MINI-WW56-8RJ8-RQXW

Bulletin has no description...

MINI-72FX-H2G4-MJ4W

Bulletin has no description...

MINI-934X-5GRX-WRQ5

Bulletin has no description...

MINI-6CMR-JJHP-9XJX

Bulletin has no description...

MINI-5R3C-WRWQ-M7H7

Bulletin has no description...

MINI-J8VQ-J869-FHJM

Bulletin has no description...

MINI-62RW-2CGM-R7M9

Bulletin has no description...

MINI-RW7W-HHQ5-CPVQ

Bulletin has no description...

CVE-2026-9860

The Offload, AI & Optimize with Cloudflare Images plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.10.2 via the 'account-id' parameter parameter. This is due to insufficient privilege enforcement on the cfimagesdosetup AJAX handler, which require...

EUVD-2026-37854

Cotonti 1.0.0 master branch, commit f43f1fc3 is vulnerable to Cross-Site Request Forgery in the administration rights handler. In system/admin/admin.rights.php, the rights update action 'a=update' modifies group access rights including via cotauthaddgroup without calling cotcheckxg to validate th...

MINI-GFV5-G5J8-XPRC

Bulletin has no description...

MINI-5V2M-J8R6-2XCG

Bulletin has no description...

EUVD-2026-37852

The MagicForm WordPress plugin through 0.1.3 does not properly validate the type of files uploaded through an unauthenticated AJAX action when a form's per-field extension allowlist is left empty, allowing unauthenticated attackers to upload PHP files and execute arbitrary code on the server...

CVE-2026-9815

The CVE-2026-9815 entry concerns the MagicForm WordPress plugin (versions up to 0.1.3). The affected component is the file upload path via an unauthenticated AJAX action, where the per-field extension allowlist being empty leads to improper validation of uploaded file types. As a result, unauthen...

CVE-2026-9815 MagicForm <= 0.1.3 - Unauthenticated Arbitrary File Upload to RCE

The MagicForm WordPress plugin through 0.1.3 does not properly validate the type of files uploaded through an unauthenticated AJAX action when a form's per-field extension allowlist is left empty, allowing unauthenticated attackers to upload PHP files and execute arbitrary code on the server...

AVer PTC cameras

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow arbitrary code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all control system devices and/or...

AzeoTech DAQFactory (Update A)

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to upload malicious .ctl files that may lead to arbitrary code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities...

MINI-96GM-PX7J-HQ3V

Bulletin has no description...

MINI-43JC-92GM-2CMQ

Bulletin has no description...

MINI-XMMW-RXJH-C9J2

Bulletin has no description...