UBUNTU-CVE-2026-64569

In the Linux kernel, the following vulnerability has been resolved: mpls: fix NULL deref in mplsvalidfibdumpreq on CONFIGINET=n On CONFIGINET=n builds, mplsvalidfibdumpreq walks the parsed attribute table itself instead of calling ipvalidfibdumpreq. The RTAOIF arm passes tbRTAOIF to nlagetu32...

EUVD-2026-53263

In the Linux kernel, the following vulnerability has been resolved: mpls: fix NULL deref in mplsvalidfibdumpreq on CONFIGINET=n On CONFIGINET=n builds, mplsvalidfibdumpreq walks the parsed attribute table itself instead of calling ipvalidfibdumpreq. The RTAOIF arm passes tbRTAOIF to nlagetu32...

CVE-2026-64569 mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n

In the Linux kernel, the following vulnerability has been resolved: mpls: fix NULL deref in mplsvalidfibdumpreq on CONFIGINET=n On CONFIGINET=n builds, mplsvalidfibdumpreq walks the parsed attribute table itself instead of calling ipvalidfibdumpreq. The RTAOIF arm passes tbRTAOIF to nlagetu32...

CVE-2026-11920 JoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order' Parameter

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via the 'order' parameter in all versions up to, and including, 5.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...

CVE-2026-54418 Leantime - Missing Authorization on TwoFA JSON-RPC Methods Allows Cross-Account 2FA Secret Disclosure and Bypass

Leantime through 3.6.2 exposes the JSON-RPC methods leantime.rpc.TwoFA.TwoFA.getSetupData, saveSecret, verifyAndEnable, and disable2FA, which act on a caller-supplied userId parameter with no ownership check, session pinning, or permission-attribute gate unlike other RPC-exposed methods in the sa...

CVE-2026-7105

CVE-2026-7105 affects the WordPress plugin Xpro Addons up to version 1.5.1. The root cause is a missing capability check in the get_menu_content_editor() function, allowing authenticated users with Subscriber+ privileges to create arbitrary published posts of the xpro_content CPT. The created pos...

EUVD-2026-53181

The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to blind SQL Injection via the filterdatacommentcount parameter of the public tableongettabledata AJAX action in all versions up to, and including, 1.0.5.1. This is due to insufficient escaping on the user-supplied...

EUVD-2026-53177

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.5.2 via the GET /wp-json/gh/v4/contacts/ REST endpoint. The endpoint's permission callback checks only the role-level...

CVE-2026-11454 Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.5.2 - Insecure Direct Object Reference

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.5.2 via the GET /wp-json/gh/v4/contacts/ REST endpoint. The endpoint's permission callback checks only the role-level...

PT-2026-68137

Name of the Vulnerable Software and Affected Versions WLED affected versions not specified Description The software contains two security flaws. First, the 'GET /json/cfg' endpoint calls the serveJson function without verifying the settings-PIN, allowing any unauthenticated client on the network ...

PT-2026-68133

Name of the Vulnerable Software and Affected Versions ESPHome versions prior to 2026.7.0-dev Description The web server component discloses plaintext passwords. In the WebServer::text json function, text entities configured with mode: password have their JSON state field masked, but the raw...

PT-2026-68306

Name of the Vulnerable Software and Affected Versions Amazon awslabs.aws-transform-mcp-server versions 0.1.0 through 0.1.4 Description Improper limitation of a pathname to a restricted directory in the get resource tool allows a context-dependent actor to write arbitrary files outside the intende...

PT-2026-68039

Name of the Vulnerable Software and Affected Versions Xpro Addons versions prior to 1.5.2 Description The Xpro Addons plugin for WordPress contains a flaw allowing unauthorized data creation due to a missing capability check in the get menu content editor function. Authenticated users with...

PT-2026-68165

Name of the Vulnerable Software and Affected Versions Statamic CMS affected versions not specified Description The user-augmentation resolver AugmentedUser::get in src/Auth/AugmentedUser.php contains a case for the two factor recovery codes handle that returns raw two-factor recovery codes withou...

CVE-2026-69111: Missing Authentication for Critical Function

Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exploit the unprotected /management/stop endpoint,...

CVE-2026-71293: Exposure of Sensitive Information to an Unauthorized Actor

Statamic CMS's user-augmentation resolver, AugmentedUser::get in src/Auth/AugmentedUser.php, contains an explicit case for the handle that returns the user's raw two-factor recovery codes with no access restriction...

CVE-2026-71273: Cross-Site Request Forgery (CSRF)

OpenBK7231T's /cfgwifiset endpoint src/httpserver/httpfns.c accepts configuration changes via a plain GET request with no CSRF token. If the parameter is absent from the request, an else-branch silently clears the device's web admin password to an empty string...

CVE-2026-71264: Missing Authorization

WLED's GET /json/cfg endpoint registered in wled00/wledserver.cpp calls serveJson with no settings-PIN check, unlike the /edit endpoint which explicitly checks correctPIN, disclosing the device's general configuration network, hardware, LED setup to any unauthenticated client on the network...

PT-2026-68309

Name of the Vulnerable Software and Affected Versions Milvus versions 2.6.22 through 3.0.0 Description An unauthenticated denial of service issue exists that allows remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. The...

PT-2026-68323

Name of the Vulnerable Software and Affected Versions Spacebar Server versions prior to commit 51da17c Description An authorization flaw allows authenticated users to enumerate the complete membership of a guild. By querying the 'GET /guilds/guild id/roles/role id/member-ids' endpoint, an attacke...