IPConfigure Orchid Core VMS 2.0.5 - Local File Inclusion

IPConfigure Orchid Core VMS 2.0.5 is susceptible to local file inclusion. id: CVE-2018-10956 info: name: IPConfigure Orchid Core VMS 2.0.5 - Local File Inclusion author: 0xAkoko severity: high description: | IPConfigure Orchid Core VMS 2.0.5 is susceptible to local file inclusion. impact: | An...

IPConfigure Orchid DNF GPG key rpm --import injection RCE

Authenticated PUT /service/server/properties taints package.dnf.repo.gpgkey; restart runs unquoted rpm --import as root OOB / blind. """IPConfigure Orchid DNF repo GPG key injection root RCE.""" from future import annotations import base64 import json import time from urllib.parse import urlencod...

IPConfigure Orchid VMS — Authenticated Command Injection in the DNF Repository G — Detect

Fingerprint / reachability check for IPConfigure Orchid VMS — Authenticated Command Injection in the DNF Repository GPG-Key Import Path root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for IPConfigure Orchid VMS — Authenticated Command Injection in the DNF Repository GPG-Key Import...

Malicious code in hedgehog-orchid-phg379-project (npm)

The package hedgehog-orchid-phg379-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in gorge-orchid-tts835-project (npm)

The package gorge-orchid-tts835-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in emerald-orchid-wys258-project (npm)

The package emerald-orchid-wys258-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cherry-orchid-fdn814-project (npm)

The package cherry-orchid-fdn814-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in asteroid-orchid-xvb262-project (npm)

The package asteroid-orchid-xvb262-project was found to contain malicious code. --- Credit: OpenSSF source...

IPConfigure Orchid Core VMS 2.0.5 - Local File Inclusion Detection

IPConfigure Orchid Core VMS 2.0.5 is susceptible to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """IPConfigure Orchid Core VMS 2.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Orchid Core VMS Panel - Detect

Orchid Core VMS panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Orchid Core VMS panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Orchid Core VMS Panel - Detect', 'description':...

Two-Thirds of Nonhuman Accounts Are Unseen and Unmanaged, According to Orchid Security’s Identity Gap Report

New York, United States, 19th May 2026, CyberNewswire...

Orchid Security Recognized by Gartner® as a Representative Vendor of Guardian Agents

New York, United States, 17th March 2026, CyberNewswire...

CVE-2026-24612

Missing Authorization vulnerability in themebeez Orchid Store orchid-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Orchid Store: from n/a through = 1.5.15...

CVE-2026-24612

Missing Authorization vulnerability in themebeez Orchid Store orchid-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Orchid Store: from n/a through = 1.5.15...

CVE-2026-24612 WordPress Orchid Store theme <= 1.5.15 - Broken Access Control vulnerability

Missing Authorization vulnerability in themebeez Orchid Store orchid-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Orchid Store: from n/a through = 1.5.15...

CVE-2026-24612

CVE-2026-24612 is a missing Authorization vulnerability in the WordPress plugin/theme Orchid Store (theme version 1.5.15) or apply vendor-provided fixes once available. If no upgrade is feasible, monitor for official patches and advisories from the vendor.

CVE-2026-24612 WordPress Orchid Store theme <= 1.5.15 - Broken Access Control vulnerability

Missing Authorization vulnerability in themebeez Orchid Store orchid-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Orchid Store: from n/a through = 1.5.15...

CVE-2026-24612

Missing Authorization vulnerability in themebeez Orchid Store orchid-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Orchid Store: from n/a through = 1.5.15...

PT-2026-4444

Name of the Vulnerable Software and Affected Versions Orchid Store versions through 1.5.15 Description An issue exists in Orchid Store related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows exploitation due to this access...

WordPress plugin Orchid Store has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. The WordPre...