BIT-DISCOURSE-2026-72730 Discourse: Stored XSS chat-transcript username unescaped in Rich Text Editor

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, the Rich Text Editor rendered a chat-transcript username as HTML, allowing stored cross-site scripting. This issue is fixed in versions 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0...

CVE-2026-42164

Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section...

PT-2026-76869

Name of the Vulnerable Software and Affected Versions Mahara versions prior to 25.04.5 Mahara versions prior to 26.04.0 Description An issue exists in the Text block/section functionality where a specifically crafted call allows the retrieval of backed-up content from a different Text section,...

CVE-2026-42164

Mahara (e-portfolio platform) versions before 25.04.5 and 26.04.0 have a flaw in the Text block/section functionality: a crafted call can recall backed-up content from another user's Text section. This enables unauthorized access to confidential data with integrity and availability impacts. CVSS ...

MINI-9PCP-GVJW-PRVP

Bulletin has no description...

MINI-W469-W4X5-VCC3

Bulletin has no description...

MINI-V865-QRWW-8X5G

Bulletin has no description...

MINI-MGM2-WXRM-2RC8

Bulletin has no description...

SUSE CVE-2026-18024

Buffer over-read in PostgreSQL ascii SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Versions before PostgreSQL 18.5, 17.11, 16.1...

MINI-PC34-HQW3-9PGX

Bulletin has no description...

MINI-8RQ9-4RHJ-PQ9V

Bulletin has no description...

MINI-744M-7VVG-6P25

Bulletin has no description...

MINI-QFCC-VJ2X-JXVP

Bulletin has no description...

MINI-FMG4-QWVG-7GW8

Bulletin has no description...

Exploit for Cross-site Scripting in Roundcube Webmail

CVE-2026-54433: Roundcube plain-text email stored XSS !Explo...

CVE-2026-73074

An integer overflow in Vim's propaddone function allows a local attacker to cause a denial of service or potentially execute arbitrary code by adding an excessive number of text properties to a single line. Mitigation Do not run untrusted Vim scripts or plugins that call propadd in an unbounded...

SUSE CVE-2026-73075

Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popupmarkopacityzindex in src/popupwin.c can use a negative wwinrow for a text-property-anchored popup with clipwindow and opacity, indexing before the screen array instead of accounting for wpopuptopoff and causing an...

CVE-2026-73660

FreePBX is an open source IP PBX. Prior to 16.0.6 and 17.0.5.4, the FreePBX Text-To-Speech module allows an authenticated administrator to save a TTS destination name that is HTML-encoded for storage, decoded during dialplan generation, passed as an AGI argument, and used to build filenames insid...

CVE-2026-73428

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.18, Trix is vulnerable to stored cross-site scripting when crafted HTML is pasted into the editor. HTMLParser processes a mock attachment in a with an empty data-trix-attachment="" value, causing...

CVE-2026-73660 FreePBX: Authenticated TTS AGI Command Injection Through TTS Name

FreePBX is an open source IP PBX. Prior to 16.0.6 and 17.0.5.4, the FreePBX Text-To-Speech module allows an authenticated administrator to save a TTS destination name that is HTML-encoded for storage, decoded during dialplan generation, passed as an AGI argument, and used to build filenames insid...