EUVD-2026-46156

The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow using the publicly-visible session identifier 'sid' as the password reset token store...

CVE-2026-15812

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...

GHSA-8MV7-9C27-98VC

creationtimestamp| type| source ---|---|--- 2026-07-21 03:31:30+00:00| seen| https://gist.github.com/alon710/3baf3d34c51a96bcd4a3b1906aa0d17c...

CVE-2026-59776

Missing Cryptographic Step CWE-325 vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tampered with...

MINI-VQ9V-28RC-7PJ9

Bulletin has no description...

MINI-P8PJ-3VG7-63V4

Bulletin has no description...

MINI-VRPW-46Q4-29PM

Bulletin has no description...

MINI-XRX7-CJ3R-6382

Bulletin has no description...

MINI-M8QG-PFJP-8832

Bulletin has no description...

MINI-2FM7-994M-VH94

Bulletin has no description...

MINI-549R-59QR-3WJR

Bulletin has no description...

MINI-38VW-H3FJ-567Q

Bulletin has no description...

MINI-X89H-3MCG-3362

Bulletin has no description...

MINI-C629-P3FF-9Q69

Bulletin has no description...

MINI-J24J-3F8G-RR5H

Bulletin has no description...

GHSA-WM3W-8RRP-J577

creationtimestamp| type| source ---|---|--- 2026-07-21 01:31:18+00:00| seen| https://gist.github.com/alon710/84075b1c42ed77e39cb61a3601f10615...

rabbitmq-server: RabbitMQ: Authorization bypass via regular expression injection in MQTT client ID

A flaw was found in RabbitMQ. An authenticated MQTT Message Queuing Telemetry Transport user can bypass topic-level authorization by injecting regular expression operators. This occurs because the client ID, provided by the user in the MQTT CONNECT packet, is inserted into authorization regex...

PT-2026-61826

The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow using the publicly-visible session identifier 'sid' as the password reset token store...

PT-2026-63287

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Issue and comment attachment update paths allow the use of attachment UUIDs without verifying if the attachment belongs to the target repository. An authenticated attacker can re-link a victim'...

PT-2026-63259

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.135.Final Netty versions 4.2.0.Final through 4.2.15.Final Description The OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to a replay attac...