PT-2026-81294

Name of the Vulnerable Software and Affected Versions YOOtheme Pro versions 1.0.0 through 5.0.41 Description A missing access check allows authenticated users with com template editing permissions to access information about arbitrary modules, even if they lack the required com modules permission...

The vulnerability of the `squashfs_readmetadata()` function in the `fs/squashfs/cache.c` file of the Squashfs file system module in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the squashfsreadmetadata function in the fs/squashfs/cache.c file of the Squashfs file system in the Linux kernel is related to an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an attacker to compromise...

FreeBSD -- hwpmc fails to detach PMCs during exec credential transitions

Problem Description: When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. Impact: An unprivileged local user who has attached PMCs to a process can...

PT-2026-81166

The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. This is due to a missing capability check in the ajax iwar preview email function, which uses is admin as its only authorization check and allows...

PT-2026-81243

The frontend topic editing flow does not verify on the server side that the requesting visitor owns the topic being modified. As a result, a visitor who knows the identifier of a topic from the public forum can submit a modified update request for that topic directly and overwrite its content,...

PT-2026-81245

The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event management access could therefore modify events belonging to other organizers...

PT-2026-81175

The Fluent Support Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized acti...

PT-2026-81330

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description In the serve subsystem, the praisonai serve agents and praisonai serve unified commands accept an --api-key flag for authentication, but the parsed value is not implemented within the FastAPI...

CVE-2026-56708: Time-of-check Time-of-use (TOCTOU) Race Condition

Grav API plugin before 1.0.16 contains a server-side request forgery vulnerability in webhook delivery that allows attackers to bypass hostname validation by DNS rebinding. Attackers controlling authoritative DNS for a configured webhook hostname can answer validation lookups with public addresse...

...[ More ]

This Metasploit module exploits CVE-2026-16232, an authentication bypass in the Check Point SmartConsole login process affecting Security Management Server and Multi-Domain Security Management Server. A vulnerable management server accepts a client-supplied SIC distinguished name during an...

FreeBSD : mod_gnutls -- multiple vulnerabilities (a7b4cdfc-9f9d-11f1-a655-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a7b4cdfc-9f9d-11f1-a655-3497f65b111b advisory. The modgnutls project reports: Security fix CVE-2026-33307: Fix out-of-bounds write when...

EulerOS Virtualization 2.13.0 : haveged (EulerOS-SA-2026-3214)

According to the versions of the haveged packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged...

EulerOS Virtualization 2.13.1 : samba (EulerOS-SA-2026-3197)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers tha...

The vulnerability of the rxkad_decrypt_ticket() function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxkaddecryptticket function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, stems from the lack of checking for the return value. Exploiting this vulnerability could allow a remote attacker to compromise...

The vulnerability of the __blk_crypto_evict_key() function in the block/blk-crypto.c module, which is part of the Linux kernel’s block-level support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the blkcryptoevictkey function in the block/blk-crypto.c module, which is part of the Linux kernel’s block-level support, is related to an incorrect check on the returned value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

PT-2026-81234

The extension fails to require the dedicated admin confirmation token when processing an admin-approval request, so a regular user confirmation hash, obtainable by any visitor through the public resend-confirmation action, is sufficient to self-approve a pending account awaiting admin approval...

PT-2026-81242

The frontend company self-service editing feature relies on a template-level visibility flag to hide the edit form for company records a visitor does not own, but the corresponding write operation does not repeat this ownership check on the server side. As a result, a visitor who knows the...

PT-2026-81137

Grav Login plugin versions before 1.0.16 fail to validate the target account's privilege level in the onApiUserListRowAction unlock handler. An attacker with api.users.write permission can clear login lockout counters on admin.super accounts, removing brute-force protection from the...

PT-2026-81241

The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no ownership check in any of them. An unauthenticated visitor who knows the UID of a club record can send a direct request to the update or activa...

PT-2026-81927

Name of the Vulnerable Software and Affected Versions OpenBSD hwpmc affected versions not specified Description An issue exists in the hwpmc4 driver where an inverted check occurs when a process calls execve2 to execute a setuid or setgid image. This failure to properly detach Performance...