CVE-2026-52731: Uncaught Exception

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an attacker authenticated to an enabled Zebra RPC endpoint can terminate zebrad by supplying a getblocktemplate LongPollId containing multi-byte UTF-8 characters. In zebra-rpc/src/methods/types/longpoll.rs, LongPollId::fromstr...

CVE-2026-68923: Cross-Site Request Forgery (CSRF)

MobSF is a mobile application security testing tool used. Prior to 4.5.1, mobsf/MobSF/settings.py places django.middleware.csrf.CsrfViewMiddleware only in the deprecated MIDDLEWARECLASSES setting and omits it from the active MIDDLEWARE tuple, allowing a remote attacker to make a logged-in victim...

CVE-2026-75829: Improper Neutralization of Special Elements Used in a Template Engine

grav-plugin-api versions before 1.0.15 fail to validate Twig content in the translate endpoint, allowing attackers with api.pages.write permission to persist pages with process.twig enabled. Attackers can submit crafted header and content parameters to execute server-side template injection...

CVE-2026-75773: Improper Restriction of Excessive Authentication Attempts

A vulnerability was found in karakeep-app karakeep up to 0.32.0. The affected element is the function authorize of the file apps/web/server/auth.ts of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be performed...

CVE-2026-11801: Missing Authorization

The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to...

PT-2026-76904

Name of the Vulnerable Software and Affected Versions WPAdverts – Classifieds Plugin versions prior to 2.3.3 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. This allows unauthenticated attackers to retriev...

PT-2026-82773

Name of the Vulnerable Software and Affected Versions Wazuh versions 4.14.0 through 4.14.6 Description An authenticated low-privilege user can read the cluster secret from the manager configuration. This occurs because the logic used to mask sensitive values is disabled whenever any update-config...

CVE-2026-52607

A directory traversal vulnerability in reportico-web = 8.1.0 allows remote attackers to expose or execute arbitrary php files on the web server by specifying the filename in the targetformat parameter in conjunction with the executemode=EXECUTE parameter of the run.php endpoint...

PT-2026-77234

Name of the Vulnerable Software and Affected Versions reportico-web versions prior to 8.1.1 Description An arbitrary file write and directory traversal issue exists where remote attackers can create or overwrite files on the filesystem based on the web user permissions. This occurs at the 'run.ph...

Docmosis Tornado 2.11.3 Remote Code Execution

Docmosis Tornado version 2.11.3 contains an unauthenticated arbitrary file write vulnerability in the /api/render endpoint. A remote attacker can use the storeTo parameter with a file: destination to write rendered content to arbitrary new filesystem paths. When the service runs as root, a crafte...

PT-2026-79915

GitLab has remediated an issue in GitLab EE affecting all versions from 16.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to view external status check configuration restricted to...

PT-2026-80449

Openshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs in github.com/kubev2v/migration-planner...

PT-2026-77250

Wazuh 4.0.0 before 4.14.7 and 5.0.0-beta2 contain a denial of service vulnerability that allows authenticated attackers with allow run as enabled to exhaust CPU resources by submitting arbitrarily deeply nested JSON structures to the POST /security/user/authenticate/run as endpoint. Attackers can...

CVE-2026-23922: Insufficiently Protected Credentials

The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a malicious 'Token endpoint'. Changes were made to reset the client secret upon changing the token endpoint...

GitLab EE/CE Git Manipulation Code Execution

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted GET requests...

PT-2026-76955

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A Super Admin can leak the Client secret of the email media OAuth field by configuring a malicious Token endpoint. This occurs because the Client secret is not...

PT-2026-77165

Name of the Vulnerable Software and Affected Versions CodeWhale versions prior to 0.8.64 Description The image analyze tool fails to canonicalize symlinks before reading files, leading to a path traversal issue. This allows attackers to create workspace symlinks that point to external files with...

PT-2026-77877

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle...

PT-2026-77287

Plainpad through 1.1.1, fixed in commit d3823fc, contains a missing rate limiting vulnerability that allows unauthenticated attackers to send unbounded login requests to the POST /v1/sessions endpoint due to dead code in AppHttpKernel.php that is never instantiated under the Laravel 11+ skeleton,...

PT-2026-77268

Name of the Vulnerable Software and Affected Versions Vitess versions prior to 24.0.3 Description The /debug/vrlog endpoint, registered by the addHttpEndpoint function in go/vt/vttablet/tabletmanager/vreplication/vrlog.go, invokes vrlogStatsHandler without performing the required access check via...