CVE-2026-25402 WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin <= 16.011.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in echoplugins Knowledge Base for Documentation, FAQs with AI Assistance echo-knowledge-base allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knowledge Base for Documentation, FAQs with AI Assistance: from n/a through =...

ECHO-3D48-BF02-E261

Bulletin has no description...

ECHO-DED4-18A7-38B1

Bulletin has no description...

ECHO-8DDD-5733-0005

Bulletin has no description...

ECHO-52EC-115C-D0B2

Bulletin has no description...

ECHO-530F-BAD9-8CD7

Bulletin has no description...

ECHO-A0DE-BA58-2E98

Bulletin has no description...

ECHO-6279-D794-F734

Bulletin has no description...

ECHO-18B8-83D1-0367

Bulletin has no description...

ECHO-4DDC-212A-1B8D

Bulletin has no description...

ECHO-D387-F0AE-30E7

Bulletin has no description...

ECHO-92FE-4D80-CE75

Bulletin has no description...

ECHO-C39F-A049-8C5E

Bulletin has no description...

ECHO-C78F-06B9-AEFA

Bulletin has no description...

ECHO-C9A4-BB6B-0B13

Bulletin has no description...

ECHO-A8CD-8315-0161

Bulletin has no description...

Echo 路径遍历漏洞

Echo is a set of open-source community systems developed by Veal98, where the front-end and back-end are not separated. Versions 5.0.0 to 5.0.2 of Echo have a path traversal vulnerability. This vulnerability arises from improper handling of backslashes by the middleware.Static on Windows systems,...

SUSE CVE-2026-23125

In the Linux kernel, the following vulnerability has been resolved: sctp: move SCTPCMDASSOCSHKEY right after SCTPCMDPEERINIT A null-ptr-deref was reported in the SCTP transmit path when SCTP-AUTH key initialization fails: ================================================================== KASAN:...

GHSA-PGVM-WXW2-HRV9 Echo has a Windows path traversal via backslash in middleware.Static default filesystem

Summary On Windows, Echo’s middleware.Static using the default filesystem allows path traversal via backslashes, enabling unauthenticated remote file read outside the static root. Details In middleware/static.go, the requested path is unescaped and normalized with path.Clean URL semantics...

Echo has a Windows path traversal via backslash in middleware.Static default filesystem

Summary On Windows, Echo’s middleware.Static using the default filesystem allows path traversal via backslashes, enabling unauthenticated remote file read outside the static root. Details In middleware/static.go, the requested path is unescaped and normalized with path.Clean URL semantics...