CVE-2026-97258

The WordPress Aruba Migration Tool plugin (versions

CVE-2022-30781

🍵 CVE-2022-30781 Exploit de ejecución remota de comandos en la migración de repositorios de Gitea. Cómo usar 1. Ejecuta un servidor HTTP del sistema de archivos con los archivos de este repositorio. 2. Edita el comando a ejecutar en api/v1/repos/e99/exp/pulls/1/index.html L96. 3. Migra el...

CVE-2026-103264

Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess these non-secret identifiers can authenticate as iOS/iPadOS...

CVE-2026-103264 Fleet before 4.87.0 Authentication Bypass via Device Identifiers

Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess these non-secret identifiers can authenticate as iOS/iPadOS...

EUVD-2026-90658

Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess these non-secret identifiers can authenticate as iOS/iPadOS...

CVE-2026-103264

Fleet versions before 4.87.0 are vulnerable to an authentication bypass in the device API. The root cause is that the API accepts hostnames and hardware serials as authentication tokens alongside device UUIDs. Unauthenticated attackers capable of guessing these non-secret identifiers can authenti...

WordPress_Backup_Migration-RCE_Unauthenticated

CVE-2023-6553 — El plugin Backup Migration para WordPress - Shell reversa Una versión extendida del exploit CVE-2023-6553 de Chocapikk que añade un modo de shell reversa con un solo comando sobre la webshell interactiva original. Vulnerabilidad CVE-2023-6553 — Ejecución remota de código no...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc (crlsa-2026_3463)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20263463 advisory. kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration CVE-2026-23097 Tenable has extracted the preceding description block directly...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_3488)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20263488 advisory. kernel: smc: Use skdstget and dstdevrcu in smcclcprfxmatch CVE-2025-40168 kernel: ipv6: BUG in pskbexpandhead as part of calipsoskbuffsetattr CVE-2025-7108...

CentOS Linux 7.9 [CIQ] Security Update: squid / squid-debuginfo / squid-migration-script / squid-sysvinit Multiple Vulnerabilities (ciqsa-2026_0740)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260740 advisory. This advisory aggregates security fixes for the squid SRPM in CIQ CentOS Bridge 7.9. It addresses 7 CVEs: CVE-2021-28651, CVE-2021-31807, CVE-2021-28652...

CVE-2026-97197

Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...

CVE-2026-97197

The WordPress Backup & Migration plugin versions

CVE-2026-97197 WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...

EUVD-2026-89898

Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...

CVE-2026-97197 WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...

CVE-2026-91072

The EWWW Image Optimizer WordPress plugin before 8.8.0 does not confine a WebP-derivative file migration routine to the current site's own uploads directory, letting an attacker with Administrator-level access rename or delete existing WebP-derivative image files outside that scope, including, on...

CVE-2026-91072 EWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler

The EWWW Image Optimizer WordPress plugin before 8.8.0 does not confine a WebP-derivative file migration routine to the current site's own uploads directory, letting an attacker with Administrator-level access rename or delete existing WebP-derivative image files outside that scope, including, on...

CVE-2026-91072

The EWWW Image Optimizer WordPress plugin (versions before 8.8.0 ) contains a vulnerability where a WebP-derivative file migration routine is not properly confined to the site's specific uploads directory. This flaw allows an attacker with Administrator-level access to rename or delete WebP-deriv...

CVE-2026-91072 EWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler

The EWWW Image Optimizer WordPress plugin before 8.8.0 does not confine a WebP-derivative file migration routine to the current site's own uploads directory, letting an attacker with Administrator-level access rename or delete existing WebP-derivative image files outside that scope, including, on...

Important: Red Hat Security Advisory: Migration Toolkit for Applications

A new version of Migration Toolkit for Applications MTA is now available. Migration Toolkit for Applications MTA accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. This solution provides insight throughout the adoption process, at both...