PT-2026-88788

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.6 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level access and...

CVE-2026-71616

An issue in GPAC (commit c2dee3aff638cd96f9617ac5b17dc2868cd90ef3) allows an attacker to cause a denial of service through the gf_route_media_complete_object() function. The vulnerability is addressed in commit 3c4e6c5b3e0c6fa9b16d55599701a08354538fab. While technical details regarding the specif...

PT-2026-89145

An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via the function gf route media complete object. Fixed in 3c4e6c5b3e0c6fa9b16d55599701a08354538fab...

EUVD-2026-75169

An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via the function gfroutemediacompleteobject. Fixed in 3c4e6c5b3e0c6fa9b16d55599701a08354538fab...

PT-2026-89094

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree sensitive for derived key buffers crypto krb5 prepare encryption and crypto krb5 prepare checksum free the buffer holding the freshly derived keys with plain kfree, leaving the key material behind in the...

Elasticsearch 8.x < 8.19.20 / 9.0.x < 9.4.5 / 9.5.x < 9.5.1 RCE (ESA-2026-114)

The version of Elasticsearch installed on the remote host is 8.x prior to 8.19.20, or 9.0.x prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-114 advisory. - Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine...

CVE-2026-53639

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the GET /api/v2/shop/payment-requests/hash and PUT /api/v2/shop/payment-requests/hash endpoints look up the payment request solely by the hash from the URL. No...

CVE-2026-86078 n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI workflow summary used node names and connection keys from stored workflows as ordinary object keys. A workflow submitted through the REST API could contain proto or constructor, causing nested writes t...

CVE-2026-86078

n8n (open-source workflow automation platform) is affected by a prototype pollution vulnerability in the Instance AI workflow summary feature prior to versions 2.37.7 and 2.38.2 . The function summarizeWorkflowStructure (in packages/@n8n/instance-ai/src/tools/workflows/summarize-workflow.ts) trea...

EUVD-2026-69648

joi: object.rename with a template target can set the validated object's prototype...

NPM: joi: object().rename() with a template target can set the validated object's prototype

NPM: joi: object.rename with a template target can set the validated object's prototype vulnerability discovered by ? in WordPress Npm joi versions = 16.0.0, 17.13.5...

GHSA-GG4H-3HG2-GRPC joi: object().rename() with a template target can set the validated object's prototype

Impact Applications are affected only if a schema renames keys with a regular-expression source and a Joi.expression / Joi.x target that interpolates the pattern's own match data, combined with multiple: true , for example .rename/^x-.+$/, Joi.x'1', multiple: true . Because the target is rendered...

joi: object().rename() with a template target can set the validated object's prototype

Impact Applications are affected only if a schema renames keys with a regular-expression source and a Joi.expression / Joi.x target that interpolates the pattern's own match data, combined with multiple: true , for example .rename/^x-.+$/, Joi.x'1', multiple: true . Because the target is rendered...

Exploit for CVE-2026-82222

⚡ GHOSTLYR00T - GiveWP RCE Exploit Framework...

Exploit for Deserialization of Untrusted Data in Devcode Openstamanager

CVE-2026-29782 — OpenSTAManager auth-SQLi → PHP object injecti...

Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway Desktop Edition.

Summary Multiple vulnerabilities were identified in third-party components used by CICS Transaction Gateway Desktop Edition, including IBM WebSphere Application Server, IBM WebSphere Application Server Liberty, Apache Tomcat Embed, Logback Classic, Log4j API, and Jackson Databind. To address thes...

node-csv: Prototype replacement still reachable via columns path

Impact With columns: true and groupcolumnsbyname: true, a duplicated proto header causes the duplicate-column branch to assign an array to obj'proto', invoking the proto setter and replacing the parsed record object's prototype with attacker-controlled data. Fixed in 7.0.2 Object.hasOwn duplicate...

CVE-2026-86730

Craft CMS versions before 5.10.12 fail to properly cleanse string-typed field-layout elements, allowing authenticated control-panel users to inject Yii2 behavior attachments and event handlers. Attackers can post field-layout tab elements as JSON strings to bypass cleanse validation, then trigger...

CVE-2026-86720

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ownership of liverestreamsid in resendRestreamer.json.php, allowing authenticated users with canStream to access other users' restream destinations. Attackers can broadcast their live stream to victim-configured...

CVE-2026-86730 Craft CMS 5.0.0-RC1 before 5.10.12 Behavior Injection RCE

Craft CMS versions before 5.10.12 fail to properly cleanse string-typed field-layout elements, allowing authenticated control-panel users to inject Yii2 behavior attachments and event handlers. Attackers can post field-layout tab elements as JSON strings to bypass cleanse validation, then trigger...