CVE-2026-110365 WordPress Advanced File Manager plugin <= 5.4.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced File Manager: from n/a through 5.4.14...

EUVD-2026-103420

Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced File Manager: from n/a through 5.4.14...

CVE-2026-110365

The WPExperts Advanced File Manager (file-manager-advanced) WordPress plugin is vulnerable to a Missing Authorization (CWE-862) flaw in versions up to and including 5.4.14 . This vulnerability allows an attacker to exploit Incorrectly Configured Access Control Security Levels , leading to broken ...

CVE-2026-110365 WordPress Advanced File Manager plugin <= 5.4.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced File Manager: from n/a through 5.4.14...

Exploit for CVE-2026-103849

CVE-2026-103849 / BlockStrap validation lab !Static validat...

Exploit for CVE-2025-6440

Cyp1337 — CVE-2025-6440 WCDP Mass Exploit ---...

CLSA-2025-1738592614 kernel: Fix of 27 CVEs

xsk: fix OOB map writes when deleting elements CVE-2024-56614 - hvsock: Initializing vsk-trans to NULL to prevent a dangling pointer CVE-2024-53103 - scsi: sg: Fix slab-use-after-free read in sgrelease CVE-2024-56631 - net: inet: do not leave a dangling sk pointer in inetcreate CVE-2024-56601 -...

CLSA-2025-1742472545 kernel: Fix of 10 CVEs

USB: serial: ioedgeport: fix use after free in debug printk CVE-2024-50267 - HID: core: zero-initialize the report buffer CVE-2024-50302 - dm cache: fix potential out-of-bounds access on the first resume CVE-2024-50278 - dm cache: fix out-of-bounds access to the dirty bitset when resizing...

CLSA-2025-1763722365 kernel: Fix of 63 CVEs

wifi: mwifiex: Fix OOB and integer underflow when rx packets CVE-2023-53226 CVE-2023-53226 - wifi: mac80211: check S1G action frame size CVE-2023-53257 CVE-2023-53257 - wifi: cfg80211: fix use-after-free in cmpbss CVE-2025-39864 CVE-2025-39864 - partitions: mac: fix handling of bogus partition...

PT-2026-116772

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A file reference leak occurs in the autofs component. When the autofs fill super function fails before clearing the AUTOFS SBI CATATONIC flag—such as when find get pid fails due to an...

PT-2026-116997

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the binder module where a TF UPDATE TXN transaction superseding a pending async transaction triggers binder release entire buffer with the is failure flag set to false...

PT-2026-116905

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the smb3 zero range function only removes the pagecache for the specific range being zeroed. When a file is extended, the folio straddling the old...

PT-2026-116904

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the cifs remap file range function fails to properly discard the pagecache when extending a file via a clone range. Specifically, the pagecache wa...

VulnCheck KEV: CVE-2026-96656

Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264's option string on every transcode. At startup, all .so files are run without signature, execute bit, or symbol check...

VulnCheck KEV: CVE-2026-33309

Langflow is a tool for building and deploying AI-powered agents and workflows. Versions 1.2.0 through 1.8.1 have a bypass of the patch for CVE-2025-68478 External Control of File Name, leading to the root architectural issue within LocalStorageService remaining unresolved. Because the underlying...

CVE-2026-98682: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: drain and invalidate before server-side copy/clone cifsfilecopychunkrange and the clone FICLONE path of cifsremapfilerange do not serialise the destination page cache against the server-side copy the way the other...

CVE-2026-110365: Missing Authorization

Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced File Manager: from n/a through 5.4.14...

CVE-2026-98778: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: binder: fix isfailure flag for superseded transaction cleanup When a TFUPDATETXN transaction supersedes a pending async transaction, binderreleaseentirebuffer is called with isfailure=false. Since the superseded transaction was...

CVE-2026-112016: Missing Authentication for Critical Function

Netcore NR256CN through 1.5.140116 contains an unauthenticated file write vulnerability in the Boa-derived /bin/boa web server that allows remote attackers to overwrite update and restore staging files. Attackers can POST to a non-existent .cgi pathname to write attacker-controlled content into...

PT-2026-116901

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the destination page cache is not properly serialized against server-side copy and clone operations. Specifically, the cifs file copychunk range...