CVE-2026-62142

Cross-Site Request Forgery CSRF vulnerability in Melapress WP 2FA wp-2fa allows Cross Site Request Forgery.This issue affects WP 2FA: from n/a through 4.1.0...

CVE-2026-106611

Cross-Site Request Forgery CSRF vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This issue affects Forminator: from n/a through 1.57.3...

EUVD-2026-94955

Cross-Site Request Forgery CSRF vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This issue affects Forminator: from n/a through 1.57.3...

CVE-2026-106611

The WPMU DEV Forminator plugin (versions n/a through 1.57.3 ) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. This flaw allows an attacker to perform unauthorized actions on behalf of an authenticated user. The vulnerability is associated with CWE-352 and has a High base sever...

CVE-2026-62142

The Melapress WP 2FA plugin (wp-2fa) for WordPress is affected by a Cross-Site Request Forgery (CSRF) vulnerability in versions 4.1.0 and below . This flaw allows an attacker to perform unauthorized actions on behalf of an authenticated user. The documentation does not specify the exact component...

EUVD-2026-94932

Cross-Site Request Forgery CSRF vulnerability in Melapress WP 2FA wp-2fa allows Cross Site Request Forgery.This issue affects WP 2FA: from n/a through 4.1.0...

CVE-2026-107449

A flaw was found in Heimdall. This vulnerability allows an unauthenticated remote attacker to cause information disclosure via server-side request forgery SSRF. The application fails to enforce IP address restrictions when sending outbound requests for enhanced application testing and live...

CVE-2026-87664

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication IPC storage callbacks, the service accepts and registers session structures including administrative role...

CVE-2026-87664

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication IPC storage callbacks, the service accepts and registers session structures including administrative role...

EUVD-2026-94743

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication IPC storage callbacks, the service accepts and registers session structures including administrative role...

CVE-2026-87664

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. The flaw occurs because the service fails to verify the identity or authenticity of the sending process when processing local inter-process communication (...

CVE-2026-87664

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication IPC storage callbacks, the service accepts and registers session structures including administrative role...

CVE-2026-62142: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Melapress WP 2FA wp-2fa allows Cross Site Request Forgery.This issue affects WP 2FA: from n/a through 4.1.0...

CVE-2026-87664: Missing Authentication for Critical Function

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication IPC storage callbacks, the service accepts and registers session structures including administrative role...

PT-2026-108265

Name of the Vulnerable Software and Affected Versions Jivejdon versions prior to 5.1 Description Cross-site request forgery CSRF occurs when an attacker tricks an authenticated user into performing unwanted actions. The software allows remote attackers to execute state-changing actions by abusing...

PT-2026-108235

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description Cross-site request forgery CSRF allows an attacker to execute malicious and unauthorized actions by transmitting...

PT-2026-108114

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 7.1.4 FFmpeg versions 8.0.x prior to 8.0.2 Description A server-side request forgery issue exists in the ff rtsp connect function within libavformat/rtsp.c. The software follows RTSP 3xx redirects without validating th...

CVE-2026-11939: Improper Neutralization of Argument Delimiters in a Command

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may be vulnerable to audit log forgery...

PT-2026-107813

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS version 9.2.2d Brocade Fabric OS versions 10.0.0 through 10.0.0a1 Description A session context forgery issue exists in the web management daemon. The service fails to verify the identity or authenticity of the sending proces...

PT-2026-108221

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description These products are susceptible to audit log forgery, a condition where an attacker can inject fake entries into the...