Exploit for Heap-based Buffer Overflow in Google Android

Zero-click APV, in a player that auto-plays shared clips CV...

CVE-2026-94382 Beszel before 0.19.0 Insecure Direct Object Reference via user-alerts

Beszel before 0.19.0 contains an insecure direct object reference vulnerability in the POST and DELETE /api/beszel/user-alerts handlers that allows any authenticated user to create or delete alerts on systems they cannot access. Attackers can supply arbitrary system IDs in the request body to...

CVE-2026-94368 Noobaa-core: noobaa-core: presigned put url escalation to copyobject via unsigned x-amz-copy-source header

A flaw was found in the signature verification logic of noobaa-core, the core component of the NooBaa Multicloud Object Gateway. The issue occurs when the service processes S3 presigned URLs using Signature Version 4 SigV4. Due to improper validation, the service fails to reject requests containi...

PT-2026-96217

Name of the Vulnerable Software and Affected Versions InvenTree versions prior to 1.4.0 Description An authentication bypass occurs because the system fails to call the users.permissions.check user permission function to verify the caller's per-model view role before selecting objects by primary...

PT-2026-96086

Name of the Vulnerable Software and Affected Versions noobaa-core affected versions not specified Description A flaw exists in the signature verification logic of the noobaa-core component within the NooBaa Multicloud Object Gateway. When processing S3 presigned URLs using Signature Version 4...

CVE-2026-94382: Authorization Bypass Through User-Controlled Key

Beszel before 0.19.0 contains an insecure direct object reference vulnerability in the POST and DELETE /api/beszel/user-alerts handlers that allows any authenticated user to create or delete alerts on systems they cannot access. Attackers can supply arbitrary system IDs in the request body to...

CVE-2026-94368: Improper Verification of Cryptographic Signature

A flaw was found in the signature verification logic of noobaa-core, the core component of the NooBaa Multicloud Object Gateway. The issue occurs when the service processes S3 presigned URLs using Signature Version 4 SigV4. Due to improper validation, the service fails to reject requests containi...

PT-2026-96093

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.47 Description An insecure direct object reference exists in the processModuleResultsData function of the Event model. When processing module results, the system fails to unset the client-supplied id field for...

dlplibs:fb2fuzzer: Object-size in libebook::FictionBook2ExtrasCollector::closeSpan

Detailed Report: https://oss-fuzz.com/testcase?key=4577107158827008 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: fb2fuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Object-size Crash Address: Crash State: libebook::FictionBook2ExtrasCollector::closeSpan...

CVE-2026-85017

The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability check on an AJAX action and deserializes attacker-controlled stored data through it, which makes it possible for authenticated attackers with subscriber-level access to inject arbitrary PHP objects. ...

CVE-2026-87067 Forminator Forms < 1.57.2.1 - Authenticated RCE via XML-RPC PHP Object Injection

The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be instantiated when it deserialises a value taken from an XML-RPC request, allowing users who hold its forms-management permission to write a file of their choosing and execute arbitrary code. That permissi...

CVE-2026-87067

The Forminator Forms WordPress plugin (versions before 1.57.2.1 ) is vulnerable to Authenticated Remote Code Execution (RCE) via PHP Object Injection . The flaw exists because the plugin fails to restrict which classes can be instantiated during the deserialization of values received from an XML-...

CVE-2026-87067 Forminator Forms < 1.57.2.1 - Authenticated RCE via XML-RPC PHP Object Injection

The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be instantiated when it deserialises a value taken from an XML-RPC request, allowing users who hold its forms-management permission to write a file of their choosing and execute arbitrary code. That permissi...

CVE-2026-85017

The Unlimited Elements For Elementor WordPress plugin (versions before 2.0.20 ) is vulnerable to PHP Object Injection . The root cause is a missing capability check on an AJAX action , which allows the plugin to deserialize attacker-controlled stored data. This flaw enables authenticated attacker...

EUVD-2026-83669

The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability check on an AJAX action and deserializes attacker-controlled stored data through it, which makes it possible for authenticated attackers with subscriber-level access to inject arbitrary PHP objects. ...

CVE-2026-85017 Unlimited Elements For Elementor < 2.0.20 - Subscriber+ PHP Object Injection

The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability check on an AJAX action and deserializes attacker-controlled stored data through it, which makes it possible for authenticated attackers with subscriber-level access to inject arbitrary PHP objects. ...

CVE-2026-85017 Unlimited Elements For Elementor < 2.0.20 - Subscriber+ PHP Object Injection

The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability check on an AJAX action and deserializes attacker-controlled stored data through it, which makes it possible for authenticated attackers with subscriber-level access to inject arbitrary PHP objects. ...

Linux Distros Unpatched Vulnerability : CVE-2026-93986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object...

PT-2026-95922

Name of the Vulnerable Software and Affected Versions Unlimited Elements For Elementor versions prior to 2.0.20 Description The plugin fails to perform a capability check on an AJAX action and deserializes stored data controlled by an attacker. This allows authenticated users with subscriber-leve...

CVE-2026-85017: Deserialization of Untrusted Data

The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability check on an AJAX action and deserializes attacker-controlled stored data through it, which makes it possible for authenticated attackers with subscriber-level access to inject arbitrary PHP objects. ...