CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, tfsec, cilium, kargo, terraform-provider-sendgrid, speedtest-go, cluster-autoscaler, docker-machine-driver-harvester, kuberlr, continuity, portieris, mongodb-kubernetes-operator, k8sgateway, conjur-cli, gostatsd, azuredisk-csi, cluster-api,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, tfsec, cilium, kargo, terraform-provider-sendgrid, speedtest-go, cluster-autoscaler, docker-machine-driver-harvester, kuberlr, continuity, portieris, mongodb-kubernetes-operator, k8sgateway, conjur-cli, azuredisk-csi, cluster-api, bank-vaults...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, tfsec, cilium, kargo, terraform-provider-sendgrid, speedtest-go, cluster-autoscaler, docker-machine-driver-harvester, kuberlr, continuity, portieris, mongodb-kubernetes-operator, k8sgateway, conjur-cli, azuredisk-csi, cluster-api, bank-vaults...

CVE-2026-78660 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, tfsec, kargo, speedtest-go, cluster-autoscaler, docker-machine-driver-harvester, kuberlr, continuity, portieris, mongodb-kubernetes-operator, k8sgateway, azuredisk-csi, cluster-api, bank-vaults, authservice, terraform-provider-kubernetes,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, tfsec, kargo, speedtest-go, cluster-autoscaler, docker-machine-driver-harvester, kuberlr, continuity, portieris, mongodb-kubernetes-operator, k8sgateway, azuredisk-csi, cluster-api, bank-vaults, authservice, terraform-provider-kubernetes,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, tfsec, cilium, kargo, terraform-provider-sendgrid, speedtest-go, cluster-autoscaler, docker-machine-driver-harvester, kuberlr, continuity, portieris, mongodb-kubernetes-operator, k8sgateway, conjur-cli, gostatsd, azuredisk-csi, cluster-api,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, tfsec, cilium, kargo, terraform-provider-sendgrid, cluster-autoscaler, docker-machine-driver-harvester, kuberlr, continuity, portieris, mongodb-kubernetes-operator, k8sgateway, conjur-cli, gostatsd, azuredisk-csi, cluster-api, bank-vaults,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, tfsec, cilium, kargo, terraform-provider-sendgrid, speedtest-go, cluster-autoscaler, docker-machine-driver-harvester, kuberlr, continuity, portieris, mongodb-kubernetes-operator, k8sgateway, conjur-cli, azuredisk-csi, cluster-api, bank-vaults...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, tfsec, cilium, kargo, terraform-provider-sendgrid, speedtest-go, cluster-autoscaler, docker-machine-driver-harvester, kuberlr, continuity, portieris, mongodb-kubernetes-operator, k8sgateway, conjur-cli, azuredisk-csi, cluster-api, bank-vaults...

CVE-2026-108124 WordPress Post Author Authenticated SQLi

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author before 4.1.0...

CVE-2026-108124

The wp-post-author plugin, specifically versions before 4.1.0 , is vulnerable to an authenticated SQL injection (CWE-89). The root cause is the improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker with high privileges to impact confidentiality ...

EUVD-2026-95819

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author before 4.1.0...

CVE-2026-108107

PHPNuxBill versions through 2025.3.20 are vulnerable to an unauthenticated SQL injection in the radius.php FreeRADIUS REST endpoint. The root cause is the improper interpolation of request parameters into whereRaw() queries. Attackers can submit crafted username , macAddr , or nasid parameters du...

CVE-2026-108107 PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php

PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw queries. Attackers can send crafted username, macAddr or nasid parameters to the accounting or authenticate actions to...

CVE-2026-108107 PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php

PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw queries. Attackers can send crafted username, macAddr or nasid parameters to the accounting or authenticate actions to...

EUVD-2026-95808

PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw queries. Attackers can send crafted username, macAddr or nasid parameters to the accounting or authenticate actions to...

CVE-2026-107803

ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the orderby parameter because ProcessMaker\Traits\TaskControllerIndexMethods::applyColumnOrdering concatenates a...

CVE-2026-108100 HortusFox before 6.2 SQL Injection via /api/locations/list include_info Parameter

HortusFox hortusfox-web before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint. Attackers can place subqueries in includeinfo, which PlantsModel::getSpecificInfo concatenates into t...

EUVD-2026-95791

HortusFox hortusfox-web before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint. Attackers can place subqueries in includeinfo, which PlantsModel::getSpecificInfo concatenates into t...

CVE-2026-108100 HortusFox before 6.2 SQL Injection via /api/locations/list include_info Parameter

HortusFox hortusfox-web before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint. Attackers can place subqueries in includeinfo, which PlantsModel::getSpecificInfo concatenates into t...