WordPress Customer Coupons for WooCommerce authorization issue vulnerability

WordPress Customer Coupons for WooCommerce versions 1.3.14 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may allow attackers to exploit improperly configured access control security levels...

PT-2026-123154

A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbb platform/core/openbb core/app/model/api settings.py of the component Local API Server. This manipulation causes improper access controls. Remote exploitation of the attack is possible. Th...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple tvOS versions prior to 27.2. This vulnerability stems from inadequate validation mechanisms and may allow applications to access...

Meow Apps AI Engine authorization issue vulnerability

Meow Apps AI Engine versions 3.8.6 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks, which may allow attackers to exploit improperly configured access control security levels...

WordPress DEPART authorization issue vulnerability

WordPress DEPART versions 1.0.10 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, enabling exploitation of improperly configured access control levels...

Apple MacOS: CVE-2026-112647: OS X update for iCloud

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data...

Daniel Gatis Rembg path traversal vulnerability

Versions of Daniel Gatis Rembg prior to 2.0.82 contain a path traversal vulnerability. This vulnerability arises because the publicly accessible /api/remove endpoint passes an attacker-controlled extras.sammodel parameter to both the SAM filename and the GitHub download URL without validating its...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.10. It arises because btintelpciepreparetx uses tfdindex to access the TFD and data buffer array before incrementing the index based on modulo operation with txq-count. Boundary checks fail to reject out-of-bounds indices equal to txq-coun...

PT-2026-125326

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data...

PT-2026-125026

Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coupons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Coupons for WooCommerce: from n/a through 1.3.14...

PT-2026-125305

This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. An app may be able to access sensitive user data...

WordPress Discussion Board authorization issue vulnerability

WordPress Discussion Board versions 2.6.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may lead to exploitation of improperly configured access control levels...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from access control issues and insufficient sandbox restrictions, potentially allowing...

Syncplify Server path traversal vulnerability

Versions prior to Syncplify Server 8.8.0 contain a path traversal vulnerability. This vulnerability stems from an access control bypass, allowing authenticated SFTP users to exploit case-insensitive file system path resolution and the 8.3 short filename feature to bypass per-path permissions. As ...

CVE-2026-116638

The Windows Recovery Environment WinRE in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to...

CVE-2026-116638

The Windows Recovery Environment WinRE in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2. This vulnerability stems from improper handling of sensitive data movement, potentially allowing applications to access sensitive user data...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2 and Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2 and Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Taho...

WordPress Geo Mashup authorization issue vulnerability

WordPress Geo Mashup versions 1.13.22 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks and may lead to exploitation of improperly configured access control levels...

WordPress LearnPress authorization issue vulnerability

WordPress LearnPress versions 4.4.11 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks, which may allow attackers to exploit improperly configured access control levels...