EUVD-2026-57089

The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value...

CVE-2026-16538 TeraWallet - Wallet for WooCommerce < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up

The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value...

PT-2026-71166

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Insufficient input validation allows a remote authenticated attacker to execute arbitrary Control Language commands. Recommendations At the moment, there is no information about a newer version that...

The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bpf component in the Linux operating system’s kernel is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `drivers/nvme/target/fc.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/nvme/target/fc.c component of the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-71362

The web interface of the affected device relies on the HTTP referrer header as part of request validation. Requests containing empty Referer value, or omitting the Referer header entirely, may be accepted and processed due to insufficient validation logic. Successful exploitation may allow an...

The vulnerability of the fs/ntfs3 component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the fs/ntfs3 component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-73232

creationtimestamp| type| source ---|---|--- 2026-08-11 21:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mstj3z6ovz2t...

CVE-2026-66154

CVE-2026-66154 affects SonicWall GMS (Global Management System) 9.5.1 and earlier. The issue is insufficient certificate validation in a privileged communication workflow, which under a MitM with controlled network conditions could permit unauthorized changes. CVSS v3.1 base score 8.3 (HIGH) with...

CVE-2026-66154

An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 Build 9510.1044 and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes...

CVE-2026-27302

creationtimestamp| type| source ---|---|--- 2026-08-11 19:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstf5jgqok2v...

EUVD-2026-56929

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleterevision function in all versions up to, and including, 2.8.169. This makes it possible for...

CVE-2026-16230

The CVE concerns the Formidable Digital Signatures plugin for WordPress, where the delete_file function fails to validate file paths in all versions up to 3.0.6. This allows unauthenticated attackers to delete files on the server by submitting an attacker-controlled filename via item_meta[field_i...

CVE-2026-16230

The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an...

CVE-2026-18712

An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain...

CVE-2026-18705

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructin...

CVE-2026-62696

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:56+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:20:18+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:52+00:00| seen|...

CVE-2026-64920

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:59+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:00:54+00:00| seen|...

CVE-2026-62890

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:50+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:20:58+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:00:46+00:00| seen|...

CVE-2026-62911

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:38+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 01:00:35+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 08:00:07+00:00| seen|...