CVE-2026-110762

bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view restricted subforum posts because hidesitewide ignores ancestor forum visibility. Topics and replies in public subforums nested under private or hidden parents expose title, permali...

CVE-2026-110248

Insertion of sensitive information into log files in the gitutils.py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated remote user to obtain plaintext repository credentials from CloudWatch Logs when a git clone operation fails, because t...

CVE-2026-102944

cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, createredirectclient removes Host, Proxy-Authorization, and Authorization headers when following a cross-origin 301, 302, 307, or 308 redirect but leaves Cookie headers attached. detail::redirect copies the request for those...

CVE-2026-102354

BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameResolvesToPrivate, as used by isValidCertificateUrl and isValidTsaUrl, separately from the outbound fetchtargetUrl,...

WordPress Blog2Social: Social Media Auto Post & Scheduler plugin <= 9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure vulnerability

Authenticated Contributor+ Insecure Direct Object Reference to Sensitive Information Exposure vulnerability discovered by Kazuma Matsumoto in WordPress Plugin Blog2Social versions = 9.1.4...

EUVD-2026-101574

Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allows authenticated users to read other users' private attachments due to a flawed owner check. Attackers can supply another user's stored filename, following a basename plus millisecond-timestamp...

CVE-2026-110773

GrowChief versions through 0.3.0 are affected by a missing authorization vulnerability in the getAllUsers handler. The root cause is the absence of the IsSuperAdmin guard, which allows any authenticated user—including those with low-privilege, self-registered accounts—to access the GET /users/all...

CVE-2026-110766 Colanode Server through 0.4.7 Path Traversal via Avatar Download Route

Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated users to read arbitrary .jpeg files by supplying an encoded traversal sequence in avatarId. Attackers can send percent-encoded ../ sequences to GET /client/v1/avatars/:avatarId to escape the avatars...

CVE-2026-110762 bbPress before 2.6.19 Information Disclosure via BuddyPress Activity Stream

bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view restricted subforum posts because hidesitewide ignores ancestor forum visibility. Topics and replies in public subforums nested under private or hidden parents expose title, permali...

EUVD-2026-101562

bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view restricted subforum posts because hidesitewide ignores ancestor forum visibility. Topics and replies in public subforums nested under private or hidden parents expose title, permali...

CVE-2026-110762 bbPress before 2.6.19 Information Disclosure via BuddyPress Activity Stream

bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view restricted subforum posts because hidesitewide ignores ancestor forum visibility. Topics and replies in public subforums nested under private or hidden parents expose title, permali...

CVE-2026-110762

The bbPress plugin (versions before 2.6.19 ) contains an information disclosure vulnerability. The issue arises because the hide_sitewide function fails to account for ancestor forum visibility. Consequently, unauthenticated visitors can access the title, permalink, and body of posts within publi...

EUVD-2026-101607

Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-82153

The Dell OS Recovery Tool (versions prior to 2.4.4 ) is affected by an Insecure Storage of Sensitive Information vulnerability (CWE-922). A low privileged attacker with physical access could exploit this flaw to cause Information Disclosure . Remediation is available via security update DSA-2026-...

mariadb: mariadb: Denial of Service via invalid binary JSON in mysql_json plugin

A flaw was found in the mysqljson plugin in MariaDB. The plugin incorrectly assumes that imported MySQL tables contain valid binary JavaScript Object Notation JSON data. An attacker can exploit this issue by supplying a specially crafted MySQL table containing invalid JSON data, triggering an...

mariadb: mariadb: Information disclosure via embedded null bytes in query cache plugin

A flaw was found in MariaDB. An authenticated user can execute a database query containing embedded null bytes, which misleads the query cache information qcinfo plugin. When the cached query details are later read from the information schema, the server accesses memory beyond the allocated buffe...

CVE-2026-82153

Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure...

Apprise forwards configured auth headers across cross-origin HTTP redirects

Summary Apprise's HTTP-based notification plugins and its HTTP attachment / config loaders apprise/attachment/http.py, apprise/config/http.py follow HTTP 3xx redirects by default and re-send the user-configured auth headers and query parameters on the redirected request. If an operator-configured...

GHSA-856C-92HV-3VXX Apprise forwards configured auth headers across cross-origin HTTP redirects

Summary Apprise's HTTP-based notification plugins and its HTTP attachment / config loaders apprise/attachment/http.py, apprise/config/http.py follow HTTP 3xx redirects by default and re-send the user-configured auth headers and query parameters on the redirected request. If an operator-configured...

CVE-2026-110248 Insertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]py

Insertion of sensitive information into log files in the gitutils.py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated remote user to obtain plaintext repository credentials from CloudWatch Logs when a git clone operation fails, because t...