MINI-7VX5-WMGH-GP6J

Bulletin has no description...

MINI-VPH7-X9XM-MX8M

Bulletin has no description...

MINI-GW3X-3XX5-44Q5

Bulletin has no description...

MINI-VGQQ-5FVH-H4PP

Bulletin has no description...

CVE-2026-14185

The WPBot WordPress plugin before 8.2.0 does not perform a capability or nonce check in one of its retrieval-augmented-generation settings handlers, allowing authenticated users with subscriber-level access to modify the WPBot WordPress plugin before 8.2.0's configuration...

kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp

A flaw was found in the Linux kernel's Bluetooth Logical Link Control and Adaptation Protocol L2CAP implementation. A remote Bluetooth Low Energy BLE device can exploit this by sending a specially crafted L2CAP ECRED reconfiguration response. This can lead to the corruption of the channel list,...

CVE-2026-15927

A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an externalreference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validateexternalregistryurl. A repository...

CVE-2026-59776

Missing Cryptographic Step CWE-325 vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tampered with...

CVE-2026-59776

Missing Cryptographic Step CWE-325 vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tampered with...

MINI-7G8H-V2P6-4R7M

Bulletin has no description...

MINI-CHP9-229P-X8H7

Bulletin has no description...

MINI-JWFF-J2VM-PJH4

Bulletin has no description...

MINI-RVM9-V89J-F2FW

Bulletin has no description...

MINI-6PGF-9JPR-2VR3

Bulletin has no description...

MINI-38VW-H3FJ-567Q

Bulletin has no description...

MINI-X89H-3MCG-3362

Bulletin has no description...

MINI-X43F-P7XJ-7QVM

Bulletin has no description...

PT-2026-63290

| --- | --- | | Versions tested | gitea/gitea:1.26.2 digest sha256:7d13848af12645600a5f9d93ee2560daa9c6fa6b5b859b7bff3a5e1c0b661031; gitea/gitea:latest resolves to the same digest at time of writing | | Source review | git checkout v1.26.2 commit 2c749ce | | Reproduction | bash run poc.sh single...

PT-2026-61931

OpenRemote versions before 1.26.2 contain an information disclosure vulnerability in the SyslogResource REST endpoint that fails to filter operational logs by realm. Attackers with the read:rules role can access the GET /api/realm/syslog/event endpoint to retrieve operational logs from all tenant...

PT-2026-62410

Missing Authorization CWE-862 in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints...