EUVD-2026-1723

An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW before v.9.1.2 allows a remote attacker to escalate privileges via a crafted HTTP request...

EUVD-2026-1522

Server-Side Request Forgery SSRF vulnerability in nK nK Themes Helper nk-themes-helper allows Server Side Request Forgery.This issue affects nK Themes Helper: from n/a through = 1.7.9...

EUVD-2026-1555

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in THEMELOGI Navian navian allows PHP Local File Inclusion.This issue affects Navian: from n/a through = 1.5.4...

EUVD-2026-1547

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Mitech mitech allows PHP Local File Inclusion.This issue affects Mitech: from n/a through = 2.3.4...

EUVD-2026-1165

Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization cache files .bfmemo during image processing. The loci.formats.Memoizer class automatically loads and deserializes memo files associated with images without validation, integrity...

EUVD-2026-1217

EUVD-2026-1217...

EUVD-2026-1254

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in JanStudio Gecko allows PHP Local File Inclusion.This issue affects Gecko: from n/a through 1.9.8...

EUVD-2026-1338

The aBlocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data and disclosure of sensitive information due to missing capability checks on multiple AJAX actions in all versions up to, and including, 2.4.0. This makes it possible for authenticated...

EUVD-2026-0985

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Accordion accordions-wp allows Stored XSS.This issue affects Accordion: from n/a through = 3.0.3...

EUVD-2026-1008

A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could ...

EUVD-2026-0784

EUVD-2026-0784...

EUVD-2026-0078

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0189

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0217

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0222

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0284

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0321

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0346

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0598

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

Happy 16th Birthday, KrebsOnSecurity.com!

KrebsOnSecurity.com celebrates its 16th anniversary today! A huge "thank you" to all of our readers -- newcomers, long-timers and drive-by critics alike. Your engagement this past year here has been tremendous and truly a salve on a handful of dark days. Happily, comeuppance was a strong theme...