CVE-2026-78614

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

CVE-2026-78615 WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page

A Reflected Cross-Site Scripting XSS vulnerability in WatchGuard Dimension's report detail page allows an attacker to execute arbitrary JavaScript in a authenticated user's browser with a specially crafted URL...

CVE-2026-78047 Dimension Stored XSS in Scheduled Report Task

A stored cross-site scripting XSS vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inject arbitrary HTML/JavaScript into these fields, which then executes in the browser session of any other user...

CVE-2026-78615

A Reflected DOM-based XSS vulnerability in WatchGuard Dimension's report detail page allows an attacker to execute arbitrary JavaScript in an authenticated user's browser via a specially crafted URL. The CVSS 4.0 base score is 4.6 (MEDIUM) , with high privileges and active user interaction requir...

CVE-2026-78614 Dimension SQL Injection in Audit Report

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

CVE-2026-78614

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature . An authenticated user with report administration permissions can send specially crafted requests to gain arbitrary command execution as the Dimension WebUI process user. The CNA-assigned CVSS ...

CVE-2026-75325

creationtimestamp| type| source ---|---|--- 2026-08-27 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu3tcscpy42j...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 17, 2026 to August 23, 2026)

Last week, there were 274 vulnerabilities disclosed in 213 WordPress Plugins and 17 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 116 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabiliti...

CVE-2026-81674

creationtimestamp| type| source ---|---|--- 2026-08-27 14:08:17+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu2zj2yv4x2u 2026-08-28 06:20:23+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu4pspwkp72t...

CVE-2026-74233

creationtimestamp| type| source ---|---|--- 2026-08-27 14:07:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu2ziceyq22t 2026-08-27 16:29:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168418324906939 2026-08-27 17:00:45+00:00| seen|...

Malicious code in ekx-report-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a980e97d1539649ea4a9921cfeb308833c80e0832c1515f3f8e3a71d0b085b78 On import, the package runs a setup routine that reads a session credential from /tmp/.sandboxtoken and issues an authenticated GET to...

MAL-2026-14555 Malicious code in ekx-report-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a980e97d1539649ea4a9921cfeb308833c80e0832c1515f3f8e3a71d0b085b78 On import, the package runs a setup routine that reads a session credential from /tmp/.sandboxtoken and issues an authenticated GET to...

EUVD-2026-66485

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

CVE-2026-47666

creationtimestamp| type| source ---|---|--- 2026-08-27 00:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzk4xs4wc2r...

CVE-2026-75334

The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter is stored in the treportsqlresource table through the ReportController.save interface and directly embedded into Hibernate native queries without any parameterization or...

CVE-2026-70419

creationtimestamp| type| source ---|---|--- 2026-08-26 20:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtz4pern6f22 2026-08-26 20:07:43+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtz54ufstr25 2026-08-27 02:21:53+00:00| seen|...

CVE-2026-80428

creationtimestamp| type| source ---|---|--- 2026-08-26 18:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtyw22q63722 2026-08-26 18:07:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtywgihb3z2y 2026-08-29 15:20:12+00:00| seen|...

Exploit for CVE-2026-79266

Chrome Vulnerability Scanner A lightweight, dependency-free...

CVE-2026-80570

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

AZL-97703 CVE-2026-80570 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...