CVE-2026-93549: Undefined Security Weakness

The CoCart WordPress plugin before 4.9.7 does not scope its REST API authentication filter to its own endpoints, which disables WordPress core's REST nonce protection for every route, allowing an attacker to perform a cross-site request forgery attack that creates a new administrator account usin...

Adaptive Code Revision Attacks on AI Pull Request Reviewers

Pull-request review protects software before new code reaches users, helping prevent vulnerabilities that could expose users to attacks. AI agents increasingly perform these reviews and explain which problems need fixing. However, for an attacker submitting vulnerable code, this feedback also...

CVE-2026-105122

OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers able to register or modify OAuth 2.0 clients to make OpenAM fetch internal resources via an unvalidated jwksuri. Attackers can trigger unauthenticated fetches through client-authentication and ID-token...

CVE-2026-105122

OpenAM versions prior to 16.1.3 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The root cause is an unvalidated jwks_uri parameter during the registration or modification of OAuth 2.0 clients. An attacker can leverage this to force the server to fetch internal resources, po...

EUVD-2026-92026

OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers able to register or modify OAuth 2.0 clients to make OpenAM fetch internal resources via an unvalidated jwksuri. Attackers can trigger unauthenticated fetches through client-authentication and ID-token...

Security Bulletin: Due to the use of HTTP/1.1 with Jetty server, IBM Sterling Control Center is vulnerable to Inconsistent Interpretation of HTTP Requests (CVE-2026-19203)

Summary HTTP/1.1 with Jetty server is used by IBM Sterling Control Center as part of dependency in jetty-http-12.0.25.jar. Vulnerability Details CVEID:CVE-2026-19203 DESCRIPTION: A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary...

SAP Solution Manager 7.2 - Remote Command Execution

SAP Solution Manager SolMan running version 7.2 has a remote command execution vulnerability within the SAP EEM servlet tcsmdagentapplicationeem. The vulnerability occurs due to missing authentication checks when submitting SOAP requests to the /EemAdminService/EemAdmin page to get information...

PT-2026-104492

The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUEST URI Parameter Key in all versions up to, and including, 8.7.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

Fedora 44 : python-cssselect2 / weasyprint (2026-309c4b78a1)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-309c4b78a1 advisory. Update to latest upstream version of WeasyPrint and python-cssselect2. This update fixes CVE-2026-55073 Server-Side Request Forgery Tenable has extracted the...

NetScaler 73.30 HTTP Request Smuggling

NetScaler version 73.30 contains an HTTP/1.1 chunk-size accumulator overflow that can cause request parsing desynchronization and request smuggling...

PT-2026-104490

Name of the Vulnerable Software and Affected Versions ProfilePress versions prior to 4.17.5 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occurs when a malicious filename is supplied to the ppress...

PT-2026-104537

Name of the Vulnerable Software and Affected Versions WPMobile.App – Android and iOS App Builder versions prior to 11.85 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts into pages...

EUVD-2026-91802

A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device...

CVE-2026-103036 @orpc/json-schema: Prototype injection in smart coercion

oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.9, the @orpc/json-schema SmartCoercionPlugin uses JsonSchemaCoercer to collect object properties in a plain object and to resolve schema.properties entries through the prototype chain...

NPM: Trigger.dev: Server-side request forgery via unvalidated webhook alert-channel URL

NPM: Trigger.dev: Server-side request forgery via unvalidated webhook alert-channel URL vulnerability discovered by ? in WordPress Npm trigger.dev versions 4.5.2...

CVE-2026-39718 WordPress Wallstreet theme <= 2.8.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Webriti Wallstreet wallstreet allows Cross Site Request Forgery.This issue affects Wallstreet: from n/a through 2.8.6...

EUVD-2026-91774

Cross-Site Request Forgery CSRF vulnerability in Webriti Wallstreet wallstreet allows Cross Site Request Forgery.This issue affects Wallstreet: from n/a through 2.8.6...

CVE-2026-39718

The Webriti Wallstreet WordPress theme is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. This issue affects versions from the initial release through 2.8.6 . The vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user. No specific expl...

EUVD-2020-31274

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

CVE-2020-37278 Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFile

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...