DEBIAN-CVE-2026-77014

A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INTMAX. This causes silent omission of requested byte ranges...

WordPress Link Library plugin < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form vulnerability

Unauthenticated SQL Injection via the Front-End Link Submission Form vulnerability discovered by Abdullah Kareem cyberkareem in WordPress Plugin Link Library versions 7.9.3...

ECHO-37B9-2184-9E46

Bulletin has no description...

ECHO-2861-D781-30A1

Bulletin has no description...

ECHO-95FC-7DA4-DF04

Bulletin has no description...

ECHO-D43D-3438-B69F

Bulletin has no description...

ECHO-8340-2DF2-4096

Bulletin has no description...

ECHO-EF47-70D2-ABED

Bulletin has no description...

ECHO-38C1-1304-759B

Bulletin has no description...

CVE-2026-17153

The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to upload images...

BELL-CVE-2026-56684

Bulletin has no description...

BELL-CVE-2026-63639

Bulletin has no description...

BELL-CVE-2026-66046

Bulletin has no description...

BELL-CVE-2026-70907

Bulletin has no description...

BELL-CVE-2026-70906

Bulletin has no description...

BELL-CVE-2026-61308

Bulletin has no description...

BELL-CVE-2026-60589

Bulletin has no description...

CVE-2026-17153 AI Agent by SiteGround <= 1.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST Endpoint

The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to upload images...

DEBIAN-CVE-2026-76956

In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content...

DEBIAN-CVE-2026-76957

libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412...