CVE-2026-76499

The Cisco Application Policy Infrastructure Controller (APIC) is affected by improper neutralization vulnerabilities (CWE-707) identified during a proactive internal security review. These vulnerabilities are addressed in the Hardening Release: October 2026 . The issues have a CRITICAL severity (...

CVE-2026-76453

The Cisco NX-OS Software is affected by multiple internally discovered vulnerabilities categorized under CWE-707 (Improper Neutralization) . These issues were identified during a proactive security review and are addressed in the October 2026 Software Security Hardening Release . The vulnerabilit...

EUVD-2026-94453

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76453 Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Neutralization Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

Improper Neutralization Of Special Elements In Data Query Logic

MongoDB Python Driver is vulnerable to Improper Neutralization of Special Elements in Data Query Logic. The vulnerability is due to improper handling of caller-supplied structured file identifiers, which allows an authenticated attacker to manipulate GridFS queries to access unintended stored fil...

CVE-2026-104393 WordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.50.0...

EUVD-2026-94250

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Media Rocket Lazy Load rocket-lazy-load allows Stored XSS.This issue affects Rocket Lazy Load: from n/a through 2.4.0...

CVE-2026-97294

The David Lingren Media LIbrary Assistant plugin for WordPress (versions through 3.41 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the Improper Neutralization of Input During Web Page Generation , which allows an attacker to inject malicious scripts. Exploitation...

CVE-2026-97676

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code, resulting in a sandbox escape...

CVE-2026-93443

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code...

CVE-2026-93443 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code...

CVE-2026-93443

IBM Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to a flaw involving the improper neutralization of special elements used in code. This vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution . While no specific exploit links or scanner source co...

PT-2026-107595

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description Improper neutralization issues exist within the software, which are categorized under Common Weakness Enumeration CWE CWE-707. This refers to a failure to properly sanitize or neutralize...

CVE-2026-76453: Improper Neutralization

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76499: Improper Neutralization

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller APIC engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internall...

CVE-2026-76499: Improper Neutralization

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller APIC engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internall...

CVE-2026-76284: Improper Neutralization

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...

PT-2026-107619

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller APIC affected versions not specified Description Improper neutralization issues exist within the software, which are categorized under the Common Weakness Enumeration CWE Pillar CWE-707. This...

PT-2026-107457

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.50.0...

CVE-2026-105884: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Media Rocket Lazy Load rocket-lazy-load allows Stored XSS.This issue affects Rocket Lazy Load: from n/a through 2.4.0...