Eclipse Adoptium: CVE-2026-114820: Vulnerability with JSSE component

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle Graal...

Eclipse Adoptium: CVE-2026-114820: Vulnerability with JSSE component

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle Graal...

PT-2026-122516

Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for vulnerabilities in other projects...

WordPress UPI QR Code Payment Gateway for WooCommerce authorization issue vulnerability

WordPress UPI QR Code Payment Gateway for WooCommerce versions 1.6.3 and earlier contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks, which may allow attackers to exploit improperly configured access control settings and gain unauthorized acces...

Important: java-11-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM...

Important: java-17-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM...

Important: java-25-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM...

Important: java-27-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM...

WordPress SureDash authorization issue vulnerability

WordPress SureDash versions 1.12.2 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may lead to exploitation of improperly configured access control levels...

QuadLayers Social Feed Gallery authorization issue vulnerability

QuadLayers Social Feed Gallery versions 5.0.13 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks and improper configuration of access control security levels, potentially allowing attackers to exploit misconfigured access...

PT-2026-122502

Name of the Vulnerable Software and Affected Versions GeoDirectory versions prior to 2.8.194 Description Users with Subscriber-level access and above can modify the title, caption, moderation status, and featured flag of images associated with listings belonging to other users. This occurs becaus...

WordPress User Profile Builder permission and access control issue vulnerability

WordPress User Profile Builder versions 4.0.3 and earlier contain a permission and access control vulnerability. This flaw arises because the Gutenberg Register block fails to perform server-side authorization; it directly passes the Assigned Role attribute controlled by attackers into the...

Node.js Permission Model Path Prefix Over-Grant

Node.js Permission Model path matching can over-grant filesystem access across radix-tree prefix boundaries. This research advisory documents CVE-2026-58043, affected release lines, reported fixed versions, and required deployment preconditions...

WordPress aBlocks permission and access control issue vulnerability

WordPress aBlocks versions 2.17.0 and earlier contain a permission and access control vulnerability. This vulnerability arises because the permission callback for the /ablocks/v1/form-builder/registration REST endpoint is set to returntrue. The register handler fails to verify whether the formTyp...

WordPress Event Booking Manager for WooCommerce authorization issue vulnerability

WordPress Event Booking Manager for WooCommerce versions 5.7.8 and earlier contain an authorization issue vulnerability. This vulnerability stems from insufficient authorization checks, which may allow attackers to exploit improperly configured access control security levels...

PT-2026-122663

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2 Oracle GraalVM for JDK versions 17.0.21.0.2, 21.0.13.0.2 Oracle GraalVM Enterprise Edition version 21.3.20.0.2 Description An...

FreeBSD : Gitlab -- vulnerabilities (7db37b57-ced8-11f1-ac90-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7db37b57-ced8-11f1-ac90-2cf05da270f3 advisory. Gitlab reports: Integer Overflow issue in Regular Expression Compiler impacts GitLab CE/EE...

Amazon Linux 2 : java-11-amazon-corretto (ALAS-2026-4039)

The version of java-11-amazon-corretto installed on the remote host is prior to 11.0.33.0.9-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4039 advisory. Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October whic...

Oracle Java SE security vulnerabilities

Versions 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, and 27.0.1.0.2 of Oracle Java SE; versions 17.0.21.0.2 and 21.0.13.0.2 of Oracle GraalVM for JDK; and version 21.3.20.0.2 of Oracle GraalVM Enterprise Edition contain a security vulnerability stemming from issu...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143717)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143717 advisory. The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowedclients matches on a /96 prefix inste...