CVE-2026-25085 Copeland XWEB and XWEB Pro Unexpected Status Code or Return Value

A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a legitimate value, resulting in an authentication bypass...

CVE-2026-1305: Improper Authentication

The Japanized for WooCommerce plugin for WordPress is vulnerable to Improper Authentication in versions up to, and including, 2.8.4. This is due to a flawed permission check in the paidywebhookpermissioncheck function that unconditionally returns true when the webhook signature header is omitted...

GHSA-WPPC-7CQ7-CGFV

creationtimestamp| type| source ---|---|--- 2026-02-26 22:10:19+00:00| seen| https://gist.github.com/alon710/3876c0d5d37ba696379319dc0ea4cb02...

CVE-2026-26979 Discourse: TL4 users are able to change status of restricted topics

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, TL4 users are able to close, archive and pin topics in private categories they don't have access to. Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. No known workarounds are available...

CVE-2026-2679

creationtimestamp| type| source ---|---|--- 2026-02-26 16:37:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfrmyxkigp2k...

GHSA-42WG-38GX-85RH

creationtimestamp| type| source ---|---|--- 2026-02-26 15:40:19+00:00| seen| https://gist.github.com/alon710/ef8daafa48df3faf43c600dde2331d8a...

CVE-2026-26077

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, several webhook endpoints SendGrid, Mailjet, Mandrill, Postmark, SparkPost in the WebhooksController accepted requests without a valid authentication token when no token was configured. This...

GHSA-76M6-PJ3W-V7MF

creationtimestamp| type| source ---|---|--- 2026-02-26 05:13:40+00:00| seen| https://gist.github.com/rollkoffers-gaston/46391c991c70a7d70cdb0c31d53558a9...

Linux RAID Buffer Overflow DoS

The vulnerability of the raidstatus function in the drivers/md/dm-raid.c module of the Linux device driver for multiple devices RAID and LVM involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

CVE-2026-25164

creationtimestamp| type| source ---|---|--- 2026-02-25 19:58:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfphpzplwj2c 2026-02-27 22:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfuqlwszid2a...

GHSA-X43W-PH7M-PFJX hexchat crate has a Use After Free vulnerability

All versions of this crate have function deregistercommand which can result in use after free. This is unsound. In addition, all versions since 0.3.0 have "safe" macros, which are documented as unsafe to use in threads. In addition, the hexchat crate is no longer actively maintained. If users rel...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the DecodeImage process. An attacker can access sensitive information from adjacent memory by submitting a specially crafted PCD file. Remediation A fix was pushed into the master branch but not yet published...

CVE-2026-3206

creationtimestamp| type| source ---|---|--- 2026-02-25 18:27:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpcox4c2z2e...

CVE-2026-25136

creationtimestamp| type| source ---|---|--- 2026-02-25 14:16:41+00:00| published-proof-of-concept| https://github.com/rucio/rucio/security/advisories/GHSA-h79m-5jjm-jm4q 2026-02-25 20:26:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpjd6prcp2s 2026-02-25 22:10:59+00:0...

CVE-2026-26103

creationtimestamp| type| source ---|---|--- 2026-02-25 13:22:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mformcekp22x 2026-02-27 04:40:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfsvek2c3o2l...

CVE-2026-26351

creationtimestamp| type| source ---|---|--- 2026-02-25 01:16:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnj3b2csr2e...

GHSA-G3GW-Q23R-PGQM

creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:20+00:00| seen| https://gist.github.com/alon710/3c4ee34d2cdc53cc5dccf62f09e44104...

GHSA-5R3V-VC8M-M96G

creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:02+00:00| seen| https://gist.github.com/alon710/b23e84fd74b0099ad7b9c6587db73222...

CVE-2026-2759

creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:12+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevnkbfq2y 2026-02-28 02:01:47+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4yasoc52y...

OpenEMR security vulnerabilities

OpenEMR is a set of open-source medical management systems developed by the OpenEMR community. This system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. Versions of OpenEMR prior to 8.0.0 contained security...