CVE-2026-76369

In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The vulnerability is possible because Automation Broker log uploads accept crafted filename input before writing log files. For more information see...

MINI-3MC4-WMH9-HVCV

Bulletin has no description...

CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20

CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...

CVE-2026-71217 affecting package iperf3 for versions less than 3.17.1-5

CVE-2026-71217 affecting package iperf3 for versions less than 3.17.1-5. A patched version of the package is available...

CVE-2026-19447 Stored XSS in Fileorbis Informatics's FileOrbis

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fileorbis Informatics Services Trade Inc. FileOrbis allows Stored XSS. This issue affects FileOrbis: before 16.5...

CVE-2026-74254

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend...

CVE-2026-75059

In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...

CVE-2026-75056

JetBrains IntelliJ IDEA before 2026.2.1 is vulnerable to remote code execution via the Markdown export tool; a malicious Markdown document can trigger code execution during export. CVSS 7.8 (HIGH) — local attack vector, low complexity, no privileges required, user interaction needed. Upgrade to 2...

MINI-CWXQ-HJ6X-23C8

Bulletin has no description...

CVE-2026-73194

DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' branch parses the number with atoisrc an...

CVE-2026-64471 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64471 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68425 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68425 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68370 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68370 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68107 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68107 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-13613 KiviCare < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint

The KiviCare WordPress plugin before 4.5.2 does not properly sanitise and escape user-supplied parameters before using them in a SQL query, allowing authenticated users with a clinic staff-level role to perform SQL injection...

CVE-2026-6100 affecting package python3 for versions less than 3.12.9-14

CVE-2026-6100 affecting package python3 for versions less than 3.12.9-14. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2026-57077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newlinelen. In the bundled libsyck newlinelen and isnewlin...

Linux Distros Unpatched Vulnerability : CVE-2026-54421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitiv...

PT-2026-48576

Name of the Vulnerable Software and Affected Versions Apache OFBiz versions prior to 24.09.07 Description Improper Control of Generation of Code allows a low-privileged authenticated user with Content/DataResource editing privileges to perform template injection attacks. This can lead to Remote...

CVE-2026-49777

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4...