CVE-2026-75852

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials. CVSS 9.8 (Critical)...

CVE-2026-12512

The Quotes llama WordPress plugin, in versions prior to 3.1.6 , is vulnerable to an unauthenticated SQL injection . The root cause is the improper sanitization and escaping of a user-supplied parameter (specifically the sc parameter ) before it is used in a SQL query. This flaw allows attackers t...

JetBrains YouTrack 2024.3.51866 Multiple Vulnerabilities (2024_3_51866)

The version of JetBrains YouTrack installed on the remote host is prior to 2024.3.51866. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024351866 advisory. - In JetBrains YouTrack before 2024.3.51866, unauthenticated database backup download was possible via a...