CVE-2026-39834 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39834 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-39835 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39835 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

PT-2026-45850

Name of the Vulnerable Software and Affected Versions docling-core versions 2.5.0 through 2.74.0 Description Insufficient input sanitization when processing specific documents allows for path traversal, enabling remote attackers to read arbitrary files from the host server. The software allows...

PT-2026-45826

Name of the Vulnerable Software and Affected Versions React Router versions 7.7.0 through 7.13.1 Description A client-side Cross-Site Scripting XSS issue exists in the redirect handling of the unstable React Server Components RSC APIs. This occurs when redirects originate from untrusted sources...

CVE-2026-45727

CloakBrowser is a tool to bypass bot detection tests. Prior to version 0.3.28, the cloakserve CDP multiplexer uses the user-supplied fingerprint query parameter directly as a filesystem path component when creating Chrome profile directories. An unauthenticated attacker who can reach the cloakser...

CVE-2026-45729

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer dereference in SvgLoader::run allows any caller that passes untrusted SVG data to Picture::load to crash the process with a 6-byte payload. This issue has been patched in version 1.0.5...

CVE-2026-45266

Nextcloud vulnerability CVE-2026-45266 affects the internal signaling path in Nextcloud’s collaboration platform. A low-privileged user can force other users’ microphones to be muted in calls when no High-performance Backend is installed. Root causes appear to be missing permission checks during ...

Unauthenticated Privilege Escalation Vulnerability Patched in Kirki WordPress Plugin

On May 4th, 2026, we received a submission for an Unauthenticated Privilege Escalation vulnerability in the Kirki WordPress plugin. Although the plugin has more than 500,000 active installations, we estimate that only around 150,000 sites are using a vulnerable version, as the issue was introduce...

PT-2026-45523

Name of the Vulnerable Software and Affected Versions Nextcloud versions 6.1.0 through 8.2.1 Description An attacker can craft malicious links that redirect users to an external website when the victim attempts to log in using OpenID Connect OIDC, a protocol used for authentication. Recommendatio...

Exploit for OS Command Injection in Thecodingmachine Gotenberg

POCCVE-2026-42589 Local reproduction lab and nuclei template...

Exploit for Improper Input Validation in Microsoft

CVE-2025-9209 – RestroPress Unauthenticated API Key & Token Ex...

CVE-2026-39821 affecting package influxdb for versions less than 2.7.5-17

CVE-2026-39821 affecting package influxdb for versions less than 2.7.5-17. A patched version of the package is available...

CVE-2026-25681 affecting package cri-tools for versions less than 1.32.0-6

CVE-2026-25681 affecting package cri-tools for versions less than 1.32.0-6. A patched version of the package is available...

CVE-2026-27136 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-27136 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-39827 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-39827 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-27136 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-27136 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-39832 affecting package packer for versions less than 1.9.5-14

CVE-2026-39832 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...

CVE-2026-42508 affecting package packer for versions less than 1.9.5-14

CVE-2026-42508 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...

CVE-2026-39829 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-39829 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-25680 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6

CVE-2026-25680 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6. A patched version of the package is available...