CVE-2026-84645

Jenkins 2.579 and earlier (LTS 2.568.2 and earlier) contains a deserialization vulnerability (SECURITY-3972). Objects implementing PersistenceRoot—types that store configuration in independent top-level files such as global configuration and jobs—can appear as nested field values in user-submitte...

CVE-2026-18058

The mobile Smart Connect dashboard UI (referenced via Motorola support, with CNA from Lenovo PSIRT ) was vulnerable to manipulation by third-party apps . When combined with a phishing attack , this manipulation could lead to privilege escalation for an attacker within the system. The vulnerabilit...

CVE-2026-84838

CVE-2026-84838 is a command injection vulnerability in rpmuncompress , a component of the RPM package management toolset. The root cause is that archive filenames containing shell metacharacters are not properly escaped before being passed to shell command strings via popen() , allowing a local a...

CVE-2026-84837

A command injection vulnerability was identified in rpm , specifically in the gettarspec function used by rpmbuild -t*. The root cause is an unescaped tarball path or filename that, when containing shell metacharacters, allows an attacker to inject arbitrary commands. This is particularly relevan...

CVE-2026-78409

A flaw in util-linux 's X-mount.subdir mount option allows a local unprivileged user to escape the intended subdirectory and attach an arbitrary host path at the intended mountpoint. On Linux 6.15 and later , the option takes a detached-tree fast path that calls open_tree() with AT_SYMLINK_NOFOLL...

CVE-2026-78410

util-linux is affected by a flaw in how restricted bind mounts are handled. The source path taken from /etc/fstab is not pinned before the privileged mount(8) call, allowing a local unprivileged user who can replace the authorized source or a writable ancestor to redirect the SUID mount to bind a...

CVE-2026-78408

util-linux nsenter --join-cgroup opens the target cgroup.procs file as root and leaves the file descriptor open across subsequent namespace, credential, and execve() transitions. Because the kernel evaluates later cgroup migrations against the credentials of the original open, a process in an att...

CVE-2024-7956

CVE-2024-7956 is an Incorrect Authorization (CWE-863) vulnerability in Rockwell Automation DataMosaix Private Cloud , versions 7.07 and prior . A threat actor with basic user privileges can gain unauthorized access to other users' projects and modify or delete them. The CVSS v3.1 base score is 8....

CVE-2026-82293

Kibana's machine learning feature is affected by an Incorrect Authorization flaw (CWE-863) that allows an authenticated user to invoke machine learning functionality beyond their authorization scope, leading to unauthorized cluster resource consumption with low availability impact. The vulnerabil...

CVE-2026-78588

Filebeat (Elastic) is affected by an uncontrolled resource allocation vulnerability (CWE-770) in its HTTP ingestion endpoint . An attacker with network access to this endpoint can send specially crafted compressed requests that exhaust the memory of the Filebeat process, causing a denial of servi...

CVE-2026-78587

Fleet Server (Elastic) contains an Incorrect Authorization (CWE-863) flaw where session ownership is not correctly verified during multi-part data upload operations. This allows any authenticated agent to interfere with active upload sessions belonging to other enrolled agents, resulting in a den...

CVE-2026-78586

Kibana (Elastic) is vulnerable to unbounded memory allocation (CWE-770) that can cause a denial of service. An authenticated user with low-level privileges can submit a specially crafted request causing Kibana to consume unbounded memory, rendering it unavailable to all users. Affected versions: ...

CVE-2026-78584

CVE-2026-78584 is an Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature that allows an authenticated user with Osquery live-query privileges to determine whether a scheduled query identifier exists in a Kibana space they are not authorized to access. The vulnerability affects...

CVE-2026-78591

CVE-2026-78591 is a Path Traversal vulnerability (CWE-22) in the Kibana Fleet feature that allows a low-privileged user to manipulate a subsequent action by a higher-privileged user , resulting in unauthorized deletion of resources , including accounts with elevated privileges. The affected confi...

CVE-2026-78590

A Path Traversal (CWE-22) vulnerability in the Kibana Fleet feature allows a low-privileged user with Fleet Settings write access to manipulate subsequent administrative actions so they target unintended internal resources, leading to unauthorized deletion of privileged resources such as user acc...

CVE-2026-78599

Kibana Fleet feature is affected by a stored path traversal (CWE-22) that allows a low-privileged user with Fleet write access to cause a subsequent administrative delete action to act on unintended internal resources, resulting in availability impact . Affected versions are 8.0.0–8.19.17 and 9.0...

CVE-2026-78598

CVE-2026-78598 is an Incorrect Authorization (CWE-863) flaw in the Kibana machine learning feature. An authenticated user with machine learning job management privileges in a single Kibana space can cause a job's saved object to become accessible across all spaces in the instance, exposing data t...

CVE-2026-78594

Elastic APM Server is affected by an Improper Handling of Highly Compressed Data (CWE-409) vulnerability that causes a persistent denial of service . An authenticated user with write access to source map content can store specially crafted, highly compressed data that exhausts APM Server memory u...

CVE-2026-78604

CVE-2026-78604 is an incorrect permission assignment (CWE-732) in Elastic Agent on Windows systems installed in unprivileged mode . Resources used by the agent service are created with access controls broader than required, allowing a local user to replace binaries (CAPEC-642) and cause the servi...

CVE-2026-82955

In the unreleased development version of Eclipse aeriOS , the KrakenD instance within the API Gateway component had the disable_jwk_security parameter hard-coded to true with no Helm chart override. This disabled TLS certificate verification when KrakenD fetched the JWKS used for bearer token val...

CVE-2026-78602

Elastic Maps Server is affected by a path traversal (CWE-22) vulnerability that allows an unauthenticated network attacker to read files outside the server's intended content directory, resulting in information disclosure . The vulnerable versions are 8.19.11 through 8.19.18 , 9.3.0 through 9.4.3...

CVE-2026-78601

Kibana 9.4.0–9.4.4 contains a Missing Authorization flaw in the Entity Store configuration operation. An authenticated user with elevated Kibana privileges can indirectly cause a background task to read Elasticsearch indices they are not authorized to access, with derived entity data then exposed...

CVE-2026-78600

Elastic Cloud on Kubernetes (ECK) is affected by an Incomplete Cleanup (CWE-459) flaw where authentication credentials persist after a cross-namespace association is denied by RBAC enforcement. This allows a low-privileged tenant to retain unauthorized read access to an associated Elasticsearch c...

CVE-2026-78609

Elastic Cloud on Kubernetes (ECK) versions 2.6.0 through 3.4.1 are affected by an Incorrect Authorization flaw (CWE-863) that enables Metadata Spoofing (CAPEC-690). An actor with limited Kubernetes permissions in one namespace can inject attacker-controlled certificate material into the Elasticse...

CVE-2026-76595

A vulnerability in advisor-backend involves multiple code paths that deserialize YAML using an unsafe full Loader, allowing instantiation of arbitrary Python objects via YAML tags. An unauthenticated remote attacker can exploit this by submitting specially crafted YAML input, achieving remote cod...

CVE-2026-12875

CVE-2026-12875 affects NLTK's RegexpTokenizer and represents a Regular Expression Denial of Service (ReDoS) via a caller-supplied regular expression. It is distinct from the sibling RecursiveDescentParser resource-consumption issue (GHSA-FF5C-CP5C-9WJF) and is tracked under GHSA-w3v8-gmh9-3wv7 . ...

CVE-2026-76594

A vulnerability in advisor-backend allows a network-adjacent unauthenticated attacker to exploit the /private/import_content/ endpoint, which lacks proper authentication and permission checks . An attacker can overwrite the global Advisor rule, resolution, and playbook catalogue. When combined wi...

CVE-2026-14255

A maliciously crafted IFC file , when parsed by certain Autodesk products , can trigger an uncontrolled recursion flaw, causing the application to terminate unexpectedly and resulting in a denial-of-service . Exploitation is local and requires the victim to open the crafted file; no privileges ar...

CVE-2026-2811

The Ajaxify Comments WordPress plugin before version 3.2 is affected by an HTTP Header Injection vulnerability caused by insufficient input sanitization and output escaping on user-supplied data. Unauthenticated attackers can inject arbitrary HTTP headers, resulting in low confidentiality and int...

CVE-2025-9314

The Developer Tools WordPress plugin through version 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in its bundled SWFUpload component. This allows a remote, unauthenticated attacker to upload arbitrary files over the network with low complexity, rated CVSS 3.1: 9.8 (Critic...

CVE-2025-15490

Passster WordPress plugin versions before 4.2.26 contain a flaw in its global protection checks , enabling unauthenticated users to bypass the plugin's protection mechanism via crafted URLs. The impact is rated Medium (CVSS 5.3) with a low confidentiality impact and no integrity or availability i...

CVE-2025-8945

The Wp Edit Password Protected WordPress plugin prior to version 1.3.5 provides page-level content protection that can be bypassed via the WordPress REST API , allowing an unauthenticated, remote attacker to access otherwise password-protected page content. The vulnerability requires no special p...

CVE-2025-15489

The Passster WordPress plugin before version 4.2.24 contains an improper input handling flaw in an AJAX action , allowing unauthenticated users to retrieve the value of password-protected content. This constitutes a password protection bypass , with a CVSS 3.1 score of 5.3 (Medium) reflecting net...

CVE-2025-15485

CVE-2025-15485 affects the Auto x LINE WordPress plugin through version 1.0.0 . The plugin lacks authorization checks on certain REST API endpoints , enabling unauthenticated users to invoke them and update plugin settings or clear logs . The vulnerability carries a CVSS v3.1 score of 8.2 (HIGH) ...

CVE-2025-15481

The Notification Bar for WordPress plugin (slug 8-degree-notification-bar) through version 1.1.8 exposes an unauthenticated CSV export script at inc/backend/blocks/export-csv.php, allowing anyone to download all stored subscriber email addresses without authentication. The vulnerability is rated ...

CVE-2024-3773

The LiveJournal Shortcode WordPress plugin through version 1.1.1 fails to validate and escape certain shortcode attributes before outputting them in a page or post. This allows users with the Contributor role or above to inject arbitrary JavaScript, resulting in a Stored Cross-Site Scripting (XSS...

CVE-2023-3360

The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, enabling PHP object injection when a high-privilege user imports a malicious file and a suitable gadget chain exists on the blog. The vulnerability is rated CVSS 3.3 (LOW) with high attack complexity...

CVE-2026-79991

Craft CMS is affected by an authenticated vulnerability in its GraphQL entry mutation resolvers (saveEntry, deleteEntry). The resolvers read siteId directly from $arguments without passing it through ArgumentManager::prepareArguments(), which normally enforces site-scope filtering via array_inter...

CVE-2026-79990

Craft CMS GraphQL entry mutation resolvers (saveEntry, deleteEntry) read siteId directly from $arguments without passing through ArgumentManager::prepareArguments(), which normally enforces site-scope filtering. As a result, an attacker with a GraphQL token scoped to one site can create, modify, ...

CVE-2026-83547

Xpro Addons (WordPress plugin) versions 1.6.0 through 1.7.3 are vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is that certain widget settings are not properly escaped before being rendered within HTML attributes . An attacker with the Contributor role or higher can inject malic...

CVE-2026-83533

WP Express Checkout WordPress plugin before 2.4.9 contains an unauthenticated payment bypass in the wpec_process_payment handler. The plugin does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order...

CVE-2026-82884

The All in One SEO WordPress plugin before 5.0.0.1 fails to sanitise and escape content stored in the ai-assistant Block within posts before rendering it in the post editor. This allows users with the contributor role or higher to inject a Stored Cross-Site Scripting (XSS) payload that executes w...

CVE-2026-8151

The Simple Membership MailChimp Integration WordPress plugin before 1.9.8 lacks CSRF protection on its settings page. An attacker can craft a request that, when submitted by a logged-in administrator , silently replaces the configured MailChimp API key. Once swapped, all subsequent member registr...

CVE-2026-81571

The Brave WordPress plugin versions prior to 0.8.8 fail to sanitize a URL parameter (UTM) used to pre-fill a form field before passing it to WordPress's shortcode engine . This allows unauthenticated attackers to trigger execution of any shortcode registered on the target site, resulting in serve...

CVE-2026-78153

The Restrict User Access WordPress plugin versions before 2.8.1 fail to normalise the REST API route before comparing it against protected routes. This route normalization flaw allows unauthenticated attackers to bypass content protection, read restricted content, and enumerate users via the REST...

CVE-2026-77794

RegistrationMagic (WordPress plugin, versions 6.0.0.0–6.0.9.8) fails to validate a client-supplied quantity multiplier when calculating the total price of a paid registration. An unauthenticated attacker can supply a zero quantity to make the computed price zero, bypassing payment entirely and ob...

CVE-2026-77009

CVE-2026-77009 affects the WatchMan-Site7 WordPress plugin through version 4.2.0 . The plugin fails to restrict access to its debugging console , which executes user-supplied PHP code . Any authenticated user with a low privilege level (e.g., a subscriber ) can leverage this to achieve remote cod...

CVE-2026-77793

RegistrationMagic is a WordPress plugin that manages event registrations. Versions prior to 6.0.9.9 fail to validate the total price of a paid registration server-side; an attacker can simply omit the price field in the request to complete a paid registration without paying, obtaining an activate...

CVE-2026-4357

The Embed HTML5 Game WordPress plugin (through version 1.3 ) fails to properly restrict both who can upload files and what file types are permitted via the plugin. This allows unauthenticated attackers to upload PHP backdoors on affected sites, potentially leading to full compromise. The vulnerab...

CVE-2026-19698

CVE-2026-19698 affects the GutenKit WordPress plugin in versions before 2.5.1 . The root cause is the absence of validation or escaping on style settings saved against a post before they are used to build the CSS output on the front end. This allows users with the Contributor role or above to inj...