PT-2026-85634

In the Linux kernel, the following vulnerability has been resolved: ipv4: reject undersized MTUs in ip do fragment ip do fragment subtracts the IPv4 header length from the effective MTU and passes the resulting payload MTU to ip frag next. If the effective MTU is smaller than hlen + 8, ip frag ne...

PT-2026-81930

In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was stored in the first element of the array containing the list of supplementary group IDs, whereas now the primary group ID is stored in a dedicated field. This change was largely...

WordPress The GDPR Framework plugin < 2.4.0 - Unauthenticated Consent Record Forgery and Do Not Sell Requests Spam vulnerability

Unauthenticated Consent Record Forgery and Do Not Sell Requests Spam vulnerability discovered by Pedro Pinho in WordPress Plugin GDPR Framework By Data443 versions 2.4.0...

CVE-2026-45119 MyBB: ACP UTF-8 Conversion CSRF

MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP UTF-8 Conversion module does not validate certain requests correctly, allowing same-site attackers to alter table encoding and deny service with a specially crafted URL. The do=all control flow in...

EUVD-2026-59576

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the reception of a reply packet before data transmission Fix rxrpcreceivingreply to handle the reception of an apparent reply DATA packet before rxrpc has had a chance to send any request DATA packets on a client call ...

PT-2026-72406

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the lockd component. In the nlm lookup file function, the cached-file path reaches the found label even if nlm do fopen fails. This causes file-f count a...

CVE-2026-28155

Unauthenticated Insecure Direct Object References IDOR in Do Lasso = 358 versions...

CVE-2026-28156

Subscriber SQL Injection in Do Lasso = 358 versions...

CVE-2026-28158

Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...

CVE-2026-28157

Subscriber Path Traversal in Do Lasso = 358 versions...

CVE-2026-28158

Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...

CVE-2026-28158 WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...

CVE-2026-28157 WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability

Subscriber Path Traversal in Do Lasso = 358 versions...

CVE-2026-28158

CVE-2026-28158 concerns unauthenticated XSS in the WordPress Do Lasso plugin versions

CVE-2026-28157

CVE-2026-28157 is a path traversal vulnerability in the WordPress Do Lasso plugin, affecting versions

CVE-2026-28157

Subscriber Path Traversal in Do Lasso = 358 versions...

EUVD-2026-57951

Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...

EUVD-2026-57950

Subscriber Path Traversal in Do Lasso = 358 versions...

CVE-2026-28157 WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability

Subscriber Path Traversal in Do Lasso = 358 versions...

CVE-2026-28158 WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...