EUVD-2026-20152

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through 7.0.00...

CVE-2026-39506

Missing Authorization vulnerability in Jordy Meow AI Engine Pro ai-engine-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine Pro: from n/a through 3.4.2...

CVE-2026-39484

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through 7.0.00...

CVE-2026-1839

A flaw was found in HuggingFace Transformers. A remote attacker can exploit this vulnerability by supplying a specially crafted checkpoint file e.g., rngstate.pth. The loadrngstate method in the Trainer class loads this file using torch.load without proper validation, specifically missing the...

CVE-2026-1839

CVE-2026-1839 concerns the HuggingFace Transformers library, affecting the Trainer class. The root cause is an unsafe load in src/transformers/trainer.py: _load_rng_state() calls torch.load() without weights_only=True, which can allow arbitrary code execution when loading a malicious checkpoint (...

CVE-2026-2369 affecting package libsoup for versions less than 3.4.4-14

CVE-2026-2369 affecting package libsoup for versions less than 3.4.4-14. A patched version of the package is available...

CVE-2026-23138 affecting package kernel for versions less than 6.6.130.1-3

CVE-2026-23138 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...

CVE-2026-23066 affecting package kernel for versions less than 6.6.130.1-3

CVE-2026-23066 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...

CVE-2026-32287 affecting package telegraf for versions less than 1.31.0-16

CVE-2026-32287 affecting package telegraf for versions less than 1.31.0-16. A patched version of the package is available...

CVE-2026-25645 affecting package python-requests for versions less than 2.31.0-4

CVE-2026-25645 affecting package python-requests for versions less than 2.31.0-4. A patched version of the package is available...

CVE-2026-25541 affecting package rust for versions less than 1.75.0-27

CVE-2026-25541 affecting package rust for versions less than 1.75.0-27. A patched version of the package is available...

CVE-2026-32241 affecting package flannel for versions less than 0.24.2-25

CVE-2026-32241 affecting package flannel for versions less than 0.24.2-25. A patched version of the package is available...

CVE-2025-71203 affecting package kernel for versions less than 6.6.130.1-3

CVE-2025-71203 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...

CVE-2025-69720 affecting package ncurses for versions less than 6.4-3

CVE-2025-69720 affecting package ncurses for versions less than 6.4-3. A patched version of the package is available...

WordPress Perfmatters plugin <= 2.5.9.1 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' Parameter vulnerability

Authenticated Subscriber+ Arbitrary File Deletion via 'delete' Parameter vulnerability discovered by hoshino in WordPress Plugin Perfmatters versions = 2.5.9.1...

PT-2026-29691

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0280 Description A path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives. This circumvents a previous fix. Recommendations Update to version...

CVE-2026-23253 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23253 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23243 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23243 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23379 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23379 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23300 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23300 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...