CVE-2026-67276

MikroTik RouterOS is vulnerable to an SSH public-key authentication bypass (CWE-347). The server matches a presented public-key blob to an authorized key by key type and modulus only, omitting the exponent , and performs signature verification using the client-supplied key . An attacker who knows...

CVE-2026-86206

A vulnerability in the N-able N-central internal API access control filter allows unauthorized access to internal APIs due to an access control bypass involving path confusion and forwarded header spoofing . The flaw arises because the Envoy proxy and Jetty web server interpret URIs with semicolo...

CVE-2026-86207

A high-severity authentication bypass exists in N-able N-central versions prior to 2026.3 HF 3 (version 2026.3.1.13). The flaw resides in the UserTwoFactorLogin function, where a RemoteException during legacy two-factor authentication fails to clear a session binding. By chaining this with a path...

CVE-2026-86124

AutoAgent (HKUDS/AutoAgent) contains an unauthenticated remote code execution vulnerability in its sandbox TCP server , which binds to all network interfaces. An attacker who can reach the exposed communication port can execute arbitrary bash commands as root inside the container, gaining access ...

CVE-2024-11080

The Post Grid and Gutenberg Blocks – ComboBlocks WordPress plugin (versions 2.2.32 to 2.3.1 ) contains an Unauthenticated Hook Injection flaw via several functions in ~/includes/blocks/form-wrap/function.php, allowing unauthenticated attackers to execute actions through WordPress hooks when no ad...

CVE-2026-11613

The Divi Ajax Filter plugin for WordPress (all versions up to and including 5.1.2 ) is vulnerable to an unauthenticated Local File Inclusion (LFI) vulnerability. The root cause is the lack of sanitization, such as basename() or whitelist checks, on the custom_loop_template parameter within filter...

CVE-2026-85046

A type confusion vulnerability exists in the V8 engine of Google Chrome (prior to version 152.0.7977.82 ). This flaw allows a remote attacker to execute arbitrary code inside the sandbox by viewing a crafted HTML page . The vulnerability has been identified as actively exploited in the wild, with...

CVE-2026-63219

CVE-2026-63219 (CVSS 8.6) is a missing authorization check on the GeoNetwork formatter upload API endpoint, affecting versions prior to 4.4.12 and 4.2.17 . An unauthenticated attacker can upload arbitrary .xsl or .zip files into the server formatter directory, granting unauthorized write access. ...

CVE-2026-58400

GeoNetwork is an open-source geospatial metadata catalog (originated at the UN FAO, maintained under OSGeo). In versions prior to 4.4.12 and 4.2.17 , the Saxon XSLT processor used to render formatters lacks FEATURE_SECURE_PROCESSING and does not disable ALLOW_EXTERNAL_FUNCTIONS, allowing any load...

CVE-2026-84813

The WordPress GeoDirectory plugin, in versions

CVE-2026-84755

The Mail Mint WordPress plugin versions

CVE-2026-79756

The Nuclio serverless framework (versions prior to 1.17.4 ) is vulnerable to unauthenticated OS command injection within the dashboard on local/Docker platforms. The root cause is an incomplete fix where the list-all resource path (triggered when no specific resource name is provided) still inter...

CVE-2026-9055

The Booking for Appointments and Events Calendar – Amelia (Premium) plugin for WordPress (versions 8.0 - 9.6.2 ) is vulnerable to an unauthenticated privilege escalation to administrator. The root cause is insufficient validation of the attacker-controlled type parameter in the customer update en...

CVE-2023-54391

Proxmox Virtual Environment (VE) 7.0 through 8.0 contains a critical authentication bypass in libpve-access-control before 8.0.4 . By supplying an arbitrary value in the tfa-challenge parameter of the access ticket API endpoint, unauthenticated attackers can skip password verification entirely an...

CVE-2026-83549

A post-authentication OS Command Injection vulnerability exists in the SonicWall SMA1000 Appliance Management Console (AMC) . This flaw allows a remote authenticated attacker with administrator privileges to execute arbitrary OS commands, leading to remote code execution . The vulnerability is ac...

CVE-2026-83548

A pre-authentication Server-Side Request Forgery (SSRF) vulnerability exists in the SonicWall SMA1000 Appliance Work Place interface due to an unintended alternate access path. This critical vulnerability (CVSS 10.0 ) allows a remote, unauthenticated attacker to gain unauthorized access to sensit...

CVE-2026-66047

The ProfilePress (wp-user-avatar) WordPress plugin, in versions prior to 4.17.2 , is vulnerable to unauthenticated remote code execution (RCE) . The root cause is a weak 32-bit connect token that can be brute-forced via the ppress_connect_process AJAX handler. Attackers can exploit this by supply...

CVE-2026-82970

CVE-2026-82970 is an Unrestricted File Upload vulnerability in the WordPress plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent (by WP Legal Pages), affecting versions through 4.4.1 . Discovered by Jiemook , the flaw allows an unauthenticated attacker to upload a malicious file over the ne...

CVE-2026-15369

The Custom User Registration Fields for WooCommerce plugin for WordPress (versions up to and including 2.2.3 ) is vulnerable to Privilege Escalation . The flaw exists because the af_reg_checkout_data_to_order_meta_data_block() function accepts an unauthenticated, attacker-controlled afreg_select_...

CVE-2026-82329

CVE-2026-82329 is a critical authentication bypass in JFrog Artifactory (self-managed), rooted in the JFrog Access service. On default installations, a blank join key is silently trusted, and its HMAC secret is a fully known 32-byte value of 0x20. An unauthenticated attacker forges a valid join J...