EUVD-2026-75162

An issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded default access token secret within its core configuration file, which is not overridden or removed in the production environment profile. A remote, unauthenticated attacker can locally forge valid...

PT-2026-88853

The Reviso Exporter for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the disconnect callback function in versions up to, and including, 1.2.3. The function is registered to the 'wp ajax...

CVE-2026-71801

An issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded default access token secret within its core configuration file, which is not overridden or removed in the production environment profile. A remote, unauthenticated attacker can locally forge valid...

CVE-2026-71801

The s-pms SPMS-Server (through v1.0) is vulnerable to an authentication bypass due to a hardcoded default access token secret within its core configuration file. Because this secret is not removed or overridden in production profiles, a remote, unauthenticated attacker can forge valid administrat...

CVE-2026-73334: Improper Input Validation

Potential problem for users of the org.apache.parquet.crypto.keytools package in Apache Parquet, versions 1.12 to 1.18. This package enables users to encrypt Parquet files via an envelope encryption mechanism that wraps encrypts data keys via a Key Management Service KMS. On the reader side, the...

CVE-2026-71801

An issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded default access token secret within its core configuration file, which is not overridden or removed in the production environment profile. A remote, unauthenticated attacker can locally forge valid...

PT-2026-102364

Name of the Vulnerable Software and Affected Versions PyJWT versions 2.13.0 through 2.13.x Description An issue exists in the HMACAlgorithm.prepare key function within jwt/algorithms.py where the raw-JWK detector fails to normalize Unicode byte-order marks BOM before JSON validation. When a publi...

PT-2026-88922

Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name and acting as another user. This issue affects Apache Impala: =4.0.0. Users are recommended to upgrade to version 4.5.2, which fixes this issue...

CVE-2026-86755: Incorrect Authorization

Snipe-IT versions 4.2.0 through 8.6.3 expose Laravel Passport's auto-registered personal-access-token routes GET, POST, DELETE /oauth/personal-access-tokens with only 'web' and 'auth:web' middleware, without the self.api permission gate that Snipe-IT enforces on its own token endpoints /account/a...

CVE-2026-71801: Use of Hard-coded Credentials

An issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded default access token secret within its core configuration file, which is not overridden or removed in the production environment profile. A remote, unauthenticated attacker can locally forge valid...

CVE-2026-54694: Improper Input Validation

SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a single exploitable attack chain, with three distinct exploitation paths of escalating impact. StringHighlighter.js builds an HTML string by interpolating raw value substrings...

PT-2026-89150

An issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded default access token secret within its core configuration file, which is not overridden or removed in the production environment profile. A remote, unauthenticated attacker can locally forge valid...

VulnCheck KEV: CVE-2026-80099

Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the authenticate method — registered on the restauthenticationerrors filter and therefore evaluated for every unauthenticated REST API...

PT-2026-89192

Name of the Vulnerable Software and Affected Versions eKuiper versions prior to 2.4.0 Description A Cross-Site Scripting XSS issue exists in the external service creation process. Authenticated attackers can inject HTML or script payloads into external service names because the registration...

PT-2026-89124

SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a single exploitable attack chain, with three distinct exploitation paths of escalating impact. StringHighlighter.js builds an HTML string by interpolating raw value substrings...

PT-2026-89031

Snipe-IT before 8.7.0 does not apply the CheckUserIsActivated middleware to the api middleware group in app/Http/Kernel.php, and deactivating a user does not revoke that user's Passport personal access tokens. As a result, although a deactivated account is correctly refused at web login, its...

PT-2026-89024

Name of the Vulnerable Software and Affected Versions Snipe-IT versions 4.2.0 through 8.6.3 Description Laravel Passport's auto-registered personal-access-token routes GET, POST, DELETE '/oauth/personal-access-tokens' are exposed using only 'web' and 'auth:web' middleware. This bypasses the...

PT-2026-88850

The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.9.8 via the NCWM Kitconnect::run function. This is due to the plugin registering the /wp-json/next cart/v1/migration REST route with permission callback...

Amazon Linux 2 : ipa (ALAS-2026-3916)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3916 advisory. A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An unauthenticated LDAP client ca...

PT-2026-88925

Name of the Vulnerable Software and Affected Versions Apache Parquet versions 1.12 through 1.18 Description The org.apache.parquet.crypto.keytools package allows for the encryption of Parquet files using an envelope encryption mechanism that wraps data keys via a Key Management Service KMS. When...