CVE-2026-97160: Improper Control of Generation of Code

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

CVE-2026-100720: Improper Neutralization of Input During Web Page Generation

Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer the lowest-privileged authenticated role uploads an SSL certificate for one of their own domains, the Certificates API add/update methods parse it with opensslx509parse and store the issuer organization...

CVE-2026-100714: Improper Neutralization of Argument Delimiters in a Command

Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting: unlike sibling settings hardened in GHSA-33mp, the field has no stringregexp or requiredotp guard, and its value is concatenated unescaped into the acme.sh command line built in...

CVE-2026-100645: Improper Neutralization of Input During Web Page Generation

SiYuan versions 3.7.0 before 3.8.4 contain a stored cross-site scripting vulnerability in gallery and kanban database renderers where field descriptions are not escaped in aria-label attributes. In the Electron desktop app with nodeIntegration enabled, attackers can inject JavaScript that calls...

CVE-2026-100568: Exposure of Sensitive Information to an Unauthorized Actor

OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute ownerless command jobs. Attackers can inspect stored environment variables and force-run disabled or unscheduled command jobs to access secret...

CVE-2026-100560: Incorrect Authorization

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on macOS and Linux. Attackers can reuse the same executable with different arguments to execute commands without triggering new approval...

CVE-2026-100561: Improper Neutralization of Argument Delimiters in a Command

OpenClaw npm package 'openclaw' versions = 2026.3.22 and 2026.8.1 contain an approval-bypass flaw in the exec approval policy: the policy could trust a command-running wrapper without inspecting the command carried in its arguments. After an operator allowlisted or permanently approved a benign...

PT-2026-99391

Name of the Vulnerable Software and Affected Versions Froxlor versions 2.0.0 through 2.3.10 Description Stored cross-site scripting occurs when a user with customer privileges uploads an SSL certificate. The Certificates API add and update methods use openssl x509 parse to process the certificate...

PT-2026-99395

Name of the Vulnerable Software and Affected Versions UP plugin versions 5.0.0 through 5.2.0 UP plugin versions 6.0.0 through 6.0.29 UP plugin versions prior to 6.1.0 Description An authenticated, privileged PHP command injection exists in the UP plugin extension. Additionally, an unauthenticated...

CVE-2026-100643: Improper Neutralization of Input During Web Page Generation

SiYuan versions before v3.8.4 fail to properly escape four stored Attribute View values in textarea elements, allowing authenticated attackers to inject JavaScript by modifying field descriptions, template sources, select option descriptions, or footer calculation templates. Attackers can execute...

CVE-2026-100552: Incorrect Authorization

OpenClaw npm package 'openclaw' before 2026.8.1 does not correctly enforce per-chat tool policies for Codex app-server runtime tools. A conversation-level tools.allow rule filtered OpenClaw tools but did not restrict the shell, process, file, and patch tools owned by the Codex runtime. When a...

PT-2026-99385

Name of the Vulnerable Software and Affected Versions Froxlor versions prior to 2.3.12 Description Insufficient restriction and escaping of the system.letsencryptchallengepath setting allows for command injection. The value of this setting is concatenated unescaped into the acme.sh command line...

PT-2026-99314

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description Authenticated attackers can inject JavaScript by modifying field descriptions, template sources, select option descriptions, or footer calculation templates because four stored Attribute View values i...

PT-2026-99316

Name of the Vulnerable Software and Affected Versions SiYuan versions 3.7.0 through 3.8.3 Description A stored cross-site scripting issue exists in the gallery and kanban database renderers because field descriptions are not escaped in aria-label attributes. In the Electron desktop application wh...

PT-2026-99198

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.3.22 through 2026.8.0 Description An approval-bypass flaw exists in the exec approval policy. The policy may trust a command-running wrapper without inspecting the command contained within its arguments. If an operator...

PT-2026-99189

Name of the Vulnerable Software and Affected Versions openclaw versions prior to 2026.8.1 Description The software fails to correctly enforce per-chat tool policies for Codex app-server runtime tools. Specifically, a conversation-level tools.allow rule filters OpenClaw tools but fails to restrict...

PT-2026-99167

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description Reusable execution approvals fail to bind the working directory context, which allows approved commands to be executed in directories other than the one originally intended. An attacker possessin...

openSUSE 16 Security Update : haveged (openSUSE-SU-2026:21958-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21958-1 advisory. Changes in haveged: - CVE-2026-41054: Fixed local privilege escalation via the haveged command socket bsc1264086. Tenable has extracted the preceding...

CVE-2026-94131: Improper Neutralization of Special Elements used in an SQL Command

Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension 11.1.0 - A subscriber could store a path in a file-type custom field and have AcyMailing delete that file when the field was cleared, including files outside the upload folder such as...

CVE-2026-100599: Improper Neutralization of Special Elements used in an OS Command

OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Google Meet node commands. The googlemeet.chrome command accepts caller-supplied audio command arrays and executes them on a paired node without going through the normal system.run approval flow. In...