CVE-2026-46717: Incorrect Authorization

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8, nezha's dashboard supports two user roles: RoleAdmin Role==0 and RoleMember Role==1. The notification routes POST /api/v1/notification and PATCH...

PT-2026-49057

Name of the Vulnerable Software and Affected Versions Fleet affected versions not specified Description An issue in the Apple MDM commands listing endpoint allows authenticated users with the Observer role to extract sensitive data from joined database tables, such as host enrollment secrets and...

CVE-2025-58468

A cross-site request forgery CSRF vulnerability has been reported to affect Notification Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities. We have already fixed the vulnerability in the following version: Notification Center 1.10.0.3291...

CVE-2026-2827

The Open User Map PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'oumlocationnotification' parameter in versions up to, and including, 1.4.31 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

EUVD-2026-36198

The Open User Map PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'oumlocationnotification' parameter in versions up to, and including, 1.4.31 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-2827 Open User Map PRO <= 1.4.31 - Unauthenticated Stored Cross-Site Scripting via 'oum_location_notification'

The Open User Map PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'oumlocationnotification' parameter in versions up to, and including, 1.4.31 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-2827

CVE-2026-2827 affects the Open User Map PRO plugin for WordPress. The vulnerability is a Stored Cross-Site Scripting (XSS) via the oum_location_notification parameter in versions up to and including 1.4.31, caused by insufficient input sanitization and output escaping. Unauthenticated attackers c...

monasca-notification (>=1.2.0, <=1.2.7), monasca-persister (0.1.12) potentially affected by CVE-2026-10143 via kafka-python (0.9.2)

kafka-python PYPI version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - monasca-notification =1.2.0, =1.2.7 - monasca-persister 0.1.12 Source cves: CVE-2026-10143 Source advisory: OSV:GHSA-2JCM-HQ8R-84WX...

monasca-notification (>=1.2.0, <=1.2.7), monasca-persister (0.1.12) potentially affected by CVE-2026-10142 via kafka-python (0.9.2)

kafka-python PYPI version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - monasca-notification =1.2.0, =1.2.7 - monasca-persister 0.1.12 Source cves: CVE-2026-10142 Source advisory: OSV:GHSA-M3PX-Q5GJ-J9X7...

PT-2026-48610

The Open User Map PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'oum location notification' parameter in versions up to, and including, 1.4.31 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

monasca-notification (>=1.2.0, <=1.2.7), monasca-persister (0.1.12) potentially affected by CVE-2026-10142 via kafka-python (0.9.2)

kafka-python PYPI version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - monasca-notification =1.2.0, =1.2.7 - monasca-persister 0.1.12 Source cves: CVE-2026-10142 Source advisory: OSV:PYSEC-2026-2190...

monasca-notification (>=1.2.0, <=1.2.7), monasca-persister (0.1.12) potentially affected by CVE-2026-10143 via kafka-python (0.9.2)

kafka-python PYPI version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - monasca-notification =1.2.0, =1.2.7 - monasca-persister 0.1.12 Source cves: CVE-2026-10143 Source advisory: OSV:PYSEC-2026-2191...

info.bluefloyd.jenkins:jenkins-jira-issue-updater (>=1.17, <=1.18), jenkins.plugins:mqtt-notification-plugin (1.3) +6 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.600)

org.jenkins-ci.main:jenkins-core MAVEN version 1.600 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - info.bluefloyd.jenkins:jenkins-jira-issue-updater =1.17, =1.14, =1.20, =1.21 -...

com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...

com.tikalk.hudson.plugins:notification (1.10), org.jenkins-ci.main:jenkins-test-harness (1.605) +5 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.605)

org.jenkins-ci.main:jenkins-core MAVEN version 1.605 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification 1.10 - org.jenkins-ci.main:jenkins-test-harness 1.605 -...

com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...

info.bluefloyd.jenkins:jenkins-jira-issue-updater (>=1.17, <=1.18), jenkins.plugins:mqtt-notification-plugin (1.3) +6 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.600)

org.jenkins-ci.main:jenkins-core MAVEN version 1.600 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - info.bluefloyd.jenkins:jenkins-jira-issue-updater =1.17, =1.14, =1.20, =1.21 -...

org.jenkins-ci.main:jenkins-war (1.653), org.jenkins-ci.main:test (1.653) +9 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.653)

org.jenkins-ci.main:jenkins-core MAVEN version 1.653 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.653 - org.jenkins-ci.main:test 1.653 -...

CVE-2025-58468

A cross-site request forgery CSRF vulnerability has been reported to affect Notification Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities. We have already fixed the vulnerability in the following version: Notification Center 1.10.0.3291...

CVE-2025-58468 Notification Center

A cross-site request forgery CSRF vulnerability has been reported to affect Notification Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities. We have already fixed the vulnerability in the following version: Notification Center 1.10.0.3291...