MINI-9G2H-8Q4X-C2VF

Bulletin has no description...

MINI-J2QJ-Q9Q8-CC2P

Bulletin has no description...

MINI-956V-PQXX-WRXP

Bulletin has no description...

MINI-FHPC-9RJR-9GJ6

Bulletin has no description...

MINI-QX9H-RHMW-RW95

Bulletin has no description...

MINI-RHGJ-FW82-3QQ2

Bulletin has no description...

MINI-X52R-XVF9-CPJ7

Bulletin has no description...

MINI-X7R2-6WXQ-36F2

Bulletin has no description...

MINI-X699-GR77-V47M

Bulletin has no description...

MINI-M7JR-WXQ6-2C3H

Bulletin has no description...

MINI-R4PQ-7Q9R-4H5J

Bulletin has no description...

MINI-MVPX-95FC-P5HR

Bulletin has no description...

MINI-WM3F-PMPV-VGC8

Bulletin has no description...

MINI-PC68-74WR-X8C4

Bulletin has no description...

MINI-423R-R78Q-V82W

Bulletin has no description...

CVE-2026-15350 The Cache Purger <= 2.3.20 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Log Deletion via 'the_log_purge' Parameter

The The Cache Purger plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.20. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...

kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold

A flaw was found in the Linux kernel's Bluetooth SCO Synchronous Connection-Oriented protocol implementation. The scorecvframe function fails to properly hold a reference to a socket after releasing a lock. This oversight allows a concurrent operation to free the socket while it is still being...

BELL-CVE-2026-40467

Bulletin has no description...

CVE-2026-12906

The CVE-2026-12906 entry concerns RTMKit Addons for Elementor for WordPress. It affects the plugin prior to version 2.0.9, where an AJAX action does not perform a necessary capability check and returns a post identifier supplied in the request. This allows users with at least the Contributor role...

EUVD-2026-44879

The RTMKit WordPress plugin before 2.0.9 does not perform a capability check in one of its AJAX actions and resolves a request-supplied post identifier directly, allowing users with at least the Contributor role to read the titles of other users' private, draft, pending, scheduled and trashed pos...