EUVD-2026-56191

A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable...

EUVD-2026-56189

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality...

CVE-2026-11737

The CVE affects several NETGEAR Nighthawk models (listed in the references: RAX42, RAX45, RAX50, RAX43, RAX20, RAX41v2, RAX49s, RAX41, RAX42v2, RAX43v2, RAX50v2). The vulnerability is described as insufficient input validation in the device’s management-facing interface, allowing authenticated ad...

CVE-2026-72920

CVE-2026-72920 affects SeaweedFS before version 4.24. The SeaweedIdentityAccessManagement gRPC service is registered without mandatory authentication when jwt.filer_signing.key is unset, allowing any client able to reach the filer’s gRPC port to invoke CreateUser, CreateAccessKey, PutPolicy, and ...

CVE-2026-72920 SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control

SeaweedFS is a distributed storage system. Prior to 4.24, the filer registers the SeaweedIdentityAccessManagement gRPC service without mandatory authentication when jwt.filersigning.key is unset, allowing any client that can reach the filer gRPC port to invoke CreateUser, CreateAccessKey,...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the id column filter in the DataObject grid. An attacker can execute arbitrary SQL commands by submitting crafted input, potentially exfiltrating or modifying all database contents. This is only exploitable if the...

CVE-2026-72747

AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject malicious JavaScript that persists in the database. When administrators visit the users management page, the unsanitized phone value is rendered via innerHTML, executing the injected...

WordPress Frontend Admin by DynamiApps plugin <= 3.29.9 - Authenticated (Subscriber+) Arbitrary Password Reset via Encrypted Object Token vulnerability

Authenticated Subscriber+ Arbitrary Password Reset via Encrypted Object Token vulnerability discovered by daroo in WordPress Plugin Frontend Admin by DynamiApps versions = 3.29.9...

CVE-2026-72779 Craft CMS 5.0.0-RC1 before 5.10.6 Arbitrary File Read via SplFileObject

Craft CMS 5.0.0-RC1 before 5.10.6 and 4.0.0-RC1 before 4.18.2 contain an arbitrary file read vulnerability. The create Twig function restricts class instantiation using a 5-entry blocklist that does not include SplFileObject, allowing an authenticated administrator with allowAdminChanges=true to...

CVE-2026-72779 Craft CMS 5.0.0-RC1 before 5.10.6 Arbitrary File Read via SplFileObject

Craft CMS 5.0.0-RC1 before 5.10.6 and 4.0.0-RC1 before 4.18.2 contain an arbitrary file read vulnerability. The create Twig function restricts class instantiation using a 5-entry blocklist that does not include SplFileObject, allowing an authenticated administrator with allowAdminChanges=true to...

EUVD-2026-56103

Craft CMS 5.0.0-RC1 before 5.10.6 and 4.0.0-RC1 before 4.18.2 contain an arbitrary file read vulnerability. The create Twig function restricts class instantiation using a 5-entry blocklist that does not include SplFileObject, allowing an authenticated administrator with allowAdminChanges=true to...

CVE-2026-72747 AVideo Stored Cross-Site Scripting via Unauthenticated Registration

AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject malicious JavaScript that persists in the database. When administrators visit the users management page, the unsanitized phone value is rendered via innerHTML, executing the injected...

CVE-2026-72747

CVE-2026-72747 describes a stored cross-site scripting (XSS) in AVideo. An unauthenticated user can register and submit a phone value that is not sanitized, allowing JavaScript to be stored in the database. When an administrator visits the users management page, the unsanitized phone value is ren...

CVE-2026-72747 AVideo Stored Cross-Site Scripting via Unauthenticated Registration

AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject malicious JavaScript that persists in the database. When administrators visit the users management page, the unsanitized phone value is rendered via innerHTML, executing the injected...

EUVD-2026-56137

AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject malicious JavaScript that persists in the database. When administrators visit the users management page, the unsanitized phone value is rendered via innerHTML, executing the injected...

CVE-2026-72747

AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject malicious JavaScript that persists in the database. When administrators visit the users management page, the unsanitized phone value is rendered via innerHTML, executing the injected...

CVE-2026-72747 AVideo Stored Cross-Site Scripting via Unauthenticated Registration

AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject malicious JavaScript that persists in the database. When administrators visit the users management page, the unsanitized phone value is rendered via innerHTML, executing the injected...

WordPress: Author → stored XSS in wp-admin: unescaped sub-size filename from attachment metadata breaks out of the `src` attribute in `get_media_item()`

A vulnerability was discovered in the WordPress media upload and finalize endpoints. An author could upload a crafted image with a malicious filename, which was then stored verbatim by the endpoint and rendered without proper escaping in the WordPress admin media library. This could allow the...

CVE-2026-72604 Intelliants Subrion CMS - Path Traversal

A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticated administrators to delete arbitrary files on the server via the admin panel file deletion endpoint. The endpoint passes a user-supplied file path directly to unlink without sanitization or path...

CVE-2026-72604

A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticated administrators to delete arbitrary files on the server via the admin panel file deletion endpoint. The endpoint passes a user-supplied file path directly to unlink without sanitization or path...