PT-2026-133465

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.42.6 n8n versions 2.43.x prior to 2.43.3 n8n versions 3.x prior to 3.0.1 Description Authenticated users with permissions to create, modify, or import workflows can execute JavaScript within the main process. This occur...

Medium: libreswan

Issue Overview: In Libreswan before 5.3.2, when the operating system and Libreswan are running in FIPS mode and at least one CA certificate is loaded, a malformed X.509 certificate payload can cause the pluto daemon to abort on an assertion. In FIPS mode, adddecodedcert calls CERTExtractPublicKey...

PT-2026-134184

Name of the Vulnerable Software and Affected Versions Tesseract versions 5.4.0 through 5.5.3 Description The AppendLinePolygon function in src/api/pagerenderer.cpp destroys a caller-owned right-to-left Pta accumulator when it is received by value. This results in line top rtl pts and line bottom...

Beatriceodera cak-filemanagement-system arbitrary file upload vulnerability

The Beatriceodera cak-filemanagement-system versions 5e6433246475e66462e1fea980688de96a049297 and earlier contain a security vulnerability. This vulnerability stems from improper handling of the File parameter in the moveuploadedfile function within the admin/addlogs.php file, potentially allowin...

i18next input validation error vulnerability

Versions of i18next prior to 26.3.4 contain a security vulnerability. This vulnerability arises because the deepExtend function in src/utils.js utilizes the in operator to check for the existence of properties, and recursively accesses built-in objects inherited through Object.prototype. When an...

PT-2026-133640

Name of the Vulnerable Software and Affected Versions InternLM LMDeploy versions 0.9.0 through 0.18.0 Description An unauthenticated remote attacker can execute arbitrary operating system commands with the privileges of the api server process. This occurs when the server receives specially crafte...

PT-2026-134179

Name of the Vulnerable Software and Affected Versions deadtrickster ssl verify fun versions 1.0.1 through 1.1.7 Description Improper validation of certificates with host mismatches allows an adversary in the middle to impersonate a TLS peer using a certificate with a partial-label wildcard. The t...

PT-2026-134232

Name of the Vulnerable Software and Affected Versions LubeLogger versions prior to 1.6.8 Description An authenticated user can cause cross-user disclosure of vehicle maintenance records. The PrintRecordStickers function in /Controllers/VehicleController.cs verifies if the caller can view the...

Red Hat Enterprise Linux race condition vulnerability

A race condition vulnerability exists in Red Hat Enterprise Linux kernel versions 9.6 through 9.10. This vulnerability stems from an imbalance in localbh within the seg6inputcore function; when returning from a discard path, the lower half remains disabled, potentially leading to softirq starvati...

Towfiq I. SerpBear authorization issue vulnerability

Versions prior to Towfiq I. SerpBear 3.1.1 contain an authorization issue vulnerability. This vulnerability stems from a lack of authentication in pages/api/notify.ts; the verifyUser function is never invoked. Remote unauthorized attackers can repeatedly send POST requests to /api/notify—optional...

PT-2026-134241

Name of the Vulnerable Software and Affected Versions TAKO AI Agent for Okta versions prior to 3.0.1-beta Description An unauthenticated network attacker can create the first administrator account before the legitimate owner completes the initial setup. The initial setup function only checks the ...

AdminNeo SQLite: multi_query Incorrect Check of Function Return Value RCE

This vulnerability is a patch bypass that exploits catastrophic backtracking in a regular expression used to filter ATTACH statements in AdminNeo's SQLite functionality. The original vulnerability CVE-2021-43008 allowed authenticated users to create PHP files through SQLite ATTACH statements,...

FOSSBilling cross-site request forgery vulnerability

Versions of FOSSBilling prior to 0.8.9 contain a cross-site request forgery vulnerability. This flaw arises because the checkGuestClientAuthentication function on the employee guest login endpoint POST /api/guest/staff/login permits only clientlogin and clientcreate. As a result, stafflogin lacks...

CVE-2026-104739: rabilal JS Help Desk – AI-Powered Support & Ticketing System: The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion…

The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the setSupportCustomImage function in all versions up to, and including, 5.0.1. This makes it possible for authenticated attackers, wi...

CVE-2026-119059: keywordrush Content Egg – Affiliate Product Importer & Price Comparison: The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post…

The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post capability check on the ajaxUpdateProducts function in versions up to, and including, 12.0.0. The handler verifies a static nonce 'contenteggmetabox' and the generic 'editposts'...

WordPress Formidable Forms input validation error vulnerability

WordPress Formidable Forms versions 6.35 and earlier contain an input validation error vulnerability. This vulnerability stems from insufficient validation of URL prefixes in the validateurlisins3bucket function. Additionally, the permission callback relies solely on a shared token without checki...

Dustin Lundquist SNI Proxy improper exception handling vulnerability

Dustin Lundquist: The SNI Proxy versions 0.7.0 and earlier contain an improper exception handling vulnerability. This flaw stems from a null pointer dereference in the resolvcancel function. Remote unauthenticated attackers can exploit this by sending a TLS SNI name or HTTP Host header containing...

GNU C Library path traversal vulnerability

GNU C Library versions 2.0 and later contain a path traversal vulnerability. This vulnerability arises because the gettext function family accepts LANGUAGE environment variable entries containing “/” or equal to “..”. As a result, message directories can be loaded from any location within the fil...

CVE-2026-118205: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets: The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to…

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.8.7 via the pageid parameter of the registeruser function. The vulnerability exists because the handler's post status...

Amazon Linux 2 : libreswan (ALAS-2026-4068)

The version of libreswan installed on the remote host is prior to 3.25-4.8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4068 advisory. In Libreswan before 5.3.2, when the operating system and Libreswan are running in FIPS mode and at least one CA certificate is...