CVE-2026-18604

Summary (CVE-2026-18604): A vulnerability in the Android app textPlus Text Message and Call App (up to 8.3.5) affects DialerActivity within the com.gogii.textplus component. The issue is described as an improper export of Android application components, enabling a local attacker to manipulate the...

CLEANSTART-2026-VF32547 Security fixes in prometheus 3.5.2:r0

Package prometheus version 3.5.2:r0 fixes 6 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-w8rr-5gcm-pp58, ghsa-hfvc-g4fc-pqhx, CVE-2026-39882, CVE-2026-39883...

CLEANSTART-2026-AR33057 Security fixes in prometheus 3.5.1-r1

Package prometheus version 3.5.1-r1 fixes 9 vulnerabilities: CVE-2026-33186, CVE-2026-32280, CVE-2026-39883, CVE-2026-39882, CVE-2026-32289...

EUVD-2026-49246

Subscriber Broken Access Control in YayPricing = 3.5.6 versions...

CVE-2026-65558

CVE-2026-65558 concerns the WordPress AffiliateX plugin, affected through version <= 2.3.5, with an unauthenticated Server Side Request Forgery (SSRF) vulnerability. The Patchstack entry characterizes the impact as CVSSv3.1: Network attack vector, high attack complexity, no privileges required...

CLEANSTART-2026-QY59076 Security fixes for CVE-2026-42304, CVE-2026-44307, CVE-2026-48522, CVE-2026-48523, CVE-2026-48524, CVE-2026-48525, CVE-2026-48526, ghsa-2h4p-vjrc-8xpq, ghsa-grgv-6hw6-v9g4 applied in versions: 4.3.5-r0, 4.3.5-r1

Multiple security vulnerabilities affect the jupyterhub-k8s-hub package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MP41051 Security fixes for CVE-2025-22227, CVE-2025-48924, ghsa-4q2v-9p7v-3v22, ghsa-j288-q9x7-2f5v applied in versions: 9.3.5-r0

Multiple security vulnerabilities affect the elasticsearch package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-64172

CVE-2026-64172 documents a Linux kernel/KVM vulnerability on Hygon Family 18h CPUs (Zen1-derived) where AVIC IPI virtualization could fail to wake blocking vCPUs due to a stale IsRunning=1 bit during ICR emulation. The root cause mirrors AMD Family 17h erratum #1235 and is mitigated by extending ...

CVE-2026-64172 KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235)

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h erratum 1235 Hygon Family 18h CPUs are derived from AMD Family 17h Zen1 silicon and share the same erratum 1235: hardware may read a stale IsRunning=1 bit during ICR...

2026-07 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2 for x64 (KB5102202)

2026-07 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2 for x64 KB5102202...

2026-07 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 (KB5102205)

2026-07 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 KB5102205...

2026-07 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Microsoft server operating system version 21H2 for x64 (KB5102206)

2026-07 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Microsoft server operating system version 21H2 for x64 KB5102206...

2026-07 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5099535)

2026-07 Cumulative Update for Windows 10 Version 1607 for x64-based Systems KB5099535...

July 14, 2026-KB5101010 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server 2022

None None...

July 14, 2026-KB5101006 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H2 and Windows 10 Version 22H2

None None...

July 14, 2026-KB5101000 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 10 Version 21H2 and Windows 10 Version 22H2

None None...

July 14, 2026-KB5101008 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 1809 and Windows Server 2019

None None...

WordPress WP Customer Area plugin <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin WP Customer Area versions = 8.3.5...

CLEANSTART-2026-UZ41796 Security fixes for CVE-2026-42304, CVE-2026-44307, CVE-2026-48522, CVE-2026-48523, CVE-2026-48524, CVE-2026-48525, CVE-2026-48526, ghsa-2h4p-vjrc-8xpq, ghsa-grgv-6hw6-v9g4 applied in versions: 4.3.5-r0, 4.3.5-r1

Multiple security vulnerabilities affect the jupyterhub-k8s-hub package. These issues are resolved in later releases. See references for individual vulnerability details...

EUVD-2026-41469

The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 4.3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...