CVE-2026-66653: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...

CVE-2026-58416: Improper Handling of Insufficient Permissions or Privileges

Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard...

CVE-2026-28168: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in CubeWP = 1.1.30 versions...

vpulse

VPulse Automated web security audit toolkit with screenshot...

web-vulnerability-scanner

Author Ranvir...

fibratus v3.1.0

Fibratus Security sensor for realtime threat detection and protection Get Started » Docs • Rules • Filaments • Download • Discussions Fibratus detects and eradicates advanced attacker tradecraft, malware, and emerging threats by scrutinizing and asserting a wide spectrum of system events against ...

CVE-2026-65941: Missing Authentication for Critical Function

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

CVE-2026-15141: Origin Validation Error

The web interface of the affected device relies on the HTTP referrer header as part of request validation. Requests containing empty Referer value, or omitting the Referer header entirely, may be accepted and processed due to insufficient validation logic. Successful exploitation may allow an...

Linux Distros Unpatched Vulnerability : CVE-2026-68272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: validate CPGFXSHADOW chunk size in CS pass1 Add a minimum-length check for the AMDGPUCHUNKIDCPGFXSHADOW chunk in amdgpucspass1, matching the gate...

Fedora 45 : libcupsfilters (2026-d0c531d75b)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d0c531d75b advisory. Automatic update for libcupsfilters-2.2.1-1.fc45. Changelog Tue Aug 11 2026 Zdenek Dohnal - 1:2.2.1-1 - fix pclmtoraster issues found in CI, 2.2.1...

CVE-2026-16856: Improper Neutralization of Special Elements used in an OS Command

IBM i 7.6, and 7.5 could allow a local attacker to gain elevated privileges due to improper neutralization of special elements used in an OS command...

CVE-2026-14478: Incorrect Permission Assignment for Critical Resource

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-18099: Improper Neutralization of Input During Web Page Generation

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input...

CVE-2026-17417: Improper Neutralization of Special Elements used in an OS Command

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters...

CVE-2026-7427: Allocation of Resources Without Limits or Throttling

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an unauthenticated user to cause a denial of service due to improper input validation...

CVE-2026-17266: Improper Limitation of a Pathname to a Restricted Directory

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-70547: Missing Authorization

An authenticated user without repository read permission may access package metadata under specific conditions...

CVE-2026-68759: Improper Verification of Cryptographic Signature

A holder of a valid integration credential may impersonate other users under specific conditions...

CVE-2026-68758: Missing Authorization

A low-privileged authenticated user may access restricted support information under specific conditions...

CVE-2026-17218: Out-of-bounds Write

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write...