CVE-2026-86260

CVE-2026-86260 affects the Password Recovery component of sfturing hosp_order (a Java/SSM-based hospital order management system). The flaw resides in the modifyPassWord function within ssm_pro/src/main/java/cn/sfturing/web/CommonUserController.java, where a password can be changed without proper...

CVE-2026-86244 FastAdmin User Controller User.php login cross site scripting

A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross site scripting. The attack may be...

CVE-2026-86244 FastAdmin User Controller User.php login cross site scripting

A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross site scripting. The attack may be...

PT-2026-86759

ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized...

The vulnerability of the java() function in the nltk/internals.py file of the NLTK library, a software package for symbolic and statistical processing of natural language, allows a hacker to gain control over the system.

The vulnerability of the java function in the nltk/internals.py file of the NLTK library, a software package for symbolic and statistical processing of natural language, is related to the implementation or modification of arguments. Exploiting this vulnerability could allow an attacker to gain...

PT-2026-86821

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorize...

ROS-20260907-73-0088

The vulnerability of the Entry.Writer function in the Logrus logging library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

PT-2026-86825

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorize...

PT-2026-86592

Name of the Vulnerable Software and Affected Versions liufee FeehiCMS versions prior to 2.1.2 Description A server-side request forgery exists in the UEditor component within the catchImage function of the backend/widgets/ueditor/Uploader.php file. A remote attacker can exploit this by manipulati...

PT-2026-86653

A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the function getOption of the file travel/src/main/java/com/controller/CommonController.java. The manipulation of the argument...

PT-2026-86764

A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. This product implements a rolling release for...

CVE-2026-14444: Improper Privilege Management

The WP Fusion Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.47.13. This is due to insufficient authorization checks on the role parameter in the ThriveCart Auto Login handler's thrivecart function. This makes it possible for authenticated...

PT-2026-86834

Name of the Vulnerable Software and Affected Versions java-json-tools jackson-coreutils version 2.0 Description An issue exists in the URL Validation component within the JsonLoader.fromURL function. This flaw allows a remote attacker to perform server-side request forgery SSRF, a technique where...

CVE-2026-86228 JeecgBoot AiragModelController.java exportXls access control

A security vulnerability has been detected in JeecgBoot up to 3.9.3. This vulnerability affects the function exportXls of the file jeecg-boot/jeecg-boot-module/jeecg-boot-module-airag/src/main/java/org/jeecg/modules/airag/llm/controller/AiragModelController.java. Such manipulation of the argument...

CVE-2026-86165

A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/admin/formURL. Performing a manipulation of the argument Keywd/urlFQDN results in buffer overflow. The attack may be initiated remotely. The exploit has been made public and cou...

CVE-2026-86165 Tenda HG10 formURL buffer overflow

A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/admin/formURL. Performing a manipulation of the argument Keywd/urlFQDN results in buffer overflow. The attack may be initiated remotely. The exploit has been made public and cou...

CVE-2026-86165 Tenda HG10 formURL buffer overflow

A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/admin/formURL. Performing a manipulation of the argument Keywd/urlFQDN results in buffer overflow. The attack may be initiated remotely. The exploit has been made public and cou...

PT-2026-86575

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.5 Description Improper access controls exist in the exportXls function within the AiragModelController.java file. A remote attacker can exploit this by manipulating the credential argument to gain unauthorized...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053266)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053266 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ringlen param The ringlen parameter provided by the virtual function VF ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053286)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053286 advisory. In the Linux kernel, the following vulnerability has been resolved: dm-bufio: don't schedule in atomic context A BUG was reported as below when CONFIGDEBUGATOMICSLEE...