CVE-2026-101780

A flaw was found in the MySQL Server X Plugin component. An authenticated remote attacker with low privileges and network access can exploit this vulnerability through network protocol requests. Successful exploitation allows the attacker to cause the database server to hang or repeatedly crash,...

CVE-2026-101776

A flaw was found in the MySQL Group Replication plugin. A remote attacker with high privileges and network access can exploit this vulnerability across multiple protocols. Successful exploitation allows the attacker to cause the service to hang or crash repeatedly, resulting in a complete Denial ...

CVE-2026-101750

A flaw was found in the MySQL Clone Plugin. An authenticated remote attacker with high privileges can exploit this vulnerability over network protocols to trigger an abnormal condition. A successful attack allows the attacker to cause the database server to hang or repeatedly crash, resulting in ...

CVE-2026-101773

A flaw was found in the MySQL Group Replication plugin. An unauthenticated attacker located on the adjacent network can exploit this vulnerability to compromise the database service. Successful exploitation primarily allows an attacker to cause a Denial of Service DoS by hanging or repeatedly...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to insufficient enforcement of root namespace restrictions in the catalog API. An attacker can modify plugin registrations, including removing existing registrations, creating invalid ones, or registering...

CVE-2026-115366

OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged child-namespace tokens to modify plugin registrations because /v1/sys/plugins/catalog/ is not restricted to the root namespace. Attackers can remove existing registrations, create invalid ones,...

CVE-2026-115366

OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged child-namespace tokens to modify plugin registrations because /v1/sys/plugins/catalog/ is not restricted to the root namespace. Attackers can remove existing registrations, create invalid ones,...

EUVD-2026-108291

OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged child-namespace tokens to modify plugin registrations because /v1/sys/plugins/catalog/ is not restricted to the root namespace. Attackers can remove existing registrations, create invalid ones,...

CVE-2026-115366 OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs

OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged child-namespace tokens to modify plugin registrations because /v1/sys/plugins/catalog/ is not restricted to the root namespace. Attackers can remove existing registrations, create invalid ones,...

CVE-2026-115366

Versions 2.3.0 through 2.6.3 of OpenBao are vulnerable to an improper authorization flaw. The issue arises because the /v1/sys/plugins/catalog/* API endpoint is not restricted to the root namespace, allowing privileged child-namespace tokens to modify plugin registrations. An attacker can leverag...

CVE-2026-115366 OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs

OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged child-namespace tokens to modify plugin registrations because /v1/sys/plugins/catalog/ is not restricted to the root namespace. Attackers can remove existing registrations, create invalid ones,...

CVE-2026-115366 OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs

OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged child-namespace tokens to modify plugin registrations because /v1/sys/plugins/catalog/ is not restricted to the root namespace. Attackers can remove existing registrations, create invalid ones,...

CVE-2026-104068

JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability that allows an authenticated WordPress administrator to write attacker-controlled file contents outside the intended restore destination during backup import and restore. Attackers can craf...

autocleus (0.1.1), poetry (>=1.2.0a1, <=1.2.0a2) +2 more potentially affected by CVE-2026-113721 via virtualenv (20.4.4)

virtualenv PYPI version 20.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - autocleus 0.1.1 - poetry =1.2.0a1, =0.1.2, =0.0.1, =0.4.1 Source cves: CVE-2026-113721 Source advisory: OSV:GHSA-558C-9HV2-4PRJ...

@zone-eu/wild-config (>=1.7.6, <=1.7.7), @zone-eu/zone-mta (>=3.11.0, <=3.11.4) +3 more potentially affected by CVE-2026-114142 via toml (5.0.0)

toml NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on toml and may be impacted: - @zone-eu/wild-config =1.7.6, =3.11.0, =2.13.0, =2.73.0, =1.1.7, =2.0.0 Source cves: CVE-2026-114142 Source advisory: OSV:GHSA-H895-CGQG-JF52...

@zone-eu/wild-config (>=1.7.6, <=1.7.7), @zone-eu/zone-mta (>=3.11.0, <=3.11.4) +3 more potentially affected by CVE-2026-114142 via toml (5.0.0)

toml NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on toml and may be impacted: - @zone-eu/wild-config =1.7.6, =3.11.0, =2.13.0, =2.73.0, =1.1.7, =2.0.0 Source cves: CVE-2026-114142 Source advisory: SNYK:JS-TOML-21431470...

@zone-eu/wild-config (>=1.7.6, <=1.7.7), @zone-eu/zone-mta (>=3.11.0, <=3.11.4) +3 more potentially affected by CVE-2026-114141 via toml (5.0.0)

toml NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on toml and may be impacted: - @zone-eu/wild-config =1.7.6, =3.11.0, =2.13.0, =2.73.0, =1.1.7, =2.0.0 Source cves: CVE-2026-114141 Source advisory: OSV:GHSA-4QX8-W7C3-PJ3P...

@zone-eu/wild-config (>=1.7.6, <=1.7.7), @zone-eu/zone-mta (>=3.11.0, <=3.11.4) +3 more potentially affected by CVE-2026-114141 via toml (5.0.0)

toml NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on toml and may be impacted: - @zone-eu/wild-config =1.7.6, =3.11.0, =2.13.0, =2.73.0, =1.1.7, =2.0.0 Source cves: CVE-2026-114141 Source advisory: SNYK:JS-TOML-21431462...

@zone-eu/wild-config (>=1.7.6, <=1.7.7), @zone-eu/zone-mta (>=3.11.0, <=3.11.4) +3 more potentially affected by CVE-2026-114143 via toml (5.0.0)

toml NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on toml and may be impacted: - @zone-eu/wild-config =1.7.6, =3.11.0, =2.13.0, =2.73.0, =1.1.7, =2.0.0 Source cves: CVE-2026-114143 Source advisory: SNYK:JS-TOML-21431464...

@zone-eu/wild-config (>=1.7.6, <=1.7.7), @zone-eu/zone-mta (>=3.11.0, <=3.11.4) +3 more potentially affected by CVE-2026-114143 via toml (5.0.0)

toml NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on toml and may be impacted: - @zone-eu/wild-config =1.7.6, =3.11.0, =2.13.0, =2.73.0, =1.1.7, =2.0.0 Source cves: CVE-2026-114143 Source advisory: OSV:GHSA-9J65-HCG3-GC64...