CVE-2026-103648

The image-downloader (npm) package, specifically version 4.3.0 , is vulnerable to a path traversal (CWE-22) vulnerability. An attacker capable of controlling the download URL can manipulate the application into writing downloaded response data outside of the configured destination directory. This...

CVE-2026-104912

The MISP platform contains an authorization flaw in its correlation handling during attribute searches, affecting versions prior to v2.5.48 . The root cause is that the system uses a stale distribution snapshot stored on the correlation row—which is a point-in-time copy lacking a published flag—i...

CVE-2026-96613

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw (CWE-862) that allows authenticated users to access the complete device shadow of any device by specifying its device ID . The service fails to verify a relationship between the requester and the target device, le...

CVE-2026-104847

The prosemirror-view component in ProseMirror (prior to version 1.42.3 ) is vulnerable to a Cross-Site Scripting (XSS) flaw. The issue arises because the paste handling mechanism accepts attacker-provided HTML where clipboard slice context attributes bypass schema attribute validation . An attack...

CVE-2026-104910

The MISP platform contains an authorization bypass within the related events listing functionality. The vulnerability occurs because the system retrieves related event metadata directly from the correlation table without re-validating the caller's access rights for each specific event. Since the ...

CVE-2026-104846

The Seroval library (versions 0.12.0 through 1.6.2 ) is vulnerable to an unexpected code execution flaw during the fromJSON deserialization process. The root cause involves the deserialization of a fulfilled Promise control node, which can pass a plugin-produced callable-bearing thenable to a nat...

CVE-2026-101104

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate configurations of devices they do not own. By exploiting this flaw, an attacker can alter device settings, trigger unintended behaviors, or access sensitive informatio...

CVE-2026-104908

MISP versions prior to 2.5.48 are vulnerable to an improper input validation vulnerability in the decaying model import functionality. The application fails to adequately sanitize nested model keys during the import process, as it only strips top-level id and uuid fields while pinning org_id and ...

CVE-2026-104845

The Seroval library is vulnerable to a Denial of Service (DoS) condition in versions prior to 1.6.3 . The deserializeTypedArray function within fromJSON and fromCrossJSON fails to bound the serialized element count when trusting a deserialized source value as an ArrayBuffer. An attacker can provi...

CVE-2026-104907

MISP is vulnerable to a cross-site scripting (XSS) flaw in the remote event preview page. The issue arises because tag identifiers are rendered within an inline JavaScript onclick attribute; while these values are HTML-escaped, they are not properly sanitized for a JavaScript string context. A ma...

CVE-2026-104906

The MISP platform contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer (versions

CVE-2026-104844

The PostCSS Selector Parser (prior to version 7.1.6 ) is vulnerable to a Denial of Service (DoS) attack due to quadratic complexity in flat selector parsing. The root cause lies in src/parser.js, where splitWord() accepts selectors with numerous class or ID indexes because period and hash charact...

CVE-2026-104843

The Python package and project manager uv (written in Rust) is vulnerable to a path traversal flaw during wheel extraction on Windows systems. Affected versions range from 0.12.7 until 0.12.18 . An attacker can trick a user into installing a specially crafted Python wheel package that, during ext...

CVE-2026-94484

The Next.js React framework is vulnerable to cache poisoning in versions 15.0.0 through 15.5.27 and 16.3.8 . The root cause is an insufficiently scoped shared response cache key used by applications with a root-level catch-all page and statically generated or Incremental Static Regeneration (ISR)...

CVE-2026-94485

The Next.js framework (versions 16.0.0 through 16.3.8 ) contains a vulnerability in the next dev development server. The server exposes a Model Context Protocol (MCP) endpoint that lacks reliable restrictions on cross-site requests . If a developer visits a malicious website while the development...

CVE-2026-104901

MISP is vulnerable to a cross-site scripting (XSS) flaw in its ID Translator feature. When an authenticated user views the ID Translator page, the application queries linked remote MISP servers for event identifiers. The software fails to perform proper output encoding on these returned IDs, allo...

CVE-2026-94483

The Next.js React framework (versions 16.0.0 through 16.3.8 ) contains a Server-Side Request Forgery (SSRF) vulnerability within the Image Optimization component. The root cause is that the framework can follow attacker-controlled DNS resolution for remote URLs that match images.remotePatterns. T...

CVE-2026-94543

The Next.js framework (versions 15.0.0 through 15.5.27 and 16.3.8 ) is vulnerable to cache poisoning in self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration (ISR) pages. The root cause is that response cache entries are not sufficiently boun...

CVE-2026-104900

MISP is affected by a stored cross-site scripting (XSS) vulnerability in the remote event preview index table rendering. The issue stems from the count field template failing to apply HTML encoding to the field value, even though it escapes the associated link URL. An attacker capable of creating...

CVE-2026-94544

The Next.js React framework (versions 16.3.0 through 16.3.8 ) contains a flaw where pending use cache fills for the same key do not properly separate Draft Mode requests from regular requests. Under concurrent request conditions, this lack of separation allows an unauthenticated user to receive u...

CVE-2026-94486

The Next.js React framework contains a vulnerability in the next dev development server, specifically affecting versions 16.0.0 through 16.3.8 . The server exposes a Model Context Protocol (MCP) endpoint that fails to reliably restrict cross-site requests. This flaw allows an attacker to issue un...

CVE-2026-104638

A security vulnerability exists in the onetwothreeneth HospitalManagementSystem (up to commit 9ef91ed6007314b6473110ed699dff76d158f61d) within an unknown function in the php/sessions.php file. The root cause is the manipulation of the ID argument , which leads to improper authentication . This fl...

CVE-2026-14435

The IBM Turbonomic kubeturbo agent (versions 8.16.0 - 8.20.3 ) is vulnerable to CVE-2026-14435 due to improper TLS certificate validation (CWE-295). This flaw could allow an attacker to perform man-in-the-middle techniques to obtain sensitive information. IBM recommends upgrading to version 8.20....

CVE-2026-39717

The ThimPress LearnPress WordPress plugin (versions up to and including 4.4.9.1 ) is susceptible to a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , which can lead to unauthorized access to restricted functions...

CVE-2026-39601

The WPdevelop Booking Calendar plugin (versions up to and including 11.8.4 ) is susceptible to a Race Condition vulnerability (CWE-362). This flaw arises from improper synchronization during concurrent execution when accessing shared resources, which could allow an attacker to leverage the race c...

CVE-2026-39600

The Mehul Gohil Aculect AI Companion WordPress plugin (versions

CVE-2026-39444

The PublishPress Series WordPress plugin (versions 3.1.3 and below ) is vulnerable to an Authorization Bypass Through User-Controlled Key vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , specifically identified as an Insecure Direct O...

CVE-2026-104637

A weakness exists in the onetwothreeneth HospitalManagementSystem (up to commit 9ef91ed6007314b6473110ed699dff76d158f61d ) within the php/controller.php file. Specifically, several functions—including add_patient , add_physician , add_account , update_account , update_subaccount , edit_physician ...

CVE-2026-39439

The WebSamurai WordPress plugin (versions up to and including 1.0.7 ) is affected by a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , leading to broken access control. The impact may include unauthorized modifi...

CVE-2026-32585

The airano Airano MCP Bridge WordPress plugin (versions

CVE-2026-32584

The Smart One Click Setup – Complete Demo Import & Export WordPress plugin (versions up to and including 1.4.3 ) is vulnerable to an Insertion of Sensitive Information Into Sent Data vulnerability (CWE-201). This flaw allows an attacker to retrieve embedded sensitive data from the plugin. No spec...

CVE-2026-90970

GitLab has remediated a critical vulnerability in the GitLab AI Gateway component (CWE-1336) affecting versions 18.1.6 before 19.2.4 , 19.3 before 19.3.2 , and 19.4 before 19.4.1 . An authenticated user with Duo Agent Platform access could exploit a template engine weakness to escape the prompt t...

CVE-2026-104625

A security flaw exists in CodeAstro Simple Loan Management System 1.0 within an unknown function of the /admin/index.php file. An attacker can perform a remote SQL injection by manipulating the g_name argument. Public exploits are available and may be used to conduct attacks. No specific remediat...

CVE-2026-5782

A Reflected Cross-Site Scripting (XSS) vulnerability exists in Loglama.net TurkHotspot due to the improper neutralization of input during web page generation. This vulnerability allows an attacker to execute scripts in a victim's browser. The issue affects versions of TurkHotspot through 2026-10-...

CVE-2026-104026

In Sapling SCM versions prior to v0.2.20260929-102736 , the software allows control characters to be embedded in Git subtree URLs . An attacker can exploit this by providing a maliciously constructed repository; if a target clones this repository, it can trigger code execution during otherwise re...

CVE-2026-104614

A SQL injection vulnerability exists in CodeAstro Simple Pharmacy Management System 1.0 . The flaw is located in the /SimplePharmacy-PHP/product/delete.php file, where improper processing of the ID argument allows for remote exploitation. An exploit is currently publicly available and may be used...

CVE-2026-94422

The xdg-dbus-proxy filtering proxy (versions before 0.1.9 ) contains an incorrect implementation of message filtering. An attacker can bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. This vulnerability could allow a malicious ...

CVE-2026-19652

The Divi Membership plugin for WordPress (versions up to and including 2.2.0 ) is vulnerable to unauthenticated privilege escalation via the form_id parameter. The root cause lies in the dmem_form_submit_handler() function, which determines a new user's role by iterating through all WordPress rol...

CVE-2026-93875

The JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.5.2.1 . The root cause is insufficient input sanitization and output escaping of the 'friendlyTime' parameter. This flaw allows unauthenticated attackers to inject arbi...

CVE-2026-104721

A path-traversal vulnerability exists in the logback-classic module for Java (versions 0.9.14 through 1.6.4 ). The flaw is caused by an unsanitized Mapped Diagnostic Context (MDC) discriminator value flowing into a nested FileAppender path. An attacker capable of influencing this MDC value—for ex...

CVE-2026-104613

The CodeAstro Simple Pharmacy Management System 1.0 is vulnerable to an SQL injection vulnerability within the /SimplePharmacy-PHP/product/view.php file. The root cause is the improper manipulation of the ID argument , which allows for remote execution of the attack. The exploit has been publicly...

CVE-2026-85215

A SQL Injection vulnerability exists in GG Soft Software Services Inc. Paperwork due to the improper neutralization of special elements used in SQL commands. This issue affects versions of the software through 2026-09-09 . The vulnerability allows an attacker to execute unauthorized SQL commands,...

CVE-2026-66054

The Apache Thrift C++ bindings are vulnerable to a Denial of Service (DoS) attack due to a flaw in how the software handles highly compressed data. Specifically, the C++ THeaderTransport component fails to enforce the configured maxFrameSize , allowing a remote, unauthenticated attacker to send s...

CVE-2026-61374

The Apache Thrift Java bindings are vulnerable to an Allocation of Resources Without Limits or Throttling (CWE-770) issue. Specifically, the Java TSaslTransport component fails to enforce a size limit on post-auth data-frames. This vulnerability affects versions before 0.25.0 . Impacting availabi...

CVE-2026-63772

The Apache Thrift go bindings are vulnerable to an Allocation of Resources Without Limits or Throttling vulnerability (CWE-770). This issue affects versions before 0.25.0 and can lead to an unauthenticated single-packet crash of Go Thrift servers via the THeader transform count . The high-severit...

CVE-2026-66055

The Apache Thrift framework (versions before 0.25.0 ) is vulnerable to an Allocation of Resources Without Limits or Throttling (CWE-770) flaw. Specifically, the TJSONProtocol component accepts a single JSON string or number that exceeds the configured size limit across multiple language bindings,...

CVE-2026-104612

The SourceCodester Student Result Management System 1.0 contains a Cross-Site Scripting (XSS) vulnerability within the Announcement Module . The flaw is located in the script/academic/core/new_announcement.php file, where the manipulation of the title/announcement argument allows for remote execu...

CVE-2026-11795

The Softtr Informatics Trading Limited Company E-Commerce Pack (affected through 2026-10-02) contains an observable discrepancy vulnerability (CWE-203) that facilitates Account Footprinting . This flaw allows for user enumeration or footprinting within the application. No specific root cause deta...

CVE-2026-102797

The ThemeREX Addons plugin for WordPress (versions

CVE-2026-102798

The ThemeREX Addons (trx_addons) WordPress plugin, from version n/a through 2.46.0 , is vulnerable to a Stored Cross-site Scripting (XSS) flaw. This issue is caused by the improper neutralization of input during web page generation, which could allow an attacker to inject and execute malicious sc...