CVE-2026-12654

CVE-2026-12654 affects Payment Plugins for Stripe WooCommerce (WordPress)

EUVD-2026-48452

Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...

EUVD-2026-48463

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

CVE-2026-58275

Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-56191

Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network...

CVE-2026-56165

Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...

CVE-2026-49159

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network...

EUVD-2026-48449

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem...

EUVD-2026-48460

Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-48459

Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-48458

Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network...

CVE-2026-56191

Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network...

EUVD-2026-48456

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network...

CVE-2026-49159

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network...

PT-2026-64292

Note: The CVE and blog post don't exist because we determined this is actually a cloud-only issue. Access Controls are “Broken” when a user can access resources they are not authorized to access. An attacker can bypass any access control mechanisms in a web application, and gain unauthorized acce...

PT-2026-64262

In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...

The vulnerability of the console-based graphic editor ImageMagick, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the console-based graphic editor ImageMagick is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2026-64817

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description An origin validation error allows an unauthorized attacker to perform spoofing over a network. Origin validation is a security mechanism used to verify that a request...

PT-2026-64411

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...

PT-2026-64208

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Online affected versions not specified Description Improper authentication allows an unauthorized attacker to perform tampering over a network. Recommendations At the moment, there is no information about a newer version tha...