CVE-2026-15732

A Server-Side Request Forgery SSFR vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve responses...

CVE-2024-39024

In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution...

CVE-2024-6541

The Class Mediator fails to correctly validate or sanitize messageContext properties when they are used to populate dynamic values. This allows authenticated users to potentially access or modify data across different system invocations that should be isolated. This weakness can lead to the...

CVE-2026-67622 Flowise 3.1.4 IDOR in OpenAI Assistants Integration

Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration that allows authenticated attackers to access credentials belonging to other workspaces by supplying an arbitrary credential UUID to Assistants endpoints without workspace ownersh...

CVE-2026-67621

Flowise 3.1.4 has a missing authorization flaw on document store mutation endpoints (upsert and refresh). This allows authenticated workspace members with only view-level permissions to perform unauthorized document ingestion, refresh the vector database contents, consume embedding API credits, a...

CVE-2026-67621 Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints

Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perform unauthorized document store operations by accessing unprotected mutation endpoints. Attackers holding only view-level permissions can send direct HTTP requests to the upsert...

CVE-2026-47765 Frappe: Lack of Permissions in restore/bulk_restore

Frappe is a full-stack web application framework. Prior to 15.110.0 and 16.20.0, the restore and bulkrestore endpoints do not apply the appropriate document permission checks, allowing an authenticated user to restore deleted documents without the required authorization. This issue is fixed in...

CVE-2026-47185 Frappe Has Broken Access Control in its Workspace Save API

Frappe is a full-stack web application framework. Prior to 16.18.0, the Workspace Save API accepts a controlled workspace identifier from any authenticated user without enforcing workspace ownership, allowing modification of another user's private workspace and persistent script injection. This...

CVE-2026-45573 Decidim: Push subscriptions can be abused for server-side requests

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, when VAPID delivery is enabled, the notification subscription flow stores a client-supplied push endpoint without validating that it belongs to an approved push service...

CVE-2026-45573

CVE-2026-45573 (Decidim) affects Decidim core where, if VAPID delivery is enabled, the notification subscription flow accepts a client-supplied push endpoint without verifying it belongs to an approved push service. The stored endpoint is later used by WebPush.payload_send, turning a stored value...

CVE-2026-45573 Decidim: Push subscriptions can be abused for server-side requests

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, when VAPID delivery is enabled, the notification subscription flow stores a client-supplied push endpoint without validating that it belongs to an approved push service...

CVE-2026-15734 WGDashboard Server-Side Template Injection vulnerability

A Server-Side Template Injection SSTI vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to execute arbitrary code as root...

CVE-2026-15734 WGDashboard Server-Side Template Injection vulnerability

A Server-Side Template Injection SSTI vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to execute arbitrary code as root...

CVE-2026-15734

WGDashboard contains a Server-Side Template Injection (SSTI) in version 4.3.2 and earlier that allows authenticated attackers to execute arbitrary code with root privileges. The affected product is WGDashboard; the vulnerable component is the server-side template rendering path (SSTI). The issue ...

CVE-2026-15733

WGDashboard is affected by a Remote Code Execution (RCE) vulnerability affecting version 4.2.3 and earlier. The issue is described as multiple OS command injections that allow an authenticated attacker to run arbitrary commands with root privileges. The CVSS context shows critical impact across c...

CVE-2026-15733 WGDashboard Remote Code Execution vulnerability

A Remote Code Execution RCE vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary commands as root...

CVE-2026-15732

WGDashboard SSRF vulnerability (CVE-2026-15732) affects version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve responses, enabling Server-Side Request Forgery. Metrics indicate a CRITICAL impact (CVSS 3.1: 9.8, NETWORK, LOW...

CVE-2026-15732 WGDashboard Server-Side Request Forgery Vulnerability

A Server-Side Request Forgery SSFR vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve responses...

CVE-2026-64664 Statamic: Missing authorization on Control Panel endpoint allows disclosure of user existence

Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.1 and 6.24.0, an authenticated Control Panel user could use an endpoint intended for the user creation wizard to determine if a given email address belonged to an existing user, without having permission to view...

CVE-2026-70557 diboot-core Authenticated Arbitrary Field Read via loadRelatedData Discloses Password Hashes and Salts

diboot-core's POST /common/load-related-data endpoint resolves caller-supplied field names to any @TableField column of any entity and returns those values for all rows, with no field or entity allowlist. The only guard, relatedDataSecurityCheck, returns true unconditionally, so any authenticated...