CVE-2026-86938: Authorization Bypass Through User-Controlled Key

A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges by placing a malicious DLL file in the installer directory. This vulnerability is addressed in FileMaker Pro version 26.0.3...

PT-2026-97425

A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges by placing a malicious DLL file in the installer directory. This vulnerability is addressed in FileMaker Pro version 26.0.3...

Ubuntu 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS : Sudo vulnerability (USN-8803-1)

The remote Ubuntu 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8803-1 advisory. Guannan Wang, Zhanpeng Liu, and Guancheng Li discovered that Sudo failed to apply intercept policy checks when commands were...

CVE-2026-77425 Unleash: A project member can reorder activation strategies belonging to any other project / environment (cross-project integrity write), bypassing project RBAC and the audit log

Unleash is an open-source feature management platform. Prior to 8.0.3, POST /api/admin/projects/:projectId/features/:featureName/environments/:environment/strategies/set-sort-order passes attacker-controlled strategy IDs to unprotectedUpdateStrategiesSortOrder and updateSortOrder without verifyin...

CVE-2026-84395

Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...

CVE-2026-84395 Premiere Pro | Server-Side Request Forgery (SSRF) (CWE-918)

Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...

EUVD-2026-84799

Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...

CVE-2026-84395 Premiere Pro | Server-Side Request Forgery (SSRF) (CWE-918)

Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...

CVE-2026-84395

Adobe Premiere Pro is affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) that could lead to privilege escalation and potentially result in unauthorized write access . Exploitation of this issue does not require user interaction. The CVSS 3.1 score is 7.1 (High) . No specific...

CVE-2026-84395: Server-Side Request Forgery (SSRF)

Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...

Adobe Premiere Pro < 25.6.6 / 26.0.0 < 26.5.0 Security feature bypass (APSB26-157) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 25.6.6, 26.5.0. It is, therefore, affected by a vulnerability as referenced in the APSB26-157 advisory. - Server-Side Request Forgery SSRF CWE-918 potentially leading to Security feature bypass CVE-2026-84395 Note th...

Adobe Premiere Pro < 25.6.6 / 26.0.0 < 26.5.0 Security feature bypass (APSB26-157)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 25.6.6, 26.5.0. It is, therefore, affected by a vulnerability as referenced in the APSB26-157 advisory. - Server-Side Request Forgery SSRF CWE-918 potentially leading to Security feature bypass CVE-2026-84395 Note...

PT-2026-97012

Name of the Vulnerable Software and Affected Versions Premiere Pro affected versions not specified Description Premiere Pro contains a Server-Side Request Forgery SSRF flaw, which occurs when an attacker can induce the server-side application to make requests to an unintended location. This issue...

APSB26-157 : Security update available for Adobe Premiere Pro

Adobe has released updates for Adobe Premiere Pro for Windows and macOS. This update addresses critical vulnerability that could result in security feature bypass...

CVE-2026-88745

EMLOG-Pro 2.6.29 contains a XSS vulnerability that enables attackers to upload a malicious shell...

WordPress Botiga Pro plugin < 1.6.5 - Unauthenticated Arbitrary Blog Options Update vulnerability

Unauthenticated Arbitrary Blog Options Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin Botiga Pro versions 1.6.5...

Exploit for CVE-2026-14894

CVE-2026-14894 Arbitrary File Upload Nxploited Mass Exploi...

CVE-2026-88745

EMLOG-Pro 2.6.29 contains a XSS vulnerability that enables attackers to upload a malicious shell...

CVE-2026-88745

The software EMLOG-Pro 2.6.29 is affected by a Cross-Site Scripting (XSS) vulnerability. This flaw allows attackers to execute malicious scripts, which can be leveraged to upload a malicious shell to the system. While the vulnerability requires user interaction, it poses a significant risk to the...

CVE-2026-88745: Improper Neutralization of Input During Web Page Generation

EMLOG-Pro 2.6.29 contains a XSS vulnerability that enables attackers to upload a malicious shell...