.logback:logback-access 0.8.1 - ch.qos.logback:logback-classic...