CVE-2026-59682

Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...

WordPress SmilePass Selfie Login plugin <= 1.0.2 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin SmilePass Selfie Login versions = 1.0.2...

WordPress Tutor LMS plugin 4.0.0-4.0.6 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Jakub Herman in WordPress Plugin Tutor LMS versions 4.0.6...

MAL-2026-14526 Malicious code in omniauth-recharge-rails-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ec72eac9d0bae686eddce65991c912a23c97621648e3316cd05188038d17d7 The package's package.json declares a preinstall lifecycle script that runs wget against a hardcoded webhook.site URL...

ROOT-OS-DEBIAN-12-CVE-2026-52858 CVE-2026-52858 in vim - Patched by Root

Root has patched CVE-2026-52858 in the vim package for Root:Debian:12. Multiple fixed versions available...

CLSA-2026-1787726627 TuxCare security update for org.springframework (8 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 8 CVEs. Fixed in 6.1.13-tuxcare.1...

WordPress RegistrationMagic plugin < 6.0.9.4 - Admin+ SQLi vulnerability

Admin+ SQLi vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin RegistrationMagic versions 6.0.9.4...

WordPress Eventin plugin < 4.1.19 - Unauthenticated Order Completion Without Payment vulnerability

Unauthenticated Order Completion Without Payment vulnerability discovered by Nir Yehoshua in WordPress Plugin WP Event SOlution versions 4.1.19...

CVE-2026-54467

On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...

EUVD-2026-66181

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0...

EUVD-2026-66127

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121,...

CVE-2026-75325

DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/' parameters...

PT-2026-82348

Name of the Vulnerable Software and Affected Versions Spring Data REST versions 3.7.20 and earlier Spring Data REST versions 4.0.0 through 4.4.15 Spring Data REST versions 4.5.0 through 4.5.12 Spring Data REST versions 5.0.0 through 5.0.6 Spring Data REST version 5.1.0 Description An issue exists...

PT-2026-82284

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Cyber Recovery versions prior to 20.3 Description An improper authentication issue exists where a low privileged attacker with remote access could potentially gain unauthorized access. Recommendations Update Dell PowerProtect...

PT-2026-82255

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2026-75340

The device metadata import interface /device/instance/productId/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery SSRF...

OPENSUSE-SU-2026:11616-1 python313-geopandas-1.1.4-1.1 on GA media

These are all security issues fixed in the python313-geopandas-1.1.4-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-36851

UnPoller version 2.33.0 is vulnerable to a path traversal vulnerability in the password field. The application fails to perform path checks when a password starts with the file:// prefix, causing it to read arbitrary files from the local disk via os.ReadFile() in pkg/inputunifi/input.go. An attac...

CVE-2026-75325

DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/' parameters...

Fedora 44 : sympa (2026-eca56df39d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-eca56df39d advisory. Update to 6.2.80 https://github.com/sympa-community/sympa/releases/tag/6.2.80 Tenable has extracted the preceding description block directly from the Fedora...