CVE-2026-21136

An improper authorization vulnerability exists in Smart Switch prior to version 3.7.73 . This flaw allows physical attackers to invoke the application restore process. No specific exploit details or in-the-wild exploitation links are provided in the documents. Remediation information is not speci...

CVE-2026-21136: Undefined Security Weakness

Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process...

CVE-2026-95837: Improper Privilege Management

containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a...

CVE-2026-85956: Improper Privilege Management

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized database scope, which could result in unauthorized access to or...

PT-2026-110649

Name of the Vulnerable Software and Affected Versions MarkLogic Server versions 11.0.0 through 11.3.6 MarkLogic Server versions 12.0.0 through 12.0.x Description Improper privilege management allows a remote authenticated attacker with delegated database-administrator privileges to perform backup...

reload.sh

reload.sh No lo hagas... Por favor, no lo ejecutes en sistemas en vivo ej. producción ni en tu computadora personal donde almacenas datos críticos. Esta receta te muestra cómo instalar un sistema limpio donde otro sistema ya existe y está funcionando. ¡Es realmente genial y asombroso, pero muy...

EUVD-2026-96606

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to restore deleted AI prompt templates by calling the revertRecycleBin endpoint. Attackers can send PUT requests to /airag/prompts/revertRecycleBin with chosen template ids to cle...

CVE-2026-108667

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to restore deleted AI prompt templates by calling the revertRecycleBin endpoint. Attackers can send PUT requests to /airag/prompts/revertRecycleBin with chosen template ids to cle...

CVE-2026-108667

The software JeecgBoot versions through 3.9.5 is affected by a missing authorization vulnerability (CWE-862). This flaw allows low-privileged authenticated users to restore deleted AI prompt templates by sending PUT requests to the /airag/prompts/revertRecycleBin endpoint. By providing specific t...

CVE-2026-42630

Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager = 0.2.25 versions...

CVE-2026-42696

The SiteVault – Backup, Restore, Migration & Cloning WordPress plugin is vulnerable to unauthenticated Remote Code Execution (RCE) in versions

CVE-2026-42696 WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration & Cloning sitevault-backup-restore-migration allows Remote Code Inclusion.This issue affects SiteVault – Backup, Restore, Migration & Cloning: from n/a through 1.5.19...

EUVD-2026-96437

Unauthenticated Remote Code Execution RCE in SiteVault – Backup, Restore, Migration & Cloning = 1.5.19 versions...

CVE-2026-42696 WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration & Cloning sitevault-backup-restore-migration allows Remote Code Inclusion.This issue affects SiteVault – Backup, Restore, Migration & Cloning: from n/a through 1.5.19...

CVE-2026-42630

The Web Plura Backup & Restore Manager WordPress plugin versions

EUVD-2026-96432

Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager = 0.2.25 versions...

CVE-2026-42630 WordPress Web Plura Backup & Restore Manager plugin <= 0.2.25 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager = 0.2.25 versions...

Exploit for CVE-2026-107806

CVE-2026-107806 — nginx-ui authenticated RCE backup restore...

CVE-2026-108667: Missing Authorization

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to restore deleted AI prompt templates by calling the revertRecycleBin endpoint. Attackers can send PUT requests to /airag/prompts/revertRecycleBin with chosen template ids to cle...

PT-2026-109928

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can restore deleted AI prompt templates due to missing authorization. This is achieved by sending PUT requests to the '/airag/prompts/revertRecycleBin' endpoint...