CVE-2026-66922

Pivotick CVE-2026-66922 affects the tree-layout and cycle-detection code by using plain JavaScript objects as lookup tables indexed with node identifiers that can collide with Object.prototype properties (e.g., constructor, toString, proto ). This can cause inherited-property confusion, wrong typ...

CVE-2026-66921

Pivotick’s Markdown node-reference renderer is vulnerable to stored DOM-based XSS if node names are interpolated into HTML attributes and span content without proper escaping. The root cause is insufficient HTML escaping for ampersands, angle brackets, and quotation marks in nodeName, enabling an...

CVE-2026-66920

Pivotick is affected by an uncontrolled-recursion vulnerability in its graph processing and JSON viewer components. The issue arises when processing caller-supplied graph and node data, where recursive traversals over edges and node structures can exhaust the JavaScript call stack on specially cr...

CVE-2026-53921

CVE-2026-53921 is an OpenWrt odhcpd (DHCPv6) flaw described across connected documents: two independent pre-authentication overflow paths in the DHCPv6 request-processing path cause a stack buffer overflow in a 512-byte buffer when handling crafted IA options. An unauthenticated attacker sending ...

CVE-2026-65552

CVE-2026-65552 is linked to a PHP Object Injection vulnerability in the WordPress plugin Export User Data, affecting versions ≤ 2.2.6. The connected Patchstack entry identifies the vulnerability in this plugin and credits Ananda Dhakal as the finder. No exploit details, impact specifics, or fixed...

CVE-2026-66919

Pivotick exposes a DOM-based XSS in the node inspect/edit modals. Node labels/descriptions sourced from graph data were interpolated into modal HTML, enabling injected HTML/JS to run in the victim’s origin when a node is opened. The issue is mitigated by removing graph data embedding in HTML and ...

CVE-2026-18038

CVE-2026-18038 affects nextlevelbuilder GoClaw up to version 3.13.2. The vulnerability targets the ExecTool.Execute function in goclaw/internal/http/tools_invoke.go (jq Handler), enabling remote manipulation that can lead to information disclosure. An exploit has been published; remediation invol...

CVE-2026-18047

Dogtag PKI’s ACME responder is affected. The vulnerability stems from web.xml security constraints using exact URL pattern matching for admin-only enable/disable endpoints; appending a trailing slash lets an unauthenticated user bypass Tomcat authentication while RESTEasy routes the request, enab...

CVE-2026-66918

Pivotick contains a DOM-based XSS vulnerability where per-node style.svgIcon SVG markup is assigned to innerHTML without sanitization. The vulnerable code can render attacker-controlled SVGs that include executable event handlers (e.g., onerror on an ), enabling arbitrary JavaScript in the victim...

CVE-2026-65881

CVE-2026-65881 affects the Joomla extension for Joomdle (versions older than 3.1.1). The issue arises from an insecure default configuration that allowed read access and password reset of CMS accounts, effectively enabling read/write access to user accounts via the extension’s default setup. The ...

CVE-2026-15393

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE plugin for WordPress (WordPress plugin with 600+ patterns, 58 blocks) is vulnerable to Stored Cross-Site Scripting via the postMeta.font.size Block Attribute in all versions up to and including 2.2.11. The root cause is insufficient input ...

CVE-2026-15016

CVE-2026-15016 affects the Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions WordPress plugin. The vulnerability is a Stored Cross-Site Scripting issue in the Readonly User Field via the [pmpro_member_profile_edit] shortcode, exploitable in all versions up to and...

CVE-2026-65882

CVE-2026-65882 affects the Joomla Extension joomdle.com, specifically Joomdle versions prior to 3.1.1. The vulnerability is a reflected XSS in the moodle wrapper endpoint, exploitable via the goto url parameter. The CVSS-based assessment in the documents shows Network attack vector, required user...

CVE-2026-62434

CVE-2026-62434 affects Xen-based environments where a guest with Populated on Demand (PoD) enabled can reclaim non-regular guest RAM pages, potentially corrupting the guest memory management state. The issue is described consistently across NVD/NVD-linked entries and corroborated by multiple vend...

CVE-2026-62433

The CVE-2026-62433 issue relates to the Xen DM_OP handling path. Connected advisories document insufficient buffer checks in DM_OP hypercalls, allowing operations to proceed without validating the caller-supplied buffer count. This can enable reading of Xen stack contents and potentially leak dat...

CVE-2026-62432

CVE-2026-62432: The EVTCHNOP_expand_array hypercall in Xen signals a race with EVTCHNOP_reset when checking FIFO event channels, because the correct lock is not held, leading to potential dereference of a NULL pointer. Affected: Xen hypervisor interfaces referenced in the NVD entry and mirrored i...

CVE-2026-62431

CVE-2026-62431 concerns the Viridian STIMER logic, where a division by an unchecked, user-controlled divisor (which can be zero) leads to a #DE fault. Connected sources corroborate the issue across multiple feeds, with descriptions repeatedly stating a division-by-zero in periodic Viridian STIMER...

CVE-2026-62430

CVE-2026-62430 affects the Xen hypervisor (x86) in the vRTC emulation. Accesses to CMOS memory use an indirect IO port pair; Xen caches the guest-selected index but one usage of the index lacks proper locking, allowing a guest to change the index after it is checked and trigger a subsequent out-o...

CVE-2026-62429

The CVE-2026-62429 vulnerability concerns Xen hypervisor: vNUMA domain cleanup can race with other operations, exposing a race between destroying a guest domain and retrieving its vNUMA configuration.What’s affected: Xen versions 4.5+ (4.4 and earlier not affected) for guests using vNUMA with dev...

CVE-2026-62436

CVE-2026-62436 describes a race in Xen's Grant Table handling when switching between v2 and v1. The issue arises because, during the transition, the shared grant entry structure changes but the lock is intermittently released. Code that drops and re-acquires the grant table lock may wrongly assum...

CVE-2026-62435

CVE-2026-62435 : A race in grant-table handling during version switching in Xen grant-table v1→v2 can occur when the code temporarily drops and re-acquires the grant-table lock, potentially allowing the switch-related properties to change while unlocked. Affected products involve XenServer/Xen co...

CVE-2026-62428

CVE-2026-62428 describes a type-confusion in grant-copy handling where a grant may be 'pinned' to one operation, causing the permission check and copy operation to reference potentially different guest frames. This could lead to inconsistencies and incorrect permission checks. Documented impact i...

CVE-2026-62427

CVE-2026-62427 affects Xen environments where sysctl and platform-op locks are used in the control domain or Xenstore domain. The issue arises from non-fair system-wide locks and, with XSM/Flask, lock acquisition occurring before permission checks, enabling abuse that can lead to a Denial of Serv...

CVE-2026-62426

CVE-2026-62426 concerns sysctl and platform-op locking in Xen environments. The issue arises from system-wide locks used for operations in control domain or Xenstore domain, where lock acquisition lacks fairness. With XSM/Flask enabled, some lock acquisitions can occur before permission checks, c...

CVE-2026-62424

CVE-2026-62424 affects the libfsimage iso9660 driver (Rock Ridge NM record processing). Attacker-controlled on-disk fields derive several lengths without validation, with potential underflow in System Use/Rock Ridge length handling, and specifically NM record processing may rely on a good entry l...

CVE-2026-42495

CVE-2026-42495 affects the libfsimage iso9660 driver. The vulnerability stems from deriving several lengths directly from attacker-controlled on-disk fields without validation, with the System Use area calculation potentially underflowing. The connected documents do not provide explicit impact, e...

CVE-2026-42494

The CVE-2026-42494 issue affects the libfsimage iso9660 driver where on-disk fields controlled by an attacker are used to derive several lengths without validation. The directory loop assumes a valid record length, making it vulnerable to malformed directory records. Additional problems include p...

CVE-2026-62423

The provided documents describe CVE-2026-62423 as a vulnerability in libfsimage’s iso9660 driver, where the Rock Ridge extension loop assumes a valid inner record length and derives several lengths from attacker-controlled on-disk fields without validation. This can allow misinterpretation of dir...

CVE-2026-62425

CVE-2026-62425 affects the libfsimage iso9660 driver, where the Rock Ridge CE record processing derives several lengths directly from attacker-controlled on-disk fields without validation. The vulnerability arises because the Rock Ridge CE handling assumes a good size and offset, enabling manipul...

CVE-2026-42492

Xen-related CVE-2026-42492 affects XenStore domain-state handling. The root cause is in the bitmap management of the XEN_DOMCTL_get_domain_state operation, tied to the VIRQ_DOM_EXC binding; an error path could tear down the bitmap even when it wasn’t set up. Unprivileged domains can trigger this ...

CVE-2026-42493

XEN CVE-2026-42493 involves x86 shadow paging. The XSA advisory states the feature is deprecated due to costly preemption handling, with alternatives (HVM/PVH: HAP, PV: shim) available, though retained for security-risk use. Affects all x86 Xen builds with SHADOW_PAGING=y; unprivileged guests may...

CVE-2026-7187

The CVE-2026-7187 entry concerns Universal Software Inc. UKBS, affected through 2026-07-28 (through 28072026). Root cause: missing authentication for a critical function, allowing access to functionality not properly constrained by access control lists (ACLs). The issue targets the UKBS product a...

CVE-2026-66913

The CVE-2026-66913 vulnerability affects Lookyloo when processing uploaded captures and API submissions containing gzip/zlib-compressed HAR data. The root cause is unbounded decompressed size during in-memory processing of ZIP/gzip/zlib content, enabling a zip bomb to exhaust memory and disrupt s...

CVE-2026-49332

The CVE-2026-49332 entry concerns openshift/oauth-proxy. Affected component: the proxy handling of authenticated identity headers. Root cause: the proxy uses dash-variant headers (e.g., X-Forwarded-User) but does not strip underscore-variant headers (X_Forwarded_User). Because WSGI and PHP framew...

CVE-2026-41874

CVE-2026-41874 affects Quick.Cart; hard-coded, plaintext admin credentials stored in a configuration file allow local access to credentials when an attacker can access the server filesystem, potentially enabling privilege escalation. Only version 6.7 was tested; all versions are considered vulner...

CVE-2026-58221

Technical details for CVE-2026-58221 are not publicly available in the provided documents. Monitor for updates from the issuing org; this entry currently provides only a reserved placeholder and no vulnerability specifics.

CVE-2026-6949

Technical details for CVE-2026-6949 are not publicly available in the provided documents; monitor for updates.

CVE-2026-58224

Technical details for CVE-2026-58224 are not publicly available in the provided documents. Monitor for updates as the entry is reserved/no details.

CVE-2026-4648

CVE-2026-4648 concerns CasfID Servicios Tecnológicos S.L.U. NFC wristbands used at Resurrection Fest 2025, which rely on MIFARE Classic (FM11RF08S). The underlying issue is an insecure cryptographic algorithm in the authentication process, enabling an attacker to retrieve access keys via Backdoor...

CVE-2026-65544

Summary: WordPress plugin Super Socializer (versions

CVE-2026-13110

The CVE concerns the Storegrowth Sales Booster plugin for WordPress (up to version 2.1.0) with a Missing Authorization flaw in the bogo_category_msg_create AJAX handler. The vulnerability arises from a missing capability check, as the handler is registered for both authenticated (wp_ajax_) and un...

CVE-2026-15411

The CVE-2026-15411 entry describes a vulnerability in StoreGrowth: Smart Sales Booster for WooCommerce (WordPress). Affected component: BoGo/Popup AJAX flow, specifically the create_popup AJAX action. Root cause: the plugin does not properly verify authorization, and the ajd_protected nonce used ...

CVE-2026-15444

The CVE affects the Tutor LMS WordPress plugin up to version 4.0.1. It is vulnerable to a generic SQL Injection in the coupon_code parameter due to insufficient escaping and an inadequately prepared SQL query. Exploitation requires authenticated access at administrator level or higher, enabling a...

CVE-2026-16773

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services WordPress plugin is affected up to version 8.5.9 by a Sensitive Information Exposure in the wpbot_send_email_transcript_free AJAX action. This allows unauthenticated attackers to exfiltrate full chat transcripts and associated ...

CVE-2026-13440

The CVE concerns StoreGrowth: Smart Sales Booster for WooCommerce (WordPress) plugin. A Stored Cross-Site Scripting vulnerability exists via the message_popup parameter in all versions up to 2.1.0, due to insufficient input sanitization and output escaping. The exploit is feasible for unauthentic...

CVE-2026-16774

The CVE-2026-16774 entry concerns the WordPress Chatbot plugin vulnerable to Missing Authorization via the wpcs_send_email() AJAX handler in versions up to and including 8.5.9. The wpcs_send_email() function is registered for both wp_ajax_wpcs_send_email and wp_ajax_nopriv_wpcs_send_email without...

CVE-2026-15025

The Uncanny Automator WordPress plugin (up to version 7.3.2) is affected by Missing Authorization via four AJAX endpoints (ajax_fetch_labels, segments_fetch, tags_fetch, render_contact_fields). The issue stems from missing capability checks and nonce verification in the handlers, allowing authent...

CVE-2026-65543

The connected document identifies a concrete vulnerability: WordPress Vimeo plugin versions <= 1.2.2 have a Sensitive Data Exposure vulnerability, discovered by 0xzenko. The CVE entry CVE-2026-65543 in the Initial document is reserved with no public technical details. Details available in the ...

CVE-2026-65542

The connected PatchStack entry identifies a vulnerability in the WordPress plugin Super Socializer (versions ≤ 7.14.5) described as Broken Authentication . This CVE-2026-65542 context, based on the patch entry, provides no further technical details beyond the vulnerability type and affected versi...

CVE-2026-58342

A vulnerability (CVE-2026-58342) affects Moodle’s quiz feature, where missing CSRF protection for adding section headings could allow an authenticated user to be tricked into performing unintended actions in a quiz, potentially causing unauthorized modifications or disruptions. The Red Hat adviso...