CVE-2026-91999

The Apache Sling XSS component (versions before 2.4.12 ) is vulnerable to a cross-site scripting (XSS) flaw due to improper neutralization of input during web page generation. This vulnerability could allow an attacker to execute scripts in a user's browser session. To remediate this issue, users...

CVE-2026-92001

The Apache Sling XSS component is vulnerable to an XML entity expansion attack due to improper restriction of recursive entity references in DTDs. This issue affects versions before 2.4.12 . To remediate the vulnerability, users are recommended to upgrade to version 2.4.12 . No specific exploit i...

CVE-2026-73192

The Apache Sling XSS library, specifically versions 2.4.10 and prior , is vulnerable to a reflected cross-site scripting (XSS) attack due to an improper neutralization of input during web page generation. The root cause lies in the XSSAPI.getValidHref() method, which may fail to correctly sanitiz...

CVE-2026-31377

An Improper Authentication vulnerability exists in the Apache Doris Frontend (FE) meta service , allowing an unauthenticated remote attacker to access internal metadata service endpoints. The root cause is that affected endpoints rely on client-supplied node information for authentication without...

CVE-2026-42801

A NULL pointer dereference vulnerability exists in the as_rrc module of ASR Crane, Falcon on Linux . The flaw is located in the program file 3g.mod/lib/src/urrsir.c and can lead to Pointer Manipulation . The vulnerability has a HIGH base severity score of 7.4. No specific exploit information or r...

CVE-2026-95625

The Tauri updater plugin contains a vulnerability where the update manifest—containing the version number, download URL, and signature—is fetched over TLS but is never itself signed or authenticated . While the plugin verifies the raw binary bytes using minisign signatures, the signature does not...

CVE-2026-93368

The Rename wp-login.php to anything you want plugin for WordPress is vulnerable to a time-based SQL Injection in all versions up to and including 2.0.1 . The root cause is insufficient escaping and a lack of sufficient preparation on the existing SQL query for the 'log' (Username) parameter. Beca...

CVE-2026-15027

The CGServiSign software developed by Changing contains an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this by inducing victims to visit a malicious web page, which then triggers the injection of arbitrary OS commands through the local service interface . This...

CVE-2026-91788

Foxit PDF Editor/Reader is vulnerable to an information disclosure flaw because the JavaScript interface fails to perform the required attribute authorization checks . This oversight allows a trusted malicious PDF to potentially access sensitive content from other documents residing within the sa...

CVE-2026-91790

Foxit PDF Editor/Reader is vulnerable to a Use-After-Free (UAF) vulnerability during the rendering of page images. The issue stems from a failure to properly validate image objects containing malformed optional content attributes , which leads the application to access an already-freed internal d...

CVE-2026-91791

Foxit PDF Editor/Reader is susceptible to an invalid memory read and application crash when processing a specially crafted PDF file. The vulnerability is caused by a reentrant execution condition involving JavaScript triggered by page-visibility events , which leads to the application accessing a...

CVE-2026-91792

Foxit PDF Editor/Reader is vulnerable to a use-after-free condition when processing a specially crafted PDF. The vulnerability is triggered when the application performs reentrant zoom and layout operations through page- and annotation-related JavaScript actions, causing it to access page objects...

CVE-2026-91793

Foxit PDF Editor/Reader is susceptible to a use-after-free condition when opening a specially crafted PDF . The vulnerability is triggered when the software executes scripts that modify annotation rich-text attributes containing malformed font data . During the subsequent reconstruction of annota...

CVE-2026-91794

Foxit PDF Editor/Reader is vulnerable to an out-of-bounds write vulnerability within its PDF rendering process . The issue is caused by insufficient consistency and boundary validation when the software processes malformed color space data . This flaw could allow an attacker to cause a program cr...

CVE-2026-91795

Foxit PDF Editor/Reader is affected by a vulnerability in its FileOpen plugin because it fails to adequately validate certain encryption metadata in specially crafted PDF files. This lack of validation can leave an internal pointer in an invalid state, resulting in chained read and write access v...

CVE-2026-91796

Foxit PDF Editor/Reader is susceptible to an NTLM Response Information Disclosure Vulnerability (CVE-2026-91796) because the interface lacks permission verification for secure reading mode . This flaw enables specially crafted PDFs to trigger external SMB authentication without prompting the user...

CVE-2026-91797

Foxit PDF Editor/Reader is vulnerable to a directory traversal flaw because it fails to validate the directory traversal path in the attachment file name. This vulnerability allows malicious attachments to be written to directories outside the expected secure area when a PDF is opened. No specifi...

CVE-2026-91799

A use-after-free vulnerability exists in Foxit PDF Editor/Reader due to improper handling of JavaScript array objects . Specifically, the vulnerability occurs during array processing where a specially crafted PDF may cause the application to access a released object. This flaw could potentially l...

CVE-2026-91805

Foxit PDF Editor/Reader contains a use-after-free vulnerability in its PDF page-tree handling mechanism. A specially crafted PDF can trigger page-structure changes during rendering, which causes the application to access released page objects . This vulnerability can lead to memory corruption and...

CVE-2026-91800

A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS . The vulnerability is caused by insufficient validation of a user-modifiable configuration value during high-privilege upgrades. A local attacker could exploit this flaw to execute arbitrary commands...

CVE-2026-91801

Foxit PDF Editor/Reader is susceptible to a path traversal vulnerability within its handling of embedded PDF resources , specifically involving RichMedia Annotations . The vulnerability is caused by insufficient validation of resource file paths , which may allow files to be written outside of th...

CVE-2026-91802

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader within its WebP image decoding functionality. The vulnerability is caused by the improper handling of bitmap stride and target buffer formats , which could lead to an application crash if successfully exploited. No s...

CVE-2026-91804

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader during the rendering of Circle annotations with malformed Cloudy appearance streams in specially crafted PDF files. The root cause is insufficient validation of the appearance geometry , which can result in memory co...

CVE-2026-91806

A use-after-free vulnerability exists in Foxit PDF Editor/Reader 's handling of PDF form fields . The flaw is caused by embedded JavaScript accessing form-field references after the corresponding fields have been released, which can result in an application crash . No specific remediation steps, ...

CVE-2026-91807

Foxit PDF Editor/Reader is susceptible to a heap-based out-of-bounds read vulnerability. The root cause is insufficient validation of the soft-mask data attribute during image parsing, which may lead to an arithmetic underflow . This condition can result in an out-of-bounds read and a subsequent ...

CVE-2026-91798

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader . The flaw is caused by an insecure permission configuration that allows regular users to modify the configuration file. This vulnerability could lead to arbitrary script execution with higher privil...

CVE-2026-91803

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader . The root cause is the unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated pri...

CVE-2026-91808

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader during the handling of PDF image objects with inconsistent compression metadata. The issue stems from insufficient validation during image decoding, which can result in an undersized buffer . This vulnerability leads ...

CVE-2026-91810

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader involving the handling of malformed PDF image masks . The root cause is linked to inconsistent image metadata , which may cause incorrect alpha-channel processing during rendering. This flaw can lead to an out-of-boun...

CVE-2026-91811

Foxit PDF Editor/Reader contains a heap-based out-of-bounds write vulnerability within its PRC parser . The vulnerability is caused by insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation of this flaw could lead to memory corruption and an applicatio...

CVE-2026-91812

A vulnerability in the Foxit PDF Editor/Reader update mechanism (specifically FoxitUpdater ) allows man-in-the-middle attackers to bypass certificate validation and package integrity checks . This flaw could potentially enable arbitrary code execution with system privileges . No specific remediat...

CVE-2026-91813

A vulnerability in the Foxit PDF Editor/Reader update mechanism (specifically FoxitUpdater ) allows an update package to be replaced between download and high-privilege extraction due to insufficient file locking and integrity validation . This race condition could enable local attackers to execu...

CVE-2026-91815

Foxit PDF Editor/Reader is vulnerable to CVE-2026-91815 due to insufficient verification of JPEG2000 image metadata within PDF files. This flaw leads to an out-of-bounds write in the heap buffer during decoding, which can result in a program crash or the risk of arbitrary code execution . No spec...

CVE-2026-91814

Foxit PDF Editor/Reader is vulnerable to a signature validation vulnerability within its handling of incrementally updated PDF documents . The root cause is that modifications to visible document content may not invalidate the existing digital signature. This allows an attacker to alter signed co...

CVE-2026-91816

Foxit PDF Editor/Reader is susceptible to a use-after-free vulnerability in its handling of PDF annotations . The vulnerability is triggered by reentrant annotation deletion initiated through embedded JavaScript , which causes the application to access an annotation object after it has been relea...

CVE-2026-91817

Foxit PDF Editor/Reader is vulnerable to a heap-based out-of-bounds read (CVE-2026-91817) during the handling of wide strings in embedded PDF JavaScript . The root cause is insufficient validation of string-deletion ranges , which can trigger an integer underflow . This flaw leads to an out-of-bo...

CVE-2026-91818

A use-after-free vulnerability exists in Foxit PDF Editor/Reader 's JavaScript handling of PDF annotations. The root cause is reentrant page-event processing during annotation enumeration, which may release the associated page object; subsequent access to this object results in an application cra...

CVE-2026-91789

Foxit PDF Editor/Reader contains a vulnerability within its U3D/GIF texture decoding path caused by insufficient validation of image dimensions and related size information. This oversight can lead to an incorrectly sized memory allocation , which may trigger an out-of-bounds write during pixel p...

CVE-2026-91809

Foxit PDF Editor/Reader is susceptible to a use-after-free vulnerability during the handling of malformed PDF form fields. The root cause is improper validation during field-name traversal , which can lead the application to access a released object. This vulnerability can result in an applicatio...

CVE-2026-92378

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online . Under specific timing conditions during Service Offline Emergency Mode , a previously authenticated session may be retained after a user logs out. This flaw could allow a subseque...

CVE-2026-50228

An unauthenticated local attacker can exploit a vulnerability in Acer NitroSense software (versions up to and including 5.2.63 ) by connecting to an exposed Electron DevTools endpoint on localhost TCP port 9993 . The root cause is that Chromium remote debugging remains enabled in the production a...

CVE-2026-50227

An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket endpoint in Acer NitroSense software (versions up to and including 5.2.62 ). This vulnerability allows the attacker to invoke exposed ddsc RPC functions , specifically child_process.execSync() , which ca...

CVE-2026-82331

The Apache BuildStream tar source plugin contains an improper link resolution (link following) vulnerability when running on Python = 3.12 with BuildStream >= 2.3.0 due to the use of the Python tarfile filter functionality. Users are recommended to upgrade to version 2.8.1 to resolve the issue...

CVE-2026-6831

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to a missing authorization flaw in versions up to and including 2.1.1 (specifically mentioned as 2.0.9 in several records). The root cause is the plugin's failure to properly verify user permissions before performing actions. This ...

CVE-2026-5924

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.1.3 . The flaw exists within the Google Maps block due to the customStyle attribute, where the mapStyles() function in the frontend JavaScript uses eval() on...

CVE-2026-93508

The WC Fields Factory WordPress plugin, in versions prior to 4.1.11 , is vulnerable to unauthorized access because it fails to properly restrict its field-management AJAX action . This flaw allows authenticated users with Subscriber-level access or higher to perform unauthorized actions, includin...

CVE-2026-93511

The Premium Packages WordPress plugin (versions 7.0.0-7.2.0 ) is vulnerable to an unauthenticated PayPal webhook signature verification bypass . Because the plugin fails to verify PayPal's webhook signature before processing notifications, an attacker can forge payment confirmations and subscript...

CVE-2026-93528

The NP Quote Request for WooCommerce WordPress plugin (versions 2.0-2.4.15 ) is vulnerable to unauthenticated order data disclosure . The root cause is located in the gpls_woo_rfq_get_rfq_cart() function within includes/classes/gpls_woo_rfq_functions.php, which fails to validate order ownership w...

CVE-2026-93507

The WC Fields Factory WordPress plugin (versions before 4.1.11 ) is vulnerable to an authorization bypass because it fails to properly restrict access to or verify a nonce for a post-cloning action. This flaw allows users with Contributor-level privileges and above to duplicate arbitrary posts, r...

CVE-2026-93510

The Points and Rewards for WooCommerce WordPress plugin (versions before 2.10.4 ) is vulnerable to an arbitrary points and wallet balance manipulation. The root cause is a failure to validate the claimed reward amount or restrict access to the Win Wheel claim handler . Consequently, authenticated...