LifeOS 7.28.3

LifeOS is a Life Operating System. It knows your goals, the people who matter to you, and where you are right now, and it works to move you toward where you want to be. The engine underneath is a verifiable loop: turn any request into testable criteria, then climb until they pass. This is the fir...

PT-2026-67545

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description Adobe Campaign Classic ACC contains an issue involving the improper neutralization of special elements used in a template engine. This flaw allows an attacker to execute...

RHEL 10 : mariadb10.11 (RHSA-2026:49522)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49522 advisory. MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation...

CVE-2026-48323: Improper Neutralization of Special Elements Used in a Template Engine

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation o...

aphrodite-engine (>=0.6.0, <=0.6.2), autodatagen (0.0.1) +3 more potentially affected by CVE-2026-9856 via transformers (4.44.1)

transformers PYPI version 4.44.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aphrodite-engine =0.6.0, =0.8.12, =1.0.5, =1.0.9 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

ai-simple-engine-runtime-diffusers (0.0.1) potentially affected by CVE-2026-9856 via transformers (0.1.0)

transformers PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-simple-engine-runtime-diffusers 0.0.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

artificial-detection (0.1.0), benchformer (0.0.1.dev1) +1 more potentially affected by CVE-2026-9856 via transformers (4.12.3)

transformers PYPI version 4.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - artificial-detection 0.1.0 - benchformer 0.0.1.dev1 - tai-chi-engine =0.0.4, =0.0.6 Source cves: CVE-2026-9856 Source advisory:...

MariaDB: Stack Buffer Overflow in MariaDB CONNECT storage engine when reading DOUBLE columns from TABLE_TYPE=DOS tables

A stack buffer overflow vulnerability was identified in the CONNECT storage engine. The vulnerability existed in a function that converts character data to double-precision floating-point values. When reading DOUBLE columns from DOS table files, the function copied data into a 64-byte buffer but...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.2), com.arcadedb:arcadedb-console (>=21.9.1-beta, <=26.7.2) +20 more potentially affected by CVE-2026-67356 via com.arcadedb:arcadedb-engine (>=21.9.1-beta, <=26.7.2)

com.arcadedb:arcadedb-engine MAVEN version =21.9.1-beta, =26.2.1, =21.9.1-beta, =21.9.1-beta, =21.12.1, =21.9.1-beta, =25.9.1, =25.9.1, =25.9.1, =26.4.2, =21.9.1-beta, =25.1.1, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =26.7.2 and more Source cves: CVE-2026-67356 Source advisory:...

CVE-2026-67340

ArcadeDB before 26.7.2 arcadedb-engine allows trigger scripts to look up host classes in java.lang. via Java.type because ScriptTriggerExecutor adds java.lang. to the allowed packages. An authenticated user with UPDATESCHEMA permission can create a JavaScript trigger that invokes...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.1), com.arcadedb:arcadedb-console (>=21.9.1-beta, <=26.7.1) +20 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (>=21.9.1-beta, <=26.7.1)

com.arcadedb:arcadedb-engine MAVEN version =21.9.1-beta, =26.2.1, =21.9.1-beta, =21.9.1-beta, =21.12.1, =21.9.1-beta, =25.9.1, =25.9.1, =25.9.1, =26.4.2, =21.9.1-beta, =25.1.1, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =26.7.1 and more Source cves: CVE-2026-67340 Source advisory:...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.1), com.arcadedb:arcadedb-console (>=21.9.1-beta, <=26.7.1) +20 more potentially affected by CVE-2026-67344 via com.arcadedb:arcadedb-engine (>=21.9.1-beta, <=26.7.1)

com.arcadedb:arcadedb-engine MAVEN version =21.9.1-beta, =26.2.1, =21.9.1-beta, =21.9.1-beta, =21.12.1, =21.9.1-beta, =25.9.1, =25.9.1, =25.9.1, =26.4.2, =21.9.1-beta, =25.1.1, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =26.7.1 and more Source cves: CVE-2026-67344 Source advisory:...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.1), com.arcadedb:arcadedb-console (>=21.9.1-beta, <=26.7.1) +20 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (>=21.9.1-beta, <=26.7.1)

com.arcadedb:arcadedb-engine MAVEN version =21.9.1-beta, =26.2.1, =21.9.1-beta, =21.9.1-beta, =21.12.1, =21.9.1-beta, =25.9.1, =25.9.1, =25.9.1, =26.4.2, =21.9.1-beta, =25.1.1, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =26.7.1 and more Source cves: CVE-2026-67341 Source advisory:...

CVE-2026-15988

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.5 This is due to missing or incorrect nonce validation on the reauthforauthorize function. This makes it possible for...

CVE-2026-15988 AI Engine <= 3.6.5 - Cross-Site Request Forgery to Privilege Escalation via REQUEST_URI Substring Match

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.5 This is due to missing or incorrect nonce validation on the reauthforauthorize function. This makes it possible for...

CVE-2026-15988 AI Engine <= 3.6.5 - Cross-Site Request Forgery to Privilege Escalation via REQUEST_URI Substring Match

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.5 This is due to missing or incorrect nonce validation on the reauthforauthorize function. This makes it possible for...

CVE-2026-15988

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.5 This is due to missing or incorrect nonce validation on the reauthforauthorize function. This makes it possible for...

PT-2026-67088

Name of the Vulnerable Software and Affected Versions The AI Engine – The Chatbot, AI Framework & MCP for WordPress versions prior to 3.6.6 Description A Cross-Site Request Forgery CSRF issue exists due to missing or incorrect nonce validation in the reauth for authorize function. This allows...

CVE-2026-15988: Cross-Site Request Forgery (CSRF)

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.5 This is due to missing or incorrect nonce validation on the reauthforauthorize function. This makes it possible for...

CVE-2026-67340: Improper Control of Generation of Code

ArcadeDB before 26.7.2 arcadedb-engine allows trigger scripts to look up host classes in java.lang. via Java.type because ScriptTriggerExecutor adds java.lang. to the allowed packages. An authenticated user with UPDATESCHEMA permission can create a JavaScript trigger that invokes...