CVE-2026-116767

Secure Access servers running versions prior to 14.61 are vulnerable to an improper input handling vulnerability. This flaw allows authenticated attackers to trigger a persistent denial of service (DoS). No specific remediation or exploit details are provided in the documents.

EUVD-2026-115614

CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server...

CVE-2026-116766

CVE-2026-116766 describes an improper input handling vulnerability in the Secure Access server affecting versions 13.0 through prior to 14.61 . An attacker can exploit this flaw to cause a persistent denial of service (DoS) of the server. No specific exploit information or remediation details are...

WordPress: Cross-site scripting vulnerability in user and customer import/export

WordPress versions 2.5.9 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during page generation, potentially enabling stored cross-site scripting attacks...

Crocoblock JetElements For Elementor cross-site scripting vulnerability

Crocoblock JetElements for Elementor versions 2.9.2.5 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation, potentially leading to stored cross-site scripting attacks...

Drupal Diba carousel slider cross-site scripting vulnerability

Drupal Diba carousel slider versions prior to 0.0.0 and 3.0.2 contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

hwk-fr ACF Extended cross-site scripting vulnerability

The hwk-fr ACF Extended versions 0.9.2.7 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

Drupal Webform cross-site scripting vulnerability

Drupal Webform versions 0.0.0 through 6.2.12 and 6.3.0 through 6.3.1 contain a cross-site scripting vulnerability caused by improper input handling during web page generation, which may lead to cross-site scripting attacks...

xootix waitlist woocommerce cross-site scripting vulnerability

xootix waitlist woocommerce versions 2.9.1 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

Drupal SAML SSO – Service Provider cross-site scripting vulnerability

Drupal SAML SSO – Versions 0.0.0 through 3.2.0 contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to cross-site scripting attacks...

Drupal PhotoSwipe – Responsive JavaScript Modal Image Gallery Cross-site Scripting Vulnerability

Drupal PhotoSwipe – Versions prior to 5.0.9 contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

Crocoblock JetElements for Elementor: Cross-site Script Vulnerability

Crocoblock JetElements for Elementor 2.9.2.4 and earlier versions have a cross-site scripting vulnerability. This vulnerability arises from improper input handling during web page generation, which may lead to storage-based cross-site scripting attacks...

UBUNTU-CVE-2026-89098

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an...

CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability

An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability...

CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability

An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability...

EUVD-2026-101633

An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability...

CVE-2026-0319

A vulnerability exists in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software due to improper input handling . This flaw allows an authenticated user to establish a GlobalProtect session while masquerading as another user . While Cloud NGFW and Panorama are not affected, no known wor...

WordPress YITH WooCommerce Compare: Cross-site Script Vulnerability

WordPress YITH WooCommerce Compare 3.15.0 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation, which may lead to storage-based cross-site scripting attacks...

PAN-OS: Improper Input Handling Vulnerability

An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability. Work around: No known...

PT-2026-113768

An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability...