CVE-2026-98430

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep admin queues alive while IRQ is registered The management IRQ handler accesses both the admin completion queue and the async event queue. The driver registered the IRQ before constructing these queues and destroyed...

PT-2026-114360

Three critical authentication bypass flaws in Bisheng open-source LLM DevOps platform allow unauthenticated attackers to gain full admin control and expose cross-user data. Technical Breakdown: - CVE-2026-96679 Legacy SSO Bypass: The POST /user/sso endpoint accepts arbitrary usernames in JSON...

CVE-2026-98430: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep admin queues alive while IRQ is registered The management IRQ handler accesses both the admin completion queue and the async event queue. The driver registered the IRQ before constructing these queues and destroyed...

CVE-2026-101924: Improper Neutralization of Input During Web Page Generation

The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overview admin page. This is due to insufficient output escaping of the visitor-supplied query string that the plugin record...

CVE-2026-56826

Shopper is a Headless e-commerce Admin Panel. From 2.0.0 until 2.9.2, authenticated users who could reach the Settings pages with only accesssetting could directly invoke destructive actions through the Livewire endpoint because...

CVE-2026-110238

Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows authenticated company members with the default customer role to modify or delete arbitrary user accounts through the UsersModalEditEmbed Livewire component. Attackers can dispatch editUser or deleteUse...

CVE-2026-110239

Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...

CVE-2026-56826 Shopper: Missing function-level authorization on Settings tax/zone/shipping Livewire components allows a low-privileged user to delete commerce configuration

Shopper is a Headless e-commerce Admin Panel. From 2.0.0 until 2.9.2, authenticated users who could reach the Settings pages with only accesssetting could directly invoke destructive actions through the Livewire endpoint because...

CVE-2026-110112

The Dockhand application, versions before 1.0.50 , is vulnerable to a privilege escalation flaw due to a failure to validate OIDC iss, aud, nonce, and exp claims. This security weakness allows an attacker with administrator rights in a different tenant of a shared identity provider (such as Micro...

CVE-2026-110112 Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation

Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate th...

CVE-2026-110239 Rapyd Admin before 9.20.0 Stored XSS via rich-text Component

Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...

CVE-2026-110239

The Rapyd Admin software versions prior to 9.20.0 is vulnerable to a stored cross-site scripting (XSS) flaw within the x-rpd::rich-text Blade component. The root cause is the component's failure to sanitize bound model values, which are instead output as raw HTML. An authenticated user can exploi...

CVE-2026-110239 Rapyd Admin before 9.20.0 Stored XSS via rich-text Component

Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...

CVE-2026-110238 Rapyd Admin 9.0.0 before 9.20.0 Authorization Bypass via UsersModalEditEmbed Component

Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows authenticated company members with the default customer role to modify or delete arbitrary user accounts through the UsersModalEditEmbed Livewire component. Attackers can dispatch editUser or deleteUse...

CVE-2026-110238

Rapyd Admin versions 9.0.0 before 9.20.0 are vulnerable to an authorization bypass within the UsersModalEditEmbed Livewire component. Authenticated company members with the default customer role can exploit this by dispatching editUser or deleteUser actions using predictable sequential user IDs ....

CVE-2026-110238 Rapyd Admin 9.0.0 before 9.20.0 Authorization Bypass via UsersModalEditEmbed Component

Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows authenticated company members with the default customer role to modify or delete arbitrary user accounts through the UsersModalEditEmbed Livewire component. Attackers can dispatch editUser or deleteUse...

CVE-2026-110105

B3log Symphony through 3.6.4 contains a missing authorization vulnerability that allows unauthenticated attackers to reach admin routes because PermissionMidware.check permits routes lacking permission.rule.url entries. Attackers can request /admin/report/ignore/reportId, /admin/tags/remove-unuse...

CVE-2026-109607

A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. Th...

CVE-2026-110108

MateCloud versions through 5.0.8 are affected by a missing authorization vulnerability within the StorageController . This flaw allows any authenticated user, including low-privilege or self-registered accounts, to interact with unprotected /api/1/admin/storage endpoints. By supplying arbitrary b...

CVE-2026-110108 MateCloud through 5.0.8 Missing Authorization via /api/v1/admin/storage API

MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName...