OESA-2026-4338 hplip security update

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals. Security Fixes: A flaw was found in HPLIP HP Linux Imaging and Printing Software. This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalat...

OESA-2026-4339 hplip security update

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals. Security Fixes: A flaw was found in HPLIP HP Linux Imaging and Printing Software. This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalat...

OESA-2026-4337 hplip security update

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals. Security Fixes: A flaw was found in HPLIP HP Linux Imaging and Printing Software. This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalat...

OESA-2026-4336 hplip security update

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals. Security Fixes: A flaw was found in HPLIP HP Linux Imaging and Printing Software. This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalat...

Kwetsbaarheid verholpen in BeyondTrust Remote Support

BeyondTrust has discovered a critical vulnerability in BeyondTrust Remote Support. This vulnerability, identified as CVE-2026-102764, has a CVSS score of 9.3. It involves insufficient validation of the origin of messages within the product’s internal components. As a result, a malicious actor...

CVE-2026-54702 Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, constructs a command in the crossnote namespace, and invokes...

EUVD-2026-101585

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, constructs a command in the crossnote namespace, and invokes...

CVE-2026-54702

The Markdown Preview Enhanced extension for Visual Studio Code is vulnerable to Blind Command Dispatch in versions prior to 0.8.30 . The webview message handler in src/preview-provider.ts fails to perform allowlist or type validation on attacker-controlled command values and arguments within the ...

CVE-2026-54702 Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, constructs a command in the crossnote namespace, and invokes...

HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution

A flaw was found in HP Linux Imaging and Printing HPLIP software. Multiple vulnerabilities exist within several software components that could potentially allow an attacker to achieve remote code execution, escalate privileges, cause a denial of service, disclose information, or modify files...

hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service.

A flaw was found in HP Linux Imaging and Printing HPLIP Software. Multiple vulnerabilities in several software components could allow a remote attacker to execute arbitrary code, escalate privileges, or cause a denial of service. Additionally, these flaws could lead to information disclosure or...

hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities

A flaw was found in HPLIP. Multiple vulnerabilities in several software components could potentially allow a remote attacker to achieve remote code execution or privilege escalation under certain conditions, requiring user interaction. These flaws could also lead to denial of service, information...

hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service

A flaw was found in HPLIP HP Linux Imaging and Printing software. This issue encompasses multiple vulnerabilities across several components, potentially allowing an attacker to achieve remote code execution, elevate their privileges, or cause a denial of service. Additionally, these flaws could...

hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service.

A flaw was found in HP Linux Imaging and Printing HPLIP Software. Multiple vulnerabilities in several software components could allow a remote attacker to execute arbitrary code, escalate privileges, or cause a denial of service. Additionally, these flaws could lead to information disclosure or...

hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities

A flaw was found in HPLIP. Multiple vulnerabilities in several software components could potentially allow a remote attacker to achieve remote code execution or privilege escalation under certain conditions, requiring user interaction. These flaws could also lead to denial of service, information...

CVE-2026-94538

The WP File Download plugin for WordPress is vulnerable to an authorization bypass in all versions up to and including 6.3.9 . The root cause is the plugin's failure to properly verify user authorization when performing specific actions. This allows authenticated attackers with subscriber-level a...

WordPress WP File Download plugin <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion/Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary File Deletion/Modification vulnerability discovered by t4g0 in WordPress Plugin WP File Download versions = 6.3.9...

CVE-2026-101024

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitati...

CVE-2026-63328

A flaw was found in Trivy, a security scanner. The plugin manager does not properly confine plugin names to their designated root directory. This allows an attacker, by persuading a user to install or run a malicious plugin, to write the plugin manifest and binary to arbitrary user-writable paths...

CVE-2026-86684

A flaw was found in Gitea. An improper authorization check in the push mirror API allows an authenticated repository administrator to bypass local file system access restrictions. When a repository owner has permission to use local paths, an administrator lacking that privilege can configure a pu...