CVE-2026-85985: Missing Authorization

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugin file-access UDFs jsonfile, bsonfile, jfilemake, bfilemake, and jbinfile are affected because each does not enforce FILE privilege or th...

PT-2026-115908

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...

PT-2026-115920

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...

Linux Distros Unpatched Vulnerability : CVE-2026-85985

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugi...

CVE-2026-110921

An use after free flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/569286602...

CVE-2026-110715

A flaw was found in MuJS. The JavaScript engine fails to properly validate array boundaries when sorting an array whose length property has been enlarged. By supplying specially crafted JavaScript code, an attacker can trigger out-of-bounds memory operations, potentially leading to memory...

CVE-2026-110888

Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine: from n/a through 3.8.3...

WordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.5.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion and Upload vulnerability

Missing Authorization to Unauthenticated Arbitrary Attachment Deletion and Upload vulnerability discovered by Wordfence PRISM in WordPress Plugin Photo Engine versions = 6.5.6...

EUVD-2026-102232

Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine: from n/a through 3.8.3...

CVE-2026-110888

The Meow Apps AI Engine plugin for WordPress (versions up to and including 3.8.3 ) is vulnerable to a Broken Access Control issue (CWE-862). This Missing Authorization vulnerability allows for the exploitation of incorrectly configured access control security levels. While the specific technical ...

CVE-2026-110888 WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine: from n/a through 3.8.3...

WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dzaku in WordPress Plugin AI Engine versions = 3.8.3...

MariaDB Server Authorization Issue Vulnerability

MariaDB Server versions prior to 10.6.1 and 10.6.28, 10.11.1 and 10.11.19, 11.4.1 and 11.4.13, 11.8.1 and 11.8.9, 12.3.1 and 12.3.3, and 13.0.1 and 13.0.2 have a vulnerability related to authorization. This vulnerability stems from the fact that UDFs jsonfile, bsonfile, jfilemake, bfilemake, and...

Astra Linux – Vulnerability in Firefox

JIT compilation errors in the JavaScript Engine: JIT component. This vulnerability has been fixed in Firefox 145 and Thunderbird 145...

Astra Linux – Vulnerability in Firefox and Thunderbird

JIT compilation errors in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

Astra Linux – Vulnerability in Firefox

JIT compilation errors in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3...

Astra Linux – Vulnerability in Chromium

Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix memory leak of ECC engine conf The memory allocated for the ECC engine conf is not released during the spinand cleanup process. The following kmemleak trace illustrates this memory leak: Unreferenced object...

Astra Linux – Vulnerability in Ansible

A flaw was discovered in Ansible Engine. This flaw occurs in all versions of Ansible Engine from 2.7.x, 2.8.x, and 2.9.x, as of 2.7.17, 2.8.9, and 2.9.6, respectively. The issue arises when using ansiblefacts as a subkey of itself and promoting it to a variable when inject is enabled. After the...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...