CVE-2026-89249

AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) contains a stored XSS in the YPTWallet plugin. User-supplied CryptoWallet values are base64-encoded but not HTML-escaped before being stored in wallet_log.information. When administrators view pending withdrawal requests in pendingR...

CVE-2026-89247

WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier contains an XML injection in plugin/AD_Server/VMAP.php, reachable without authentication when the AD_Server plugin is enabled. The timeOffset and idTag values from the base64- and JSON-decoded $_REQUEST['vmaps'] parameter ...

CVE-2026-89245

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery (CSRF) vulnerability in playlistRemove.php . The root cause is that CSRF protection checks can be bypassed, allowing an attacker to craft a malicious form that submits a POST request to the e...

CVE-2026-89246

WWBN AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) is affected by a CSV formula injection vulnerability in the myComments.download.php endpoint. The root cause is a failure to sanitize spreadsheet formula prefixes (=, +, -, @) in comment text before CSV export. An authenticated...

CVE-2026-89244

WWBN AVideo through commit c3edcc27 contains a reflected XSS in plugin/Gallery/view/Category.php when the SubCategories feature is enabled. The getBackURL parameter is echoed into an href attribute without HTML encoding, allowing an attacker to inject a script that executes in a visitor's browser...

CVE-2026-89242

WWBN AVideo versions through commit c3edcc274c389816d434acadac07ee78eaf330c1 contain a server-side request forgery (SSRF) in the _json_decode function, which fetches remote URLs and local file paths without validation. An unauthenticated attacker can POST file paths or HTTP URLs to login.json.php...

CVE-2026-89243

WWBN AVideo (through commit c3edcc27) contains a stored cross-site scripting vulnerability in UserGroups::setGroup_name(), which fails to sanitize the group_name input. An administrator holding the canAdminUserGroups permission can inject malicious HTML or JavaScript that executes in the browser ...

CVE-2026-89241

WWBN AVideo contains a reflected cross-site scripting (XSS) vulnerability in confirmLivePassword.php . The root cause is that the script copies the REQUEST_URI variable directly into a form action attribute without encoding. An attacker can craft a malicious URL containing a quote character to br...

CVE-2026-89240

WWBN AVideo (through commit c3edcc27) contains a reflected cross-site scripting vulnerability in plugin/Live/confirmLivePassword.php. The unauthenticated GET parameter u, not covered by $securityFilter, is interpolated directly into an attribute without URL- or HTML-encoding. A remote attacker c...

CVE-2026-89148

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in objects/playlistSort.php. Because the endpoint is not a *.json.php script, AVideo's automatic CSRF guard does not execute. When a request includes the sort parameter, the script sets the Location header to...

CVE-2026-89239

WWBN AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1 ) contains a reflected XSS in the showAlertMessage() function. The function inserts the raw Referer header into a JavaScript comment without encoding, allowing an attacker to supply a Referer value containing */ to break out of ...

CVE-2026-87000

CVE-2026-87000 was initially a reserved candidate with no public details. A published proof-of-concept was later observed, posted on the Telegram channel GithubRedTeam . No specific product, component, version, or root cause has been provided in the available documents. Remediation details are li...

CVE-2026-87004

CVE-2026-87004 is currently a reserved candidate, meaning full vendor-issued details are not yet public. However, a published proof-of-concept has been reported by CIRCL, sourced from a Telegram channel (GithubRedTeam), dated 2026-09-11. No specific affected product, vendor, component, version, r...

CVE-2026-86813

CVE-2026-86813 affects the MetForm WordPress plugin prior to version 4.1.9 . The vulnerability resides in how the plugin handles newline characters in user-submitted values that are placed into notification email headers, specifically the Reply-To field. An unauthenticated attacker can inject add...

CVE-2026-86809

The Persian Elementor WordPress plugin, versions 2.7.10 through before 2.8.2 , fails to verify that the payment authority returned in its ZarinPal payment callback belongs to the specific transaction being completed. This allows unauthenticated attackers to complete a pending order by replaying a...

CVE-2026-85116

The Simple CAPTCHA with Cloudflare Turnstile WordPress plugin (versions 1.2.2 before 1.42.3) is vulnerable to unauthenticated arbitrary shortcode execution . The root cause is that the plugin's shortcode parser runs over the entire rendered Contact Form 7 form, including values a visitor submitte...

CVE-2026-82215

The Payment Gateway PayPay for WooCommerce WordPress plugin (versions 0.5 through 0.9.3) fails to verify the authenticity of incoming payment notification webhooks before acting on them. An unauthenticated attacker who knows a store's merchant identifier can mark arbitrary orders as paid , or can...

CVE-2026-82213

CVE-2026-82213 affects the Nexi XPay Build WordPress plugin, versions 7.6.1 through 7.6.2 . The root cause is an Insecure Direct Object Reference (IDOR) flaw: the plugin does not verify that a requested saved payment token belongs to the current user. As a result, unauthenticated attackers can re...

CVE-2026-89147

Net-SNMP through 5.9.5.2 is affected by a denial of service vulnerability in the SMUX module . The function smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and simply send no d...

CVE-2026-89146

CVE-2026-89146 affects the Rust libp2p-rendezvous library (versions through 0.17.1 ). The library fails to validate registration TTL values in discovery responses, so a malicious rendezvous server can send an unbounded TTL that triggers a timer arithmetic overflow , causing the client node proces...

CVE-2026-77159

A symlink-following flaw in libvirt's qemuTPMEmulatorPrepareHost() function performs a path-based chown() on the swtpm log file without validating for symbolic links. A local attacker with access to the swtpm account can replace the log file with a symlink, causing the root-level libvirtd daemon ...

CVE-2026-87123

hbs is an Express view engine wrapper for Handlebars. In version 4.3.0 , an unhandled TypeError is thrown during output escaping when an async helper (registered via registerAsyncHelper) resolves to an object whose toHTML property is truthy but not callable. Because the async substitution execute...

CVE-2026-1956

CVE-2026-1956 has been reserved but no technical details are publicly available in the provided documents. The only recorded sighting is a Bluesky post noting the CVE's creation. Monitor for updates as the details may be published by the reserving organization.

CVE-2026-17037

CVE-2026-17037 affects the Kirki WordPress plugin (Freeform Page Builder, Website Builder & Customizer) in all versions up to and including 6.2.0 . The vulnerability is a Stored Cross-Site Scripting (XSS) caused by insufficient input sanitization and output escaping in the comment parameter. Beca...

CVE-2026-87859

morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1 , the escapeLogField() function fails to escape the double quote character, which delimits quoted fields in the Apache combined log format. An unauthenticated remote attacker who controls a value written to a quote...

CVE-2026-47839

Cloud Foundry UAA and cf-deployment are vulnerable to a privilege-escalation flaw in federated OIDC authentication. When an OIDC identity provider is configured with groupMappingMode: AS_SCOPES and a wildcard externalGroupsWhitelist entry, users can obtain the uaa.admin scope despite operators in...

CVE-2026-80469

CVE-2026-80469 affects the Device Manager extension shipped with SICK Sentio Creator , in releases up to and including version 2026.2 . An attacker can achieve arbitrary code execution on a target system by uploading a malicious device driver package that bypasses driver verification mechanisms, ...

CVE-2026-19486

CVE-2026-19486 is a Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder (versions prior to 2026-06-01 on Google Cloud Platform). An unauthenticated attacker can exploit it to leak the Compute Engine default service account access token , r...

CVE-2026-87727

a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product...

CVE-2025-15679

CVE-2025-15679 affects the BMC (Baseboard Management Controller) root account , which can become active without a password under certain circumstances such as a reset to factory default operation. This grants unauthenticated local access with HIGH impact on confidentiality, integrity, and availab...

CVE-2026-6642

The Media Library Assistant WordPress plugin (versions up to and including 3.35 ) is vulnerable to Stored Cross-Site Scripting via the bulk edit preset export/import mechanism. The root cause is insufficient output escaping in the mla_generate_bulk_edit_form_fieldsets() function and the mla-bulk-...

CVE-2026-6640

The Media Library Assistant WordPress plugin is vulnerable to Stored Cross-Site Scripting via the mla_link_attributes parameter in all versions up to and including 3.35 , caused by insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access or higher...

CVE-2026-6641

Media Library Assistant is a WordPress plugin vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 3.35 . The flaw resides in the mla_gallery shortcode: when the mla_output parameter is set to paginate_links, the mla_link_href parameter is processed by _paginate_links()...

CVE-2026-89179

WeenyGenius , a computer lab management system by Howyar Technologies , is affected by a Missing Support for Integrity Check vulnerability. An unauthenticated attacker on the same (adjacent) network can intercept a student's connection packet and replay it, forging the appearance that the student...

CVE-2026-89178

WeenyGenius , a computer lab management system by Howyar Technologies , suffers from an Origin Validation Error that allows unauthenticated attackers on the same network to spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection wit...

CVE-2026-89177

WeenyGenius is a computer lab management system by Howyar Technologies . The vulnerability stems from reliance on ZMTP Null mode , an unauthenticated zero-message-transport-protocol handshake that provides no encryption or integrity. An unauthenticated attacker on the same (adjacent) network can ...

CVE-2026-89176

WeenyGenius is a computer lab management system developed by Howyar Technologies that suffers from a Missing Authentication vulnerability. Unauthenticated attackers on the same network can spoof student or teacher endpoints. Impersonating a student can disrupt normal classroom operations, while i...

CVE-2026-89175

The Smart Video Intercom System developed by Kingdom Communication Associated contains a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values. The CVSS 3.1 score is 5.3 (MEDIUM)...

CVE-2026-89174

The Smart Video Intercom System developed by Kingdom Communication Associated suffers from a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts by performing a large number of login attempts, resulting in a high confidentiality impact ...

CVE-2026-89173

The Smart Video Intercom System developed by Kingdom Communication Associated is affected by a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses, allowing them to discover which accounts exist on...

CVE-2026-73785

A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service DoS...

CVE-2026-87908

multiparty , a Node.js library for parsing multipart/form-data request bodies, is affected by a Denial of Service vulnerability in versions 2.1.0 through 4.3.0 . The root cause is that the parser does not bound the amount of memory used while accumulating the headers of a single multipart part. A...

CVE-2026-73784

A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user...

CVE-2026-13326

CVE-2026-13326 affects Qt NFC 's QNdefNfcTextRecord component, where an out-of-bounds read in language code length parsing (combined with an integer underflow) allows a physically proximate attacker to trigger a denial of service or limited memory disclosure via a crafted NFC tag. The CVSS 4.0 sc...

CVE-2026-86815

The BackWPup WordPress plugin (versions 5.2.2–5.7.4 ) lacks proper authorization on several REST API routes used for job, backup-destination, and backup-execution management. Users holding a plugin-defined, administrator-assigned limited role can create and execute backup jobs, enabling exfiltrat...

CVE-2026-86782

Visualizer is a WordPress plugin for building charts. Versions 4.0.0 through 4.0.5 are affected by an Improper Authorization (IDOR) flaw in its chart-building actions. Any authenticated user with the Contributor role or higher can publish, rename, and overwrite posts and pages they do not own, in...

CVE-2026-86781

SSL Zen — SSL Certificate Installer & HTTPS Redirects, a WordPress plugin, is vulnerable to TLS private key disclosure in versions before 4.7.40 . The root cause is missing capability or nonce checks on a certificate-file download routine that executes early in the WordPress admin request lifecyc...

CVE-2026-86812

WPCafe WordPress plugin versions 3.0.10 through 3.0.17 are affected by an authorization flaw in its food-orders REST API endpoints. The root cause is that permission callbacks return an incorrect type on failure , which bypasses access checks and allows unauthenticated users to disclose guest ord...

CVE-2026-85677

The Gutenverse News WordPress plugin (versions before 3.3.3 ) introduces a stored XSS vulnerability via inadequate context scoping of allowed HTML elements . The plugin adds extra HTML to WordPress's permitted-element list but fails to restrict this relaxed list to its intended context, causing i...

CVE-2026-86779

Visualizer is a WordPress plugin for creating interactive data visualizations. In versions before 4.0.6 , the deleteChart endpoint performs only a site-wide capability check without verifying per-object ownership. This allows any user with the Contributor role or higher to permanently delete any ...