CVE-2026-96334 WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.7...

EUVD-2026-95629

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.7...

EUVD-2026-95619

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2...

CVE-2026-94663 WordPress ProfileGrid plugin <= 6.0.0.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2...

CVE-2026-96518 WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...

CVE-2026-96337 WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...

CVE-2026-96337

The ProfilePress WordPress plugin (versions

CVE-2026-96518

The ProfilePress WordPress plugin (versions

EUVD-2026-95594

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...

EUVD-2026-95593

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...

EUVD-2026-95583

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-78026

The Dell Secure Connect Gateway (SCG) Policy Manager in versions prior to 5.34.00.16 is susceptible to an Authorization Bypass Through User-Controlled Key vulnerability. A low-privileged attacker with remote access could potentially exploit this flaw to achieve Elevation of privileges . To mitiga...

CVE-2026-78023

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Authorization Bypass Through User-Controlled Key vulnerability (CWE-639). A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges . No specific exploi...

EUVD-2026-95579

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-78023

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-98278

A flaw was found in the Linux kernel. A local privileged user with network administration capabilities can configure a routing loop on an IP tunnel interface. When offloading network traffic through the misconfigured tunnel, the system triggers an unexpected kernel warning, potentially leading to...

Security update for grafana, system-user-grafana

This update for grafana, system-user-grafana fixes the following issues: Update to version 12.4.10: Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials bsc1275934 CVE-2026-2303: Drop dependency on vulnerable go.mongodb.org/mongo-driver...

SUSE-SU-2026:4600-1 Security update for grafana, system-user-grafana

This update for grafana, system-user-grafana fixes the following issues: - Update to version 12.4.10: Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials bsc1275934 CVE-2026-2303: Drop dependency on vulnerable go.mongodb.org/mongo-driver...

CVE-2026-61801

A flaw was found in the moby/sys/user package. The package does not properly limit memory allocation when parsing Unix-style user and group database files, such as /etc/passwd or /etc/group. An attacker who can supply a specially crafted file can cause excessive memory consumption, leading to a...

CVE-2026-101028

A flaw was found in the Ash framework. An authorized user can infer sensitive information from restricted related records by submitting queries that use aggregate functions, such as counting or checking for record existence. Because read authorization policies on related resources are not enforce...