CVE-2026-86417

MISP (the open-source threat-intelligence sharing platform) contained an inconsistent email-visibility enforcement in DashboardsController::listTemplates() . The query always fetched User.email , but redaction was applied only in the non-REST (HTML) rendering branch. An authenticated user who saw...

[SECURITY] [DSA 6485-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6485-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 06, 2026 https://www.debian.org/security/faq -...

Debian dsa-6485 : tryton-server - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6485 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6485-1 [email protected] https://www.debian.org/security/ Moritz...

CVE-2026-86114

Arcane versions before 2.0.0 fail to properly restrict template operations, allowing default user role accounts to create, modify, and delete compose templates including instance-wide defaults. Attackers can inject malicious container configurations with privileged settings or host path mounts th...

CVE-2026-86114

Arcane (an application for managing containers) versions before 2.0.0 lack proper administrator authorization on compose template mutation endpoints. This allows accounts with the default user role to create, modify, and delete compose templates, including instance-wide defaults. An attacker can ...

EUVD-2026-71946

Arcane versions before 2.0.0 fail to properly restrict template operations, allowing default user role accounts to create, modify, and delete compose templates including instance-wide defaults. Attackers can inject malicious container configurations with privileged settings or host path mounts th...

CVE-2026-86114 Arcane before 2.0.0 Missing Administrator Authorization on the Compose Template Mutation Endpoints

Arcane versions before 2.0.0 fail to properly restrict template operations, allowing default user role accounts to create, modify, and delete compose templates including instance-wide defaults. Attackers can inject malicious container configurations with privileged settings or host path mounts th...

CVE-2026-86114 Arcane before 2.0.0 Missing Administrator Authorization on the Compose Template Mutation Endpoints

Arcane versions before 2.0.0 fail to properly restrict template operations, allowing default user role accounts to create, modify, and delete compose templates including instance-wide defaults. Attackers can inject malicious container configurations with privileged settings or host path mounts th...

CVE-2026-78150

CVE-2026-78150 affects the Smart Post WordPress plugin (Post Grid, Post Carousel, & List Category Posts – by Smart Post Show), versions 4.0.0 through 4.0.7 . The root cause is an IDOR in the saved-templates-duplicate endpoint, which fails to verify the type, ownership, or status of the post being...

CVE-2026-52772

YesWiki prior to 4.6.6 is vulnerable to stored XSS in its Bazar form-field templates. Twig's |raw('html') filter suppresses auto-escaping of field.label and field.hint in attribute and label-body contexts across at least seven templates. The base layout layouts/input.twig is inherited by every fi...

CVE-2026-52762 YesWiki: Authenticated (Admin) Server-Side Template Injection to Remote Code Execution via Bazar Semantic Templates

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki Bazar contains a stored Server-Side Template Injection SSTI vulnerability in the semantic template feature that can be escalated to confirmed Remote Code Execution RCE. An authenticated administrator can place arbitrary Twig...

CVE-2026-85600 Grav Admin before 2.0.21 Stored XSS via username

Grav Admin getgrav/grav-plugin-admin2 versions , ", or ', allowing an attacker to register a username containing an HTML payload. When an administrator views a UI surface that renders the username through tHtml—such as the two-factor force-disable confirmation prompt or the 'page is locked' edito...

EUVD-2026-71608

In DocsGPT 0.15.0 and below, the application provides a custom prompt feature that allows users to define prompt content used during chatbot interactions. This functionality renders user-supplied prompt data using Jinja templates without input sanitization or sandboxing. An unauthenticated attack...

CVE-2026-31020

In DocsGPT 0.15.0 and below, the application provides a custom prompt feature that allows users to define prompt content used during chatbot interactions. This functionality renders user-supplied prompt data using Jinja templates without input sanitization or sandboxing. An unauthenticated attack...

CVE-2026-31020

CVE-2026-31020 affects DocsGPT 0.15.0 and below , where the application's custom prompt feature renders user-supplied prompt data using Jinja templates without input sanitization or sandboxing. This enables an unauthenticated attacker to inject malicious template expressions, resulting in a serve...

CVE-2026-73222

creationtimestamp| type| source ---|---|--- 2026-09-03 20:35:04+00:00| published-proof-of-concept| https://github.com/davila7/claude-code-templates/security/advisories/GHSA-79wm-x847-7cvg...

Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)

Summary npx claude-code-templates --studio launches "Claude Code Studio", an Express HTTP server cli-tool/src/sandbox-server.js, default port 3444 that binds to all interfaces 0.0.0.0, sets Access-Control-Allow-Origin: , and requires no authentication. Two POST endpoints pass attacker-controlled...

NPM: Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)

NPM: Claude Code Templates: Unauthenticated OS command injection RCE in Claude Code Studio server --studio vulnerability discovered by ? in WordPress Npm claude-code-templates versions = 1.29.2...

CVE-2026-85302

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPKoi WordPress Themes WPKoi Templates for Elementor allows DOM-Based XSS. This issue affects WPKoi Templates for Elementor: from n/a through 3.7.2...

EUVD-2026-70559

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPKoi WordPress Themes WPKoi Templates for Elementor allows DOM-Based XSS. This issue affects WPKoi Templates for Elementor: from n/a through 3.7.2...