CVE-2026-28582

A missing permission check in the onCreate method of ConfirmDeviceCredentialActivity.java allows for unauthorized access to and modification of device credentials. This vulnerability can result in local information disclosure without requiring additional execution privileges or user interaction. ...

CVE-2026-28582

In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...

CVE-2026-0054

In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0054

A missing permission check in the isCallerAllowed function of WalletContextualLocationsService.kt allows for the retrieval of wallet information. This vulnerability can lead to local information disclosure without requiring additional execution privileges or user interaction. The issue is address...

EUVD-2026-74046

In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0054

In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73105

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-72929

CVE-2026-72929 is an elevation of privilege vulnerability in Windows Installer , caused by improper validation of an integrity check value . An authorized local attacker can exploit this to gain elevated privileges, with the CVSS 3.1 base score of 7.8 (HIGH) reflecting full impact on confidential...

EUVD-2026-72933

Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD idtokens during OAuth login. Deployments are affected only when the FAB auth manager is configured with Azure AD as an OAuth provider. Because the signing keys are fetched from Microsoft's...

Exploit for CVE-2026-73309

CVE-2026-73309 XenForo before 2.3.13 can skip OAuth2 client-s...

EUVD-2026-72913

A security issue in MongoDB Server's query statistics serialization on the router allows users with monitoring privileges to access unredacted search query text from other users' operations. An improper conditional check in the serialization logic causes the data redaction mechanism to be bypasse...

GHSA-72R2-7MFR-5XR9 NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol

Summary There's a logic bug in FileSystemPathPointer.open inside nltk/data.py that makes the sandbox check permanently inert. The guard condition is always False — meaning any file the process can read is accessible by passing a file:// URL to nltk.data.load. --- Details In nltk/data.py,...

SUSE-SU-2026:23507-1 Security update for libzypp, zypper

This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625. Non security issues fixed: - Econf parser adds tags in drop-in files outside any section to main bsc1272534. - Need...

CVE-2026-86720 WWBN AVideo Missing Authorization via resendRestreamer.json.php

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ownership of liverestreamsid in resendRestreamer.json.php, allowing authenticated users with canStream to access other users' restream destinations. Attackers can broadcast their live stream to victim-configured...

Windows Installer Elevation of Privilege Vulnerability

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-73316 XenForo < 2.3.13 Payment Replay via PayPal REST Payment Provider

XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST payment provider that allows attackers to process the same webhook payload multiple times by exploiting a missing duplicate transaction ID check. Attackers can replay a valid webhook payload to trigger duplicate...

kernel: accel/qaic: Add overflow check to remap_pfn_range during mmap

A flaw was found in the Linux kernel's accel/qaic driver. This vulnerability allows for memory to be mapped beyond its intended boundaries during certain memory allocation operations. A local attacker could exploit this flaw, leading to a use-after-free condition. This could potentially result in...

CVE-2026-3174

The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Stripe OAuth return endpoint in all versions up to, and including, 5.27.4. This makes it possible for unauthenticated attackers to overwrite the site...

CVE-2026-2520

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'updateAddon' function in all versions up to, and including, 27.2. This makes it possible for authenticated attackers, wit...

CVE-2026-2520 Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Plugin Update

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'updateAddon' function in all versions up to, and including, 27.2. This makes it possible for authenticated attackers, wit...