PT-2026-107499

On MISP instances configured to require TOTP enrolment Security.otp required, the enforcement of the mandatory two-factor authentication setup applied only to standard browser requests. An authenticated user who had not yet enrolled in TOTP could bypass the forced setup by issuing any non-browser...

PT-2026-107759

This module enables you to add an extra layer of verification for user login flow. The Two Factor Authentication - TFA / Passwordless Login module for Drupal contains a vulnerability in the headless login endpoint that can disclose the site's stored miniOrange customer API key to unauthenticated...

PT-2026-107576

Gophish through 0.12.1 contains stored and reflected cross-site scripting vulnerabilities that allow attackers to inject script by returning malicious SMTP server error messages. Attackers controlling or intercepting a sending profile's SMTP server can execute script when administrators view...

PT-2026-107565

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

PT-2026-107586

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller APIC affected versions not specified Description An authenticated remote attacker with administrative credentials can execute arbitrary commands as the root user on the underlying operating...

PT-2026-107399

The Academy LMS WordPress plugin before 4.0.0 does not verify course enrollment or object ownership when returning a lesson's content through one of its REST API routes, allowing users with a self-registerable student account to read the full content of arbitrary lessons, including lessons of pai...

PT-2026-107692

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Description An issue exists where a user with the list spl2 modules capability can perform SQL injection through SPL2 module filtering. This occurs because the software fails to parameterize...

PT-2026-107596

Name of the Vulnerable Software and Affected Versions Cisco License On-Prem affected versions not specified Description Improper input validation and a lack of authentication in the Cisco Smart Licensing Utility API allow an unauthenticated remote attacker to send crafted requests to the manageme...

PT-2026-107538

A command injection vulnerability exists in the h-ui version v0.0.25 and below administrative API due to improper validation of the listen configuration field. When an authenticated administrator submits a value containing shell metacharacters, the application constructs nftables/iptables rule...

Linux Distros Unpatched Vulnerability : CVE-2026-106420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements...

Linux Distros Unpatched Vulnerability : CVE-2026-106422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium...

VulnCheck KEV: CVE-2026-26216

Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec. The import builtin was included in the allowed builtins, allowing unauthenticated remote...

PT-2026-107592

Name of the Vulnerable Software and Affected Versions Homer versions prior to 11.0.283 Description In default installations, the software fails to enforce authentication for protected API endpoints because the jwtSecret variable defaults to an empty string. When this variable is empty, the...

PT-2026-107694

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10 Splunk Enterprise versions prior to 9.4.15 Splunk Secure Gateway versions prior to 3.10.11 Splunk Secure Gateway...

CVE-2025-57231

CVE-2025-57231 - Docmost 0.22.0 - قراءة ملفات عشوائية يحتوي هذا المستودع على استغلال Proof of Concept PoC للثغرة CVE-2025-57231. إخلاء المسؤولية يُقدَّم هذا المشروع لأغراض تعليمية واختبارات أمنية مصرّح بها فقط. لا تستخدمه ضد أنظمة لا تملكها أو لا تملك إذنًا باختبارها. نظرة عامة تسمح ثغرة اجتياز...

CVE-2026-102407

A flaw was found in Elasticsearch. An authenticated user with permissions for at least one resource can exploit improper access controls in the Modify Data Streams application programming interface API to alter unauthorized data streams. Successful exploitation allows the user to inject data or...

CVE-2023-5359

CVE-2023-5359 - ثغرة التخزين غير المشفر في W3 Total Cache الوصف CVE-2023-5359 هي ثغرة تخزين غير مشفر تؤثر على إضافة ووردبريس W3 Total Cache في الإصدارات ≤ 2.7.5. تسمح هذه الثغرة للمهاجمين عن بُعد بالوصول إلى بيانات اعتماد حساسة مخزنة في ملفات PHP غير مشفرة وقابلة للوصول العام. الخطورة درجة CVSS :...

CVE-2026-86684

The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file system paths. On instances with security IMPORTLOCALPATHS = true, a repository administrator who is not allowed to import local paths could add a push mirror to a local path on the...

CVE-2026-96594

The Gitea API endpoint GET /api/v1/repos/owner/repo/media/filepath wrote files of up to 1 KiB that are stored directly in Git, not in LFS, to the response without the content type and disposition headers Gitea uses for user content. An HTML file committed to a repository was therefore rendered by...

CVE-2026-97208

The Gitea API endpoint for creating push mirrors POST /api/v1/repos/owner/repo/pushmirrors checked only whether mirroring was enabled and not the mirror DISABLENEWPUSH setting that the web interface enforces. A repository administrator could therefore create new push mirrors on instances where th...