CVE-2026-81703

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

CVE-2026-30073

An issue in the NssaiAvailabilitySubscriptionCreate component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2026-78276

creationtimestamp| type| source ---|---|--- 2026-08-27 17:11:11+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mu3dq2yuc62a 2026-08-27 17:11:13+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117168581500496652...

CVE-2026-80185

creationtimestamp| type| source ---|---|--- 2026-08-27 16:02:18+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mu37uwdcxq25...

CVE-2026-81703 openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

CVE-2025-62343 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...

CVE-2026-78285

creationtimestamp| type| source ---|---|--- 2026-08-27 13:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2vsvpz6i2t...

CVE-2026-78292

creationtimestamp| type| source ---|---|--- 2026-08-27 12:08:08+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu2ss75hh52b 2026-08-28 06:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu4ooyarbi25 2026-09-02 02:00:04+00:00| seen|...

CVE-2026-78288

creationtimestamp| type| source ---|---|--- 2026-08-27 12:07:59+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu2srwsn2c2u 2026-08-27 14:08:58+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mu2zkc7ivo2i 2026-08-27 14:08:59+00:00| seen|...

CVE-2026-78260

creationtimestamp| type| source ---|---|--- 2026-08-27 12:07:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu2sr3w5dw2p 2026-08-28 05:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu4nl73stz23...

WordPress Post Duplicator plugin <= 3.0.11 - Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution vulnerability

Missing Authorization to Authenticated Contributor+ Post Duplication with Arbitrary Author Attribution vulnerability discovered by Abi Wiranata in WordPress Plugin Post Duplicator versions = 3.0.11...

WordPress CubeWP plugin <= 1.1.31 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin CubeWP versions = 1.1.31...

WordPress RSS Aggregator by Feedzy plugin < 5.2.6 - Author+ Cross-User Import Job Manipulation and Post Deletion vulnerability

Author+ Cross-User Import Job Manipulation and Post Deletion vulnerability discovered by Farid Narimanov in WordPress Plugin Feedzy versions 5.2.6...

CVE-2026-32564

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32566

Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32566 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32566

The ACPT (Pro) - Custom Post Types Plugin for WordPress is affected by an unauthenticated privilege escalation vulnerability in versions prior to 2.0.64 . This flaw allows an attacker to create a WordPress administrator account by exploiting two different routes: the REST API and the admin-ajax e...

EUVD-2026-66991

Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32566 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32564

CVE-2026-32564 is a Subscriber-level SQL Injection in the ACPT (Pro) – Custom Post Types Plugin for WordPress (versions ≤ 2.0.63 ), discovered by VDsec. The vulnerability allows a low-privilege (Subscriber) authenticated user to inject SQL, resulting in HIGH confidentiality impact with changed sc...