CVE-2026-55895 affecting package vim for versions less than 9.2.0735-1

CVE-2026-55895 affecting package vim for versions less than 9.2.0735-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55203 affecting package haproxy for versions less than 2.9.11-7

CVE-2026-55203 affecting package haproxy for versions less than 2.9.11-7. A patched version of the package is available...

CVE-2026-54906 affecting package rubygem-concurrent-ruby for versions less than 1.3.7-1

CVE-2026-54906 affecting package rubygem-concurrent-ruby for versions less than 1.3.7-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-12505 affecting package cifs-utils for versions less than 7.6-1

CVE-2026-12505 affecting package cifs-utils for versions less than 7.6-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-57435 affecting package rubygem-nokogiri for versions less than 1.19.4-1

CVE-2026-57435 affecting package rubygem-nokogiri for versions less than 1.19.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-57438 affecting package rubygem-nokogiri for versions less than 1.19.4-1

CVE-2026-57438 affecting package rubygem-nokogiri for versions less than 1.19.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-59922 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-59922 affecting package python-mistune for versions less than 3.3.0-1. A patched version of the package is available...

CVE-2026-59925 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-59925 affecting package python-mistune for versions less than 3.3.0-1. A patched version of the package is available...

CVE-2026-59928 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-59928 affecting package python-mistune for versions less than 3.3.0-1. A patched version of the package is available...

CVE-2026-57437 affecting package rubygem-nokogiri for versions less than 1.19.4-1

CVE-2026-57437 affecting package rubygem-nokogiri for versions less than 1.19.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-49851 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-49851 affecting package python-mistune for versions less than 3.3.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-57453 affecting package vim for versions less than 9.2.0735-1

CVE-2026-57453 affecting package vim for versions less than 9.2.0735-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-57234 affecting package rubygem-nokogiri for versions less than 1.19.4-1

CVE-2026-57234 affecting package rubygem-nokogiri for versions less than 1.19.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-54370 affecting package acl for versions less than 2.4.0-1

CVE-2026-54370 affecting package acl for versions less than 2.4.0-1. A patched version of the package is available...

PT-2026-54480

Cross-Site request forgery CSRF vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extension allows Cross Site Request Forgery. This issue affects Mediawiki - RedirectManager Extension: from before 1.3.3...

Mozilla Thunderbird < 152.0.1

The version of Thunderbird installed on the remote Windows host is prior to 152.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-63 advisory. - An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing...

WordPress RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation vulnerability

Cross-Site Request Forgery to Privilege Escalation vulnerability discovered by ? in WordPress Plugin RegistrationMagic versions = 6.0.9.1...

CVE-2025-53648 Apache Gravitino: SQL misconfiguration can access or truncate files

SQL misconfiguration in the Gravitino UI, in versions 1.0.0 and below, can allow a malicious user to read or truncate files. Users are recommended to upgrade to version 1.0.0, which fixes this issue...

CVE-2026-56290 Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE...

CVE-2026-56290

CVE-2026-56290 affects Joomla Page Builder CK (com_pagebuilderck). The root cause is an unauthenticated file upload path via browse.ajaxAddPicture that accepts a user-controlled destination with only trivial sanitization and no authentication gate, enabling an attacker to upload PHP/executable fi...