CLSA-2026-1785924611 TuxCare security update for 38 packages (2 CVEs)

TuxCare rebuilt 38 packages to address 2 CVEs. Fixed in 9.0.50-tuxcare.13...

CVE-2026-15360 Ajax Load More < 8.0.1 - Unauthenticated SQL Injection via custom_args

The Ajax Load More WordPress plugin before 8.0.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to perform time-based blind SQL injection and extract sensitive data from the database...

CLSA-2026-1782954034 TuxCare security update for set-value (13 CVEs)

TuxCare rebuilt set-value to address 13 CVEs. Fixed in 2.0.0-tuxcare.1...

CLSA-2026-1781484855 TuxCare security update for form-data (8 CVEs)

TuxCare rebuilt form-data to address 8 CVEs. Fixed in 4.0.1-tuxcare.1...

CLSA-2026-1780879904 TuxCare security update for basic-ftp (2 CVEs)

TuxCare rebuilt basic-ftp to address 2 CVEs. Fixed in 5.0.5-tuxcare.2...

CLSA-2026-1780361406 TuxCare security update for diff (4 CVEs)

TuxCare rebuilt diff to address 4 CVEs. Fixed in 4.0.2-tuxcare.1...

CLSA-2026-1779324473 TuxCare security update for postcss (4 CVEs)

TuxCare rebuilt postcss to address 4 CVEs. Fixed in 7.0.32-tuxcare.1...

CLSA-2026-1777250300 TuxCare security update for 2 packages (2 CVEs)

TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 2.0.4-tuxcare.4...

CLSA-2026-1777163890 TuxCare security update for 39 packages (2 CVEs)

TuxCare rebuilt 39 packages to address 2 CVEs. Fixed in 9.0.100-tuxcare.6...

CLSA-2026-1776213255 TuxCare security update for 38 packages (3 CVEs)

TuxCare rebuilt 38 packages to address 3 CVEs. Fixed in 9.0.90-tuxcare.5...

CLSA-2026-1771978232 TuxCare security update for 38 packages (1 CVE)

TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.90-tuxcare.3...

CLSA-2025-1765930090 TuxCare security update for 38 packages (9 CVEs)

TuxCare rebuilt 38 packages to address 9 CVEs. Fixed in 9.0.75-tuxcare.2...

CLSA-2025-1763338014 TuxCare security update for 38 packages (10 CVEs)

TuxCare rebuilt 38 packages to address 10 CVEs. Fixed in 9.0.90-tuxcare.1...

CLSA-2025-1766362095 TuxCare security update for 39 packages (12 CVEs)

TuxCare rebuilt 39 packages to address 12 CVEs. Fixed in 9.0.100-tuxcare.1...

CVE-2026-67969

An issue in the HSMonitorApplications component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a crafted HS.AppMonTbl entry...

EUVD-2026-52031

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...

CVE-2026-15964

The WordPress plugin Single Sign On For TNG (WordPress) is affected up to version 2.0.0 by an authentication bypass via unauthenticated password reset. The root cause is the ssoprocess_ajax() handler (wp_ajax_nopriv_ssoprocess_ajax) accepting an attacker-supplied email with setnewpassword and cal...

CVE-2026-15601 Kirki <= 6.0.13 - Authenticated (Editor+) Path Traversal to Arbitrary File Write (Zip Slip)

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Path Traversal Zip Slip in all versions up to, and including, 6.0.13 via the extractzipfile function. This makes it possible for authenticated attackers, with custom-level access and above, to...

CVE-2026-54737

@phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency. Prior to 2.0.5, defaultsDeep recursively merges user-supplied objects without filtering proto, constructor, and prototype, allowing properties to be written to Object.prototype. This iss...

Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by an authentication bypass

Summary IBM WebSphere Application Server shipped with Jazz for Service Management JazzSM is affected by an authentication bypass CVE-2026-16184 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions...