GHSA-88P2-JJ8W-J8QG Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint

Summary The target search endpoint POST /api/latest/fleet/targets returned team enroll secrets and full team configuration, including credential-bearing agent options, to observer-class users. Other team-facing endpoints mask these fields for observers; the target search endpoint did not apply th...

SQL Injection

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to SQL Injection via the searchUsers process. An attacker can retrieve sensitive user information, such as user IDs and display names, by submitting...

SQL Injection

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to SQL Injection via the searchUsers process. An attacker can retrieve sensitive user information, such as user IDs and display names, by submitting...

EUVD-2026-57101

The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when a non-default search field type is configured...

CVE-2026-18474

The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when a non-default search field type is configured...

CVE-2026-18474

The WP Directory Kit WordPress plugin, in versions prior to 1.5.6 , is vulnerable to an unauthenticated SQL injection . The root cause is a failure to sanitize and escape parameters before using them in SQL statements, specifically when a non-default search field type is configured. This flaw can...

PT-2026-71360

Name of the Vulnerable Software and Affected Versions search-v2-operator affected versions not specified Description A flaw in the search-v2-operator component allows a user with specific administrative permissions on a managed cluster to inject arbitrary configuration data. This is possible...

CVE-2026-18474: Improper Neutralization of Special Elements used in an SQL Command

The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when a non-default search field type is configured...

PT-2026-75948

Summary The target search endpoint POST /api/latest/fleet/targets returned team enroll secrets and full team configuration, including credential-bearing agent options, to observer-class users. Other team-facing endpoints mask these fields for observers; the target search endpoint did not apply th...

PT-2026-71180

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element...

PT-2026-71359

Name of the Vulnerable Software and Affected Versions acm-search-v2-rhel9 affected versions not specified Description An attacker with administrative privileges on the hub cluster, specifically those with patch access to the Search Custom Resource CR, can exploit a flaw in the...

PT-2026-71358

Name of the Vulnerable Software and Affected Versions search-v2-api affected versions not specified Description An unauthenticated attacker can cause a Denial of Service DoS by sending requests containing unique random bearer tokens. This activity creates permanent entries in the unbounded...

CVE-2026-16860: Uncontrolled Search Path Element

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element...

CVE-2026-71471: Inclusion of Functionality from Untrusted Control Sphere

A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource CR, could exploit a vulnerability in the Collector.ImageOverride field. This allows the attacker to deploy an arbitrary container...

WordPress Ajax Search Lite PHP Object Injection Vulnerability

WordPress Ajax Search Lite is a free WordPress plugin developed by wpdreams. It provides a real-time search experience where results are displayed immediately upon input. This plugin can replace the default search function and supports customization of content types and fields. However, WordPress...

Linux Distros Unpatched Vulnerability : CVE-2026-73295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in...

CVE-2026-71473: Improperly Controlled Modification of Dynamically-Determined Object Attributes

A flaw was found in the search-v2-operator component. A user with specific administrative permissions on a managed cluster can exploit a vulnerability that allows them to inject arbitrary configuration data. This manipulation can override critical settings, leading to the replacement of container...

CVE-2026-71469: Allocation of Resources Without Limits or Throttling

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. This can lead to memory exhaustion of the search-ap...

PT-2026-71471

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description An untrusted search path in the amcheck function allows a user with EXECUTE privileges to...

CVE-2026-73031

telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...