UBUNTU-CVE-2026-55894

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

UBUNTU-CVE-2026-55893

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...

CVE-2026-55893

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...

CVE-2026-55894

CVE-2026-55894 is an out-of-bounds read in the Capstone disassembly framework (≤ 6.0.0-Alpha9). The sh_disassemble() function in arch/SH/SHDisassembler.c computes an idx value from a raw 16-bit instruction without validating it against the active mode-specific decode[] function-pointer table. An ...

EUVD-2026-63669

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

EUVD-2026-41146

Wagtail: Denial of service via unbounded filter specs in the image preview...

github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy

A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass...

CVE-2026-28150

Unauthenticated Local File Inclusion in Golo Framework 1.7.5 versions...

CVE-2026-28150 WordPress Golo Framework plugin < 1.7.5 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Golo Framework 1.7.5 versions...

CVE-2026-28150

The Golo Framework WordPress plugin (versions before 1.7.5) contains an unauthenticated Local File Inclusion vulnerability. CVSS 3.1 scores it HIGH (8.1) with network attack vector, no privileges or user interaction required. Affected sites should upgrade to version 1.7.5 immediately. No in-the-w...

EUVD-2026-63329

Unauthenticated Local File Inclusion in Golo Framework 1.7.5 versions...

CVE-2026-28150 WordPress Golo Framework plugin < 1.7.5 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Golo Framework 1.7.5 versions...

WordPress Vitepos Lite plugin < 3.5.0 - Outlet Manager+ Privilege Escalation vulnerability

Outlet Manager+ Privilege Escalation vulnerability discovered by RealKingEngine ISAL FRAMEWORK in WordPress Plugin Vitepos versions 3.6.0...

WordPress Vitepos plugin < 3.6.0 - Outlet Manager+ Privilege Escalation vulnerability

Outlet Manager+ Privilege Escalation vulnerability discovered by RealKingEngine ISAL FRAMEWORK in WordPress Plugin Vitepos versions 3.6.0...

CLSA-2026-1787205684 TuxCare security update for org.springframework (14 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 14 CVEs. Fixed in 6.1.19-tuxcare.1...

CVE-2026-76345

creationtimestamp| type| source ---|---|--- 2026-08-20 04:46:58+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

PT-2026-78950

Unauthenticated Local File Inclusion in Golo Framework 1.7.5 versions...

cve-2026-59280 - MEDIUM - Spring Framework Path Traversal via Backslash in SpringTemplateLoader

cve-2026-59280 - MEDIUM - Spring Framework Path Traversal via Backslash in SpringTemplateLoader...

cve-2026-47889 - MEDIUM - Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse

cve-2026-47889 - MEDIUM - Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse...

cve-2026-47890 - LOW - Spring Framework Server Sent Event stream corruption while rendering fragments

cve-2026-47890 - LOW - Spring Framework Server Sent Event stream corruption while rendering fragments...