CVE-2026-109592 OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin <= 1.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Placement Modification and Entity Metadata Disclosure via PATCH /files/placements/<id> on orphaned placements

The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.16. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible f...

CVE-2026-109592

The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to an authorization bypass in all versions up to and including 1.1.16 . The root cause is the plugin's failure to properly verify user authorization when performing actions. Authenticated att...

CVE-2026-109592 OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin <= 1.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Placement Modification and Entity Metadata Disclosure via PATCH /files/placements/<id> on orphaned placements

The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.16. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible f...

CVE-2026-119709 Grimoire before 1.0.0 Unauthenticated SSRF via /api/fetch-metadata

Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata POST handler that passes user-supplied URLs to getMetadata without authentication checks. Attackers can submit URLs targeting loopback, internal-network, or cloud metadata...

CVE-2026-119709 Grimoire before 1.0.0 Unauthenticated SSRF via /api/fetch-metadata

Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata POST handler that passes user-supplied URLs to getMetadata without authentication checks. Attackers can submit URLs targeting loopback, internal-network, or cloud metadata...

WordPress OpenStation – Admin Dashboard Notes, Custom Dashboard, AI Assistant & PWA plugin <= 1.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Placement Modification and Entity Metadata Disclosure vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Placement Modification and Entity Metadata Disclosure vulnerability discovered by Wordfence PRISM, OpenStation Team in WordPress Plugin Desktop Mode versions = 1.1.16...

CVE-2026-119709: goniszewski grimoire: Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata…

Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata POST handler that passes user-supplied URLs to getMetadata without authentication checks. Attackers can submit URLs targeting loopback, internal-network, or cloud metadata...

Gitea 28.1.0 Draft Release Attachment Metadata Disclosure

Gitea versions 1.22.0 through 28.1.0 contain an information disclosure where creating a draft release can return metadata for unlinked attachments from private repositories. https://packetstorm.news/download/238569...

CVE-2026-51903

SuperAGI v0.0.14 contains an improper access control vulnerability in getagentbylatestexecution in superagi/controllers/agentexecution.py. A remote authenticated attacker from one organization can retrieve latest execution and agent metadata for another organization's project through...

CVE-2026-51903

SuperAGI v0.0.14 is vulnerable to an improper access control vulnerability within the get_agent_by_latest_execution function located in superagi/controllers/agent_execution.py. A remote authenticated attacker from one organization can exploit this by supplying a victim project_id to the /agentexe...

CVE-2026-51903

SuperAGI v0.0.14 contains an improper access control vulnerability in getagentbylatestexecution in superagi/controllers/agentexecution.py. A remote authenticated attacker from one organization can retrieve latest execution and agent metadata for another organization's project through...

SuperAGI security vulnerability

SuperAGI version 0.0.14 contains a security vulnerability. This vulnerability stems from improper access control in the getagentbylatestexecution function within superagi/controllers/agentexecution.py. Remote authenticated attackers can exploit this by providing the victim’s projectid to access...

CVE-2026-51903: n/a: SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in…

SuperAGI v0.0.14 contains an improper access control vulnerability in getagentbylatestexecution in superagi/controllers/agentexecution.py. A remote authenticated attacker from one organization can retrieve latest execution and agent metadata for another organization's project through...

CVE-2026-51903

SuperAGI v0.0.14 contains an improper access control vulnerability in getagentbylatestexecution in superagi/controllers/agentexecution.py. A remote authenticated attacker from one organization can retrieve latest execution and agent metadata for another organization's project through...

CVE-2026-117626

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file browser for workspaces and $JENKINSHOME/userContent/, allowing attackers with Overall/Read permission to obtain the names, sizes, and last modification times of files in the...

EUVD-2026-112191

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file browser for workspaces and $JENKINSHOME/userContent/, allowing attackers with Overall/Read permission to obtain the names, sizes, and last modification times of files in the...

CVE-2026-117626

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file browser for workspaces and $JENKINSHOME/userContent/, allowing attackers with Overall/Read permission to obtain the names, sizes, and last modification times of files in the...

CVE-2026-117626

Jenkins versions 2.587 and earlier (including LTS 2.580.1 and earlier ) are vulnerable to a path traversal flaw in the file browser for workspaces and $JENKINS_HOME/userContent/. Due to improper file path identification, an attacker with Overall/Read permission can obtain file names, sizes, and l...

CVE-2026-117626

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file browser for workspaces and $JENKINSHOME/userContent/, allowing attackers with Overall/Read permission to obtain the names, sizes, and last modification times of files in the...

CVE-2026-50542 Xibo: IDOR (Broken Object-Level Authorization) on GET /layout/status/{id} Allows Arbitrary Layout Metadata Disclosure

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on GET /layout/status/id allow an authenticated user with any privileges to view the status and metadata of any layout, including...