CVE-2026-32559

UltimateAI is a WordPress plugin affected by an arbitrary file upload vulnerability in versions ≤ 3.1.0 . A user with Subscriber privilege level can upload arbitrary files without user interaction, with a scope change that allows full compromise of confidentiality, integrity, and availability (CV...

CVE-2026-32554 WordPress WooBeWoo Product Filter Pro plugin <= 3.1.8 - SQL Injection vulnerability

Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...

CVE-2026-27364

Broken Access Control vulnerability in the WordPress Style Kits plugin (AnalogWP) versions ≤ 2.6.5 . A Subscriber -level authenticated user can exploit insufficient access controls, resulting in a high impact on integrity (CVSS 3.1: 6.5 MEDIUM, vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). No conf...

CVE-2026-78284

CVE-2026-78284 is an unauthenticated arbitrary file deletion vulnerability in the MasterStudy LMS WordPress plugin, affecting versions 3.7.42 and earlier . An attacker can delete files on the server without any authentication or user interaction. The CVSS 3.1 base score is 8.6 (HIGH) , driven by ...

Important: Red Hat Security Advisory: RHACS 4.10.7 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

GHSA-Q8GQ-377P-JQ3R vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0...

ROOT-OS-DEBIAN-13-CVE-2025-68307 CVE-2025-68307 in linux - Patched by Root

Root has patched CVE-2025-68307 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2023-37454 CVE-2023-37454 in linux - Patched by Root

Root has patched CVE-2023-37454 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-71182 CVE-2025-71182 in linux - Patched by Root

Root has patched CVE-2025-71182 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-23373 CVE-2026-23373 in linux - Patched by Root

Root has patched CVE-2026-23373 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-40026 CVE-2025-40026 in linux - Patched by Root

Root has patched CVE-2025-40026 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-39950 CVE-2025-39950 in linux - Patched by Root

Root has patched CVE-2025-39950 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-38591 CVE-2025-38591 in linux - Patched by Root

Root has patched CVE-2025-38591 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-40111 CVE-2025-40111 in linux - Patched by Root

Root has patched CVE-2025-40111 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-37966 CVE-2025-37966 in linux - Patched by Root

Root has patched CVE-2025-37966 in the linux package for Root:Debian:13. Multiple fixed versions available...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

haaukins

Haaukins Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components Docker, Virtualbox and Golang, the communication and orchestration between the components managed using Go programming language. The main reason of having Go...

Malicious code in @gsas/gsas-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2242b683433d5fe37b3997185d251799a4606a456e516da08586775d11f0cb7e @gsas/[email protected] is a high-version public-registry squat targeting an internal @gsas/gsas-sdk name. package.json declares preinstall: node...

ROOT-OS-DEBIAN-13-CVE-2026-48962 CVE-2026-48962 in perl - Patched by Root

Root has patched CVE-2026-48962 in the perl package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-12556

HP Easy Start for macOS versions prior to 2.16.7.260722 contain potential security vulnerabilities that may lead to escalation of privilege . HP's CVSS 4.0 rating is 7.7 (HIGH) , with a network attack vector, low complexity, and low privileges required, yielding high impact on the vulnerable syst...