CVE-2026-5419 affecting package gnutls for versions less than 3.8.13-1

CVE-2026-5419 affecting package gnutls for versions less than 3.8.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-11332 affecting package ansible for versions less than 2.17.11-2

CVE-2026-11332 affecting package ansible for versions less than 2.17.11-2. A patched version of the package is available...

CVE-2026-42012 affecting package gnutls for versions less than 3.8.13-1

CVE-2026-42012 affecting package gnutls for versions less than 3.8.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-42015 affecting package gnutls for versions less than 3.8.13-1

CVE-2026-42015 affecting package gnutls for versions less than 3.8.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-39827 affecting package telegraf for versions less than 1.31.0-23

CVE-2026-39827 affecting package telegraf for versions less than 1.31.0-23. A patched version of the package is available...

CVE-2026-5223 affecting package rust for versions less than 1.75.0-30

CVE-2026-5223 affecting package rust for versions less than 1.75.0-30. A patched version of the package is available...

CVE-2026-46598 affecting package telegraf for versions less than 1.31.0-23

CVE-2026-46598 affecting package telegraf for versions less than 1.31.0-23. A patched version of the package is available...

CVE-2026-39833 affecting package telegraf for versions less than 1.31.0-23

CVE-2026-39833 affecting package telegraf for versions less than 1.31.0-23. A patched version of the package is available...

CVE-2026-5223 affecting package rust for versions less than 1.90.0-9

CVE-2026-5223 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...

CVE-2026-50259 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1

CVE-2026-50259 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-50261 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1

CVE-2026-50261 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-50256 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1

CVE-2026-50256 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53867

Capgo before 12.128.2 does not delete previously uploaded profile images, leaving orphaned files accessible via previously generated URLs, enabling unauthorized retrieval of user-uploaded content. This affects Capgo's backend storage handling when users replace or remove images. The CVE notes MED...

NPM: Fabric.js improper escaping in fabric.Gradient colorStops leads to XSS in SVG serialization

NPM: Fabric.js improper escaping in fabric.Gradient colorStops leads to XSS in SVG serialization vulnerability discovered by ? in WordPress Npm fabric versions 7.4.0...

NPM: Budibase: SSRF via User-Controlled queryId in Automation Execute Query Step

NPM: Budibase: SSRF via User-Controlled queryId in Automation Execute Query Step vulnerability discovered by ? in WordPress Npm budibase versions 3.39.0...

EulerOS Virtualization 2.13.0 : python-requests (EulerOS-SA-2026-2417)

According to the versions of the python-requests packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a...

WordPress Ajax Load More plugin < 7.8.4 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Ajax Load More versions 7.8.4...

WordPress Powerpack for LearnDash plugin < 1.3.0 - Unauthenticated Arbitrary Option Update vulnerability

Unauthenticated Arbitrary Option Update vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin PowerPack for LearnDash versions 1.3.0...

WordPress Schema & Structured Data for WP & AMP plugin < 1.60 - Unauthenticated Arbitrary Media Upload vulnerability

Unauthenticated Arbitrary Media Upload vulnerability discovered by 0xBassia in WordPress Plugin Schema & Structured Data for WP & AMP versions 1.60...

CVE-2026-10721

Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize calls in the in Permission, Cache, and Search components. An unauthenticated attacker may trigger arbitrary PHP object instantiation if a malicious serialized payload has been placed in the database. Thanks XananasX7 f...