CVE-2026-85197

libsoup contains a heap use-after-free in its HTTP/2 client implementation, specifically in the on_data_read() function. The vulnerability is triggered when a GNOME application uploads a file over HTTP/2 and a malicious server or MITM attacker sends a GOAWAY frame while the file body is still bei...

CVE-2026-6217

Pik Online Portal (by Pik Online Software Solutions Inc.) is vulnerable to information disclosure via use of a one-way hash without a salt , allowing cryptanalysis of hashed data. The issue affects versions through 3.5.1 . The CVSS 3.1 score is 6.3 (MEDIUM) , with a network attack vector, low com...

CVE-2026-80190

Apache Allura versions through 1.20.0 are affected by a stored cross-site scripting (XSS) vulnerability in SVN code repositories . Git repositories are not known to be affected. The vulnerability is likely mitigated by default CSP (Content Security Policy) headers . The CVSS 3.1 score is 6.1 (Med...

CVE-2026-85229

Apache SkyWalking Booster UI (versions 10.2.0 through 10.4.0 ) is affected by a stored XSS (CWE-79) vulnerability caused by improper input neutralization during web page generation. The title identifies this as an incomplete fix of CVE-2025-54057 , with the flaw located in dashboard widgets . Use...

CVE-2026-81270

Apache Allura versions through 1.20.0 are affected by an information exposure vulnerability in its search functionality , allowing non-public data to be disclosed. The flaw is exploitable over the network with low complexity , no privileges , and no user interaction , yielding a High confidential...

CVE-2026-71216

Apache SkyWalking (versions 9.6.0 through 11.0.0 ) has a vulnerability in its PagerDuty alarm hook , which transmits the integration routing key over cleartext HTTP . Although PagerDuty normally redirects plain HTTP requests to HTTPS, the initial POST — including the JSON body containing the rout...

CVE-2026-80181

Apache Allura 's webhooks component is vulnerable to Server-Side Request Forgery (SSRF) , affecting versions through 1.20.0 . This allows an attacker to induce the server to make unauthorized HTTP requests to internal or external targets. The issue is resolved in version 1.21.0 . No public exploi...

CVE-2026-80180

Apache Allura versions through 1.20.0 are affected by a stored cross-site scripting (XSS) vulnerability in its markdown HTML processing pipeline. An attacker can inject malicious HTML that executes in other users' browsers upon viewing the content. The CVSS 3.1 score is 6.1 (MEDIUM) with a vector...

CVE-2026-15354

CVE-2026-15354 is a Privilege Escalation vulnerability in the ACPT (Premium) WordPress plugin, affecting all versions up to and including 2.0.66 . The root cause is a missing authorization check in the submit() function, where the acpt_form_post_id parameter allows unauthenticated form submission...

CVE-2026-70403

XING CPTrans-ME-X contains a hard-coded password (CWE-259) that allows anyone who knows the credential to log in to the affected device. The vulnerability is rated CVSS 3.1: 9.8 CRITICAL (network vector, low complexity, no privileges or user interaction required) with high impact on confidentiali...

CVE-2026-69657

XING CPTrans-ME-X contains a Use of Default Password vulnerability (CWE-1393), meaning anyone who knows the default credential can log in to the affected device. The vulnerability is rated CRITICAL with a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and a CVSS v4.0 base score...

CVE-2026-66840

XING CPTrans-ME-X , a rack accessory product, is affected by an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) , which may allow sensitive system information to be leaked. The vulnerability is exploitable over the network with low complexity , requires no pri...

CVE-2026-62928

XING CPTrans-ME-X , a rack accessory product, contains an OS Command Injection vulnerability (CWE-78) that allows unauthenticated attackers to inject arbitrary OS commands. The flaw carries a CVSS 9.8 CRITICAL score (v3.0) with high impact on confidentiality, integrity, and availability, indicati...

CVE-2026-85094

Canva Android App versions prior to 2.376.0 failed to restrict HTTP headers returned to an external origin running in a privileged WebView . An attacker who gains control of the WebView could read those headers and access a user's session . The CVSS 3.1 score is 8.8 (HIGH) , with a network vector...

CVE-2026-85085

The Canva Android App (versions before 2.376.0 ) contained a vulnerability in a privileged WebView that allowed an external origin to be loaded. A threat actor who controls a page visited by the user can communicate with Canva using the user's session, enabling high confidentiality and integrity ...

CVE-2026-84146

CVE-2026-84146 affects the Xpro Addons — 140+ Widgets for Elementor WordPress plugin in versions prior to 1.7.8 . The plugin fails to perform a capability or post-status check before rendering a WooCommerce product summary from a supplied product identifier. This allows unauthenticated visitors t...

CVE-2026-84066

Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin versions before 8.9 contain an arbitrary post meta write vulnerability in the atbdp_post_attachment_upload function. The plugin fails to verify that the requesting user owns the post being modified before writi...

CVE-2026-82194

WPvivid — Backup, Migration & Staging for WordPress, versions prior to 0.9.134 , fails to validate a user-supplied path before passing it to a file deletion routine . An authenticated user with administrator privileges can exploit this path traversal to delete arbitrary files on the server , incl...

CVE-2026-82193

The WPvivid — Backup, Migration & Staging WordPress plugin versions before 0.9.134 contain a path traversal vulnerability: a user-supplied file name is not validated before being used to build a write path. This allows administrator-level users to write files of permitted types to arbitrary locat...

CVE-2026-82186

The WPLP Cookie Consent WordPress plugin (full name: WP Cookie Notice for GDPR, CCPA & ePrivacy Consent) in versions before 4.4.2 fails to properly validate the offset pagination parameter before using it in a SQL query, enabling users with administrator privileges to perform SQL injection . The ...