CVE-2026-65640

WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the uploadfiles capability This issue affects all versions of WordPress. Versi...

Security Bulletin: Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

Summary A vulnerability allowed unauthenticated attackers to achieve remote code execution on default-configured instances. The vulnerability combined two distinct issues: an unauthenticated endpoint that issued superuser bearer tokens to any network caller, and a code validation endpoint that...

CVE-2026-65974 ERPNext: Server-Side Template Injection leading to Remote Code Execution

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, limited authenticated users can cross a permission boundary in Frappe safe execution because frappe.rendertemplate is exposed without forcing restrictglobals, allowing server-side template injectio...

CVE-2026-65974

ERPNext (versions before 15.111.0 and 16.22.0) exposes frappe.render_template without enforcing restrict_globals in Frappe's safe-execution sandbox, allowing authenticated low-privilege users to perform server-side template injection and achieve remote code execution. The flaw is rated CVSS 9.9 (...

GHSA-6R46-2QJX-J5J3 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

CVE-2026-47698

creationtimestamp| type| source ---|---|--- 2026-08-17 20:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtcjmnli3k24 2026-08-17 20:35:07+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-cfcw-xp6x-25gj 2026-08-17 22:08:18+00:0...

CVE-2026-68004

An issue in OSSRS SRS Simple Realtime Server v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration security.enabled, SrsSecurity::check, trunk/src/app/srsappsecurity.cpp, and SRS RTMP listener components...

MINI-PPC9-4GG3-RC65

Bulletin has no description...

CVE-2026-19478

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQ...

CVE-2026-19478 Improper Control of Generation of Code ('Code Injection') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQ...

MINI-V7R3-WQM8-QWVQ

Bulletin has no description...

GHSA-8C42-7QJ2-3J46

creationtimestamp| type| source ---|---|--- 2026-08-17 19:31:21+00:00| seen| https://gist.github.com/alon710/53c9694ceb5875fbe39960b018952b7c...

CVE-2026-50773

An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll file...

CVE-2026-50776

Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code...

CVE-2026-50775

A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly...

GHSA-2QJ4-MMR9-4V2F

creationtimestamp| type| source ---|---|--- 2026-08-17 18:31:27+00:00| seen| https://gist.github.com/alon710/3510ab254b4d34227fef740b05b4af4e...

CVE-2026-73522

COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array by sending a crafted UDP datagram containing more than 15 ACF-CAN messages. The avtptocan function increments its write...

UBUNTU-CVE-2026-62982

Glances is an open-source system cross-platform monitoring tool. From 4.5.2 until 4.5.6, sanitizemustachedict in glances/actions.py skips nested list and dictionary strings such as process cmdline values, allowing pipe characters to survive chevron.render and be executed by securepopen through...

GHSA-QCPP-8X79-HHP3

creationtimestamp| type| source ---|---|--- 2026-08-17 18:02:50+00:00| seen| https://gist.github.com/alon710/890ba60aaa0a307f816165987f5ce246...

CVE-2026-73522

avtp_to_can() in COVESA Open1722's ACF-CAN listener increments a write index without bounds-checking against the 15-slot array size. An unauthenticated remote attacker sends a crafted UDP datagram with >15 ACF-CAN messages, overflowing the stack buffer to corrupt adjacent memory, enabling arbi...