CVE-2026-25203

Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1...

📄 FortiWeb 8.0.1 Remote Code Execution

FortiWeb remote code execution exploit that affects versions prior to 7.6.7, 7.8.7, and 8.0.2. Exploit Title: FortiWeb 8.0.2 - Remote Code Execution Date: 2025-11-22 Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer Vendor...

CVE-2026-33457

Livestatus injection in the prediction graph page in Checkmk 2.5.0b4, 2.4.0p26, and 2.3.0p47 allows an authenticated user to inject arbitrary Livestatus commands via a crafted service name parameter due to insufficient sanitization of the service description value...

PT-2026-31899

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.5.0b4 and prior to 2.4.0p26 Description A flaw exists in Checkmk that allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands through a crafted service...

CVE-2026-5201 affecting package gdk-pixbuf2 for versions less than 2.42.10-5

CVE-2026-5201 affecting package gdk-pixbuf2 for versions less than 2.42.10-5. A patched version of the package is available...

CVE-2026-33554 affecting package freeipmi for versions less than 1.6.17-1

CVE-2026-33554 affecting package freeipmi for versions less than 1.6.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21716 affecting package nodejs for versions less than 20.14.0-15

CVE-2026-21716 affecting package nodejs for versions less than 20.14.0-15. A patched version of the package is available...

CVE-2026-21714 affecting package nodejs for versions less than 20.14.0-15

CVE-2026-21714 affecting package nodejs for versions less than 20.14.0-15. A patched version of the package is available...

CVE-2026-21715 affecting package nodejs for versions less than 20.14.0-15

CVE-2026-21715 affecting package nodejs for versions less than 20.14.0-15. A patched version of the package is available...

CVE-2026-33936 affecting package python-ecdsa for versions less than 0.19.2-1

CVE-2026-33936 affecting package python-ecdsa for versions less than 0.19.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-32778 affecting package expat for versions less than 2.6.4-5

CVE-2026-32778 affecting package expat for versions less than 2.6.4-5. A patched version of the package is available...

CVE-2026-32776 affecting package expat for versions less than 2.6.4-5

CVE-2026-32776 affecting package expat for versions less than 2.6.4-5. A patched version of the package is available...

CVE-2026-40030

Technical details about CVE-2026-40030 are not provided in the connected documents. Public specifics (affected components, root cause, fixes) are unavailable here; monitor for updates.

EUVD-2026-20457

Unauthenticated functionality in CoolerControl/coolercontrold 4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests...

CVE-2026-5302

CORS misconfiguration in CoolerControl/coolercontrold 4.0.0 allows unauthenticated remote attackers to read data and send commands to the service via malicious websites...

EUVD-2026-20455

Command injection in alerts in CoolerControl/coolercontrold 4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert names...

WordPress Hitek theme < 1.8.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Hitek versions 1.8.3...

WordPress Getaway theme < 1.8 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Getaway versions 1.8...

EUVD-2026-20152

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through 7.0.00...

CVE-2026-39506

Missing Authorization vulnerability in Jordy Meow AI Engine Pro ai-engine-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine Pro: from n/a through 3.4.2...