CVE-2026-76009

The Next-Cart Store to WooCommerce Migration WordPress plugin (versions ≤ 3.9.8) is vulnerable to unauthenticated authentication bypass via the NCWM_Kitconnect::run() function. The REST route /wp-json/next_cart/v1/migration is registered with permission_callback set to __return_true and relies on...

CVE-2026-84908

The WPFunnels WordPress plugin (versions ≤ 3.12.13 ) is vulnerable to Missing Authorization in its wpfnl_load_payment AJAX action, which is registered for both authenticated and unauthenticated users. The underlying add_offer_product_to_cart() function performs no nonce verification, no capabilit...

CVE-2026-83593

The WPBot – AI ChatBot plugin for WordPress (versions up to and including 8.7.3 ) is vulnerable to an unauthenticated Stored Cross-Site Scripting (XSS) flaw via the 'conversation' parameter . The root cause is insufficient input sanitization and output escaping , compounded by a nonce check that ...

CVE-2026-19946

The Awesome Support plugin for WordPress (versions up to and including 6.3.9 ) contains a Missing Authorization flaw in the wpas_do_mr_deny_user() function. Unlike its counterpart wpas_do_mr_activate_user(), this function fails to enforce a current_user_can('edit_users') capability check, relying...

CVE-2026-77262

CVE-2026-77262 affects sooperset/mcp-atlassian versions below 0.22.0. The confluence_upload_attachment MCP tool passes its file_path argument directly to open(file_path, "rb") with no path validation, enabling arbitrary file read (CWE-22 Path Traversal). Because the default streamable-http transp...

CVE-2026-11991

CVE-2026-11991 is an authorization bypass (CWE-639) in the FlowForms WordPress Conversational Form Builder plugin, affecting versions up to 1.1.1 . The REST API publish endpoint (/flowforms/v1/forms/{id}/publish) checks only the generic edit_posts capability—held by the Contributor role—without v...

CVE-2026-49926

CVE-2026-49926 affects the libjxl component in Android, as referenced by Android Security Bulletin entry ASB-A-513832249 . The vulnerability is a logic error that can lead to a remote denial of service without requiring additional execution privileges or user interaction. The CVE entry itself is ...

CVE-2026-49913

CVE-2026-49913 affects Android and resides in the descramble function of DescramblerImpl.cpp . The root cause is a precondition check failure that permits a possible arbitrary memory access , leading to local escalation of privilege without additional execution privileges or user interaction. The...

CVE-2026-21113

CVE-2026-21113 is an improper export of Android application components in Samsung VisualVoicemail prior to version 20.1.00.05 . The flaw allows local attackers with low privileges to initiate a call without proper permission , resulting in low impacts to confidentiality, integrity, and availabili...

CVE-2026-21112

CVE-2026-21112 is an improper input validation flaw in Samsung Tips prior to Android 17 . A local attacker with low privileges can launch an arbitrary activity with Samsung Tips privilege , resulting in high confidentiality impact on the vulnerable system. User interaction is required to trigger ...

CVE-2026-21111

CVE-2026-21111 is an out-of-bounds write vulnerability in the libsthmbc.so library affecting Samsung One UI devices prior to One UI 8.5 . A local attacker with low privileges can write to out-of-bounds memory, potentially compromising the confidentiality of the vulnerable system (CVSS 4.0 score 6...

CVE-2026-45529

CVE-2026-45529 affects Android , specifically the queryInternal method in MmsSmsProvider.java . The root cause is a confused deputy that allows MMS/SMS data to be accessed across user profiles . The impact is local escalation of privilege with no additional execution privileges required and no us...

CVE-2026-21110

CVE-2026-21110 is an out-of-bounds write vulnerability in libsavscmn.so affecting Samsung devices running One UI prior to 8.5 . A local attacker with low privileges can exploit this flaw to achieve arbitrary code execution on the vulnerable system. The CVSS 4.0 base score is 6.9 (MEDIUM) , reflec...

CVE-2026-21109

CVE-2026-21109 is an improper access control vulnerability in Samsung's Watch Plugin , affecting versions prior to Android Watch 17 . A local attacker with no required privileges can access sensitive information , resulting in low confidentiality impact. The CVSS 4.0 score is 2.1 (LOW) , with an ...

CVE-2026-21108

CVE-2026-21108 is an improper export of Android application components in Bixby Touch prior to version 4.3.01.17 . The flaw allows a local attacker with no prior privileges and no user interaction to access sensitive information , resulting in a high confidentiality impact . Samsung Mobile rates ...

CVE-2026-21107

CVE-2026-21107 is an out-of-bounds write vulnerability in Samsung Notes prior to version 4.4.45.5 , allowing a local attacker with low privileges to write to out-of-bounds memory. The CVSS 4.0 base score is 6.9 (MEDIUM) , with a local attack vector, low complexity, and no user interaction require...

CVE-2026-21106

CVE-2026-21106 is an improper verification of intent by a broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 . A local attacker with no privileges required can exploit this flaw to disable enhanced data protection settings , resulting in a low availability impact. The vendor-ass...

CVE-2026-21105

An improper access control flaw in Samsung's Collection app on Android 15 (prior to version 1.0.1.14) and Android 16 (prior to version 2.0.02.7) allows local attackers to access sensitive information without requiring privileges or user interaction. The vulnerability is rated CVSS 4.0 5.9 (MEDIUM...

CVE-2026-21104

CVE-2026-21104 is a heap-based buffer overflow in the KnoxVault trustlet on Samsung mobile devices, affecting firmware prior to SMR Sep-2026 Release 1 . The flaw allows a local privileged attacker to achieve arbitrary code execution . The CVSS 4.0 base score is 7.1 (HIGH) , with a local attack ve...

CVE-2026-21103

CVE-2026-21103 is a path traversal vulnerability in Samsung's GalaxyDiagnostics component, affecting versions prior to SMR Sep-2026 Release 1 . A physical attacker with no required privileges or user interaction can exploit this flaw to access files with system privilege , resulting in high confi...

CVE-2026-21102

This critical (CVSS 4.0: 9.3) vulnerability is a use-after-free in the DualDAR component of Samsung mobile devices, prior to the SMR September 2026 Release 1 . A local privileged attacker can leverage the flaw to execute arbitrary code with root privileges , resulting in high impact on confidenti...

CVE-2026-21101

CVE-2026-21101 addresses an improper input validation flaw in the DualDAR driver on Samsung Mobile devices. The defect allows local privileged attackers to potentially execute arbitrary code with root privilege , resulting in high impact to confidentiality, integrity, and availability of the vuln...

CVE-2026-21100

CVE-2026-21100 is an improper access control vulnerability in Samsung's SystemUI component. A local attacker with low privileges can exploit this flaw to launch arbitrary activity on the device, potentially gaining high confidentiality and integrity impact without affecting availability (NVD CVSS...

CVE-2026-21099

CVE-2026-21099 is an improper access control vulnerability in SettingsProvider on Samsung mobile devices. A local attacker with no privileges required and no user interaction can access sensitive information on the vulnerable system. The CVSS 4.0 base score is 5.1 (MEDIUM) , reflecting the local ...

CVE-2026-21098

CVE-2026-21098 is an improper access control vulnerability in Samsung's Link to Windows feature, affecting versions prior to SMR Sep-2026 Release 1 . A local attacker can establish a connection with the PC without proper user interaction , resulting in high impact on availability as scored by the...

CVE-2026-21097

CVE-2026-21097 is an improper authentication flaw in Samsung Mobile's ActivityTaskManagerService , present prior to SMR Sep-2026 Release 1 . A local privileged attacker can exploit it to launch an arbitrary activity , resulting in low impact to confidentiality, integrity, and availability on the ...

CVE-2026-21096

CVE-2026-21096 is a heap-based buffer overflow in the JPEG decoder of libimagecodec.quram.so in Samsung Mobile devices, prior to the SMR Sep-2026 Release 1 . The vulnerability allows remote attackers to execute arbitrary code, with no user interaction or privileges required, though the attack req...

CVE-2026-21095

CVE-2026-21095 is a heap-based buffer overflow in the DNG decoder of the libimagecodec.quram.so library on Samsung mobile devices. The vulnerability allows remote attackers to achieve arbitrary code execution by supplying a crafted DNG image file, with the attack vector rated as network-based, lo...

CVE-2026-21094

CVE-2026-21094 is an improper input validation flaw in wpa_supplicant on Samsung mobile devices, allowing an adjacent attacker to perform an out-of-bounds memory write . NVD scores it 8.8 (HIGH) under CVSS 3.1, while Samsung's own CNA rating is 6.1 (MEDIUM) under CVSS 4.0, reflecting higher attac...

CVE-2026-21093

A stack-based buffer overflow in the PROCA trustlet on Samsung mobile devices allows a local privileged attacker to write out-of-bounds memory, resulting in a high impact to vulnerable-system confidentiality (CVSS 4.0 base score 5.6, MEDIUM ). The attack requires local access, high privileges, an...

CVE-2026-21092

CVE-2026-21092 is a path traversal vulnerability in the ImsService component of Samsung mobile devices, affecting versions prior to SMR Sep-2026 Release 1 . The flaw allows remote attackers to create image files with system server privilege , potentially compromising system integrity. The assigne...

CVE-2026-21091

CVE-2026-21091 is an out-of-bounds write vulnerability in libcodec2secevrcdec.so on Samsung mobile devices, prior to SMR Sep-2026 Release 1 . A local attacker with low privileges can write out-of-bounds memory. NVD rates this CVSS 3.1: 7.8 (HIGH) , while Samsung's CNA scores it CVSS 4.0: 4.8 (MED...

CVE-2026-21090

CVE-2026-21090 is an out-of-bounds write vulnerability in libsaviextractor.so on Samsung mobile devices, affecting firmware prior to SMR Sep-2026 Release 1 . A local attacker with low privileges can write to out-of-bounds memory. NVD assigns a CVSS 3.1 score of 7.8 (HIGH) , while Samsung's CNA ra...

CVE-2026-21089

CVE-2026-21089 is an out-of-bounds memory write vulnerability in libsubextractor.so on Samsung mobile devices, caused by improper input validation when removing a style tag. A local attacker with low privileges can exploit it, potentially leading to high impact on confidentiality, integrity, and ...

CVE-2026-21088

CVE-2026-21088 is an improper input validation vulnerability in libsubextractor.so on Samsung mobile devices, triggered when loading a subtitle frame. The flaw allows a local attacker to perform an out-of-bounds memory write , potentially leading to high impact on confidentiality, integrity, and ...

CVE-2026-21087

CVE-2026-21087 is an out-of-bounds write vulnerability in libmdnie.so , a library within Samsung Mobile's firmware. It affects devices prior to the SMR Sep-2026 Release 1 security update. A local attacker with no required privileges or user interaction can trigger the flaw to execute arbitrary co...

CVE-2026-21086

CVE-2026-21086 is an improper authorization vulnerability in the ProxyHandler component of Samsung Mobile devices prior to SMR Aug-2026 Release 1 . A local attacker with low privileges can access the proxy configuration. The Samsung Mobile CNA assigned a CVSS 4.0 base score of 4.8 (MEDIUM) with a...

CVE-2026-21085

CVE-2026-21085 is an out-of-bounds write in the Keymaster trustlet on Samsung mobile devices, prior to the SMR Sep-2026 Release 1 . A local privileged attacker can write out-of-bounds memory, potentially leading to significant compromise of confidentiality, integrity, and availability of the vuln...

CVE-2026-19945

The WP Crowdfunding plugin for WordPress is vulnerable to stored cross-site scripting (XSS) via the first_name parameter in all versions up to and including 2.2.1 , caused by insufficient input sanitization and output escaping. An authenticated attacker with subscriber-level access or above can i...

CVE-2026-11821

The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) WordPress plugin is vulnerable to authorization bypass in all versions up to and including 4.1.17 . The root cause is a missing authorization check on the notification-flow REST API endpoint , allowing authenticated ...

CVE-2026-87737

mirage-crypto-ec before 2.4.0 (an OCaml package) contains a timing side channel in NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret value. This may allow an attacker to recover cryptographic secrets via timing measurements. The CVSS 3.1 score is 5.9...

CVE-2026-87736

The mirage-crypto-ec package for OCaml, versions before 2.3.0 , contains an out-of-bounds read in EC public key handling for compressed points . The vulnerability is network-reachable with low complexity and requires low privileges, carrying a CVSS 3.1 score of 4.3 (MEDIUM) with a low availabilit...

CVE-2026-87735

An issue in the mirage-crypto-pk OCaml package before version 2.3.0 triggers an undocumented exception when processing a small message during RSA decryption or encryption . The vulnerability is rated MEDIUM (CVSS 4.3) , with a network attack vector, low complexity, and low privileges required, re...

CVE-2026-87734

CVE-2026-87734 affects the utcp package for OCaml prior to version 0.0.6 . The vulnerability stems from out-of-order segment reassembly , which enables a remote denial of service with no authentication required (CVSS 3.1 score: 7.5 HIGH , vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Remediation i...

CVE-2026-87733

mirage-crypto-ec for OCaml , versions before 2.2.0 , contains a flaw in the ECDSA functions {P256, P384, P521}.Dsa.pub_of_octets. The function accepts 0x00 —the encoding of the point at infinity —as a valid public key, allowing an attacker to forge ECDSA signatures without knowledge of the privat...

CVE-2026-87732

CVE-2026-87732 affects the mirage-crypto OCaml package before 2.2.0 . The AES.GCM.authenticate_decrypt_into and Chacha20.authenticate_decrypt_into functions write the decrypted plaintext into a caller-provided buffer before comparing the authentication tag. On a forged tag the function correctly ...

CVE-2026-49313

CVE-2026-49313 is a permission control vulnerability in the app lock module of a Huawei device (CNA: [email protected]). Successful exploitation may affect service confidentiality . The CVSS 3.1 score is 5.5 (Medium) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , indicating a local attack ...

CVE-2026-49309

CVE-2026-49309 is a permission control vulnerability in the Settings module of a Huawei consumer product, reported by Huawei's PSIRT. Successful exploitation may affect service confidentiality . The CVSS 3.1 score is 4.8 (MEDIUM) with a vector of AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N, indicating th...

CVE-2026-12855

CVE-2026-12855 is an unvalidated memory boundary flaw in H19WMIHandlerSmm , an SMM (System Management Mode) handler component in UEFI firmware. The vulnerable code was developed specifically for HP projects and is associated with Insyde firmware (per the Insyde security advisory reference). An at...

CVE-2026-41987

CVE-2026-41987 is a permission control vulnerability in the app management module of a Huawei consumer device, as reported by Huawei's PSIRT (CNA source: [email protected]). Successful exploitation may affect availability , with a CVSS 3.1 base score of 6.2 (MEDIUM) . The attack vector is local , ...