PT-2026-133721

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the legacy render function. This is due to broken authorization on the Lightroom gallery edit endpoint combined with mass...

PT-2026-134187

Name of the Vulnerable Software and Affected Versions Arc versions prior to 26.06.2 Description An authorization bypass exists that allows cross-database access through DuckDB table-valued I/O functions. In internal/api/query.go, the extractTableReferences function skips names followed by an...

CVE-2026-111500: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function…

Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Server-side request forgery...

PT-2026-134185

Name of the Vulnerable Software and Affected Versions Tesseract versions prior to 5.5.4 Description The WeightMatrix::DeSerialize function trusts a mode byte from a traineddata LSTM network and calls WeightMatrix::DeSerializeOld when kDoubleFlag is clear. In default FAST FLOAT builds,...

CVE-2026-119978: FlowiseAI Flowise: Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by…

Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOWBUILTINDEP=true. Attackers can submit JavaScript to /api/v1/node-custom-function that writes a file into the mammoth...

CVE-2026-104739: rabilal JS Help Desk – AI-Powered Support & Ticketing System: The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion…

The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the setSupportCustomImage function in all versions up to, and including, 5.0.1. This makes it possible for authenticated attackers, wi...

CVE-2026-119059: keywordrush Content Egg – Affiliate Product Importer & Price Comparison: The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post…

The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post capability check on the ajaxUpdateProducts function in versions up to, and including, 12.0.0. The handler verifies a static nonce 'contenteggmetabox' and the generic 'editposts'...

VulnCheck KEV: CVE-2026-116512

The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is due to unsanitized 'id' parameter value concatenated...

VulnCheck KEV: CVE-2020-35847

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function...

WordPress Formidable Forms input validation error vulnerability

WordPress Formidable Forms versions 6.35 and earlier contain an input validation error vulnerability. This vulnerability stems from insufficient validation of URL prefixes in the validateurlisins3bucket function. Additionally, the permission callback relies solely on a shared token without checki...

Dustin Lundquist SNI Proxy improper exception handling vulnerability

Dustin Lundquist: The SNI Proxy versions 0.7.0 and earlier contain an improper exception handling vulnerability. This flaw stems from a null pointer dereference in the resolvcancel function. Remote unauthenticated attackers can exploit this by sending a TLS SNI name or HTTP Host header containing...

FOSSBilling cross-site request forgery vulnerability

Versions of FOSSBilling prior to 0.8.9 contain a cross-site request forgery vulnerability. This flaw arises because the checkGuestClientAuthentication function on the employee guest login endpoint POST /api/guest/staff/login permits only clientlogin and clientcreate. As a result, stafflogin lacks...

GNU C Library path traversal vulnerability

GNU C Library versions 2.0 and later contain a path traversal vulnerability. This vulnerability arises because the gettext function family accepts LANGUAGE environment variable entries containing “/” or equal to “..”. As a result, message directories can be loaded from any location within the fil...

CVE-2026-118205: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets: The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to…

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.8.7 via the pageid parameter of the registeruser function. The vulnerability exists because the handler's post status...

Amazon Linux 2 : libreswan (ALAS-2026-4068)

The version of libreswan installed on the remote host is prior to 3.25-4.8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4068 advisory. In Libreswan before 5.3.2, when the operating system and Libreswan are running in FIPS mode and at least one CA certificate is...

Linux Distros Unpatched Vulnerability : CVE-2026-119140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious components to panic the host via...

AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793346939)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793346939 advisory. - tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect...

PT-2026-133730

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.5 Description Authenticated users can execute operating system commands by escaping the custom function sandbox. This occurs when the ALLOW BUILTIN DEP variable is set to true, allowing the abuse of allowlisted...

CentOS Linux 7 [TuxCare] Security Update: cpp / gcc / gcc-c++ / gcc-gfortran / gcc-gnat / gcc-go / gcc-objc / etc (CENTOS7:CLSA-2026:1793100162)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793100162 advisory. - A flaw was found in GCC. When an application calls the eraseif function on a binary heap priority queue in libstdc++, the library reallocates...

SQLite authorization issue vulnerability

Versions of SQLite prior to 3.54.0 contain an authorization issue vulnerability. This vulnerability arises because the lookupName function calls the authorization only for the USING column of the first connection table, resulting in authorization bypass. As a consequence, attackers capable of...