CVE-2026-65888

Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox 2.20.2 - The socialLogin method allows actors to login as any given user on the target site...

CVE-2026-65889

Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion 2.20.2 - The generateNewApp method allows actors to recursively delete directories...

CVE-2026-65943

The Joomla Extension by rolandd.com (specifically RO CSVI ) is vulnerable to unauthenticated directory creation in versions prior to 9.11.0 . This vulnerability is categorized as an improper access control issue, allowing an attacker to create directories without prior authentication. While the s...

PT-2026-65806

Joomla Extension - balbooa.com - Payment bypass in Gridbox 2.20.2...

CVE-2026-44621 affecting package unbound for versions less than 1.25.2-1

CVE-2026-44621 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55973 affecting package unbound for versions less than 1.25.2-1

CVE-2026-55973 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-50045 affecting package unbound for versions less than 1.25.2-1

CVE-2026-50045 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55708 affecting package unbound for versions less than 1.25.2-1

CVE-2026-55708 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-50252 affecting package unbound for versions less than 1.25.2-1

CVE-2026-50252 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

Astra Linux – Vulnerability in Chromium

Using “after free” in DevTools in Google Chrome before version 150.0.7871.47 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Low...

CVE-2026-15392 affecting package perl-DBI for versions less than 1.651-1

CVE-2026-15392 affecting package perl-DBI for versions less than 1.651-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-59884 affecting package python-pyasn1 for versions less than 0.4.8-3

CVE-2026-59884 affecting package python-pyasn1 for versions less than 0.4.8-3. A patched version of the package is available...

CVE-2026-8286 affecting package cmake for versions less than 3.30.3-15

CVE-2026-8286 affecting package cmake for versions less than 3.30.3-15. A patched version of the package is available...

CVE-2026-59885 affecting package python-pyasn1 for versions less than 0.4.8-3

CVE-2026-59885 affecting package python-pyasn1 for versions less than 0.4.8-3. A patched version of the package is available...

CVE-2026-57220 affecting package rabbitmq-server for versions less than 3.13.7-7

CVE-2026-57220 affecting package rabbitmq-server for versions less than 3.13.7-7. A patched version of the package is available...

Plone RestrictedPython < 5.3 / 6.x < 6.1 RCE

The version of RestrictedPython installed on the remote host is prior to 5.3, or 6.x prior to 6.1. It is, therefore, affected by a remote code execution vulnerability due to not checking access to stack frames and their attributes. An authenticated, remote attacker can exploit this to bypass...

CVE-2026-61425 Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0

Joomla Extension - balbooa.com - Authentication bypass in Gridbox 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access...

CVE-2026-62236

grav-plugin-login before 3.8.11 contains a CSRF in the login.regenerate2FASecret frontend task, which regenerates and persists a new TOTP secret for the authenticated user without anti-CSRF nonce or Origin/Referer checks. Grav core dispatches the task via a top-level GET using the task: URI param...

CVE-2026-57833 Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2

Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics 5.0.2 - The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS in relation to the AI analysis feature...

Microsoft PC Manager < 3.22.1.0 Elevation of Privilege (CVE-2026-50438) (July 2026)

The Windows 'Microsoft PC Manager' app installed on the remote host is prior to 3.22.1.0. It is, therefore, affected by an elevation of privilege vulnerability: - A local privilege escalation vulnerability allows an authenticated attacker to escalate privileges beyond the vulnerable component's...