EUVD-2026-37835

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.0.3 via the changeorderstatus, addordernote, deleteordernote,...

MINI-W676-X46G-MPF4

Bulletin has no description...

MINI-26WF-F8QG-3F4W

Bulletin has no description...

MINI-CW55-Q8MC-35MX

Bulletin has no description...

MINI-54H4-HQ5W-PVVC

Bulletin has no description...

MINI-9JX7-MRJ4-7C2H

Bulletin has no description...

MINI-9P7M-W92H-FJ27

Bulletin has no description...

MINI-R95V-PGQC-V2PM

Bulletin has no description...

MINI-2WF7-VFWQ-QPV8

Bulletin has no description...

Siemens RUGGEDCOM RST2428P Improper Update of Reference Count (CVE-2025-40251)

In the Linux kernel, the following vulnerability has been resolved: devlink: rate: Unset parent pointer in devlratenodesdestroy The function devlratenodesdestroy is documented to Unset parent for all rate objects. However, it was only calling the driver-specific rateleafparentset or...

CVE-2026-48759

TypeBot is a chatbot builder tool. Versions 3.15.2 and below have an Insecure Direct Object Reference vulnerability through cross-workspace Theme Template modification and deletion. The handleSaveThemeTemplate and handleDeleteThemeTemplate handlers validate that the authenticated user is a...

MINI-QH2H-6R22-RXWW

Bulletin has no description...

CVE-2026-48979

creationtimestamp| type| source ---|---|--- 2026-06-17 22:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojfmgmp232z 2026-06-19 12:01:26+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3moncap53le2e...

MINI-GRHG-CQ3J-8CHQ

Bulletin has no description...

MINI-F6W8-QPWH-GP7C

Bulletin has no description...

MINI-4C78-VP88-GH5W

Bulletin has no description...

CVE-2026-48759 TypeBot: Cross-Workspace Theme Template IDOR (Modification and Deletion)

TypeBot is a chatbot builder tool. Versions 3.15.2 and below have an Insecure Direct Object Reference vulnerability through cross-workspace Theme Template modification and deletion. The handleSaveThemeTemplate and handleDeleteThemeTemplate handlers validate that the authenticated user is a...

CVE-2026-48759 TypeBot: Cross-Workspace Theme Template IDOR (Modification and Deletion)

TypeBot is a chatbot builder tool. Versions 3.15.2 and below have an Insecure Direct Object Reference vulnerability through cross-workspace Theme Template modification and deletion. The handleSaveThemeTemplate and handleDeleteThemeTemplate handlers validate that the authenticated user is a...

MINI-RPRR-42WF-6PGX

Bulletin has no description...

DEBIAN-CVE-2026-48822

Shaarli is a personal bookmarking service. Versions 0.16.1 and prior contain a stored Cross-Site Scripting XSS vulnerability in the Markdown-to-HTML conversion process used in the Bookmark Description field. An authenticated user can inject a malicious javascript: URI inside a Markdown link. The...