CVE-2026-24990

CVE-2026-24990 affects the WordPress WP Docs plugin up to version 2.2.8. The issue is a missing authorization due to incorrectly configured access control levels, enabling bounded actions to be performed without proper permissions. Affected component: Fahad Mahmood WP Docs wp-docs (plugin). Impac...

CVE-2026-24990 WordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

CVE-2026-24990: Missing Authorization

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

WordPress plugin WP Docs 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

PT-2026-6236

Name of the Vulnerable Software and Affected Versions Fahad Mahmood WP Docs versions through 2.2.8 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Update...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, cert-manager-cmctl, fluxcd-kustomize-mutating-webhook, helm-set-status, cilium-cli, conjur-cli, crossplane-provider-aws-iam, ferretdb, spire-server, flux-notification-controller, mc, thanos-operator, actions-runner-controller, bento, eksctl,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cilium-cli, http-echo, flux-notification-controller, guac, steampipe, kubernetes-csi-driver-nfs, newrelic-nri-statsd, gke-gcloud-auth-plugin, nri-mongodb, kyverno-policy-reporter-kyverno-plugin, wazero, wave, kubernetes-release, apache-exporter,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cilium-cli, http-echo, flux-notification-controller, guac, steampipe, kubernetes-csi-driver-nfs, newrelic-nri-statsd, gke-gcloud-auth-plugin, nri-mongodb, kyverno-policy-reporter-kyverno-plugin, wazero, wave, kubernetes-release, apache-exporter,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cilium-cli, http-echo, flux-notification-controller, guac, steampipe, kubernetes-csi-driver-nfs, newrelic-nri-statsd, gke-gcloud-auth-plugin, nri-mongodb, kyverno-policy-reporter-kyverno-plugin, wazero, wave, kubernetes-release, apache-exporter,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, cert-manager-cmctl, fluxcd-kustomize-mutating-webhook, helm-set-status, cilium-cli, conjur-cli, crossplane-provider-aws-iam, ferretdb, spire-server, http-echo, nri-couchbase, flux-notification-controller, mc, thanos-operator,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cilium-cli, http-echo, flux-notification-controller, guac, steampipe, kubernetes-csi-driver-nfs, newrelic-nri-statsd, gke-gcloud-auth-plugin, nri-mongodb, kyverno-policy-reporter-kyverno-plugin, wazero, wave, kubernetes-release, apache-exporter,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, cert-manager-cmctl, fluxcd-kustomize-mutating-webhook, helm-set-status, cilium-cli, conjur-cli, crossplane-provider-aws-iam, ferretdb, spire-server, flux-notification-controller, mc, thanos-operator, actions-runner-controller, bento, eksctl,...

Directory Traversal

Overview @backstage/plugin-techdocs-node is a Common node.js functionalities for TechDocs, to be shared between techdocs-backend plugin and techdocs-cli Affected versions of this package are vulnerable to Directory Traversal via the TechdocsGenerator function when processing documentation from...

CVE-2026-25153 @backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks

Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDocs. In versions of @backstage/plugin-techdocs-node prior to 1.13.11 and 1.14.1, when TechDocs is configured with runIn: local, a malicious actor who...

Malicious Package

Overview docs-ux is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview acp-docs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview cosmos-hub-docs-site is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview fabric-shim-docs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-206360

The default password for the extended admin user mode in the application U9ExosAdmin.exe "Kaba 9300 Administration" is hard-coded in multiple locations as well as documented in the locally stored user documentation...

[SECURITY] Fedora 42 Update: python3.12-3.12.12-3.fc42

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...