CVE-2026-81566

SP Page Builder (Free and Pro, versions 4.0.0 – 6.9.0 ) for Joomla contains a missing access control vulnerability in its add-to-menu routine. The routine invoked the com_menus item model's save() method directly, bypassing the authorization checks that normally reside in the com_menus controller...

CVE-2026-81566 Joomla Extension - joomshaper.com - Missing Access Control in Menu Item Creation in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0

Joomla Extension - joomshaper.com - Missing Access Control in Menu Item Creation in SP Page Builder Free and Pro 4.0.0 - 6.9.0 - The add-to-menu routine invoked the commenus item model's save method directly. That model does not perform authorisation itself, because the relevant checks reside in...

EUVD-2026-77385

Joomla Extension - joomshaper.com - Missing Access Control in Menu Item Creation in SP Page Builder Free and Pro 4.0.0 - 6.9.0 - The add-to-menu routine invoked the commenus item model's save method directly. That model does not perform authorisation itself, because the relevant checks reside in...

ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCE

ServiceNow AI Platform Brazil, Australia, Zurich, and Yokohama releases before patching contains a pre-authentication remote code execution vulnerability. The /assessmentthanks.do endpoint passes the sysparmassessabletype parameter into GlideRecord's addQuery, which evaluates "javascript:" prefix...

CVE-2026-84645

CVE-2026-84645 — Deserialización RCE en PersistenceRoot de Jenkins SECURITY-3972 PoC para la vulnerabilidad de deserialización de Jenkins corregida el 2026-09-02 aviso. Una cuenta con privilegios bajos que tenga Item/Configure en cualquier trabajo individual puede convertir eso en ejecución...

Linux Distros Unpatched Vulnerability : CVE-2026-89738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: at91udc: drain polled-VBUS timer/work before udc is freed In polled-VBUS mode board.vbuspin && board.vbuspolled, probe arms a self-restarting cycle...

CVE-2026-89737

In the Linux kernel, the following vulnerability has been resolved: usb: typec: thunderbolt: Disable work before freeing tbt on remove tbtaltmoderemove drops the plug and cable references without draining tbt-work. The work function dereferences those references, and can also requeue itself in it...

CVE-2026-89712

In the Linux kernel, the following vulnerability has been resolved: NFSD: restart sscexpireumount walk after dropping nfsdssclock nfsd4sscexpireumount walks nn-nfsdsscmountlist with listforeachentrysafeni, tmp, .... For each expired entry it sets nsuibusy = true, drops nfsdssclock to run mntput o...

CVE-2026-68528

Concrete CMS RSS Displayer block below version 9.5.3 rendered remote feed item titles without HTML escaping, resulting in stored cross-site scripting. An attacker able to control a title in a syndicated feed could execute script in the site origin for any visitor to the affected page, including...

CVE-2026-14566

The advanced-customized-prompts WordPress plugin (versions ≤ 1.0.1 ) contains a missing authorization flaw: it performs no capability, ownership, or nonce check before updating WooCommerce order item metadata for a supplied order ID. This allows any authenticated user with the Subscriber role or ...

EUVD-2026-75870

FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting XSS. An authenticated administrator can inject arbitrary JavaScript into an item's title, which is stored server-side and executed in the browser of any client user who visits the store page, enabling session hijacking, accou...

PT-2026-90454

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: at91 udc: drain polled-VBUS timer/work before udc is freed In polled-VBUS mode board.vbus pin && board.vbus polled, probe arms a self-restarting cycle: at91 vbus timer schedules vbus timer work, and at91 vbus timer...

CVE-2026-25596

CVE-2026-25596 — XSS Almacenado a través del Nombre de Unidad de Producto en InvoicePlane 1.7.0 Vulnerabilidad: Cross-Site Scripting XSS Almacenado a través del campo Nombre de Unidad de Producto Producto: InvoicePlane Versión afectada: 1.7.0 y probablemente versiones anteriores Severidad: Media...

CVE-2026-36392

FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting XSS. An authenticated administrator can inject arbitrary JavaScript into an item's title, which is stored server-side and executed in the browser of any client user who visits the store page, enabling session hijacking, accou...

CVE-2026-36392

FairSketch Rise CRM (RISE – Ultimate Project Manager & CRM) versions ≤ 3.9.6 are affected by a stored XSS in the item title field. An authenticated administrator can inject arbitrary JavaScript into an item's title; the payload is stored server-side and executes in the browser of any client user ...

CVE-2026-80918

CVE-2026-80918 is a type-confusion bug in the Linux kernel HID core subsystem. When hid_scan_report() calls fetch_item() on an item tagged HID_ITEM_TAG_LONG, the data is stored as a pointer in item->data.longdata rather than as a value. However, item_udata() and item_sdata() assume the item is...

CVE-2026-86203

PocketMine-MP versions before 5.39.2 fail to validate entity despawn state when processing attack packets from clients. Attackers can exploit a race condition by attacking a disconnecting player to trigger multiple death handlers, causing inventory items and experience to drop multiple times for...

CVE-2026-86203 PocketMine-MP before 5.39.2 Item Duplication via Despawn State

PocketMine-MP versions before 5.39.2 fail to validate entity despawn state when processing attack packets from clients. Attackers can exploit a race condition by attacking a disconnecting player to trigger multiple death handlers, causing inventory items and experience to drop multiple times for...

CVE-2026-86203 PocketMine-MP before 5.39.2 Item Duplication via Despawn State

PocketMine-MP versions before 5.39.2 fail to validate entity despawn state when processing attack packets from clients. Attackers can exploit a race condition by attacking a disconnecting player to trigger multiple death handlers, causing inventory items and experience to drop multiple times for...

CVE-2026-86203

PocketMine-MP versions before 5.39.2 contain an item duplication vulnerability caused by a failure to validate entity despawn state when processing attack packets from clients. A race condition allows an attacker to attack a disconnecting player, triggering multiple death handlers that cause inve...