CVE-2026-81342 MasterStudy LMS < 3.7.43 - Unauthenticated Open Redirect

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, allowing unauthenticated attackers to redirect users to arbitrary external URLs...

CVE-2026-81342

The MasterStudy LMS WordPress Plugin (versions before 3.7.43 ) is vulnerable to an unauthenticated open redirect because it fails to validate a redirect parameter provided during the user registration process. This flaw allows an attacker to redirect users to arbitrary external URLs. No specific ...

WordPress MasterStudy LMS WordPress Plugin plugin < 3.7.43 - Unauthenticated Open Redirect vulnerability

Unauthenticated Open Redirect vulnerability discovered by Abiodun Victor in WordPress Plugin MasterStudy LMS versions 3.7.43...

EUVD-2026-68064

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, allowing unauthenticated attackers to redirect users to arbitrary external URLs...

EUVD-2026-67962

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit...

CVE-2026-82464: URL Redirection to Untrusted Site

pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform that accepts backslash-prefixed logout redirect targets matching logoutUrlPattern. Attackers can craft logout links with backslash-prefixed external hosts that browsers normalize into network-path...

PT-2026-83444

Name of the Vulnerable Software and Affected Versions pac4j-core versions prior to 6.5.6 Description An open redirect issue exists in the DefaultLogoutLogic.perform function. The system accepts logout redirect targets that start with a backslash and match the logoutUrlPattern. This allows attacke...

PT-2026-89179

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.5.0 through 0.11.0 Description A flaw exists in the message-chain reconstruction helper located in backend/open webui/utils/misc.py. The system reconstructs chat history by map key but tracks visited entries using an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001418)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001418 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open Yang Erkun reports that when two...

PT-2026-89178

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.5 through 0.11.0 Description An authenticated user can perform a Server-Side Request Forgery SSRF attack when the AIOHTTP CLIENT ALLOW REDIRECTS variable is set to true. The platform fails to reapply the WEB FETCH FILTE...

PT-2026-83447

Name of the Vulnerable Software and Affected Versions Rodauth versions prior to 2.47.0 Description Insufficient validation of protocol-relative return-to paths occurs within the confirm password, login return to requested location, and two factor auth return to requested location features. This...

PT-2026-83416

Name of the Vulnerable Software and Affected Versions MasterStudy LMS WordPress Plugin versions prior to 3.7.43 Description An open redirect issue exists during the user registration process. The plugin fails to validate a redirect parameter before utilizing it, which allows unauthenticated...

aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.10.4) +15 more potentially affected by CVE-2026-55830 via restrictedpython (>=8.0.0, <=8.2.0)

restrictedpython PYPI version =8.0.0, =3.1.0, =3.9.11, =0.167.1, =0.0.44a26, =0.12.0, =0.2.1, =0.7.15, =0.5.17, =10.0.9, =0.166.0, =0.167.0 - pycurity 0.0.1 - pytest-canvas 0.1.0 and more Source cves: CVE-2026-55830 Source advisory: OSV:GHSA-FFG3-P8FM-MJX2...

aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.10.4) +15 more potentially affected by CVE-2026-55830 via restrictedpython (>=8.0.0, <=8.2.0)

restrictedpython PYPI version =8.0.0, =3.1.0, =3.9.11, =0.167.1, =0.0.44a26, =0.12.0, =0.2.1, =0.7.15, =0.5.17, =10.0.9, =0.166.0, =0.167.0 - pycurity 0.0.1 - pytest-canvas 0.1.0 and more Source cves: CVE-2026-55830 Source advisory: GHSA-FFG3-P8FM-MJX2...

CVE-2026-82018

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit...

CVE-2026-55891

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, Request::getRequestUri in lib/Request.php passes $SERVER'REQUESTURI' through FILTERSANITIZEURL, which does not remove quotation marks, angle brackets, or apostrophes, and Controller::init stores t...

CVE-2026-82018 IGEL OS 12 / 11 Secure Boot Bypass via Unsigned igel.conf File

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit...

CVE-2026-55891 PrivateBin: Reflected JSON injection in backend responses via unescaped REQUEST_URI

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, Request::getRequestUri in lib/Request.php passes $SERVER'REQUESTURI' through FILTERSANITIZEURL, which does not remove quotation marks, angle brackets, or apostrophes, and Controller::init stores t...

CVE-2026-82274

Twenty through 2.35.0 contains an open redirect vulnerability in the OAuthPropagatorController.propagateOAuthCallback endpoint that treats the state query parameter as a redirect URL. Attackers can craft malicious requests to redirect users to arbitrary hosts while forwarding OAuth authorization...

CVE-2026-55834

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.6.0 until 2.9.0, frontend/src/routes/authorize/+page.ts reads the redirecturi query parameter and frontend/src/routes/authorize/+page.svelte uses the raw callbackURL in redirectWithError when...