CVE-2026-10542

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate channel action ownership which allows channel managers to update actions in other channels via the channel action update endpoint.. Mattermost Advisory ID: MMSA-2026-00692...

sklad v0.2.3

Sklad 📦 Sklad is a cross-platform snippet manager that lives in your system tray. Store passwords, API keys, code snippets, and any text you copy frequently — encrypted and always one click away. Sklad Demo ✨ Features 🔒 Master Password Protection — Secrets are AES-256 encrypted with Argon2 key...

Security Bulletin: IBM MQ Java messaging is vulnerable to remote code execution (CVE-2026-11729)

Summary IBM MQ has addressed a Java deserialization vulnerability in the IBM MQ Java client's internal command manager Vulnerability Details CVEID:CVE-2026-11729 DESCRIPTION: IBM MQ Java client library could allow an authenticated attacker to execute arbitrary code in client applications due to...

ROOT-APP-NPM-CVE-2026-44489 CVE-2026-44489 in axios - Patched by Root

Root has patched CVE-2026-44489 in the axios package for Root:npm. Multiple fixed versions available...

WordPress Booking for Appointments and Events Calendar plugin < 2.4.10 - Amelia Manager+ WordPress Account Takeover vulnerability

Amelia Manager+ WordPress Account Takeover vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Amelia versions 2.4.10...

Security Bulletin: IBM MQ is vulnerable to remote code execution (CVE-2026-11381)

Summary IBM MQ has addressed a heap out-of-bounds memory corruption vulnerability in the queue manager's message descriptor conversion that could allow a remote authenticated attacker to execute arbitrary code. Vulnerability Details CVEID:CVE-2026-11381 DESCRIPTION: IBM MQ could allow an...

Security Bulletin: IBM MQ queue manager is vulnerable to remote code execution (CVE-2026-11378)

Summary IBM MQ has addressed an integer overflow vulnerability in the queue manager's object descriptor conversion that could allow a remote authenticated attacker to write zeros to arbitrary heap memory locations, leading to remote code execution. Vulnerability Details CVEID:CVE-2026-11378...

WordPress Mobile Events Manager plugin <= 1.4.8.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Enrico Marcolini Dottor Marc, Claudio Marchesini Dottor Marc in WordPress Plugin Mobile Events Manager versions = 1.4.8.3...

WordPress Quads Ads Manager for Google AdSense plugin 3.0.4 - Subscriber+ Ad-Selling Payment Bypass vulnerability

Subscriber+ Ad-Selling Payment Bypass vulnerability discovered by JunHee CHO in WordPress Plugin Ads by WPQuads versions 3.0.4...

PT-2026-91252

Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps the caller-controlled URI path directly to a filesystem path and passes it to new File.... It then supports query, openFile,...

CVE-2026-76440: Relative Path Traversal

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76443: Improper Neutralization

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

PT-2026-91266

Name of the Vulnerable Software and Affected Versions Cisco Secure Email Gateway versions 15.5 and earlier Cisco Secure Email and Web Manager versions 15.5 and earlier Description Multiple path traversal issues exist within the software. Path traversal is a flaw that allows an attacker to access...

PT-2026-91268

Name of the Vulnerable Software and Affected Versions Cisco Secure Email Gateway affected versions not specified Cisco Secure Email and Web Manager affected versions not specified Description Issues exist due to improper validation of specified quantity in input, which can lead to a remote denial...

ROS-20260914-73-0033

The vulnerability of the Password Manager component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML page...

CVE-2026-76442: Improper Validation of Specified Quantity in Input

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

Linux Distros Unpatched Vulnerability : CVE-2026-75883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The code in pppd that formats a response to a PEAP Request packet in peapresponse copies an entire TLS record of up to 16384 bytes into the fixed global buffer...

CVE-2026-85188: Exposure of Sensitive Information to an Unauthorized Actor

Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager Free, Pro 12.1.0, Conditional Content Free, Pro 8.0.0, Content Templater Pro 14.2.0, ReReplacer Pro 16.2.0 for Joomla - The Conditions editor creates a default Condition Set name from the item to which the se...

PT-2026-91003

A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmt parse element of the file scene manager/loader xmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...

CVE-2026-20353: Improper Control of a Resource Through its Lifetime

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...