CVE-2026-82185

CVE-2026-82185 affects the WPLP Cookie Consent WordPress plugin prior to version 4.4.2 . The root cause is missing capability or nonce checks on some of the plugin's A/B testing actions , allowing any authenticated user with a low-privilege role (such as a subscriber ) to overwrite the cookie ban...

WordPress WPLP Cookie Consent plugin < 4.4.2 - Subscriber+ Banner Settings Overwrite and A/B Test Data Reset vulnerability

Subscriber+ Banner Settings Overwrite and A/B Test Data Reset vulnerability discovered by RIA Labs in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions 4.4.2...

CVE-2026-16769 RS9116W/SiWx917 plaintext pause encryption request causes DOS

An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...

CVE-2025-45422---Bbox

CVE-2025-45422: Omisión de Persistencia y Control de Acceso UPnP de Proximus b-box https://vulners.com/cve/CVE-2025-45422 Este script demuestra CVE-2025-45422 que afecta a los routers Proximus b-box que ejecutan la versión de firmware 8c.725A. Aprovecha la funcionalidad UPnP del router para crear...

ubl-itel-s23

Unlock Bootloader — Itel S23 S665L / Unisoc T606 Guide to unlock the bootloader on the Itel S23 S665L using the CVE-2022-38694 exploit on the Unisoc T606 UMS9230 chipset. Device Info Property| Value ---|--- Brand| Itel Model| S665L S23 Android| 12 SDK 31 Build|...

ubl-itel-s23

Desbloquear Bootloader — Itel S23 S665L / Unisoc T606 Guía para desbloquear el bootloader en el Itel S23 S665L usando el exploit CVE-2022-38694 en el chipset Unisoc T606 UMS9230. Información del Dispositivo Propiedad| Valor ---|--- Marca| Itel Modelo| S665L S23 Android| 12 SDK 31 Compilación|...

CVE-2026-79679

Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue affects mapp Audit used in mapp Services: before 6.8.0...

EUVD-2026-70412

Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue affects mapp Audit used in mapp Services: before 6.8.0...

CVE-2026-79679 Use of Weak Credentials

Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue affects mapp Audit used in mapp Services: before 6.8.0...

CVE-2026-79679

CVE-2026-79679 is a Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit as used in mapp Services, affecting versions before 6.8.0 . The weakness allows network-based exploitation with no privileges required. The CVSS 3.1 base score is 8.7 (HIGH) , with High impact o...

CVE-2026-80656

In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for btree node size Syzbot reported an uninit-value bug in 1 with a corrupted HFS+ image, during the file system mounting process, specifically while loading the catalog, a corrupted nodesize value of ...

CVE-2025-63080

KAON PG5298A and PG5298B routers contain an insufficient access control flaw in their JSON-RPC interface . An authenticated user on the adjacent network can send crafted JSON-RPC requests to perform operations that are otherwise restricted to the GUI, enabling system file read or command executio...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fixed the potential NULL pointer dereferencing in nilfsbtreeinsert The patch series “nilfs2: fixes potential issues with empty B-tree nodes” addresses three potential issues with empty B-tree nodes that can occur with...

CVE-2026-19505

Improper cryptographic signature verification in jstfunctions.c in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote attacker to bypass authentication and obtain administrative access via a forged JWT containing an invalid RSA signature...

CVE-2026-19506

Race condition in check.jst in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote attacker to gain unauthorized access via concurrent authentication requests that exploit shared authentication state...

CVE-2026-19507

Uncontrolled resource consumption in check.jst in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to cause denial of service via excessively large password values...

CVE-2026-19508

Heap-based buffer overflow in the multipart form-data parser in jstpost.c in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to cause memory corruption and denial of service, and potentially execute arbitrary code, via a crafted multipart/form-data request...

CVE-2026-19509

Improper input validation in ajaxSetwirelessnetworkconfiguration.jst in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows an authenticated attacker to cause denial of service via a crafted ssidnumber parameter...

CVE-2026-19508 RDK WebUI heap-based buffer overflow vulnerability

Heap-based buffer overflow in the multipart form-data parser in jstpost.c in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to cause memory corruption and denial of service, and potentially execute arbitrary code, via a crafted multipart/form-data request...

CVE-2026-19508

CVE-2026-19508 is a heap-based buffer overflow in the multipart form-data parser (jst_post.c) of the RDK-B WebUI (version rdkb-2025q4-kirkstone.04.10.26). The parser fails to validate malformed input before processing, causing the Duktape WebUI process to corrupt memory during parsing and subsequ...