CVE-2026-81439

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

CVE-2026-92903 Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings

Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious project configuration file or craft command-line input can...

CVE-2026-81438

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-66625

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

CVE-2026-81474

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-66269

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism...

CVE-2026-92611

In Eclipse Ankaios versions 0.6.0 to before 1.0.4, LogRule::matches in the agent control-interface authorizer stops at the first wildcard pattern in a single rule instead of evaluating later entries, which can cause deny LogRule entries to be skipped and allow unauthorized access to another...

CVE-2026-92893 Rubygem-foreman_ansible: ansible inventory api ignores view_hosts permission filters, exposes hidden parameters

A flaw was found in the foremanansible plugin's Ansible inventory API. The controller builds its host query using an unscoped Host.where call that does not enforce the search filter associated with the caller's viewhosts permission. An authenticated user whose host visibility is restricted by a...

CVE-2026-92894

A flaw was found in the foremanansible plugin's Ansible override values API. The destroy action resolves the target LookupValue record by ID without verifying it belongs to an AnsibleVariable the caller is authorized to edit. An authenticated user with the editansiblevariables permission can dele...

CVE-2026-78427

The NeuVector admission webhook silently excludes containers from policy evaluation when their image path matches one of three hardcoded service mesh sidecar images. Since the image path is entirely controlled by the workload author, any user capable of deploying workloads can evade admission den...

CVE-2026-78425

Authorised users of outside applications behind the same corporate identity provider IdP, for example, a wiki, a ticketing system, an expenses tool, or anything they legitimately hold an account on can log into their system via SAML SSO. The IdP issues an assertion to them. If that assertion is...

CVE-2026-78426

The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field. An attacker holding a valid JWT that has not expired, but was logged out of NeuVector, can continue using the non-expired token with equivalent spelling of the RSA signature field until the token...

CVE-2026-78428

For users authenticated through SAML or OpenID Connect OIDC, this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently...

CVE-2026-66626

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

CVE-2026-66628

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

CVE-2026-92162

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

CVE-2026-66631

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

CVE-2026-66630

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

CVE-2026-75553

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

CVE-2026-50610

CVE-2026-50610 affects the Acer System Monitoring component bundled with NitroSense and PredatorSense software. The root cause is insufficient access controls in a privileged service , allowing an authenticated local user to access the service and perform unauthorized registry modifications , pot...

CVE-2026-50609

CVE-2026-50609 affects the Acer System Monitoring component included with NitroSense and PredatorSense software. The root cause is insufficient access controls within a privileged Named Pipe service , which may allow an authenticated local user to perform unauthorized registry operations. In cert...

CVE-2026-15688

Mitsubishi Electric GX Works3 and Motion Control Setting are affected by an incorrect implementation of the authentication algorithm , allowing a local attacker with low privileges to bypass block password authentication. The attacker achieves this by executing the affected product and modifying ...

CVE-2026-50608

CVE-2026-50608 affects the Acer System Monitoring component shipped with NitroSense and PredatorSense software. The root cause is an improperly implemented WebSocket handshake that does not require authentication before permitting connections to the local service, potentially allowing unauthorize...

CVE-2026-50607

CVE-2026-50607 affects the Acer System Monitoring component bundled with NitroSense and PredatorSense . A WebSocket service was configured to listen on all network interfaces rather than a restricted one, which may expose the service to unintended network access. The CVSS 4.0 base score is 6.9 (M...

CVE-2026-50606

A hard-coded AES encryption key in the Acer System Monitoring component (shipped with NitroSense and PredatorSense) allows a local attacker with no privileges to potentially access protected information or perform unauthorized actions under certain circumstances. The vulnerability is rated CVSS 4...

CVE-2026-87831

CVE-2026-87831 affects the Checkout Field Manager (Checkout Manager) for WooCommerce WordPress plugin in versions before 7.9.7 . The plugin does not properly validate attachment ownership before deletion, allowing any authenticated user (e.g., a customer) to delete arbitrary media attachments bel...

CVE-2026-87829

Checkout Field Manager (Checkout Manager) for WooCommerce (WordPress plugin) versions before 7.9.7 contain an improper authorization flaw in attachment deletion. The plugin fails to properly validate the ownership of an attachment before allowing its deletion, enabling any authenticated user with...

CVE-2026-50605

CVE-2026-50605 affects the Acer Agent Service component bundled with NitroSense and PredatorSense software. The root cause is insufficient access controls within a privileged service, allowing an authenticated local user to perform unauthorized registry operations, which may lead to privilege esc...

CVE-2026-86320

CVE-2026-86320 affects flatpak-builder , a build tool for creating Flatpak applications. When applying patch sources with use-git-am: true, Git hooks are not disabled, allowing an attacker who supplies a malicious source containing a post-applypatch hook to execute arbitrary code on the host duri...

CVE-2026-91017

CVE-2026-91017 affects the Robokassa payment gateway for WooCommerce WordPress plugin in versions before 1.8.9 . When the plugin's non-default deferred-payment feature is enabled, it fails to verify the authenticity of incoming payment notifications. According to the CVE listing, the mechanism in...

CVE-2026-87963

The Yo WordPress plugin (versions 1.1 through 1.3.1 ) is affected by an unauthenticated SQL injection vulnerability. The plugin does not sanitize or parameterize the username request parameter before using it in a SQL query, and reads it before WordPress applies its built-in request escaping. An ...

CVE-2026-86801

The To Do List Member WordPress plugin (versions 1.4 through 1.6 ) includes a file upload endpoint that fails to load WordPress, meaning no authentication , capability , or nonce checks are enforced. The endpoint validates only the uploaded file's name , not its content , allowing unauthenticated...

CVE-2026-90982

CVE-2026-90982 affects the @fastify/static plugin (versions before 10.1.4 ). On case-insensitive filesystems such as Windows or the default macOS volume, a mismatch between the case-sensitive route matcher and the case-insensitive filesystem allows an unauthenticated attacker to bypass route guar...

CVE-2026-44940

CVE-2026-44940 affects the rancher-extension-stackstate extension in SUSE Observability . The root cause is the exposure of service tokens in plain configuration or insecure locations , rather than storing them in a secure secret management mechanism. An attacker with minimal access (low privileg...

CVE-2026-91019

The Event Booking Manager for WooCommerce WordPress plugin before 5.6.0 contains a broken access control flaw: it does not restrict who can view its stored payment gateway configuration . As a result, any authenticated user with Contributor-level access or above can read the site's PayPal and Str...

CVE-2026-91011

CVE-2026-91011 affects the EWWW Image Optimizer WordPress plugin in versions before 8.7.7 . The root cause is improper escaping of image attribute values (specifically, backreference expansion in the image class attribute) when the plugin rewrites page output. An authenticated user with author-le...

CVE-2026-91014

CVE-2026-91014 affects the Realtyna Organic IDX WordPress plugin (also known as WPL Real Estate ) in versions before 5.4.2 . The root cause is insufficient sanitisation and escaping of parameters before reflecting them back in the page, specifically via the Location Selector endpoint , enabling a...

CVE-2026-91015

The Master Addons for Elementor WordPress plugin before version 3.1.9 is vulnerable to unauthenticated popup deactivation. The root cause is a missing authorization check on the AJAX action jltma_popup_disable_expired that deactivates Popup Builder popups. The action relies solely on a nonce that...

CVE-2026-91010

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 is vulnerable to arbitrary form submission deletion. The plugin's message deletion AJAX action does not check the user's capabilities and only tests that a nonce parameter is present rather than ...

CVE-2026-91016

The Motors WordPress plugin, in versions prior to 1.4.121 , fails to verify authorization before returning a user's non-published listings. An unauthenticated attacker can read any author's draft, pending, and private car listings—including titles, prices, media URLs, and seller notes—simply by s...

CVE-2026-91009

The Active Woot Products Tables for WooCommerce WordPress plugin, versions before 2.1.3 , lacks proper authorization and CSRF validation on certain AJAX actions. The CVELIST record identifies the specific vector as the woot_update_attachment action. Any authenticated user at the subscriber level ...

CVE-2026-90923

The Autopay WordPress plugin before 5.0.1 fails to enforce the signature on one of its payment callbacks. This allows unauthenticated users to disclose and delete the stored payment parameters belonging to other customers' orders, constituting a cross-customer data integrity and confidentiality i...

CVE-2026-90922

CVE-2026-90922 affects the Paid Membership Subscriptions WordPress plugin prior to version 3.0.9 . The vulnerability stems from a missing verification step: the plugin does not confirm that the amount and currency reported by the payment provider (specifically PayPal Standard ) match the pending ...

CVE-2026-88904

CVE-2026-88904 affects the PuppyFW WordPress plugin through version 0.4.4 . The root cause is a broken authorization on one of its REST routes: the route validates the caller against a capability that is taken from the request itself , rather than from a fixed or hardcoded value. This allows any ...

CVE-2026-91008

Event Booking Manager for WooCommerce WordPress plugin before 5.3.8 fails to perform an ownership or authorization check before rendering booking confirmation details. This allows unauthenticated attackers to retrieve registered attendees' personal information—including full name, email address, ...

CVE-2026-87836

The Comments Import & Export WordPress plugin (versions 2.1.11 through 2.5.3 ) contains an authorization flaw in its comment export feature. The export function neither requires the comment moderation permission nor limits results to content owned by the requesting user. As a result, any authenti...

CVE-2026-88795

The wpShopGermany IT-RECHT KANZLEI WordPress plugin (versions before 2.4 ) contains an insecure API authentication token that is derived from data the requester controls and is generated as a side effect of the very check meant to validate it. This design flaw allows unauthenticated attackers to ...

CVE-2026-86824

The Newsletter WordPress plugin (versions before 9.3.8 ) contains a vulnerability in its email tracking mechanism. The plugin generates its tracking signing key with insufficient entropy and signs tracking links using an unkeyed hash . An unauthenticated attacker who recovers that key offline can...

CVE-2026-87786

The Dewa Kirim WordPress plugin through version 1.0.0 fails to escape delivery coordinates submitted at checkout before outputting them inside an inline script. This allows unauthenticated users to store arbitrary JavaScript that executes in the session of an administrator who later opens the aff...

CVE-2026-88792

The Dictionary WordPress plugin through version 1.0 is vulnerable to unauthenticated stored cross-site scripting (XSS) . The root cause is the absence of authorisation, sanitisation, or escaping when adding or updating dictionary entries, allowing any unauthenticated user to inject arbitrary web ...