CVE-2026-19892 InfusedWoo Pro <= 5.1.18 - Authenticated (Subscriber+) Privilege Escalation via Password Reset Link Disclosure

The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. This is due to a missing capability check in the ajaxiwarpreviewemail function, which uses isadmin as its only authorization check and allows...

CVE-2026-56707

Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass vulnerability in the flex-objects shortcode that allows users with page-edit access to render any registered Flex collection without permission checks. Attackers can place the shortcode in published pages to...

CVE-2026-72702 Grav CMS before 2.0.16 Origin Validation Bypass via Referer

Grav CMS before 2.0.16 contains an origin validation bypass in the Uri::referrer and Pages::referrerRoute methods, which validate the Referer header using an unanchored string prefix match strstartswith$referrer, $base with no trailing delimiter. An attacker who controls a domain that begins with...

SUSE CVE-2026-55648

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, freerdpimagecopyfromicondata in libfreerdp/codec/color.c calculates nWidth multiplied by nHeight multiplied by FreeRDPGetBytesPerPixelformat in 32-bit arithmetic. A malicious RDP server can send a RAIL TSICONINFO...

PT-2026-81361

Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. Attackers can exploit this to bypass signature validation in downstream SAML libraries by providing invalid...

PT-2026-81294

Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with com template editing permissions to access information about arbitrary modules without the respective com modules permissions...

PT-2026-81513

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

PT-2026-81319

Name of the Vulnerable Software and Affected Versions praisonaiagents versions prior to 1.6.58 Description In the AgentServer component, the ServerConfig.auth token variable is exposed but not validated by the AgentServer. create app function across any routes. This allows a remote caller to...

The vulnerability of the `squashfs_readmetadata()` function in the `fs/squashfs/cache.c` file of the Squashfs file system module in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the squashfsreadmetadata function in the fs/squashfs/cache.c file of the Squashfs file system in the Linux kernel is related to an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an attacker to compromise...

The vulnerability of the getDiskSpaceSync module, which is used to determine free disk space in the HTTP File Server 3 file server, allows a hacker to execute arbitrary commands.

The vulnerability of the getDiskSpaceSync function, which is responsible for determining free disk space on the HTTP File Server 3 file server, is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

FreeBSD -- hwpmc fails to detach PMCs during exec credential transitions

Problem Description: When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. Impact: An unprivileged local user who has attached PMCs to a process can...

PT-2026-81166

The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. This is due to a missing capability check in the ajax iwar preview email function, which uses is admin as its only authorization check and allows...

PT-2026-81243

The frontend topic editing flow does not verify on the server side that the requesting visitor owns the topic being modified. As a result, a visitor who knows the identifier of a topic from the public forum can submit a modified update request for that topic directly and overwrite its content,...

PT-2026-81245

The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event management access could therefore modify events belonging to other organizers...

PT-2026-81175

The Fluent Support Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized acti...

PT-2026-81330

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description In the serve subsystem, the praisonai serve agents and praisonai serve unified commands accept an --api-key flag for authentication, but the parsed value is not implemented within the FastAPI...

...[ More ]

This Metasploit module exploits CVE-2026-16232, an authentication bypass in the Check Point SmartConsole login process affecting Security Management Server and Multi-Domain Security Management Server. A vulnerable management server accepts a client-supplied SIC distinguished name during an...

CVE-2026-56708: Time-of-check Time-of-use (TOCTOU) Race Condition

Grav API plugin before 1.0.16 contains a server-side request forgery vulnerability in webhook delivery that allows attackers to bypass hostname validation by DNS rebinding. Attackers controlling authoritative DNS for a configured webhook hostname can answer validation lookups with public addresse...

FreeBSD : mod_gnutls -- multiple vulnerabilities (a7b4cdfc-9f9d-11f1-a655-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a7b4cdfc-9f9d-11f1-a655-3497f65b111b advisory. The modgnutls project reports: Security fix CVE-2026-33307: Fix out-of-bounds write when...

EulerOS Virtualization 2.13.1 : samba (EulerOS-SA-2026-3197)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers tha...