CVE-2026-111905

phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an insecure direct object reference vulnerability in GET /admin/api/user/data/userId, which returns any user's full faquserdata row, including the live TOTP secret, without a SuperAdmin or protected-target check. Delegated...

EUVD-2026-103308

Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in ForumService::saveTopic that allows authenticated members to modify other users' forum topics. Attackers can replace the topicuuid parameter in their own topicsave request, reusing their CSRF token, to...

EUVD-2026-103315

phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an insecure direct object reference vulnerability in GET /admin/api/user/data/userId, which returns any user's full faquserdata row, including the live TOTP secret, without a SuperAdmin or protected-target check. Delegated...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.6 contains a security vulnerability. This vulnerability arises from the smb client calling the unconventional inode function finishopen, and appending the cifsFileInfo to it. As a result, the symbolic link inode does not have a CIFS release operation, leading to dentry...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.5 contains a security vulnerability. This vulnerability arises from the fact that ma35d1serialprobe does not release the clock references acquired through clkput after clkget, resulting in a clock reference leak during probe error paths and port removal operations...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability arises from the fact that the nftflowoffloadinit function does not revoke the flowtable reference count added by nftuseinc when the nfctnetnsget call fails. As a result, references are leaked, preventing the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.3 contains a security vulnerability. This vulnerability arises from the possibility that rt6insertexception may be called after fib6info is removed through fib6purgert. As a result, rt6Flushexceptions no longer sets the flags, leading to the successful creation of new...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from the mtkdrmbind function, which prematurely returns and does not release the disp-mutex device reference obtained through offinddevicebynode when handling non-mmsys primary devices. This can lead to...

WordPress Kirki – Freeform Page Builder, Website Builder & Customizer plugin <= 6.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure vulnerability

Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan in WordPress Plugin Kirki versions = 6.3.2...

MGASA-2026-0513 Updated perl-XS-Parse-Keyword package fixes a security vulnerability

XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference. CVE-2026-85644...

Updated perl-XS-Parse-Keyword package fixes a security vulnerability

XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference. CVE-2026-85644...

CVE-2026-107762

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.3.2 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

CVE-2026-107762 Kirki <= 6.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Context Smuggling via 'context' Parameter

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.3.2 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

EUVD-2026-103213

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.3.2 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

CVE-2026-107762 Kirki <= 6.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Context Smuggling via 'context' Parameter

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.3.2 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

CVE-2026-107762

The Kirki WordPress plugin (versions up to and including 6.3.2 ) is vulnerable to an Insecure Direct Object Reference (IDOR) . The issue stems from a missing validation on a user-controlled key within the 'context' parameter , allowing unauthenticated attackers to perform context smuggling . This...

PT-2026-116475

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 3.2.0 through 4.1.8 phpMyFAQ versions 4.2.0-alpha through 4.2.0-alpha Description An insecure direct object reference exists in the 'GET /admin/api/user/data/userId' endpoint. The system returns the complete faquserdata row f...

PT-2026-116197

Name of the Vulnerable Software and Affected Versions Kirki – Freeform Page Builder, Website Builder & Customizer versions prior to 6.3.3 Description An Insecure Direct Object Reference exists due to missing validation on a user-controlled key. Unauthenticated attackers can expose sensitive profi...

PT-2026-116362

Name of the Vulnerable Software and Affected Versions Tutor LMS versions prior to 4.1.1 Description The Tutor LMS plugin for WordPress contains an Insecure Direct Object Reference IDOR flaw. This occurs because the Input::sanitize array function fails to strip attacker-supplied POST keys, allowin...

Vedo Suite 1.2.5 Insecure Direct Object Reference

Vedo Suite version 1.2.5 contains an insecure direct object reference vulnerability that allows an authenticated low-privileged user to access other users' private data by changing user-controlled API identifiers...