CVE-2026-77016 Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Deletion via Candidate Profile Mass Assignment

The Workeera WordPress plugin before 1.0.6 does not restrict which values may be written to a user's own candidate profile, and does not validate or contain the stored file path before deleting it, allowing users with a role as low as subscriber to delete arbitrary files on the server...

CVE-2026-77016

The Workeera WordPress plugin (versions before 1.0.6 ) is vulnerable to arbitrary file deletion due to a mass assignment flaw in the candidate profile functionality. The plugin fails to restrict which values can be written to a user's own profile and does not validate or contain the stored file p...

EUVD-2026-66818

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2026-81819: Missing Authorization

Affected versions of Flowintel expose the /myassignment/user API endpoint to any authenticated API user. The endpoint accepts a userid parameter identifying the user whose assignments should be returned, but previously had no role restriction beyond general API authentication. As a result, a...

The vulnerability of the openapi3filter.convertParseError() function in the kin-openapi file handling library allows a attacker to cause a service failure.

The vulnerability of the openapi3filter.convertParseError function in the kin-openapi library is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2026-80183

OpenStack Keystone before 29.0.3 is vulnerable to a broken access control flaw in list_role_assignments_for_tree, caused by misuse of "None" in the policy domain_id check. Because a domain's project record stores domain_id=null, any authenticated user holding role:reader on any project can pass a...

CVE-2026-55228

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, the REST API did not properly enforce the scope of project- and workspace-scoped teams, allowing a user to submit invalid team configurations through the API. By assigning...

CVE-2026-80192

@better-auth/sso before 1.6.27 and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7 prerelease line contains two domain-ownership flaws. When domain verification is disabled, automatic organization assignment accepts unverified provider domains, allowing an authenticated organizati...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104775 advisory. Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the current user. This wrongly...

CVE-2026-80192

@better-auth/sso contains two domain-ownership authentication bypass flaws affecting versions before 1.6.27 (and before 1.4.8 in the 1.4.x line, before 1.7.0-rc.5 in the 1.7 prerelease line). When domain verification is disabled , an authenticated organization owner/administrator can register an ...

GHSA-PG62-F8G4-4WQH phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold

Overview When phpMyFAQ hardened its admin permission-assignment endpoints against privilege escalation, it added a "a non-SuperAdmin may only assign rights they themselves hold" constraint to the user-rights endpoint UserController::updateUserRights. The equivalent group-rights endpoint,...

WordPress LatePoint plugin < 5.6.8 - Unauthenticated Booking Object Mass Assignment via Public Booking Funnel vulnerability

Unauthenticated Booking Object Mass Assignment via Public Booking Funnel vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin LatePoint versions 5.6.8...

CVE-2026-77133

The extension fails to restrict which frontend usergroups a logged-in user may assign to their own account when the profile edit plugin uses its default field configuration, allowing self-service privilege escalation into arbitrary frontend groups...

CVE-2026-77133

CVE-2026-77133 is a broken access control vulnerability in the TYPO3 extension femanager . When the profile edit plugin uses its default field configuration, it fails to restrict which frontend usergroups a logged-in user may assign to their own account, enabling self-service privilege escalation...

PT-2026-81905

Name of the Vulnerable Software and Affected Versions @better-auth/sso versions prior to 1.4.8 @better-auth/sso versions prior to 1.6.27 @better-auth/sso versions prior to 1.7.0-rc.5 Description Two domain-ownership flaws exist when the SSO plugin is active. If domain verification is disabled,...

PT-2026-81233

The extension fails to restrict which frontend usergroups a logged-in user may assign to their own account when the profile edit plugin uses its default field configuration, allowing self-service privilege escalation into arbitrary frontend groups...

The vulnerability of the ice_devlink_reinit_down() function in the drivers/net/ethernet/intel/ice/devlink/devlink.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the icedevlinkreinitdown function in the drivers/net/ethernet/intel/ice/devlink/devlink.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the assignment of the pointer L. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the idxd_reset_done() function in the drivers/dma/idxd/init.c module of the Intel Data Accelerator driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the idxdresetdone function in the drivers/dma/idxd/init.c module of the Intel Data Accelerator driver for the Linux operating system is related to the assignment of a pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...