CVE-2026-21048

Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory...

CVE-2026-21045

Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory...

EUVD-2026-42816

Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory...

CVE-2026-13430

The Post Export Import with Media plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.13.1 via the importmediafilesecure function. This is due to insufficient file extension validation caused by a trailing-dot filename bypass, where the extension...

CVE-2026-13430

The WordPress plugin Post Export Import with Media (versions up to 1.13.1) is vulnerable to Arbitrary File Upload. The root cause is insufficient file extension validation during ZIP import: the extension allow-list check in ajax_import_media_start() uses pathinfo() on the raw ZIP entry name, so ...

OPENSUSE-SU-2026:11251-1 traefik-3.7.7-1.1 on GA media

These are all security issues fixed in the traefik-3.7.7-1.1 package on the GA media of openSUSE Tumbleweed...

libmbedtls23-4.2.0-1.1 on GA media (moderate)

libmbedtls23-4.2.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11215-1 Rating: moderate Cross-References: CVE-2026-25832 CVE-2026-49300 CVE-2026-50579 CVE-2026-50580 CVE-2026-50581 CVE-2026-50585 CVE-2026-50586 CVE-2026-50588 CVE-2026-50640 CVE-2026-54441 Affected Products: openSUSE...

OPENSUSE-SU-2026:11252-1 wget-1.25.0-3.1 on GA media

These are all security issues fixed in the wget-1.25.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11247-1 libredwg-devel-0.14.8413-1.1 on GA media

These are all security issues fixed in the libredwg-devel-0.14.8413-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11249-1 python313-weasyprint-69.0-1.1 on GA media

These are all security issues fixed in the python313-weasyprint-69.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11250-1 qemu-11.0.2-1.1 on GA media

These are all security issues fixed in the qemu-11.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

nasm-3.02-1.1 on GA media (moderate)

nasm-3.02-1.1 on GA media Announcement ID: openSUSE-SU-2026:11217-1 Rating: moderate Cross-References: CVE-2026-6067 CVE-2026-6068 CVSS scores: CVE-2026-6067 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2026-6067 SUSE : 4.6...

rustup-1.28.2~0-5.1 on GA media (moderate)

rustup-1.28.20-5.1 on GA media Announcement ID: openSUSE-SU-2026:11223-1 Rating: moderate Cross-References: CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662 CVE-2026-45784 CVSS scores: CVE-2026-41677 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N...

OPENSUSE-SU-2026:11253-1 wpa_supplicant-2.11-7.1 on GA media

These are all security issues fixed in the wpasupplicant-2.11-7.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11245-1 GraphicsMagick-1.3.47-4.1 on GA media

These are all security issues fixed in the GraphicsMagick-1.3.47-4.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-15189

A security vulnerability has been detected in aerostackdev aerostack-mcp up to 6315dfde7df0a15aaf743f88d91347115e09ba23. Affected by this issue is the function uploadmedia of the component mcp-whatsapp. Such manipulation of the argument mediaurl leads to server-side request forgery. The attack ma...

CVE-2026-15189

The vulnerability CVE-2026-15189 affects aerostackdev aerostack-mcp (mcp-whatsapp component). The issue is in the upload_media function where manipulation of the media_url argument enables server-side request forgery (SSRF). The records indicate the attack could be launched remotely, with no vers...

CVE-2026-15189 aerostackdev aerostack-mcp mcp-whatsapp upload_media server-side request forgery

A security vulnerability has been detected in aerostackdev aerostack-mcp up to 6315dfde7df0a15aaf743f88d91347115e09ba23. Affected by this issue is the function uploadmedia of the component mcp-whatsapp. Such manipulation of the argument mediaurl leads to server-side request forgery. The attack ma...

EUVD-2026-42611

A security vulnerability has been detected in aerostackdev aerostack-mcp up to 6315dfde7df0a15aaf743f88d91347115e09ba23. Affected by this issue is the function uploadmedia of the component mcp-whatsapp. Such manipulation of the argument mediaurl leads to server-side request forgery. The attack ma...

WordPress Post Export Import with Media plugin <= 1.13.1 - Authenticated (Administrator+) Arbitrary File Upload vulnerability

Authenticated Administrator+ Arbitrary File Upload vulnerability discovered by ? in WordPress Plugin Post Export Import with Media versions = 1.13.1...