EUVD-2026-65164

Subscriber Arbitrary File Upload in UltimateAI = 3.1.0 versions...

EUVD-2026-65173

Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...

EUVD-2026-65165

Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...

EUVD-2026-65160

Subscriber Broken Access Control in Style Kits = 2.6.5 versions...

VulnCheck KEV: CVE-2026-63520

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

PT-2026-81904

GROWI applies its page-viewer permission check to attachment requests only when the request carries an authenticated user. retrieveAttachmentFromIdParam in apps/app/src/server/routes/attachment/get.ts guards the check with a condition requiring the user to be non-null, so a request that carries n...

PT-2026-81273

The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

CVE-2026-75465

The /api.php/user/getlist endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authorization checks. An unauthenticated remote attacker can send a crafted HTTP GET request with limit and offset parameters t...

PT-2026-81333

Name of the Vulnerable Software and Affected Versions JFrog Artifactory versions prior to 7.161.19 JFrog Artifactory versions prior to 7.146.36 Description An authenticated user with permissions to read an existing remote Version Control System VCS repository can trigger server-side requests. Thi...

PT-2026-81729

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Safebrowsing component allows a remote attacker to bypass system access restrictions by using a crafted file. Recommendations Update Google Chrome to...

PT-2026-81676

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the FileSystem component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to...

PT-2026-81581

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in Linux Toolkit Theming allows a remote attacker using social engineering to bypass system access restrictions through a crafted HTML page. Recommendations Update...

PT-2026-81609

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A UI misrepresentation in the browser allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering and a crafted HTML page...

PT-2026-81678

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper privilege management in Actor allows a remote attacker to bypass system access restrictions through the use of a crafted HTML page, typically delivered via social engineering...

PT-2026-81685

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in the Network component allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome to versio...

PT-2026-81761

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper access control in Workers allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin...

PT-2026-81777

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 152.0.7977.65 Description Incorrect authorization in the mobile version of the browser allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update to...

PT-2026-81675

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An injection issue in Chrome Tabs allows a remote attacker to potentially bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-81615

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in Extensions allows a remote attacker to bypass system access restrictions by using a crafted Chrome extension. A race condition occurs when the timing or order of...

PT-2026-81668

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in WebProtect allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome to version...