@ainsleydev/payload-helper (>=0.0.24, <=0.3.2), @contentql/core (>=0.3.1, <=0.3.5) +1 more potentially affected by CVE-2026-105857 via @payloadcms/plugin-form-builder (>=3.0.0-beta.111, <=3.86.0)

@payloadcms/plugin-form-builder NPM version =3.0.0-beta.111, =0.0.24, =0.3.1, =0.3.5 - kollab-payload-template 1.0.0 Source cves: CVE-2026-105857 Source advisory: GHSA-R488-J9VJ-WX3Q...

TP-Link Remote Command Injection

Introduction: ================ The WVR-, WAR- and ER- products are the SOHO/WIFI routers of TP-Link. These issues allow remote authenticated administrators to execute arbitrary commands via command injection through different variables of different lua files. If the attacker obtains the account a...

Tplink Bridge Authenticated RCE

Vulnerability: Command Injection in bridge.lua ------------------------------------------ Exploitation: Can remote command execution on the root shell. ------------------------------------------ Vendor of Product: Tp-Link router ------------------------------------------ Affected Products and...