CVE-2026-129110

sysPass versions 3.0.1 through 3.2.11 are vulnerable to an authentication bypass because the install/install handler fails to check if the instance is already installed. An unauthenticated attacker can POST to this handler to overwrite config.xml , redirect the application to an attacker-controll...

CVE-2026-95615

Zenitel Connect versions before 1.11.0 are vulnerable to an OS command injection vulnerability within the audio messages API. This flaw exists in the /api/system/audio_messages endpoint due to the improper neutralization of special elements in the filename parameter. A remote authenticated user c...

CVE-2026-95378

A path traversal vulnerability exists in the turbineweb web interface certificate upload endpoint (/api/certificate/upload) of Zenitel devices, specifically models VSFF6, VSFF8, VSFF8MP, VSFF8MN, and VSFT running software versions 10.0.3.0 before 10.1.3.0 . The flaw allows authenticated administr...

CVE-2026-95613

The pREST database REST API in Zenitel Connect firmware before version 1.11.0 is vulnerable to unauthorized privilege escalation. The application uses a platform CA private key—accessible on a shared data volume—to sign and verify JWTs. It incorrectly sets the PostgreSQL session role based on an ...

CVE-2026-95379

The turbineweb web interface in Zenitel devices (VSFF6, VSFF8, VSFF8MP, VSFF8MN, and VSFT ) is vulnerable to a path traversal flaw in the certificate.deleteCertificate JSON-RPC method (POST /api/rpc). This vulnerability exists in software versions 10.0.3.0 before 10.1.3.0 . An authenticated admin...

CVE-2026-105623

The web interface in Zenitel Connect (versions before 1.11.0) is vulnerable to an information disclosure flaw because it serves production JavaScript source maps without authentication. A remote attacker can request these source map files to obtain the complete front-end source code, exposing API...

CVE-2026-126818

The Ruby object-document mapper Mongoid (version 9.1.1) fails to apply automatic field-level encryption to specific fields when the data model utilizes class inheritance . This flaw allows values designated for encryption to be stored in the database in readable plaintext without errors or warnin...

CVE-2026-105624

The login flow in Zenitel Connect versions before 1.11.0 is vulnerable to a denial of service (DoS) due to an overly restrictive account lockout mechanism (CWE-645). A remote attacker can repeatedly trigger failed login requests for a known or guessed username, causing a temporary lockout of targ...

CVE-2026-105622

Zenitel Connect versions before 1.11.0 are vulnerable to an improper restriction of excessive authentication attempts (CWE-307) within the WAMP-CRA (challenge-response) authentication path. The underlying cause is the lack of account lockout or rate limiting when a broker issues a challenge and t...

CVE-2026-123635

The elixir-grpc grpc_server component (versions 1.0.0 to before 1.1.0) is vulnerable to a Missing Release of Resource after Effective Lifetime (CWE-772) flaw in the grpc_stream_h handler. When a server refuses a call early (e.g., due to max_body_size limits), Cowboy drops in-flight DATA frames wi...

CVE-2026-126817

A flaw in the Mongoid ODM automatic client-side encryption schema generation may cause values intended for encryption to be stored as cleartext . This occurs specifically when more than one model is mapped onto the same storage location . The system fails to raise any errors or warnings during th...

CVE-2026-105625

The web interface in Zenitel Connect versions prior to 1.11.0 is vulnerable to a security flaw where it loads an integration iframe without necessary sandboxing or origin restrictions . This allows a remote attacker to present phishing content to authenticated users by using a crafted frame sourc...

CVE-2026-129099

The Cudy TR3000 router, running firmware versions before 2.5.42 , is vulnerable to a remote code execution (RCE) flaw. The issue stems from an incomplete denylist that fails to filter specific OpenVPN client configuration directives, such as tls-verify or ipchange. An authenticated administrator ...

CVE-2026-129100

The Cudy TR3000 (versions prior to 2.5.42 ) is vulnerable to a remote code execution (RCE) flaw. This vulnerability allows authenticated administrators to execute arbitrary commands with root privileges by uploading maliciously crafted OpenVPN private or tls-auth keys. An attacker can prematurely...

CVE-2026-129102

The Cudy TR3000 (versions before 2.5.42 ) is vulnerable to a command injection flaw in the vpn.set_conf RPC method. Authenticated administrators can exploit this by injecting newlines into the IPsec keyexchange field to append a second leftupdown directive to ipsec.conf. This allows for the execu...

CVE-2026-129101

The Cudy TR3000 (versions before 2.5.42 ) is vulnerable to a mass assignment vulnerability within the vpn.set_conf App RPC method. This flaw allows authenticated administrators to inject arbitrary OpenVPN server options . Specifically, an attacker can set enabled=1 and provide a malicious up opti...

CVE-2026-129103

The Cudy TR3000 (versions before 2.5.42 ) is vulnerable to a command injection vulnerability. Authenticated administrators can execute commands with root privileges by injecting newlines into the reboot_time parameter. The vulnerable mechanism involves the /etc/init.d/autoreboot script, which inc...

CVE-2026-129104

The Cudy TR3000 (versions before 2.5.42 ) is susceptible to a dnsmasq configuration injection vulnerability (CWE-93). Authenticated administrators can inject arbitrary directives by embedding a newline character into the net.set_dhcp leasetime field. This allows attackers to append address= entri...

CVE-2026-129105

The Cudy TR3000 (versions before 2.5.42 ) is vulnerable to an option injection vulnerability due to improper neutralization of CRLF sequences (CWE-93 ). Authenticated administrators can inject arbitrary pppd options by embedding quotes and newlines within L2TP credentials . Specifically, submitti...

CVE-2026-105671

The login flow in Zenitel Connect versions before 1.11.0 is vulnerable to username enumeration . The application returns distinct error responses based on whether a submitted username exists in the system, allowing remote attackers to identify valid user accounts using crafted login requests. No ...

CVE-2026-103813

Dell PowerStore is affected by an OS Command Injection vulnerability (CWE-78) where an authenticated user with limited privileges could exploit the flaw to achieve privilege escalation to root on the appliance. While the impact is high, the documents do not specify the exact component or function...

CVE-2026-82174

The Dell PowerStore platform contains a content-injection vulnerability (CWE-451). An unauthenticated attacker could exploit this flaw to display misleading text on the genuine login page, facilitating phishing attacks. No specific software versions or remediation steps are provided in the docume...

CVE-2026-128037

The gittuf tool versions 0.10.0 through 0.15.0 contains an incorrect authorization vulnerability (CWE-863). When a minimum threshold global rule and a policy rule protect the same namespace, the system incorrectly prioritizes the global rule's check over the policy rule's specific authorized user...

CVE-2026-128036

The gittuf tool versions 0.4.0 through 0.16.0 is vulnerable to a flaw where verification checks only validate the root of trust signatures for new policies, failing to verify signatures for other metadata such as rule files . An attacker with push privileges can bypass the gittuf policy apply wor...

CVE-2026-128035

The gittuf tool versions 0.10.0 through 0.17.0 contains a vulnerability where the verification workflow fails to load policy updates propagated from an upstream controller repository after the first entry is verified. Because only the policy in effect at the start of verification is applied, subs...

CVE-2026-128034

The gittuf tool (versions before 0.18.0 ) contains a vulnerability where file protection rules can be bypassed. The root cause is that the application verifies protection rules using quoted, escaped pathnames provided by Git for files with special characters (such as non-ASCII characters) instead...

CVE-2026-109091

A heap-based buffer overflow exists in the X.Org Server (specifically xwayland and X Server ) caused by improper handling of EDID Display-Range descriptors . This flaw allows malicious monitors to trigger an out-of-bounds write , potentially leading to server crashes or code execution . The vulne...

CVE-2026-129094

The @utcp/http library, prior to version 1.1.14 , is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is a failure to properly validate the {host} placeholder in call templates, allowing remote manuals to bypass remote-loopback checks. An attacker can supply host arguments such...

CVE-2026-63079

The RBH Access Technologies Integra32 Security Management System 5.1.11 R5.0 is vulnerable to an unauthenticated deserialization flaw in its deprecated .NET Remoting service . This vulnerability exists in the AxcvcLt.dll library when using BinaryServerFormatterSinkProvider at TypeFilterLevel.Full...

CVE-2026-111545

The Dell PowerStore storage system is susceptible to a SQL Injection vulnerability (CWE-89). An authenticated attacker can exploit this flaw to potentially disclose stored private keys and perform tampering with trusted certificates . While the base severity is rated HIGH (8.8) , specific technic...

CVE-2026-129092

The CCC Attestation SIG attested-tls-poc (through commit 731ca82) contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability. The root cause is that Evidence is appraised only once during the TLS handshake without post-handshake re-attestation. This allows an attacker with local access to the at...

CVE-2026-125432

The reCAPTCHA for WooCommerce (recaptcha-woo) plugin by RelyWP is vulnerable to a Broken Authentication issue in versions up to and including 1.4.7 . The vulnerability stems from a weak password recovery mechanism for forgotten passwords, which allows for Password Recovery Exploitation . The prov...

CVE-2026-119517

The VillaTheme Catna – Woo Name Your Price and Offers WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This issue affects versions from n/a through 2.0.3 . Exploitation details and specific remediation steps...

CVE-2026-124415

The Alex Reservations WordPress plugin (versions

CVE-2026-124410

The wpLingua Translation Service Translate and boost SEO – Automatic AI translation – wpLingua WordPress plugin (versions up to and including 3.1.1 ) is vulnerable to a Stored Cross-Site Scripting (XSS) . The vulnerability is caused by the Improper Neutralization of Input During Web Page Generati...

CVE-2026-124265

The Newsletters newsletters-lite WordPress plugin, developed by Tribulant Software , is vulnerable to Blind SQL Injection (CWE-89) in versions up to and including 4.18.1 . The root cause is the improper neutralization of special elements used in SQL commands. This vulnerability allows an attacker...

CVE-2026-124965

The rtMedia for WordPress, BuddyPress and bbPress plugin (buddypress-media) by rtCamp Inc. is vulnerable to Stored Cross-site Scripting (XSS) . This issue arises from the improper neutralization of input during web page generation. The vulnerability impacts versions from the earliest release thro...

CVE-2026-124418

The Ahmad WP Job Portal (wp-job-portal) WordPress plugin, in versions 2.7.2 and below , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The vulnerability is caused by Improper Neutralization of Input During Web Page Generation , which allows an attacker to inject malicious scripts that...

CVE-2026-124414

The WordPress Broadcast Live Video plugin (videowhisper-live-streaming-integration) versions 7.3.15 and below is susceptible to a Weak Authentication vulnerability. This flaw allows for Authentication Abuse , potentially enabling unauthorized access. No specific remediation steps, exploit details...

CVE-2026-124267

The WordPress Gmail SMTP plugin (versions

CVE-2026-121776

The WP Chill Passster content-protector plugin (versions up to and including 4.3.20 ) is vulnerable to a Missing Authorization flaw. This issue allows for the exploitation of incorrectly configured access control security levels, potentially leading to unauthorized access. While the vulnerability...

CVE-2026-124420

The Woody ad snippets WordPress plugin (versions up to and including 2.7.10 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the Improper Neutralization of Input During Web Page Generation , which allows an attacker to execute malicious scripts in a user's browser...

CVE-2026-124260

The WP Photo Album Plus (wp-photo-album-plus) WordPress plugin, developed by Jacob N. Breetvelt, is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. This vulnerability is caused by the Improper Neutralization of Input During Web Page Generation (CWE-79) and affects versions up to and in...

CVE-2026-119512

The Newsletters newsletters-lite plugin for WordPress (versions up to and including 4.18.2 ) is vulnerable to a Deserialization of Untrusted Data vulnerability. This flaw allows for Object Injection , which can lead to unauthorized execution or manipulation within the application environment. The...

CVE-2026-124272

The Dimitri Grassi Salon booking system WordPress plugin (versions

CVE-2026-125783

The madalin.ungureanu Custom Post Types and Custom Fields creator – WCK (wck-custom-fields-and-custom-post-types-creator) WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) . This flaw occurs due to the Improper Neutralization of Input During Web Page Generation (CWE-79). The ...

CVE-2026-125851

The themagnifico52 Hotel Booking Lite WordPress theme (versions n/a through 2.5.1 ) is vulnerable to an Unrestricted Upload of File with Dangerous Type (CWE-434). This vulnerability allows an attacker to upload a Web Shell to the web server, potentially leading to unauthorized access and control....

CVE-2026-125858

The CleverReach® WP WordPress plugin (versions up to 1.5.26 ) is susceptible to a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , leading to broken access control. Specific details regarding the root cause or re...

CVE-2026-125856

The Sarah Giles Dynamic User Directory WordPress plugin (versions ≤ 2.4 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation , which allows an attacker to inject malicious scripts. This vulnerability impa...

CVE-2026-120835

The VillaTheme AFFI – Affiliate Marketing for WooCommerce plugin (affi-affiliate-marketing-for-woo) is vulnerable to a PHP Object Injection flaw caused by the deserialization of untrusted data . This issue affects versions from n/a through 1.0.11 . Successful exploitation can lead to significant ...