EUVD-2026-97371

TDuck survey form through 6.0 contains a broken access control vulnerability that allows authenticated users to add fields to other users' forms via POST /user/form/item/batch/create. Attackers can submit an array whose first element references their own form and later elements reference a victim...

CVE-2026-105411

An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration rights on one tracker to update or delete fields of all the trackers on the instance...

CVE-2026-105411

The Tuleap Enterprise Edition (versions 17.0 through 17.5 ) is impacted by an Authorization Bypass Through User-Controlled Key vulnerability (CWE-639). An attacker possessing tracker administration rights on a single tracker can exploit this flaw to update or delete fields of all trackers across ...

EUVD-2026-97331

An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration rights on one tracker to update or delete fields of all the trackers on the instance...

CVE-2026-105411 Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5

An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration rights on one tracker to update or delete fields of all the trackers on the instance...

CVE-2026-109335: Exposure of Sensitive Information to an Unauthorized Actor

SurrealDB from 3.0.0 before 3.3.0 contains an information disclosure vulnerability that allows record users to read values hidden by field-level SELECT permissions through COMPUTED fields. Attackers can select records whose readable COMPUTED fields derive from hidden fields, or use write RETURN...

CVE-2026-109318: Improper Neutralization of Special Elements used in an OS Command

Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full...

CVE-2026-109652: Improper Neutralization of Special Elements Used in a Template Engine

Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated before template rendering, allowing expressions to run in an unrestricted context. Authenticated attackers holding a common...

CVE-2026-109396: Improper Neutralization of Formula Elements in a CSV File

Thelia before 3.1.2 and 3.2.x before 3.2.1 contains a CSV formula injection vulnerability that allows unauthenticated visitors to inject spreadsheet formulas by supplying crafted registration, checkout or newsletter fields. Attackers can submit names, addresses or phone values starting with =, +,...

PT-2026-110735

Name of the Vulnerable Software and Affected Versions Grav Git Sync versions 1.0.2 through 3.4.12 Description Authenticated content editors can execute operating system commands by injecting shell substitutions into profile fields. This occurs when gravuser or gravfull author mode is enabled,...

PT-2026-110772

Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 26.9.0 Description A stored cross-site scripting issue exists in the get oxidized nodes list function. The application fails to escape Oxidized API fields and the SNMP sysName variable. An attacker who can control th...

VulnCheck KEV: CVE-2026-0702

The VidShop – Shoppable Videos for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

PT-2026-110534

Name of the Vulnerable Software and Affected Versions Tuleap Enterprise Edition versions 17.0 through 17.5 Description An authorization bypass occurs through a user-controlled key, allowing an attacker who possesses tracker administration rights on a single tracker to update or delete fields acro...

CVE-2026-108567

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

PT-2026-110099

Name of the Vulnerable Software and Affected Versions InstantSoft icms2 versions prior to 2.18.3 Description A path traversal issue exists in the Image Handler component within the files delete file function of the system/fields/image.php file. A remote attacker can exploit this by manipulating t...

CVE-2026-104801

The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the renamefiles function in all versions up to, and including, 34.0.10 This makes it possible for unauthenticated attackers to delete...

CVE-2026-104801

The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to unauthenticated arbitrary file deletion in all versions up to and including 34.0.10 . The root cause is insufficient file path validation within the rename_files function, specifically triggered via th...

CVE-2026-104801 PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter

The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the renamefiles function in all versions up to, and including, 34.0.10 This makes it possible for unauthenticated attackers to delete...

EUVD-2026-96218

The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the renamefiles function in all versions up to, and including, 34.0.10 This makes it possible for unauthenticated attackers to delete...

CVE-2026-17025

The Graphene theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'Current location' and 'Author profile image URL' Profile Fields in all versions up to, and including, 2.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...