CVE-2026-18786

The CheckView WordPress plugin (versions prior to 2.3.2 ) is vulnerable to a REST API authentication bypass because it fails to restrict its authentication filter to its own routes. The plugin unconditionally discards authentication errors for any request where the URI contains a plugin-specific ...

CVE-2026-18786

The CheckView WordPress plugin before 2.3.2 does not restrict its REST API authentication filter to its own routes and unconditionally discards the authentication error raised for any request whose URI merely contains a CheckView WordPress plugin before 2.3.2-specific string, making it possible f...

CVE-2026-19075

All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by ?vdl= on any aiovgvideos post public/video.php, AIOVGPublicVideo::downloadvideo, which reads the post's mp4 meta value and streams that URL's response back to the requester...

EUVD-2026-55024

The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the server fetches it, allowing users with the instructor role to induce the server to issue requests to arbitrary external hosts, a blind and bounded server-side request forgery...

CVE-2026-13133

A vulnerability has been identified in LineInst.exe LINE for Windows prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy...

CVE-2026-13133

LineInst.exe (LINE for Windows) before version 26.4.0 is vulnerable because Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer directory to be loaded ahead of the legitimate System32 copy. The CVSS metrics indicate a HIGH ...

CVE-2026-65549

creationtimestamp| type| source ---|---|--- 2026-08-10 04:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mspaiknyfl2g 2026-08-11 00:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msrdkcmvcv2u...

CVE-2026-65502

creationtimestamp| type| source ---|---|--- 2026-08-10 03:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msp557n4lz2y 2026-08-10 23:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msra6zpguh2o...

ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting XSS by providing untrusted input to the Address6 constructor. When an application renders the output of...

CVE-2026-19382

creationtimestamp| type| source ---|---|--- 2026-08-10 02:49:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5tt34kegco3un...

CVE-2026-53983

creationtimestamp| type| source ---|---|--- 2026-08-10 02:01:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msoywxfiix2h...

CVE-2026-65517

creationtimestamp| type| source ---|---|--- 2026-08-10 00:16:18+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msot3onbxd2w 2026-08-10 20:16:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msqw5ba4yb2o...

PT-2026-69992

Name of the Vulnerable Software and Affected Versions TP-Link Aginet affected versions not specified Description Insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. This flaw enables an attacker to perform administrative actions...

PT-2026-69993

Name of the Vulnerable Software and Affected Versions TP-Link Aginet affected versions not specified Description Certain devices use hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data. An attacker with access to the device storage can recover these keys ...

PT-2026-69995

Name of the Vulnerable Software and Affected Versions TP-Link Aginet affected versions not specified Description Certain web interface components fail to properly validate and sanitize user-supplied input before passing it to system-level command execution functions. This allows an authenticated...

CVE-2025-30241: Improper Neutralization of Special Elements used in an OS Command

Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system...

CVE-2025-30240: Improper Link Resolution Before File Access

The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices. By placing a crafted symbolic link on supported storage media, an attacker may cause the system to resolve the link. Successful exploitation may allow unauthorized read access to...

CVE-2025-30238: Incorrect Authorization

In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. An attacker may perform administrative actions such as creating privileged accounts or modifying critical configuration settings...

CVE-2026-66484: Improper Limitation of a Pathname to a Restricted Directory

GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, the extracted file name is normalized but the tar hard-link target is passed to the linktoname function without...

CVE-2026-68307: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix crash in reset link replay During reset recovery, mt7925vifconnectiter replays firmware state for links tracked in mvif-validlinks. After MLO link changes or MCU timeout recovery, the driver bitmap can...