EUVD-2026-68931

The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the saasuploadlogo function combined with an authorization bypass on the WPLP connector REST endpoin...

CVE-2026-75865

WPLP Cookie Consent (a WordPress plugin for GDPR/CCPA consent management) is vulnerable to unauthenticated arbitrary file upload in all versions up to and including 4.4.1 . The root cause combines missing file type validation in the saas_upload_logo() function with an authorization bypass on the ...

EUVD-2026-68922

Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root...

CVE-2026-65643

cPanel & WHM versions prior to 11.138.0.2 (and older branches 11.110, 11.134, 11.136) contain an eval injection in the domain parking and addon domain functionality. An authenticated user with permission to add parked or addon domains can create arbitrary files on the server, escalating to code e...

CVE-2026-65643

Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root...

PT-2026-84331

Name of the Vulnerable Software and Affected Versions NVIDIA Megatron Bridge affected versions not specified Description An issue exists where an attacker could cause a deserialization of untrusted data. Deserialization is the process of converting a data format back into an object. A successful...

AKRASIA: Stealthy Backdoor Attack on Reasoning-Based Code LLMs

We present AKRASIA, a stealthy, inference-time backdoor attack against reasoning-based Code LLMs. AKRASIA aims to achieve a backdoor target e.g., malicious code execution in reasoning LLMs while evading automated defenses and human inspection. To achieve this, AKRASIA probes the victim LLM to...

CVE-2026-51934

CVE-2026-51934 is a buffer overflow in the Tenda A18 router (Shenzhen Jixiang Tengda Technology Co., Ltd.) version v.15.13.07.09 , located in the fromSetCmdlineRun function. A remote, unauthenticated attacker can exploit this to achieve arbitrary code execution over the network, rated CVSS 9.8 (C...

PT-2026-84483

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description Authenticated path traversal vulnerabilities exist in API endpoints. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the web root folde...

PT-2026-84417

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description Local privilege-escalation flaws allow a local attacker to execute arbitrary code with root privileges on the underlying operating system of the affected system...

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

VulnCheck KEV: CVE-2025-40553

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

PT-2026-84340

Name of the Vulnerable Software and Affected Versions NVIDIA Megatron Bridge affected versions not specified Description An issue exists where an attacker could cause a deserialization of untrusted data. Deserialization is the process of converting a data format back into an object. A successful...

PT-2026-84229

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate CVE-2018-1000130. The proxy accepts a target.url value from a Jolokia POST request and passes it to JMXServiceURL an...

PT-2026-84308

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read reply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causin...

EUVD-2026-69416

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

PT-2026-84561

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A buffer overflow in the GPU component allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox. This is achieved by...

PT-2026-84531

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.22 Description A time-of-check time-of-use TOCTOU race condition—a scenario where a system checks the state of a resource before using it, but the state changes between the check and the use—allows...

RockyLinux 10 : freerdp (RLSA-2026:61378)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61378 advisory. FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses CVE-2026-67297 FreeRDP: FreeRDP: Memory disclosure or denial of service v...

PostgreSQL 14.x < 14.24 / 15.x < 15.19 / 16.x < 16.15 / 17.x < 17.11 / 18.x < 18.6 Multiple Vulnerabilities

The version of PostgreSQL installed on the remote host is 14 prior to 14.24, 15 prior to 15.19, 16 prior to 16.15, 17 prior to 17.11, or 18 prior to 18.6. As such, it is potentially affected by multiple vulnerabilities: - Type confusion with PostgreSQL 'internal' data type arguments allows any us...