CVE-2026-53289 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53289 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-12969 affecting package dnsmasq for versions less than 2.93-1

CVE-2026-12969 affecting package dnsmasq for versions less than 2.93-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53267 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53267 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53128 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53128 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53094 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53094 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-52919 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-52919 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-42250 affecting package kata-containers-cc for versions less than 3.15.0.aks0-15

CVE-2026-42250 affecting package kata-containers-cc for versions less than 3.15.0.aks0-15. A patched version of the package is available...

CVE-2026-53001 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53001 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-43973 affecting package rabbitmq-server for versions less than 3.13.7-6

CVE-2026-43973 affecting package rabbitmq-server for versions less than 3.13.7-6. A patched version of the package is available...

CVE-2026-46244 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-46244 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53274 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53274 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

EUVD-2026-41530

A vulnerability exists in the Kong Konnect Model Context Protocol MCP server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injection attack and execute unintended API requests...

Mozilla Thunderbird < 152.0.1

The version of Thunderbird installed on the remote Windows host is prior to 152.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-63 advisory. - An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing...

PT-2026-53689

Name of the Vulnerable Software and Affected Versions Reachy Mini ISO for Wireless versions prior to 0.2.4 Description The Reachy Mini Wireless OS image contains an overly broad sudoers entry that grants the pollen daemon user uid 1000 passwordless sudo access to the /usr/bin/systemctl endpoint...

CVE-2026-49048 Joomla Extension - joomcoder.com - Unauthenticated SQL Injection in JoomCCK extension for Joomla < 6.4.1

The Joomla extension JoomCCK exposes a front-end controller task, that builds two SQL statements by directly concatenating a user-supplied request parameter into the query string without escaping or parameterisation...

NPM: pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes

NPM: pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes vulnerability discovered by ? in WordPress Npm pnpm versions 10.34.2...

CVE-2026-56045

The CVE-2026-56045 entry applies to the WordPress Automatic plugin versions earlier than 3.135.1, with an unauthenticated Cross Site Scripting (XSS) vulnerability. Affected software: WordPress Automatic plugin (

CVE-2025-68064

CVE-2025-68064 concerns a Local File Inclusion vulnerability in the WordPress Goya Core plugin, versions earlier than 1.0.9.4. The issue arises from a faulty file path handling in the plugin, enabling an attacker to access sensitive files. The CVSS 3.1 vector indicates remote access with high imp...

CVE-2026-9709 Themeco Cornerstone < 7.8.9 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Meta Disclosure

The Cornerstone WordPress plugin before 7.8.9 does not enforce capability checks on one of its REST API routes, allowing any authenticated user to disclose the metadata of any other user, including roles, session token previews and stored billing/shipping fields. This affects the premium co...

CVE-2026-8705 ClearSale Total <= 3.4.2 - Unauthenticated SQL Injection

The ClearSale Total plugin for WordPress is vulnerable to SQL Injection via the pagsegurometodo POST parameter of the clearsaletotalpush AJAX action in all versions up to, and including, 3.4.2. The handler is registered for unauthenticated users wpajaxnoprivclearsaletotalpush, and although a...