Security Bulletin: IBM Security QRadar Log Management AQL Plugin contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM Security QRadar Log Management AQL Plugin has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-93749 DESCRIPTION:...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Really-Simple-Plugins Really_Simple_Security

InfoSec Audit & Reconnaissance Tools 🛡️🔍 !Python 3.10+htt...

Exploit for CVE-2026-61979

🚀 CVE-2026-61979 - miniOrange SAML Single Sign On Authenticati...

Exploit for SQL Injection in Wordpress

🚀 CVE-2026-60137 - WordPress Core Critical SQL Injection SQLi...

Exploit for CVE-2026-104736

CVE-2026-104736 - Proof of Concept PoC & Exploit Details !...

CVE-2026-108709

Authentication bypass within in-house network in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.4 through 5.0.4. Users are recommended t...

EUVD-2026-42393

Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination...

CVE-2026-108709

The Apache Kylin project versions 4.0.4 through 5.0.4 are vulnerable to an authentication bypass that allows unauthenticated metadata broadcast within an in-house network. While the impact is most significant for services directly exposed to the public network (which is uncommon), standard in-hou...

CVE-2026-108709 Apache Kylin: Unauthenticated Metadata Broadcast (inside in-house network)

Authentication bypass within in-house network in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.4 through 5.0.4. Users are recommended t...

EUVD-2026-103153

Authentication bypass within in-house network in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.4 through 5.0.4. Users are recommended t...

WordPress Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin <= 5.7.4 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by Ekene Umegakwe in WordPress Plugin LatePoint versions = 5.7.4...

CVE-2026-61726 Tandoor Recipes: Private recipe authorization bypass via /api/step/ - read and modify another Space member's private recipe content

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space and use role-level CustomIsUser checks instead of the private-recipe owner or sharing predicate when an authenticated...

CVE-2026-59963 Tandoor Recipes: Private recipe file and share-link authorization bypass in recipe utility API endpoints

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permission when an authenticated member of a shared Space supplies...

CVE-2026-17068

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag...

CVE-2026-17488

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication...

CVE-2026-17491

IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive...

CVE-2026-17068 IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag...

CVE-2026-17068

IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to a bypass of Network File System (NFS) version restrictions. The root cause is the improper enforcement of the export version flag , which could allow a local attacker to bypass these restrictions (CWE-285). To remediate this, users should ap...

EUVD-2026-103141

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag...

CVE-2026-17488

IBM i versions 7.3, 7.4, 7.5, and 7.6 (program 5770-999 ) are vulnerable to an improper authentication flaw (CWE-287) within the System Service Tools (SST) / Dedicated Service Tools (DST) . This vulnerability could allow a remote authenticated attacker to bypass security restrictions. Remediation...