CVE-2026-89251: Insufficient Verification of Data Authenticity

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ad impressions in plugin/ADServer/log.php, allowing logged-in users to submit arbitrary label values that trigger unverified wallet credits to campaign video owners. Attackers can repeatedly POST label=start requests...

CVE-2026-89264: Authorization Bypass Through User-Controlled Key

MoguBlog through 6.2 fails to validate the comment author identity in the POST /web/comment/add endpoint, allowing authenticated users to post comments attributed to any other user. Attackers can supply arbitrary userUid values in the request body to impersonate other accounts including...

CVE-2026-11446: Missing Authorization

The Booktics – Booking Calendar for Appointments and Service Businesses plugin for WordPress is vulnerable to unauthorized modification of data in all versions up to, and including, 1.0.23. This is due to the createorderpermission permission callback on the POST /wp-json/booktics/v1/orders REST...

CVE-2026-18994

creationtimestamp| type| source ---|---|--- 2026-09-10 23:05:26+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mv762hoxt62b...

CVE-2026-11813

creationtimestamp| type| source ---|---|--- 2026-09-10 23:04:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mv75z5ono52o...

CVE-2026-84889

creationtimestamp| type| source ---|---|--- 2026-09-10 23:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv75ryhdtm2b 2026-09-15 07:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvk4j3crjs2y...

CVE-2026-75777

creationtimestamp| type| source ---|---|--- 2026-09-10 22:52:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6px52ukanfy7v...

CVE-2026-82079

creationtimestamp| type| source ---|---|--- 2026-09-10 21:21:17+00:00| seen| https://bsky.app/profile/sundhaug.com/post/3mv6ya5sqyk2g 2026-09-14 13:11:44+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mvi6qiv44c2y 2026-09-16 13:29:14+00:00| seen|...

CVE-2026-75713

creationtimestamp| type| source ---|---|--- 2026-09-10 21:19:04+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv6y4aovaz2c...

CVE-2026-75694

creationtimestamp| type| source ---|---|--- 2026-09-10 21:19:01+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv6y45n7pr2w...

CVE-2026-75742

creationtimestamp| type| source ---|---|--- 2026-09-10 21:18:58+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv6y42nfdx2z...

CVE-2026-75737

creationtimestamp| type| source ---|---|--- 2026-09-10 21:18:56+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv6y3ymzdh2g...

GHSA-6XCW-7XM6-48C6

creationtimestamp| type| source ---|---|--- 2026-09-10 21:06:16+00:00| seen| https://bsky.app/profile/thecompound.tech/post/3mv6xfdqrvd24...

CVE-2026-4129

creationtimestamp| type| source ---|---|--- 2026-09-10 20:53:33+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mv6wofnphm2r...

CVE-2026-88052

creationtimestamp| type| source ---|---|--- 2026-09-10 19:01:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6qfumchu22...

CVE-2026-41871

creationtimestamp| type| source ---|---|--- 2026-09-10 19:00:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6qdujce52j...

CVE-2026-41869

creationtimestamp| type| source ---|---|--- 2026-09-10 19:00:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6qdsomat2t...

CVE-2026-56207

creationtimestamp| type| source ---|---|--- 2026-09-10 18:50:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6prwhkq62b...

CVE-2026-88032

creationtimestamp| type| source ---|---|--- 2026-09-10 18:32:03+00:00| seen| https://bsky.app/profile/suriq.io/post/3mv6ormd57z2w 2026-09-11 12:45:05+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-4 2026-09-14 14:00:21+00:00| seen|...

CVE-2026-89042

creationtimestamp| type| source ---|---|--- 2026-09-10 18:20:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6o4awkmv25 2026-09-10 19:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6qfn47t62m 2026-09-10 20:08:53+00:00| seen|...