CVE-2026-11528 Tenda AC18 Web Management getRebootStatus sub_45304 stack-based overflow

A vulnerability was found in Tenda AC18 15.03.05.05. The affected element is the function sub45304 of the file /goform/getRebootStatus of the component Web Management Interface. The manipulation of the argument callback results in stack-based buffer overflow. The attack may be launched remotely...

CVE-2026-11528

CVE-2026-11528 affects Tenda AC18 with firmware 15.03.05.05. The vulnerability is in the Web Management Interface, specifically function sub_45304 in the /goform/getRebootStatus module, where manipulation of the callback argument causes a stack-based buffer overflow. This can be exploited remotel...

PT-2026-47310

A vulnerability was found in Tenda AC18 15.03.05.05. The affected element is the function sub 45304 of the file /goform/getRebootStatus of the component Web Management Interface. The manipulation of the argument callback results in stack-based buffer overflow. The attack may be launched remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-48977

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fix arbitrary memory write with crafted Ventana BIF file CVE-2026-48977. CVE-2026-48977 Note that Nessus relies on the presence of the package as reported by th...

PT-2026-47366

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in the retrieve status function within dm-ioctl. The issue occurs when the outptr variable is aligned to the next 8-byte boundary using align ptroutptr without...

MINI-68X3-JXFH-56PW

Bulletin has no description...

MINI-HHPM-3JP6-5MMM

Bulletin has no description...

MINI-RV7X-7635-VFCF

Bulletin has no description...

MINI-P4GM-GF3R-W5JG

Bulletin has no description...

MINI-8V24-2WP8-FR9H

Bulletin has no description...

MINI-JJMP-FCVG-WGQJ

Bulletin has no description...

MINI-264C-CVW5-XCW6

Bulletin has no description...

CVE-2026-11499

creationtimestamp| type| source ---|---|--- 2026-06-07 13:51:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116709147982329600 2026-06-08 09:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnrcywmxxc2m 2026-06-08 09:00:41+00:00| seen|...

CVE-2026-11498

creationtimestamp| type| source ---|---|--- 2026-06-07 13:37:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116709092961508721 2026-06-08 11:00:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnrjoutcy42s 2026-06-08 13:07:00+00:00| seen|...

MINI-W44X-HC4F-8G44

Bulletin has no description...

CVE-2026-7792

The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in versions up to and including 1.10.0.1. This is due to the PayPal Commerce webhook endpoint processing unauthenticat...

SUSE CVE-2026-34267

unknown...

SUSE CVE-2026-34276

unknown...

CVE-2026-9719

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.6.0. This is due to missing or incorrect nonce validation on the changestatus function. This makes it possible for...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the UpdateSourceInventory and UpdateAgentStatus handlers due to insufficient validation of the sourceid claim in JSON Web Tokens against the requested source ID. An attacker can gain...