PT-2026-96662

Name of the Vulnerable Software and Affected Versions WP User Manager versions prior to 2.9.19 Description The plugin allows unauthorized modification of data because the Connect::complete function lacks a capability check. This function is registered on the admin init hook, which executes for an...

PT-2026-96685

Name of the Vulnerable Software and Affected Versions Taxi Booking Manager for WooCommerce versions prior to 2.0.8 Description An authentication bypass issue exists in the Taxi Booking Manager for WooCommerce plugin, allowing an attacker to bypass authentication mechanisms using an alternate path...

PT-2026-96989

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager Forms JEE affected versions not specified Description Cross-Site Request Forgery CSRF is a flaw where a victim is tricked into performing actions they did not intend to do. This issue allows an attacker to bypass...

CVE-2026-75743: Cross-Site Request Forgery (CSRF)

Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery CSRF vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to...

CVE-2026-18095: Out-of-bounds Write

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-18153: Use of a Broken or Risky Cryptographic Algorithm

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information and forge authentication tags due to the use of hard-coded cryptographic keys and initialization vectors...

PT-2026-96763

Name of the Vulnerable Software and Affected Versions php-file-manager-with-code-editor versions prior to 3.1 Description An unrestricted file upload issue exists in the Save Handler component. A remote attacker can manipulate the filename and content arguments within the file put contents functi...

Nginx Out-of-band Security Notification (July 15, 2026)

NGINX Security Advisory: NGINX Ingress Controller vulnerability CVE-2026-55723 NGINX Ingress Controller NGINX Ingress Controller vulnerability CVE-2026-52865 NGINX Ingress Controller NGINX Agent vulnerability CVE-2026-60062 NGINX Agent, NGINX Instance Manager NGINX map directive and regex matchin...

PT-2026-97073

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift versions 4.0.6.0 through 4.0.10.0 Interim Fix 064 Description IBM Financial Transaction Manager transmits sensitive or security-critical data in cleartext across a communication channe...

CVE-2026-18162: Improper Control of Generation of Code

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor...

WordPress WP User Manager – User Profile Builder & Membership plugin <= 2.9.18 - Missing Authorization to Authenticated (Subscriber+) Stripe Account Hijack vulnerability

Missing Authorization to Authenticated Subscriber+ Stripe Account Hijack vulnerability discovered by Wordfence PRISM in WordPress Plugin WP User Manager versions = 2.9.18...

CVE-2026-14856-TastyIgniter

CVE-2026-14856: Stored XSS to Account Takeover in TastyIgniter v4.3.0 📌 Summary A Stored Cross-Site Scripting XSS vulnerability was identified in the file upload functionality of the Media Manager in TastyIgniter v4.3.0. Due to insufficient validation and sanitization of uploaded .svg files, an...

CVE-2026-80110

A flaw was found in pki-core. The v2 REST ACL filter selects a tie-breaking permission for colliding literal and wildcard ACL keys using lexicographic string comparison rather than specificity, causing a wildcard-mapped permission to override a more specific literal-mapped permission when both...

CVE-2026-13673

creationtimestamp| type| source ---|---|--- 2026-09-21 12:45:07+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-synology-diskstation-manager-dsm- 2026-09-21 13:20:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvzshwm2f22i...

CVE-2026-6205

creationtimestamp| type| source ---|---|--- 2026-09-21 12:45:04+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-synology-diskstation-manager-dsm- 2026-09-21 13:20:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvzshwm2f22i...

Security Bulletin: IBM Financial Transaction Manager v4 is impacted by multiple vulnerabilities in WebSphere Application Server Liberty

Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2026-57819 DESCRIPTION: Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the "maxFormParameterCount" configuration...

Security Bulletin: IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

Summary IBM Financial Transaction Manager FTM has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2026-18173 DESCRIPTION: IBM Financial Transaction Manager FTM could allow a remote attacker to obtain sensitive information due to improper enforcement of mutual TLS...

WordPress APCu Manager plugin < 4.5.0 - Unauthenticated Stored XSS via Cache Key Pollution vulnerability

Unauthenticated Stored XSS via Cache Key Pollution vulnerability discovered by Alessandro Greco aka Aleff, Giovanbattista Ianni University of Calabria - UNICAL in WordPress Plugin APCu Manager versions 4.5.0...

Important: Red Hat Security Advisory: yggdrasil-worker-package-manager security update

An update for yggdrasil-worker-package-manager is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

PT-2026-96107

Name of the Vulnerable Software and Affected Versions mport versions prior to 2.7.8 Description The MidnightBSD Package Manager improperly handles the TMPDIR environment variable when extracting package metafiles, even when operating as root or within setuid/setgid contexts. An attacker who can...