CVE-2026-15328

CVE-2026-15328 affects IBM WebSphere Application Server 9.0, IBM WebSphere Application Server 8.5, and IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.7. The issue is described as an HTTP request smuggling vulnerability due to inconsistent interpretation of HTTP requests. Affecte...

CVE-2026-6881

Summary: CVE-2026-6881 describes an SQL injection in Ellucian Advance Web and Legacy Advance (Giving Reports) that allows an authenticated attacker to exfiltrate data by crafting SQL in the class credit field. Affected products: Ellucian Advance Web and Legacy Advance (all versions). Ellucian CRM...

CVE-2026-16107

Summary: IBM TS4500 CLI tool (versions 0.1.31–1.12.0.0) does not validate TLS server certificates, enabling potential MitM information disclosure. Root cause: improper TLS certificate validation in the CLI component. Impact: exposure of sensitive information under network attack. Affected product...

CVE-2026-16347

MikroTik RouterOS contains an API authentication weakness where rate-limiting, account lockout, and source-based restrictions are not effectively enforced. The system can permit repeated failed logins; some versions include a fixed per-connection delay that can be bypassed via concurrent sessions...

CVE-2026-16184

CVE-2026-16184 affects IBM WebSphere Application Server 9.0 and 8.5, enabling an authentication bypass via a crafted unauthenticated request. IBM’s security bulletins tie this vulnerability to WebSphere components used with Rational ClearQuest/JazzSM, and provide remediation guidance. The recomme...

CVE-2026-16192

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability when the restConnector-2.0 feature is enabled. The issue impacts Liberty deployments using the restConnector-2.0 feature and is scored with CVSS 3.1 base metrics: AV:N/AC:L/PR:L/UI:...

CVE-2026-1918

IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0–6.2.0.5_2, 6.2.1.0–6.2.1.1_2, and 6.2.2.0–6.2.2.0_1 store potentially sensitive information in log files that could be read by a privileged user (CWE-532). CVSSv3.1 base score 4.9 (ATT&CK/impact details not indicating expl...

CVE-2026-3157

IBM Sterling B2B Integrator and IBM Sterling File Gateway are affected by CVE-2026-3157 due to information disclosure from sensitive data in source code comments of a mailbox component. Affected versions: 6.2.0.0–6.2.0.5_2, 6.2.1.0–6.2.1.1_2, and 6.2.2.0–6.2.2.0_1. Remediation: upgrade to 6.2.0.6...

CVE-2026-3158

The advisory covers IBM Sterling B2B Integrator and IBM Sterling File Gateway. Affected versions include 6.2.0.0–6.2.0.5_2, 6.2.1.0–6.2.1.1_2, and 6.2.2.0–6.2.2.0_1. The root cause is information disclosure caused by sensitive data in source code comments within a dashboard component. Impact is l...

CVE-2026-55554

Summary of CVE-2026-55554 (Dompdf) : Dompdf (PHP HTML-to-PDF converter) versions up to 3.15 are affected by a chroot validation bypass in validateLocalUri(), which uses a realpath-normalized prefix check with strpos. Because the trailing slash is removed during normalization, the chroot path is o...

CVE-2026-55555

Dompdf (versions ≤3.15) is vulnerable to a File Existence Oracle via the CSS @font-face directive, allowing an attacker to probe local files using file:// references and trigger memory exhaustion. The vulnerability hinges on observable differences: when a referenced local file exists, Dompdf proc...

CVE-2026-57511

CVE-2026-57511 concerns SuperPlane prior to 0.30.0, where an SMTP header injection flaw can be triggered by CRLF sequences in the webhook-delivered event title. This allows unauthenticated attackers to manipulate the SMTP DATA command, adding Bcc recipients for exfiltration, forging the From addr...

CVE-2026-57510

SuperPlane before 0.27.0 suffers a broken object-level authorization flaw in the CanvasService gRPC handlers. Authenticated users with viewer-level access to one organization can access resources from other organizations by supplying arbitrary canvas or queue UUIDs without proper organization sco...

CVE-2026-48060

Litestar (Python ASGI framework) is affected when using a template engine with CSRF protection configured inline with the templating docs. Prior to version 2.20.0, the csrftoken contents could be injected into rendered HTML due to a lack of escaping, enabling HTML injection and potential XSS. The...

CVE-2026-11391

CVE-2026-11391 involves a SQL injection vulnerability in Tanium’s Patch module. The connected documents confirm Tanium addressed the vulnerability, with a CVSS v3.1 base score of 6.3 (Network attack vector, Low privileges required, No user interaction; confidentiality, integrity, and availability...

CVE-2026-49258

Nebula Mesh Web UI contains ownership checks gaps in versions ≤ 0.3.5, allowing authenticated non-admin operators to access, block, or delete resources across operators via endpoints such as /ui/hosts/{id}/block, /ui/hosts/{id}, /ui/hosts, /ui/networks, and /ui/events. The root cause is improper ...

CVE-2026-48058

Summary of CVE-2026-48058 (nebula-mesh) nebula-mesh (Slack Nebula mesh control plane) versions prior to 0.3.2 expose a cookie security flaw: internal/web/session.go and internal/web/oidc.go set HttpOnly and SameSite=Lax on cookies but omit the Secure attribute. A plaintext HTTP request to the ori...

CVE-2026-5114

The CVE-2026-5114 entry concerns the SpeedyCache WordPress plugin, affecting all versions up to 1.3.8. The root cause is a mismatch between CSS URL validation (accepts query strings like .css?...) and path resolution (strips query strings), plus no validation that the resolved file is a CSS file....

CVE-2026-4912

CVE-2026-4912 : The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to and including 7.0.3. The vulnerability is caused by get_urls_from_html() using DOMDocument::loadHTMLFile() to fetch iframe source URLs with an insuffici...

CVE-2026-15304

The CVE affects the WordPress plugin Plugin Organizer . The vulnerability exists in versions up to and including 10.2.4 due to insufficient escaping of the PO_plugin_path parameter in the perform_plugin_search() function, where esc_sql() output is passed as the replacement string to preg_replace(...

CVE-2026-15992

The WP Password Policy plugin for WordPress (

CVE-2026-18107

CRIU vulnerability CVE-2026-18107 involves how CRIU handles restartable sequences (rseq) during checkpoint/restore. A container-embedded process can register an rseq critical section that hijacks CRIU’s parasite code injection, enabling spoofed credentials saved in the checkpoint image. On restor...

CVE-2026-16771

The CVE-2026-16771 issue affects the Arris BGW210-700 gateway (firmware 2.7.7 and earlier). Multiple CGI endpoints under /cgi-bin/*.ha lack server-side authentication, relying on client-side controls, allowing any unauthenticated LAN user to read sensitive configuration data and modify device set...

CVE-2026-47768

CVE-2026-47768 affects nebula-mesh up to and including v0.3.1, where newly minted operator API keys are exposed in the redirect URL?new_key and related query strings. The root cause is tokens being placed in the URL during the handleOperatorCreateAPIKey flow, making them observable via the browse...

CVE-2026-66745

Artica Proxy 4.50 (before SP7) is affected by a session-fixation flaw that allows an unauthenticated attacker to hijack an admin session by pre-setting a known PHPSESSID on a victim’s browser prior to login through fw.login.php, gaining a fully authenticated admin session on port 9000. Affected v...

CVE-2026-4932

IBM PowerVM Hypervisor vulnerability CVE-2026-4932 affects FW1110.00–FW1110.20 and FW1060.00–FW1060.71. Affects PowerVM Hypervisor and TME hardware; attacker with physical access to Transparent Memory Encryption could decrypt memory due to insufficient cryptographic entropy. Impact is high confid...

CVE-2026-7362

IBM Sterling B2B Integrator and IBM Sterling File Gateway are affected by CVE-2026-7362. A authenticated user could obtain sensitive information that should be accessible only to privileged users. Affected versions: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.1.0–6.2.1.1_2 and 6...

CVE-2026-59932

CVE-2026-59932 concerns PhpSpreadsheet’s Gnumeric reader. The issue arises when reading attacker-supplied .gnumeric files: if the file starts with gzip magic bytes, the reader decodes the full compressed content via gzdecode() without a decompressed-size cap, which can cause memory exhaustion and...

CVE-2026-48394

CVE-2026-48394 affects Adobe Bridge. It is an out-of-bounds write (CWE-787) vulnerability in Bridge that could allow arbitrary code execution in the context of the current user when a victim opens a malicious file. The CVSS 3.1 vector indicates a local attack with user interaction required (UI:R)...

CVE-2026-48391

Technical details about CVE-2026-48391 are not publicly provided in the supplied documents; no affected products/versions/root cause/fixes are disclosed. Monitor for updates.

CVE-2026-48374

Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") vulnerability that could enable arbitrary file system read outside the intended scope. Exploitation requires user interaction : a victim must open a malicious file. The CVSS 3.1 metrics indicat...

CVE-2026-7769

CVE-2026-7769 affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (versions 6.2.0.0–6.2.0.5_2, 6.2.1.0–6.2.1.1_2, 6.2.2.0–6.2.2.0_1). Root cause: SQL injection in the backend database interface. Impact: remote attacker could view, add, modify, or delete data in the back-end DB. CVSS...

CVE-2026-48392

This CVE affects Adobe Bridge (Bridge). It describes an out-of-bounds write (CWE-787) vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The connected documents provide the vuln...

CVE-2026-48390

Technical details about CVE-2026-48390 are not publicly available in the provided documents. Monitor for updates from the sources referenced in the CVE entry.

CVE-2026-48395

CVE-2026-48395 : Bridge is affected by an Untrusted Search Path (CWE-426) vulnerability enabling arbitrary code execution in the current user context. Exploitation requires the victim to open a malicious file (user interaction) and is described with a LOCAL attack vector and HIGH impact on confid...

CVE-2026-48393

CVE-2026-48393 concerns Adobe Bridge. The vulnerability is an out-of-bounds write (CWE-787) in Bridge that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The available documents do not specify...

CVE-2026-48396

CVE-2026-48396 refers to an Incorrect Authorization vulnerability in the Bridge product (Bridge/Adobe Bridge). The issue could allow arbitrary code execution in the context of the current user . Exploitation requires user interaction, as a victim must open a malicious file. The CVSS v3.1 metrics ...

CVE-2026-47726

CVE-2026-47726 (nebula-mesh) affects nebula-mesh prior to v0.3.2. The handleGetAuditLog endpoint in internal/api/audit.go does not enforce an admin check, allowing any operator API key with bearer authentication to retrieve the full audit log via store.ListAuditEntries (limit 1000). Exposed data ...

CVE-2026-16498

The terraform-mcp-server package is affected up to version 1.0.x; in the streamable-HTTP stateless transport mode, a cross-tenant credential reuse vulnerability allows one user’s Terraform token to be used to execute tool calls for subsequent users. Root cause: improper isolation between tenants ...

CVE-2026-16496

The CVE concerns terraform-mcp-server prior to version 1.1.0, where an authorization bypass in the streamable-HTTP stateful transport mode could allow a user who obtains another user’s MCP session ID to execute tool calls using that user’s Terraform credentials. Affected component: terraform-mcp-...

CVE-2026-47725

Summary (CVE-2026-47725) Nebula-mesh web UI lacked CSRF protection on all /ui/* mutating endpoints (POST/PUT/PATCH/DELETE) prior to v0.3.3. A session-cookie/Lax-SameSite boundary and third-party page triggers (including a forced GET /ui/logout via an image tag) enable potential privilege escalati...

CVE-2026-50738

A use-after-free exists in pglogical's worker signaling code. A worker structure can be dereferenced after its underlying slot has been freed or recycled during normal worker lifecycle events, making the condition reachable during replication operations. A low-privileged user can influence worker...

CVE-2026-50737

The CVE-2026-50737 entry describes a vulnerability in pglogical where, during replication of changes for a row missing some columns, the subscriber evaluates the table’s default expressions. The apply worker operates with superuser-equivalent privileges by default, so any function invoked by such...

CVE-2026-50736

The CVE concerns the pglogical queue mechanism in PostgreSQL, where the apply worker runs payloads at superuser privilege. A publisher can craft queue messages to execute arbitrary SQL on a subscriber as superuser, breaking tenant isolation in shared deployments. Exploitation requires directing a...

CVE-2026-50735

Technical details about CVE-2026-50735 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-14869

The CVE-2026-14869 entry documents a vulnerability in terraform-mcp-server (pre-1.1.0) where a flaw in the streamable-HTTP transport allows an unauthenticated remote attacker to trigger server-side requests that can redirect the Terraform API calls and the server-side authorization token to an at...

CVE-2026-48372

Format Plugins (Adobe) suffers a heap-based buffer overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). A security update (Adobe APSB26-87) addresses critical vulnerabilities in Format Pl...

CVE-2026-48388

Adobe Photoshop Installer is affected by an Uncontrolled Search Path Element vulnerability. An attacker could achieve arbitrary code execution in the context of the current user by placing a malicious library in a directory that the installer searches. Exploitation requires user interaction, with...

CVE-2026-48025

CVE-2026-48025 (nebula-mesh) describes a memory-safety issue in versions prior to 0.3.7 where decrypted CA private keys (ed25519.PrivateKey) are constructed and stored in memory by the CAManager and not wiped after use. The problem arises when internal/pki/resolver.go constructs CAManager with th...

CVE-2026-59933

PhpSpreadsheet is affected by a memory-exhaustion denial-of-service in the OLERead::read() path when parsing attacker-controlled XLS/OLE metadata. The vulnerability stems from an unguarded sector-chain walk in the OLE reader that can loop indefinitely (self-loop in small-block depot/sector chains...