CVE-2026-60112 AIT-GUI < 2.5.1 Missing Authentication via Sessions.create()

AMMOS Instrument Toolkit AIT GUI before 2.5.1 contains a missing authentication vulnerability that allows any unauthenticated network attacker to obtain a valid session and issue arbitrary spacecraft commands by calling Sessions.create without any credential check. Attackers can exploit the...

CVE-2026-66723

MWDB Core versions =2.2.0 and 2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated remote attacker to send arbitrary requests to a remote MWDB instance using the...

CVE-2026-66489

Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox 2.20.2...

CVE-2026-55995

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb...

CVE-2026-66723 Missing authentication requirement in Remote Instances proxy API in MWDB Core

MWDB Core versions =2.2.0 and 2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated remote attacker to send arbitrary requests to a remote MWDB instance using the...

CVE-2026-65887

CVE-2026-65887 affects the Joomla Extension Gridbox by balbooa.com (versions earlier than 2.20.2). The vulnerability arises from an insecure resetPassword function that allows unauthenticated actors to reset any user password (excluding super admins), enabling login as those users and performing ...

CVE-2026-65886 Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2

Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox 2.20.2 - The photo viewer allows unauthenticated attackers to view arbitrary files...

CVE-2026-65886 Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2

Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox 2.20.2 - The photo viewer allows unauthenticated attackers to view arbitrary files...

EUVD-2026-50354

Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox 2.20.2 - The photo viewer allows unauthenticated attackers to view arbitrary files...

CVE-2026-65890 Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2

Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL in queries...

CVE-2026-65890

Summary: CVE-2026-65890 affects Joomla Extension Gridbox by balbooa.com, with unauthenticated SQL injection in Gridbox versions earlier than 2.20.2. The vulnerability allows unauthenticated actors to inject SQL via multiple vectors in queries, as indicated by the description and CVSS metrics (CRI...

CVE-2026-66489

Technical details about CVE-2026-66489 are not publicly available in the provided documents. Monitor for updates from vendors and security feeds to obtain affected versions, impact, and remediation once disclosed.

CVE-2026-65889

Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion 2.20.2 - The generateNewApp method allows actors to recursively delete directories...

CVE-2026-65889 Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2

Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion 2.20.2 - The generateNewApp method allows actors to recursively delete directories...

CVE-2026-65889

Joomla extension Gridbox (balbooa.com) for

CVE-2026-65889 Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2

Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion 2.20.2 - The generateNewApp method allows actors to recursively delete directories...

CVE-2026-65943 Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI < 9.11.0

Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI 9.11.0...

CVE-2026-65943

Joomla Extension RO CSVI by rolandd.com (

CVE-2026-42792

A flaw was found in Erlang OTP's Erlang Port Mapper Daemon epmd. An unauthenticated remote attacker can exploit an improper handling of exceptional conditions in the doaccept function. By exhausting connection slots through holding numerous TCP connections open and periodically sending data, the...

CVE-2026-4604

The Klubraum Membership Request plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the krmrstoresettings function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to update the plugin's...