CVE-2026-87963 Yo 1.1 - 1.3.1 - Unauthenticated SQL Injection via username Parameter

The Yo WordPress plugin from 1.1 through 1.3.1 does not sanitize or parameterize the username request parameter before using it in a SQL query, and reads it before WordPress applies its request escaping, allowing unauthenticated attackers to perform SQL injection and read arbitrary database...

CVE-2026-90982 @fastify/static vulnerable to route guard bypass via path case-folding

@fastify/static is a Fastify plugin that serves static files from a configured root directory. In versions before 10.1.4, on a case-insensitive filesystem such as Windows or the default macOS volume, a route guard or allowedPath restriction can be bypassed by altering the letter case of a path...

EUVD-2026-81383

@fastify/static is a Fastify plugin that serves static files from a configured root directory. In versions before 10.1.4, on a case-insensitive filesystem such as Windows or the default macOS volume, a route guard or allowedPath restriction can be bypassed by altering the letter case of a path...

CVE-2026-90982 @fastify/static vulnerable to route guard bypass via path case-folding

@fastify/static is a Fastify plugin that serves static files from a configured root directory. In versions before 10.1.4, on a case-insensitive filesystem such as Windows or the default macOS volume, a route guard or allowedPath restriction can be bypassed by altering the letter case of a path...

CVE-2026-90982 @fastify/static vulnerable to route guard bypass via path case-folding

@fastify/static is a Fastify plugin that serves static files from a configured root directory. In versions before 10.1.4, on a case-insensitive filesystem such as Windows or the default macOS volume, a route guard or allowedPath restriction can be bypassed by altering the letter case of a path...

CVE-2026-25294

CVE-2026-25294 is a buffer over-read in Qualcomm WLAN Firmware that causes a transient denial of service while parsing a frame during channel usage. The adjacent-network attack vector (CVSS 3.1: 7.4 HIGH , AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) indicates an attacker on an adjacent network can trigg...

CVE-2026-25294 Buffer Over-read in WLAN Firmware

Transient DOS while parsing frame during channel usage...

CVE-2026-25294 Buffer Over-read in WLAN Firmware

Transient DOS while parsing frame during channel usage...

CVE-2026-25284 Buffer Over-read in OOBM

Information Disclosure when a pointer is reused after being deallocated...

CVE-2026-25284

CVE-2026-25284 is a buffer over-read in Qualcomm's OOBM component, caused by a pointer being reused after being deallocated . This leads to Information Disclosure with a CVSS 3.1 score of 7.3 (HIGH) , exploitable via a local vector with low privileges and changed scope . No in-the-wild exploitati...

CVE-2026-25284 Buffer Over-read in OOBM

Information Disclosure when a pointer is reused after being deallocated...

CVE-2026-25282 Out-of-bounds Read in OOBM

Transient DOS when processing unverified data from a neighboring system causes out of bound memory access...

CVE-2026-25282 Out-of-bounds Read in OOBM

Transient DOS when processing unverified data from a neighboring system causes out of bound memory access...

CVE-2026-25282

CVE-2026-25282 is an out-of-bounds read in the OOBM component of a Qualcomm product. The vulnerability is triggered when unverified data from a neighboring system is processed, causing an out-of-bound memory access that results in a transient denial of service . The CNA-assigned CVSS 3.1 score is...

CVE-2026-25275

CVE-2026-25275 is a buffer over-read in Qualcomm WLAN Firmware that results in a transient denial of service when the firmware processes authentication frames containing invalid FILS (Fast Initial Link Setup) information element header lengths . The vulnerability is network-exploitable with no pr...

CVE-2026-25275 Buffer Over-read in WLAN Firmware

Transient DOS when processing authentication frames with invalid FILS information element header lengths...

CVE-2026-25275 Buffer Over-read in WLAN Firmware

Transient DOS when processing authentication frames with invalid FILS information element header lengths...

CVE-2026-24081 Buffer Over-read in BT Controller

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled...

CVE-2026-24081 Buffer Over-read in BT Controller

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled...

CVE-2026-24081

CVE-2026-24081 is a buffer over-read in the Qualcomm Bluetooth (BT) Controller that causes a transient denial of service when processing a channel map with insufficient used channels while adaptive frequency hopping is fully enabled. The vulnerability requires no privileges or user interaction, o...