CVE-2026-49225: Authorization Bypass Through User-Controlled Key

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product revision operations allow a low-privileged Vendor to access revisions for products owned by another Vendor. The admin/controller/product/revisions.php...

CVE-2026-32691

CVE-2026-32691 describes a race condition in the Juju secrets management subsystem affecting Juju versions 3.0.0 through 3.6.18. Between generating a Juju Secret ID and creating the secret’s first revision, an attacker authenticated as another unit agent can claim ownership of a known secret, all...