CVE-2026-82387

Apache Roller version 6.1.5 is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The media upload feature trusts the content-type provided by the uploader and serves the file back with that type, allowing a user with upload rights ...

CVE-2026-82546

Apache Roller version 6.1.5 is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. An unauthenticated remote attacker can store a crafted comment-author URL via the incoming Trackback endpoint on published entries that accept comment...

CVE-2026-91204

The documents provide conflicting information regarding CVE-2026-91204 . The Initial document describes a Cross-site Scripting (XSS) vulnerability in Apache Roller 6.1.5 , where an anonymous remote attacker can store a comment containing a javascript: URI. This occurs specifically when users.comm...

CVE-2026-91206

Apache Roller version 6.1.5 is vulnerable to reflected cross-site scripting (XSS) due to improper neutralization of input during web page generation. The flaw exists specifically in the optional LdapCommentAuthenticator , which writes request parameter values into its HTML form without proper esc...

CVE-2026-101011

A SQL injection vulnerability exists in aaPanel BaoTa up to version 11.8.0 . The flaw is located within the Domain Handler component, specifically in the get_domain_status function of the file /www/server/panel/mod/project/domain/domainMod.py. An attacker can trigger the vulnerability by manipula...

CVE-2026-101010

A SQL injection vulnerability exists in aaPanel BaoTa versions up to 11.8.0 . The flaw is located in the getData function within the file /www/server/panel/class/data.py, where improper handling of the log_type argument allows for exploitation. Attackers can initiate this attack remotely . While ...

CVE-2026-100750

The Modules Anywhere Joomla extension (versions 1.5.0 - 9.0.5 ) contains a vulnerability allowing Local File Inclusion (LFI) and Server-Side Request Forgery (SSRF) . The issue stems from a feature that allows additional attributes on a module tag to replace arbitrary parameters of the selected mo...

CVE-2026-101009

A vulnerability exists in aaPanel BaoTa versions up to 11.8.0 within the Unzip Handler component. Specifically, the panelTask.bt_task._unzip function in the file /www/server/panel/class/panelTask.py is susceptible to os command injection when an attacker manipulates the Password argument. This at...

CVE-2026-100751

The Joomla Extension - regularlabs.com - Tabs & Accordions (Pro) versions 2.3.0 - 3.1.0 are vulnerable to Privileged stored XSS via data-rlta-url attributes. The component accepts a url option for an item and writes it to a generated attribute, which the browser subsequently passes to window.open...

CVE-2026-101008

A command injection vulnerability exists in aaPanel BaoTa up to version 11.8.0 . The flaw is located within the File Merge Handler component, specifically in the merge_split_file function of the /www/server/panel/class/files.py file. By manipulating the split_file_path argument, an attacker can p...

CVE-2026-17466

IBM Optim Test Data Management versions 1.0.0 , 1.1.0 , and 1.2.0 are affected by a Path Traversal vulnerability (CWE-22 ). This flaw could allow a remote authenticated attacker to obtain sensitive information by accessing files outside the permitted directory. The vulnerability is resolved in ve...

CVE-2026-101007

A vulnerability exists in aaPanel BaoTa up to version 11.8.0 , specifically within the Database Backup Handler component. The flaw is located in the InputSql function of the class/database.py file. By manipulating the Password argument, an attacker can achieve remote os command injection . Public...

CVE-2026-92996

The Verge3D WordPress plugin (versions 4.1.0 through 4.13.0 ) contains a vulnerability where it fails to verify payments with the payment provider and lacks order ownership checks. This allows unauthenticated users to mark any order as paid via the v3d_payment_done functionality. No specific reme...

CVE-2026-89411

The Paymattic WordPress plugin (versions 4.6.20 through 4.6.25) contains a vulnerability where it fails to verify that a confirmed Stripe payment corresponds to the specific order it is being applied to. This flaw allows unauthenticated users to perform an unauthenticated payment bypass by confir...

CVE-2026-88828

The Blacklist Manager for WooCommerce WordPress plugin, affecting versions 1.3.0 through 2.3.1 , contains a vulnerability where user blocking is not enforced across all authentication paths. Specifically, an account blocked by a site owner can continue to authenticate and maintain account privile...

CVE-2026-86838

The Bookly WordPress plugin before version 28.3 is vulnerable to an unauthenticated payment bypass . The root cause is a lack of server-side validation for client-supplied booking quantity values during the calculation of the appointment total. This allows unauthenticated users to manipulate the ...

CVE-2026-84744

The WPForms Lite WordPress plugin (versions 1.5.0.1 to 2.0.2 ) is vulnerable to unauthenticated arbitrary shortcode execution . The root cause is the failure to remove shortcode delimiters from submitted field values before repopulating them into the rendered form. This flaw allows an unauthentic...

CVE-2026-101006

The software Frappe HR (up to version 16.15.0 ) is vulnerable to a Permission Validation flaw located in the file hrms/api/__init__.py. Specifically, the functions get_expense_claims, get_shift_requests, and get_attendance_requests are susceptible to incorrect authorization when the employee argu...

CVE-2026-89300

The WP Verify API WordPress plugin, in versions through 1.0.0 , contains a vulnerability where one of its REST routes lacks sufficient authorisation checks . This flaw allows unauthenticated users to insert arbitrary data into the plugin's database table and trigger the delivery of templated veri...

CVE-2026-93000

The SPS-Suite WordPress plugin (versions

CVE-2026-89303

The Post Voting System WordPress plugin (versions

CVE-2026-101005

A server-side request forgery (SSRF) vulnerability exists in October CMS versions up to 4.3.4 . The flaw is located in the validateExternalImageHost function within the System/Classes/ResizeImages.php file of the SSRF Protection component. An unauthenticated remote attacker can exploit this vulne...

CVE-2026-101004

A security vulnerability exists in notionnext-org NotionNext up to version 4.10.10 within the Authentication Guard component. The flaw resides in the cleanCache function of the pages/api/cache.js file, where manipulating the token argument leads to missing authentication . This allows for remote ...

CVE-2026-101003

Cesanta Mongoose versions up to 7.21 are vulnerable to a stack-based buffer overflow within the MQTT Broker component. The flaw exists in the fn function located in tutorials/mqtt/mqtt-server/main.c. A remote attacker can trigger this vulnerability through a manipulation, potentially leading to a...

CVE-2026-101002

A security flaw exists in Netcore NBR200V2 version 1.3.241127.071246 . The vulnerability is located in the Tools Ping Handler component, specifically within the system function of the /usr/bin/network_tools file. By manipulating the url argument, an unauthenticated remote attacker can trigger an ...

CVE-2026-101001

A critical os command injection vulnerability exists in the Web Management Interface of Netcore NBR200V2 1.3.241127.071246 . The flaw is located in the eval function of the /www/cgi-bin/network_tools file, where manipulation of the QUERY_STRING argument allows for remote attack execution. An expl...

CVE-2026-101000

A vulnerability exists in Netcore NBR100V2 1.3.240614.030928 within the ACL Handler component. The issue is located in the uci.apply function of the file /usr/share/rpcd/acl.d/unauthenticated.json. A manipulation of the argument section leads to missing authorization , which can be triggered remo...

CVE-2026-100909

A server-side request forgery (SSRF) vulnerability exists in OctoberCMS versions up to 4.1.19/4.2.25/4.3.4 . The flaw is located in the getSourcePathForResize function within the modules/system/classes/ResizeImages.php file, where the manipulation of the realSourcePath argument allows for remote ...

CVE-2026-100908

A stack-based buffer overflow exists in Eyeplus 57.0.0.0308 within the p2pcam HTTP Parser component. This vulnerability affects an unknown function and can be triggered via a remote attack . The overflow may lead to high availability impact. The exploit has been disclosed to the public and is ava...

CVE-2026-87723

Google fuse-archive versions prior to 1.24 are vulnerable to an Untrusted Search Path (PATH Hijacking) . An attacker capable of prepending a directory to the PATH or writing a malicious binary to a writable directory within the PATH can hijack the execution pathway. This vulnerability allows for ...

CVE-2026-100907

A flaw in the p2pcam Service of Eyeplus 57.0.0.0308 allows for information disclosure via an unknown function within the /snapshot file. This vulnerability can be triggered remotely by an attacker. While the vulnerability is confirmed to be exploitable and an exploit has been published , specific...

CVE-2026-100906

A vulnerability exists in Eyeplus 57.0.0.0308 within the ONVIF component. Specifically, the GetUsers function in the file /onvif/Device can be manipulated to cause information disclosure . This attack can be executed remotely , and an exploit is currently public and available for use. No specific...

CVE-2026-100904

The amirsanni mini-inventory-and-sales-management-system is vulnerable to a cross-site scripting (XSS) flaw within the Items Management Module . Specifically, an unknown function in the file application/controllers/Items.php fails to properly handle the itemName argument, allowing for remote expl...

CVE-2026-100903

The GEOritm software by ООО НПО Ритм (versions up to 2.45.1 ) contains a missing authentication vulnerability within the REST API component. Specifically, manipulating the objectId argument in the /restapi/objects/obj-groups file allows for unauthorized remote access. The vendor has confirmed the...

CVE-2026-600004

A Remote Code Execution (RCE) vulnerability exists in Gitea versions ≥ 1.17 and 2.32 on the server. The flaw resides in the diffpatch API endpoint, where an attacker can abuse the 3-way apply (fallback -3) mechanism to install and execute a malicious Git hook from attacker-controlled content. Suc...

CVE-2026-100902

The Barco ClickShare CX-20 Gen2 (up to version 02.26.00.0007 ) is vulnerable to a denial of service (DoS) condition. The flaw resides in an unknown functionality within the /wallpaper file of the Wallpaper Upload component. By manipulating the wallpaper argument, an attacker can initiate a remote...

CVE-2026-100901

A Server-Side Request Forgery (SSRF) vulnerability exists in athlon1600 youtube-downloader versions up to 4.0.1 . The flaw is located in the stream function of the public/stream.php file, where the url argument can be manipulated to trigger unauthorized requests. While a specific commit (6ffe823)...

CVE-2026-100900

The DevaslanPHP project-management software (versions 1.2.1/1.2.2/1.2.3/1.2.4 and v2.0.0-beta1) is vulnerable to a server-side request forgery (SSRF) . The flaw exists in the updateJiraProjects function within the Jira Import component (file: /jira-import). An attacker can manipulate the host , u...

CVE-2026-100899

The DevaslanPHP project-management system (versions 1.2.1, 1.2.2, 1.2.3, 1.2.4, and v2.0.0-beta1) is vulnerable to a SQL injection flaw. The issue resides in the whereRaw function within the app/Filament/Widgets/Timesheet/MonthlyReport.php file of the Timesheet Dashboard component. An attacker ca...

CVE-2026-100898

The DevaslanPHP project-management system (versions 1.2.1, 1.2.2, 1.2.3, 1.2.4, and 2.0.0-beta1) is vulnerable to SQL injection within the Timesheet Dashboard component. The flaw exists in the whereRaw function of the file app/Filament/Widgets/Timesheet/ActivitiesReport.php, where a manipulation ...

CVE-2026-100897

A security vulnerability exists in fuzui StudentInfo (up to commit fcc42a639ec7cef620651bfd0f07ebb660529e3f) within the Password Change Endpoint component. Specifically, an unknown function in the file /StudentInfo/StudentHandler/moditypasswordstu fails to properly validate the sid/tid arguments,...

CVE-2026-100896

The TOTOLINK N150RT (version 3.4.0-B20201030) is vulnerable to OS command injection via its Web Management Interface . The root cause is the improper handling of the wlanif argument within the "function system" of the /boafrm/formWlSiteSurvey file. This flaw allows for remote exploitation , and p...

CVE-2026-100895

A null pointer dereference vulnerability exists in the Trusted Domain Project OpenARC library, specifically within the arc_parse_canon_t function in libopenarc/arc-canon.c. This flaw impacts versions up to 1.0.0.Beta1 and can be triggered via a remote attack . Public exploits are available for th...

CVE-2026-100894

A SQL injection vulnerability exists in the mathurvishal CloudClassroom-PHP-Project affecting versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be . The flaw is located in the processing of the updateguest.php file, where improper handling of the gname argument allows for remote exploitation. ...

CVE-2026-100893

A server-side request forgery (SSRF) vulnerability exists in Privoce VoceChat Server up to version 0.5.36 . The flaw is located in the open_graphic_parse Endpoint within the src/api/resource.rs file, specifically affecting the open_graph::fetch function. An attacker can remotely trigger the vulne...

CVE-2026-100892

A memory corruption vulnerability exists in aligungr UERANSIM versions up to 3.3.0 . The flaw is located within the ULInformationTransfer function in the file src/gnb/rrc/handler.cpp of the nr-gnb component. An attacker can trigger the memory corruption by performing a manipulation of the dedicat...

CVE-2026-100891

A vulnerability exists in Trusted Domain Project OpenDMARC up to version 1.4.2 . The issue is located within the Internationalized Domain Name Handler component, specifically in the opendmarc_policy_query_dmarc function of the libopendmarc/opendmarc_policy.c library. An encoding error can be trig...

CVE-2026-100890

A null pointer dereference vulnerability exists in the Trusted Domain Project OpenDMARC (up to version 1.4.2 ). The flaw is located in the opendmarc_spf_ipv6_explode function within the SPF Parser component (specifically libopendmarc/opendmarc_spf.c). Manipulation of the cp argument triggers the ...

CVE-2026-100754

Technical details for CVE-2026-100754 are not publicly available in the provided documents. Security fixes were implemented for the macOS version of the Codex app to address an unspecified security flaw in versions prior to 26.924.20706 . Monitor for further updates.

CVE-2026-100889

A vulnerability exists in Trusted Domain Project OpenDKIM up to version 2.11.0 . The issue is caused by an off-by-one error in the dkim_qp_decode function within the util.c file of the Decoder component. This flaw can be triggered via a remote attack. While the documents confirm that an exploit i...