CVE-2026-77159

A symlink-following flaw in libvirt's qemuTPMEmulatorPrepareHost() function performs a path-based chown() on the swtpm log file without validating for symbolic links. A local attacker with access to the swtpm account can replace the log file with a symlink, causing the root-level libvirtd daemon ...

CVE-2026-87123

hbs is an Express view engine wrapper for Handlebars. In version 4.3.0 , an unhandled TypeError is thrown during output escaping when an async helper (registered via registerAsyncHelper) resolves to an object whose toHTML property is truthy but not callable. Because the async substitution execute...

CVE-2026-1956

CVE-2026-1956 has been reserved but no technical details are publicly available in the provided documents. The only recorded sighting is a Bluesky post noting the CVE's creation. Monitor for updates as the details may be published by the reserving organization.

CVE-2026-17037

CVE-2026-17037 affects the Kirki WordPress plugin (Freeform Page Builder, Website Builder & Customizer) in all versions up to and including 6.2.0 . The vulnerability is a Stored Cross-Site Scripting (XSS) caused by insufficient input sanitization and output escaping in the comment parameter. Beca...

CVE-2026-87859

morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1 , the escapeLogField() function fails to escape the double quote character, which delimits quoted fields in the Apache combined log format. An unauthenticated remote attacker who controls a value written to a quote...

CVE-2026-47839

Cloud Foundry UAA and cf-deployment are vulnerable to a privilege-escalation flaw in federated OIDC authentication. When an OIDC identity provider is configured with groupMappingMode: AS_SCOPES and a wildcard externalGroupsWhitelist entry, users can obtain the uaa.admin scope despite operators in...

CVE-2026-80469

CVE-2026-80469 affects the Device Manager extension shipped with SICK Sentio Creator , in releases up to and including version 2026.2 . An attacker can achieve arbitrary code execution on a target system by uploading a malicious device driver package that bypasses driver verification mechanisms, ...

CVE-2026-19486

CVE-2026-19486 is a Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder (versions prior to 2026-06-01 on Google Cloud Platform). An unauthenticated attacker can exploit it to leak the Compute Engine default service account access token , r...

CVE-2026-87727

a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product...

CVE-2025-15679

CVE-2025-15679 affects the BMC (Baseboard Management Controller) root account , which can become active without a password under certain circumstances such as a reset to factory default operation. This grants unauthenticated local access with HIGH impact on confidentiality, integrity, and availab...

CVE-2026-6642

The Media Library Assistant WordPress plugin (versions up to and including 3.35 ) is vulnerable to Stored Cross-Site Scripting via the bulk edit preset export/import mechanism. The root cause is insufficient output escaping in the mla_generate_bulk_edit_form_fieldsets() function and the mla-bulk-...

CVE-2026-6640

The Media Library Assistant WordPress plugin is vulnerable to Stored Cross-Site Scripting via the mla_link_attributes parameter in all versions up to and including 3.35 , caused by insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access or higher...

CVE-2026-6641

Media Library Assistant is a WordPress plugin vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 3.35 . The flaw resides in the mla_gallery shortcode: when the mla_output parameter is set to paginate_links, the mla_link_href parameter is processed by _paginate_links()...

CVE-2026-89179

WeenyGenius , a computer lab management system by Howyar Technologies , is affected by a Missing Support for Integrity Check vulnerability. An unauthenticated attacker on the same (adjacent) network can intercept a student's connection packet and replay it, forging the appearance that the student...

CVE-2026-89178

WeenyGenius , a computer lab management system by Howyar Technologies , suffers from an Origin Validation Error that allows unauthenticated attackers on the same network to spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection wit...

CVE-2026-89177

WeenyGenius is a computer lab management system by Howyar Technologies . The vulnerability stems from reliance on ZMTP Null mode , an unauthenticated zero-message-transport-protocol handshake that provides no encryption or integrity. An unauthenticated attacker on the same (adjacent) network can ...

CVE-2026-89176

WeenyGenius is a computer lab management system developed by Howyar Technologies that suffers from a Missing Authentication vulnerability. Unauthenticated attackers on the same network can spoof student or teacher endpoints. Impersonating a student can disrupt normal classroom operations, while i...

CVE-2026-89175

The Smart Video Intercom System developed by Kingdom Communication Associated contains a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values. The CVSS 3.1 score is 5.3 (MEDIUM)...

CVE-2026-89174

The Smart Video Intercom System developed by Kingdom Communication Associated suffers from a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts by performing a large number of login attempts, resulting in a high confidentiality impact ...

CVE-2026-89173

The Smart Video Intercom System developed by Kingdom Communication Associated is affected by a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses, allowing them to discover which accounts exist on...

CVE-2026-73785

A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service DoS...

CVE-2026-87908

multiparty , a Node.js library for parsing multipart/form-data request bodies, is affected by a Denial of Service vulnerability in versions 2.1.0 through 4.3.0 . The root cause is that the parser does not bound the amount of memory used while accumulating the headers of a single multipart part. A...

CVE-2026-73784

A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user...

CVE-2026-13326

CVE-2026-13326 affects Qt NFC 's QNdefNfcTextRecord component, where an out-of-bounds read in language code length parsing (combined with an integer underflow) allows a physically proximate attacker to trigger a denial of service or limited memory disclosure via a crafted NFC tag. The CVSS 4.0 sc...

CVE-2026-86815

The BackWPup WordPress plugin (versions 5.2.2–5.7.4 ) lacks proper authorization on several REST API routes used for job, backup-destination, and backup-execution management. Users holding a plugin-defined, administrator-assigned limited role can create and execute backup jobs, enabling exfiltrat...

CVE-2026-86782

Visualizer is a WordPress plugin for building charts. Versions 4.0.0 through 4.0.5 are affected by an Improper Authorization (IDOR) flaw in its chart-building actions. Any authenticated user with the Contributor role or higher can publish, rename, and overwrite posts and pages they do not own, in...

CVE-2026-86781

SSL Zen — SSL Certificate Installer & HTTPS Redirects, a WordPress plugin, is vulnerable to TLS private key disclosure in versions before 4.7.40 . The root cause is missing capability or nonce checks on a certificate-file download routine that executes early in the WordPress admin request lifecyc...

CVE-2026-86812

WPCafe WordPress plugin versions 3.0.10 through 3.0.17 are affected by an authorization flaw in its food-orders REST API endpoints. The root cause is that permission callbacks return an incorrect type on failure , which bypasses access checks and allows unauthenticated users to disclose guest ord...

CVE-2026-85677

The Gutenverse News WordPress plugin (versions before 3.3.3 ) introduces a stored XSS vulnerability via inadequate context scoping of allowed HTML elements . The plugin adds extra HTML to WordPress's permitted-element list but fails to restrict this relaxed list to its intended context, causing i...

CVE-2026-85678

The AI Builder WordPress plugin (versions 2.4.1 through 2.7.7 ) contains a stored cross-site scripting (XSS) vulnerability. Custom JavaScript saved against a post is not sanitised before being echoed inside a [removed] tag on the front end. Users with Contributor level access or above can inject ...

CVE-2026-86779

Visualizer is a WordPress plugin for creating interactive data visualizations. In versions before 4.0.6 , the deleteChart endpoint performs only a site-wide capability check without verifying per-object ownership. This allows any user with the Contributor role or higher to permanently delete any ...

CVE-2026-86780

The Featured Image with URL WordPress plugin, in versions before 1.0.6 , fails to sanitise and escape a stored image alt text attribute before outputting it. This allows users with the Contributor role (or higher) to perform Stored Cross-Site Scripting (XSS) attacks that execute in the browser of...

CVE-2026-14565

The advanced-customized-prompts WordPress plugin (through version 1.0.1 ) contains a Stored XSS vulnerability in its product popup configuration feature. The plugin fails to perform any capability, ownership, or nonce check before saving popup settings to a product and does not escape stored valu...

CVE-2026-82305

The YITH WooCommerce Wishlist WordPress plugin (versions before 4.18.1 ) contains an authorization bypass in the change_wishlist_title function, which fails to verify that a user is permitted to rename a given wishlist. This allows unauthenticated attackers to rename any wishlist on the site, res...

CVE-2026-14566

The advanced-customized-prompts WordPress plugin (versions ≤ 1.0.1 ) contains a missing authorization flaw: it performs no capability, ownership, or nonce check before updating WooCommerce order item metadata for a supplied order ID. This allows any authenticated user with the Subscriber role or ...

CVE-2026-74925

CVE-2026-74925 affects the MultiVendorX WordPress plugin versions 5.0.0 through 5.0.15 . The root cause is a missing permission check on the plugin's role and capability settings endpoint: any user holding the vendor (Store Owner+) role can modify those settings to grant that role administrator-l...

CVE-2026-14560

The teddy-bear-customize-addon WordPress plugin through version 1.0.5 is vulnerable to unauthenticated arbitrary file upload . The plugin does not properly validate uploaded files—it relies on a client-supplied content type and preserves the original filename —allowing an attacker to upload a mal...

CVE-2026-83546

The CoolClock WordPress plugin before 4.3.8 fails to properly escape a skin setting before outputting it within an HTML attribute (the skin class attribute), enabling stored XSS . An attacker with contributor-level access or higher can inject arbitrary scripts that execute when a visitor views th...

CVE-2026-14559

CVE-2026-14559 affects the teddy-bear-customize-addon WordPress plugin through version 1.0.5 . The root cause is the absence of password verification before user authentication, allowing an unauthenticated attacker to log in as any registered user—including administrators—by supplying only that u...

CVE-2025-15695

The Translate WordPress with GTranslate plugin before 3.0.10 contains a stored cross-site scripting (XSS) vulnerability. One of its settings is not validated before the bundled front-end scripts build markup from it, allowing users with the administrator role or higher to store JavaScript that ex...

CVE-2026-14563

CVE-2026-14563 affects the advanced-customized-prompts WordPress plugin through version 1.0.1 . The root cause is a missing password verification before issuing an authenticated session for a supplied email address within an unauthenticated action. This allows unauthenticated attackers to either ...

CVE-2026-14562

The teddy-bear-customize-addon WordPress plugin (versions through 1.0.5 ) fails to perform authorization or ownership checks before returning WooCommerce order metadata and customer-uploaded attachment URLs . This allows unauthenticated attackers to disclose other customers' order and attachment ...

CVE-2026-83545

CVE-2026-83545 affects the CoolClock WordPress plugin in versions before 4.3.8 . The root cause is improper escaping of a custom skin setting before output within an inline script, enabling stored XSS . Users with contributor-level access or above can inject arbitrary JavaScript that executes whe...

CVE-2026-89169

live-boot at commit ff8867c contains a vulnerability in its dm-verity-enforce-roothash-signature protection mechanism. When the .verity file is missing, an attacker can bypass this integrity verification, as shown in the code at lines 112–114 of 9990-overlay.sh. The Debian bug tracker records thi...

CVE-2026-89060

Stolostron multicluster-observability-addon is affected by a cross-namespace secret disclosure flaw. A managed-cluster identity can reference configuration resources outside its designated namespace, allowing an attacker-controlled managed cluster to access sensitive hub Secrets . The CVSS 3.1 sc...

CVE-2026-89162

PCRE2 versions before 10.48 are affected by a low-severity information disclosure in the pcre2_serialize_encode function. The vulnerability may leak two bytes to an adversary, though the description notes this typically occurs in a situation where the adversary's access is already unsafe , limiti...

CVE-2026-89161

CVE-2026-89161 affects PCRE2 before version 10.48 . The vulnerable component is the pcre2_jit_match function, which mishandles a previously copied subject when it is passed in as a context, potentially leading to an incorrect free operation . This memory management flaw could result in memory cor...

CVE-2026-89160

PCRE2 versions before 10.48 are affected by an out-of-bounds read in the pcre2_match function, triggered when matching an invalid UTF-8 subject string with the PCRE2_MATCH_INVALID_UTF flag. The vulnerability results in a low availability impact (CVSS 3.7, HIGH attack complexity, no privileges req...

CVE-2026-89158

PCRE2 versions prior to 10.48 are affected by an integer overflow in the pcre2_compile_32 function, specifically on 32-bit platforms . The overflow leads to an out-of-bounds write , which can result in memory corruption. The CVSS v3.1 score is 6.5 (Medium) with a network attack vector and high co...

CVE-2026-89157

PCRE2 versions before 10.48 on 32-bit platforms are affected by an out-of-bounds write in the pcre2_pattern_convert function, triggered when an attacker supplies a large pattern . The vulnerability is rated CVSS 5.7 (MEDIUM) with a local attack vector, high complexity, no privileges or user inter...