CVE-2026-39821 affecting package multus for versions less than 4.0.2-8

CVE-2026-39821 affecting package multus for versions less than 4.0.2-8. A patched version of the package is available...

CVE-2026-46597 affecting package docker-compose for versions less than 2.27.0-11

CVE-2026-46597 affecting package docker-compose for versions less than 2.27.0-11. A patched version of the package is available...

CVE-2026-39821 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-39821 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

CVE-2026-39821 affecting package coredns for versions less than 1.11.4-17

CVE-2026-39821 affecting package coredns for versions less than 1.11.4-17. A patched version of the package is available...

CVE-2026-42506 affecting package keda for versions less than 2.14.1-13

CVE-2026-42506 affecting package keda for versions less than 2.14.1-13. A patched version of the package is available...

CVE-2026-39830 affecting package telegraf for versions less than 1.31.0-21

CVE-2026-39830 affecting package telegraf for versions less than 1.31.0-21. A patched version of the package is available...

CVE-2026-39830 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-39830 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

CVE-2026-39821 affecting package cf-cli for versions less than 8.7.11-6

CVE-2026-39821 affecting package cf-cli for versions less than 8.7.11-6. A patched version of the package is available...

CVE-2026-9256 affecting package nginx for versions less than 1.28.3-4

CVE-2026-9256 affecting package nginx for versions less than 1.28.3-4. A patched version of the package is available...

CVE-2026-39821 affecting package jx for versions less than 3.10.182-4

CVE-2026-39821 affecting package jx for versions less than 3.10.182-4. A patched version of the package is available...

CVE-2026-39821 affecting package gh for versions less than 2.62.0-16

CVE-2026-39821 affecting package gh for versions less than 2.62.0-16. A patched version of the package is available...

CVE-2026-39821 affecting package docker-compose for versions less than 2.27.0-11

CVE-2026-39821 affecting package docker-compose for versions less than 2.27.0-11. A patched version of the package is available...

📄 Grav CMS Shell Upload

The Grav CMS Direct Install feature in the Admin plugin allows administrators to upload plugins as ZIP files. The system failed to adequately validate the contents of the ZIP archive or prevent path traversal Zip Slip during extraction. By crafting a malicious plugin that hooks into Grav events...

CVE-2026-7862 Eupago Gateway For Woocommerce < 4.7.2 - Unauthenticated Arbitrary Refund Initiation

The Eupago Gateway For Woocommerce WordPress plugin before 4.7.2 does not properly restrict access to its refund request handler, allowing unauthenticated attackers to initiate refunds against any WooCommerce order using the merchant's payment gateway credentials, and for applicable payment...

GitLab 17.1 < 18.10.7 / 18.11 < 18.11.4 / 19.0 < 19.0.1 (CVE-2026-1402)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Allocation of Resources Without Limits or Throttling in GitLab CVE-2026-1402 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version numbe...

CVE-2026-48906

CVE-2026-48906 affects the Tassos Framework Plugin (Novarain/Tassos Framework) used with Joomla. The CVE records describe an arbitrary file deletion vulnerability in the plugin prior to version 6.1.0, enabling deletion of arbitrary files on affected sites. The CVSS analysis indicates remote acces...

CVE-2026-8711 affecting package nginx for versions less than 1.28.3-3

CVE-2026-8711 affecting package nginx for versions less than 1.28.3-3. A patched version of the package is available...

CVE-2026-41054 affecting package haveged for versions less than 1.9.22-1

CVE-2026-41054 affecting package haveged for versions less than 1.9.22-1. An upgraded version of the package is available that resolves this issue...

PT-2026-43665

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Path Traversal.This issue affects WebinarIgnition: from n/a through 4.08.253...

PT-2026-44128

Name of the Vulnerable Software and Affected Versions Langroid versions prior to 0.63.0 Description SQLChatAgent executes SQL produced by a Large Language Model LLM, which can be influenced by prompt injection. When configured with a database role possessing privileges for code execution or...