CVE-2026-59678

An Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager. This issue affects PortProtonQt before 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe...

CVE-2026-59678

CVE-2026-59678 : An reported Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any user to mount/unmount arbitrary file systems and modify network settings via NetworkManager. Affected: PortProtonQt before 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe. Impact includes local pri...

dnscontrol v5.0.0-rc2

DNSControl DNSControl is Infrastructure as Code for DNS. It includes a full-featured configuration language Javascript-compatible, plus "plug-ins" that speak to DNS provider APIs such as AWS Route 53, Cloudflare, and Gandi. It can send the same DNS records to multiple providers. It runs anywhere ...

CVE-2026-12082

The Praison AI SEO WordPress plugin before 5.0.7 does not perform authorization checks on several of its REST API routes, allowing unauthenticated users to modify the permalink of any published post and to read Praison AI SEO WordPress plugin before 5.0.7 configuration data...

CVE-2026-12082 Praison AI SEO < 5.0.7 - Unauthenticated Multiple Missing Authorization (Post Permalink Modification, Plugin Settings Disclosure)

The Praison AI SEO WordPress plugin before 5.0.7 does not perform authorization checks on several of its REST API routes, allowing unauthenticated users to modify the permalink of any published post and to read Praison AI SEO WordPress plugin before 5.0.7 configuration data...

EUVD-2026-47884

The Praison AI SEO WordPress plugin before 5.0.7 does not perform authorization checks on several of its REST API routes, allowing unauthenticated users to modify the permalink of any published post and to read Praison AI SEO WordPress plugin before 5.0.7 configuration data...

CVE-2026-12082

The Praison AI SEO WordPress plugin, in versions prior to 5.0.7 , contains a vulnerability where several REST API routes lack proper authorization checks. This flaw allows unauthenticated users to perform unauthorized actions, specifically modifying the permalink of any published post and accessi...

CVE-2026-12082 Praison AI SEO < 5.0.7 - Unauthenticated Multiple Missing Authorization (Post Permalink Modification, Plugin Settings Disclosure)

The Praison AI SEO WordPress plugin before 5.0.7 does not perform authorization checks on several of its REST API routes, allowing unauthenticated users to modify the permalink of any published post and to read Praison AI SEO WordPress plugin before 5.0.7 configuration data...

simplewall v.3.9.1

simplewall Definitely for advanced users. Description: Simple tool to configure Windows Filtering Platform WFP which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can...

USN-8369-2: mod_jk regression

USN-8369-1 fixed a vulnerability in modjk. It was discovered that for Ubuntu 18.04 LTS, during the update preparation phase, a previous fix for CVE-2023-41081 was incorrectly dropped. This update reintroduces the fix for CVE-2023-41081. We apologize for the inconvenience. Original advisory detail...

@novemberfiveco/highvoltage-js (>=2.0.0-beta.0, <=2.0.3), @rajzik/danger-configuration (>=2.4.0, <=4.0.3) potentially affected by CVE-2026-16629 via danger (>=13.0.4, <=13.0.7)

danger NPM version =13.0.4, =2.0.0-beta.0, =2.4.0, =4.0.3 Source cves: CVE-2026-16629 Source advisory: OSV:GHSA-3X93-P86W-5JVH...

@novemberfiveco/highvoltage-js (>=2.0.0-beta.0, <=2.0.3), @rajzik/danger-configuration (>=2.4.0, <=4.0.3) potentially affected by CVE-2026-16629 via danger (>=13.0.4, <=13.0.7)

danger NPM version =13.0.4, =2.0.0-beta.0, =2.4.0, =4.0.3 Source cves: CVE-2026-16629 Source advisory: GHSA-3X93-P86W-5JVH...

PT-2026-63597

The GutenKit Blocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/gutenkit/v1/mailchimp/get/lists and /wp-json/gutenkit/v1/mailchimp/get/interests REST API endpoints in versions up to, and including, 2.4.12. Both endpoints are...

CVE-2026-16723: Improper Input Validation

A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...

PT-2026-63582

Name of the Vulnerable Software and Affected Versions Bosch Configuration Manager version 7.72.0106 Description An information disclosure issue exists that allows an attacker to access sensitive information. Recommendations At the moment, there is no information about a newer version that contain...

PT-2026-64010

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Server configuration that allows authenticated attackers to inject arbitrary web script or HTML via the server URL parameter to /Archiver/ImapServerWizard.aspx. The injected payload is stored by...

CVE-2026-64811: Inclusion of Functionality from Untrusted Control Sphere

In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration...

VulnCheck KEV: CVE-2026-16723

A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...

GoLand -- Multiple vulnerabilities

https://www.jetbrains.com/privacy-security/issues-fixed/ reports: In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default...

CVE-2026-48536: Improper Neutralization of Input During Web Page Generation

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the General Settings SMTP configuration that allows authenticated attackers to inject arbitrary web script or HTML via the SMTP server address parameter to /Archiver/GeneralSettingsWizard.aspx. The injected payload ...