CVE-2026-107508

The Ultimate Multisite WordPress plugin (versions before 2.17.2 ) is vulnerable to an unauthenticated Local File Inclusion (LFI) vulnerability. The root cause is a failure to validate a user-supplied value used to select a file to include, specifically via the 'attributes' parameter . An attacker...

CVE-2026-92390

When invoked with --remote-header-name -J, curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the final HTTP response, or if an ETag header is processed before Content-Disposition under --etag-save. This flaw allows an HTTPS serve...

EUVD-2026-100837

A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device...

CVE-2026-110458

A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device...

CVE-2026-110458

A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device...

CVE-2026-87855

The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage function. This is due to the startSession function accepting an empty jtlauth parameter as a valid credential, combined with insufficient fil...

CVE-2026-87855

The JTL-Connector for WooCommerce plugin for WordPress (versions

CVE-2026-87855 JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' Method

The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage function. This is due to the startSession function accepting an empty jtlauth parameter as a valid credential, combined with insufficient fil...

EUVD-2026-100800

The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage function. This is due to the startSession function accepting an empty jtlauth parameter as a valid credential, combined with insufficient fil...

USN-8925-1: YAML-LibYAML vulnerabilities

Dominique Dumont discovered that YAML-LibYAML did not correctly handle certain reflection operations. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to delete files. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS...

USN-8925-1 libyaml-perl vulnerabilities

Dominique Dumont discovered that YAML-LibYAML did not correctly handle certain reflection operations. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to delete files. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS...

CVE-2026-108597

A flaw was found in cohere. An attacker with write permissions to an associated Amazon Simple Storage Service S3 bucket can supply a specially crafted model archive containing directory traversal sequences. When the application extracts the archive without validating member file paths, arbitrary...

CVE-2026-14765

Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node UKismetSystemLibrary::LaunchURL. The URL scheme filter FURLRequestFilter is empty by default, which permits all URL schemes. On Windows, this results in a call ...

CVE-2026-110002

The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the file scope function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the standalone save-to-cache.php script,...

CVE-2026-14765 Epic Games Unreal Engine Insecure Default URL Scheme Allowance in LaunchURL

Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node UKismetSystemLibrary::LaunchURL. The URL scheme filter FURLRequestFilter is empty by default, which permits all URL schemes. On Windows, this results in a call ...

CVE-2026-14765

Epic Games Unreal Engine versions up to and including 5.8.0 are vulnerable to command execution due to an insecure default configuration in the LaunchURL Blueprint node (UKismetSystemLibrary::LaunchURL ). The FURLRequestFilter is empty by default, allowing all URL schemes. On Windows, this trigge...

CVE-2026-110002 Snazzy Social Media Feed <= 2.5 - Unauthenticated Arbitrary File Upload via 'pluginURL' Parameter

The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the file scope function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the standalone save-to-cache.php script,...

CVE-2026-110002

The Snazzy Social Media Feed plugin for WordPress (versions up to and including 2.5 ) is vulnerable to Arbitrary File Upload via the pluginURL parameter. The root cause is a standalone save-to-cache.php script that lacks WordPress bootstrap, authentication, capability, and nonce checks. Furthermo...

EUVD-2026-100775

The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the file scope function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the standalone save-to-cache.php script,...

CVE-2026-93388

The Printcart Store PCDesigner / NB Designer plugin for WooCommerce is vulnerable to unauthenticated arbitrary file upload leading to remote code execution in all versions up to, and including, 2.9.1 The nbdesignercopyimagefromurl AJAX action is registered for logged-out callers wpajaxnopriv, and...