CVE-2026-23118 affecting package kernel for versions less than 6.6.130.1-3

CVE-2026-23118 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...

CVE-2026-23409 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23409 affecting package kernel for versions less than 6.6.130.1-1. A patched version of the package is available...

CVE-2026-23391 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23391 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23221 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23221 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-32529 WordPress Molla theme < 1.5.19 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in don-themes Molla molla allows Reflected XSS.This issue affects Molla: from n/a through 1.5.19...

WordPress Text Toggle plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'title' Shortcode Attribute vulnerability discovered by Gilang - DJ in WordPress Plugin Text Toggle versions = 1.1...

WordPress Leroux theme < 1.4 - Arbitrary Object Instantiation vulnerability

Arbitrary Object Instantiation vulnerability discovered by Denver Jackson in WordPress Theme Leroux versions 1.4...

CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22

CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22. A patched version of the package is available...

CVE-2026-32390

Missing Authorization vulnerability in linethemes Nanosoft nanosoft allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nanosoft: from n/a through 1.3.2...

CVE-2026-27137 affecting package golang for versions less than 1.26.1-1

CVE-2026-27137 affecting package golang for versions less than 1.26.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-32426 WordPress Medilazar Core plugin < 1.4.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in themelexus Medilazar Core medilazar-core allows PHP Local File Inclusion.This issue affects Medilazar Core: from n/a through 1.4.7...

CVE-2026-32328 WordPress Lemmony theme < 1.7.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in shufflehound Lemmony lemmony allows Cross Site Request Forgery.This issue affects Lemmony: from n/a through 1.7.1...

WordPress Gutena Forms plugin < 1.6.1 - Contributor+ Arbitrary Limited Options Update vulnerability

Contributor+ Arbitrary Limited Options Update vulnerability discovered by yiğit ibrahim sağlam in WordPress Plugin Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder versions 1.6.1...

CVE-2025-71222 affecting package kernel for versions less than 6.6.126.1-1

CVE-2025-71222 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23991 affecting package gh for versions less than 2.62.0-13

CVE-2026-23991 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.12.0-5

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.12.0-5. A patched version of the package is available...

CVE-2026-21620 affecting package erlang for versions less than 26.2.5.17-1

CVE-2026-21620 affecting package erlang for versions less than 26.2.5.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-58190 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5

CVE-2025-58190 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5. A patched version of the package is available...

EUVD-2026-10339

Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a self navigation to an invalid port and triggering an iframe redirect, causing the UI to display a trusted domain without user interaction. This vulnerability affects Focus for iOS...

CVE-2025-38514 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38514 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...