CVE-2026-120209: anji-plus AJ-Report: AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens…

AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline. Attackers can mint a token with reportCode 'dataSet' to access the testTransform endpoint, which passes scripts to GroovyClassLoader for unauthenticated remote code...

CVE-2026-118235: wpazleen: The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is…

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.10.2 via the handleupload function. This is due to missing server-side file key allowlist and pre-sanitization...

CVE-2026-120208: strukturag libheif: libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in…

libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in uncdecodermixedinterleave::processTile that allows attackers to write out of bounds by supplying chroma components with unequal bit depths. Attackers can craft a HEIF file declaring, for example, 16-bit Cb and 8-b...

CVE-2026-103882: acadlix: The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to…

The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the postdeleteassessmentfilebyid function in all versions up to, and including, 1.1.9. This makes it possible for...

Linux Distros Unpatched Vulnerability : CVE-2026-119718

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcachedataalloc when reading point cache...

Linux Distros Unpatched Vulnerability : CVE-2026-84243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to .....

Linux Distros Unpatched Vulnerability : CVE-2026-119719

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extractor caused by 32-bit integer overflow...

PT-2026-134517

Name of the Vulnerable Software and Affected Versions Articles Anywhere versions prior to 20.1.1 Sourcerer versions prior to 17.0.1 Description A security issue exists that requires a coordinated update across two different components to be fully resolved. Updating only one of the affected...

What Must Be Done Here? Using a Bounded Application-Security Ontology at the Point of Change

The security guidance that bears on code is real but scattered. It lives across secure-development frameworks, verification standards, controls catalogues, threat taxonomies, and, increasingly, normative regimes such as the EU's NIS2 -- and most of it is written for readers other than the enginee...

PT-2026-134528

Name of the Vulnerable Software and Affected Versions AJ-Report versions 1.0 through 1.7.1 Description The software uses a hard-coded JWT secret to sign share tokens, which enables attackers to forge valid tokens offline. By creating a token with the reportCode variable set to 'dataSet', an...

PT-2026-134522

ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users to execute shell commands through mockjs templates. Attackers can store a template via MockController::add with escaped parentheses that mockjs evaluates with eval, then trigger...

CVE-2026-120203: ShowDoc: ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users…

ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users to execute shell commands through mockjs templates. Attackers can store a template via MockController::add with escaped parentheses that mockjs evaluates with eval, then trigger...

PT-2026-134506

Name of the Vulnerable Software and Affected Versions NextGEN Gallery versions prior to 4.4.2 Description Remote Code Execution is possible for authenticated attackers with custom-level access and above. The issue occurs via the render image function due to unrestricted mass assignment of...

Security update for ansible-core (important)

openSUSE security update: security update for ansible-core ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22172-1 Rating: important References: bsc1284847 Cross-References: CVE-2026-89091 CVSS scores: CVE-2026-89091 SUSE : 8.8...

Microsoft Edge (Chromium) < 156.0.4314.58 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 156.0.4314.58. It is, therefore, affected by multiple vulnerabilities as referenced in the October 31, 2026 advisory. - Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote...

Oracle Linux 9 : bind9.18 (ELSA-2026-93072)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93072 advisory. - Prevent arbitrary code execution via GSS-TSIG UDP message replay CVE-2026-94300 - Fix Denial of service via assertion failure in RPZ query processin...

Linux Distros Unpatched Vulnerability : CVE-2026-97209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another user via a swapped partition config file...

CVE-2026-116512: wedevs: The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress…

The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is due to unsanitized 'id' parameter value concatenated...

CVE-2026-109220: addonsorg PDF Invoice for WooCommerce + Drag and Drop Template Builder: The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object…

The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.1.1 via the 'customernote' parameter parameter. This is due to insufficient sanitization of the customernote checkout field, which is...

PT-2026-134681

XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder. Affected versions compile a bundled brotli into static archives that dependent XS modules link against at build time, rather than using the system library. The bundled copy, 1.0.7 or...