CVE-2026-97191 Advanced Custom Fields < 6.8.11 - Contributor+ Admin-Restricted Custom Field Update via Post Save Path

The Advanced Custom Fields ACF® WordPress plugin before 6.8.11 does not re-apply its field-group location rules when persisting values submitted through the post editor save path, allowing users with contributor-level access and above to write custom fields the site restricted to administrators...

CVE-2026-97191

The Advanced Custom Fields (ACF®) WordPress plugin versions before 6.8.11 contains a vulnerability where it fails to re-apply field-group location rules during the post editor save path. This allows users with contributor-level access and above to bypass restrictions and write custom fields that ...

PT-2026-139442

The Modula plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'items' parameter in versions up to, and including, 3.0.17 This is due to insufficient input sanitization of the per-image 'link' field in the save merged items REST handler and ImagesAdapter::normalize item row,...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Add missing save/restore handling for LBR MSRs Currently, MSRIA32DEBUGCTLMSR and LBR MSRs are not enumerated by KVMGETMSRINDEXLIST, and LBR MSRs cannot be set via KVMSETMSRS. As a result, save/restore functionality is...

CVE-2026-121746

Node Version Manager nvm is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.40.0 through 0.40.8, nvm use --save and nvm install --save or -w write the resolved version to $PWD/.nvmrc with tee, which follows a symbolic link. A repository that commits .nvmrc a...

CVE-2026-121746

The Node Version Manager (nvm) shell function in versions 0.40.0 through 0.40.8 is vulnerable to a symlink following issue (CWE-59). When using nvm use --save or nvm install --save (or -w), the tool uses tee to write the version string to $PWD/.nvmrc. If an attacker provides a repository where .n...

CVE-2026-121746 nvm use --save and nvm install --save write through a symlinked .nvmrc, overwriting any file the user can write

Node Version Manager nvm is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.40.0 through 0.40.8, nvm use --save and nvm install --save or -w write the resolved version to $PWD/.nvmrc with tee, which follows a symbolic link. A repository that commits .nvmrc a...

CVE-2026-121746 nvm use --save and nvm install --save write through a symlinked .nvmrc, overwriting any file the user can write

Node Version Manager nvm is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.40.0 through 0.40.8, nvm use --save and nvm install --save or -w write the resolved version to $PWD/.nvmrc with tee, which follows a symbolic link. A repository that commits .nvmrc a...

CVE-2026-85520

CVE-2026-85520 — PrestaShop gmfeed unauthenticated arbitrary file write → RCE Python 3 PoC for CVE-2026-85520 — MyPresta.eu / VEKIA Google Merchant Center Feed module gmfeed for PrestaShop — unauthenticated arbitrary file write on feed.php when “Save to file” / URL export is used. CVSS 3.1 9.3...

PT-2026-137188

Name of the Vulnerable Software and Affected Versions Node Version Manager nvm versions 0.40.0 through 0.40.8 Description When using the nvm use --save and nvm install --save or -w commands, the software writes the resolved version to the .nvmrc file using tee, which follows symbolic links. If a...

MailEnable Save Directory Traversal Arbitrary File Creation Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of MailEnable. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the Save method. The issue results from the lack of proper validation o...

CVE-2026-121455

DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated users to bypass LOGINPERMISSIONS because test and save never call testConnectionPermission. Attackers can submit arbitrary connection definitions to POST /connections/test to probe...

CVE-2026-121543

The smart-sso application, versions through 2.0.1 , is vulnerable to an incorrect authorization flaw within the PermissionFilter component. This vulnerability occurs because unlisted paths are permitted by default, allowing any authenticated user to access restricted admin console APIs . An attac...

CVE-2026-121543 smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin Escalation

smart-sso through 2.0.1 contains an incorrect authorization vulnerability in PermissionFilter that allows any authenticated user to call admin console APIs because unlisted paths are permitted by default. Attackers can call /admin/user-role/save to assign themselves the administrator role, reset...

CVE-2026-121543 smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin Escalation

smart-sso through 2.0.1 contains an incorrect authorization vulnerability in PermissionFilter that allows any authenticated user to call admin console APIs because unlisted paths are permitted by default. Attackers can call /admin/user-role/save to assign themselves the administrator role, reset...

CVE-2026-121543 smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin Escalation

smart-sso through 2.0.1 contains an incorrect authorization vulnerability in PermissionFilter that allows any authenticated user to call admin console APIs because unlisted paths are permitted by default. Attackers can call /admin/user-role/save to assign themselves the administrator role, reset...

CVE-2026-121455 DbGate before 7.3.3 Missing Authorization via /connections/test and /connections/save

DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated users to bypass LOGINPERMISSIONS because test and save never call testConnectionPermission. Attackers can submit arbitrary connection definitions to POST /connections/test to probe...

CVE-2026-121455

DbGate versions prior to 7.3.3 are vulnerable to a missing authorization flaw in the test() and save() functions. The root cause is that these functions fail to call testConnectionPermission , allowing authenticated users with connection restrictions to bypass LOGIN_PERMISSIONS . An attacker can ...

EUVD-2026-115887

DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated users to bypass LOGINPERMISSIONS because test and save never call testConnectionPermission. Attackers can submit arbitrary connection definitions to POST /connections/test to probe...

CVE-2026-121455 DbGate before 7.3.3 Missing Authorization via /connections/test and /connections/save

DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated users to bypass LOGINPERMISSIONS because test and save never call testConnectionPermission. Attackers can submit arbitrary connection definitions to POST /connections/test to probe...