395374 matches found
CVE-2026-88007
Traefik versions 2.11.0 through 2.11.57 and 3.7.13 contain a backend connection reuse flaw in the HTTP/3 entrypoint. The ConnContext does not call service.AddTransportOnContext, causing kerberosRoundTripper to share a single backend transport across all frontend connections rather than using a de...
CVE-2026-88898
AppFlowy-Cloud versions 0.7.2 through 0.9.64 contain a missing authorization check in the bulk publish endpoint , which fails to verify that the caller is authorized against the target workspace. An authenticated user can exploit this to publish content into other tenants' namespaces, writing vie...
CVE-2026-88897
Flextype CMS versions up to 1.0.0-alpha.3 transmit API authentication credentials via URL query string parameters in REST API routes. Because query strings are commonly logged, an attacker with access to web server, proxy, or monitoring logs can recover valid API token pairs that grant full API a...
CVE-2026-17047
IBM Db2 Mirror for i (versions 7.4, 7.5, and 7.6 ) is vulnerable to Cross-Site Request Forgery (CSRF) due to improper request validation in its GUI component. A remote attacker could exploit this to obtain sensitive information , requiring user interaction but no prior authentication (CVSS 3.1 ba...
CVE-2026-88006
Open WebUI (a self-hosted AI platform) is affected by an authentication bypass in its OAuth token exchange endpoint from version 0.8.0 through 0.11.1 . The endpoint issues a session for a provider access token without executing the OAuth role management that the normal login callback performs. As...
CVE-2026-88005
Open WebUI versions 0.8.0 through 0.9.0 are affected by a bypass in the OAuth token exchange endpoint . The endpoint issues a valid session for a provider access token without enforcing the email domain allowlist that the standard OAuth login callback applies. As a result, an account whose email ...
CVE-2026-15461
Zephyr RTOS HL78xx modem GNSS driver contains a type confusion caused by a struct member offset mismatch: struct gnss_nmea0183_match_data was placed as the second member instead of the first, so NMEA parse callbacks read and write state at a shifted offset. The GSV callback reads a bogus pointer ...
CVE-2026-88004
Traefik (open source HTTP reverse proxy and load balancer) versions 3.2.0 through 3.7.12 have a header sanitization bypass. The entrypoint defenses aliasHeadersStrategy , underscoreHeadersStrategy , and forwardedHeaders inspect only req.Header but not req.Trailer. An unauthenticated client can pl...
CVE-2026-88924
A Time-of-Check Time-of-Use (TOCTOU) race condition exists in the gvfsd-admin daemon of gvfs (GNOME Virtual Filesystem). The privileged daemon calls the link-following chown() on a socket pathname inside a user-controlled directory; a local attacker can replace that pathname with a symbolic link ...
CVE-2026-84821
CVE-2026-84821 affects the WP Fast Total Search WordPress plugin in versions
CVE-2026-84816
CVE-2026-84816 is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress WPCS (Currency Switcher) plugin , affecting versions ≤ 1.3.2 . The flaw allows a remote, unauthenticated attacker to inject script via network access, requiring user interaction, with changed scope and ...
CVE-2026-84819
Unauthenticated Cross Site Scripting XSS in WPAdverts = 2.3.3 versions...
CVE-2026-81805
CVE-2026-81805 is an unauthenticated privilege escalation vulnerability affecting the SiteSkite WordPress plugin in versions 2.1.5 and earlier . A remote attacker with no prior authentication can escalate privileges on the target site, resulting in high impact on confidentiality, integrity, and a...
CVE-2026-81803
CVE-2026-81803 affects the WordPress RepairBuddy plugin in versions 4.1224 and below . A Subscriber-level (low-privilege) user can achieve Remote Code Execution (RCE) , meaning any authenticated user with the lowest typical WordPress role could potentially execute arbitrary code on the server. Th...
CVE-2026-81804
ZHBackup – Backup, Restore & Migration WordPress plugin versions up to and including 2.4.2 are affected by an unauthenticated Sensitive Data Exposure vulnerability. The flaw allows an attacker to retrieve sensitive data over the network without any prior authentication or user interaction. The CV...
CVE-2026-81801
Subscriber Settings Change in WP-Stateless = 4.4.1 versions...
CVE-2026-81800
CVE-2026-81800 affects the WordPress plugin Verified Reviews (Avis Vérifiés) in versions ≤ 2.4.6 , where an unauthenticated SQL injection vulnerability is present. The flaw allows a remote attacker with no prior access to execute crafted SQL queries, resulting in a high confidentiality impact and...
CVE-2026-81799
An unauthenticated Broken Access Control vulnerability was discovered in the Return Refund and Exchange For WooCommerce WordPress plugin, affecting versions ≤ 4.6.4 . The flaw was identified by babyhack (@OPCIA) and carries a CVSS 3.1 score of 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C...
CVE-2026-81795
CVE-2026-81795 affects the WordPress plugin Page Visits Counter – Lite in versions ≤ 1.2.3 , introducing an unauthenticated Cross Site Scripting (XSS) vulnerability. The flaw requires user interaction and has a CHANGED scope , meaning successful exploitation can impact the victim's browser sessio...