CVE-2026-107159 MiniUPnPd through 2.3.11 Divide-by-Zero DoS via SSDP M-SEARCH MX Header

MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...

CVE-2026-106059 GitAhead through 2.7.1 on macOS Command Injection via Show in Finder AppleScript

GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do...

CVE-2026-106057 patool before 4.0.6 OS Command Injection on Windows via shell_quote_nt

patool before 4.0.6 contains an OS command injection vulnerability on Windows because shellquotent fails to escape cmd.exe metacharacters or embedded double quotes in archive filenames. Attackers can supply crafted filenames like report&calc.gz for single-file formats run with shell=True to execu...

CVE-2026-106058 GitAhead through 2.7.1 OS Command Injection via Git Filter Filenames

GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $command selected via .gitattributes so...

CVE-2026-106056 Rundeck before 6.2.0 OS Command Injection via Windows Job Option Quoting

Rundeck before 6.2.0 contains an OS command injection vulnerability that allows authenticated users with job run permission to execute commands on Windows nodes by supplying crafted option values. Attackers can inject cmd.exe metacharacters such as && or | into free-text options, which...

CVE-2026-42708 WordPress WP Post Author plugin <= 4.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AF themes WP Post Author wp-post-author allows Blind SQL Injection.This issue affects WP Post Author: from n/a through 4.0.0...

CVE-2026-42710 WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in 10Web Slider by 10Web slider-wd allows Blind SQL Injection.This issue affects Slider by 10Web: from n/a through 1.2.63...

CVE-2026-42713

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Gopiplus Post title marquee scroll post-title-marquee-scroll allows Blind SQL Injection.This issue affects Post title marquee scroll: from n/a through 9.9...

CVE-2026-42714

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Piggly Dev Pix por Piggly para Woocommerce pix-por-piggly allows Blind SQL Injection.This issue affects Pix por Piggly para Woocommerce: from n/a through 2.1.2...

CVE-2026-92533

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...

CVE-2026-92532

Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation...

CVE-2026-92531

Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges coul...

CVE-2026-103668

An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product...

CVE-2026-96408

A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product...

CVE-2026-42717

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

CVE-2026-42720

The Dynamic User Directory WordPress plugin (versions up to and including 2.4 ) is vulnerable to a Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker to execute unauthorized database queries. No specific remediation...

CVE-2026-42721

The SERVIT Software Solutions affiliate-toolkit (affiliate-toolkit-starter) plugin for WordPress is vulnerable to Blind SQL Injection in versions n/a through 3.9.1 . This issue stems from the Improper Neutralization of Special Elements used in an SQL Command (CWE-89). An attacker with high privil...

CVE-2026-42722

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

CVE-2026-105192

The LMCache multiprocess (distributed) mode is vulnerable to unauthenticated Remote Code Execution (RCE) due to insecure pickle deserialization . The application opens an unauthenticated ZeroMQ ROUTER socket (defaulting to port 5555 ) to allow worker processes to share KV cache blocks. When a ZMQ...

CVE-2026-27434

The WP Rentals WordPress theme, versions up to and including 3.14.2 , is vulnerable to a Broken Access Control issue (CWE-862). The vulnerability stems from incorrectly configured access control security levels , which may allow an unauthenticated attacker to exploit missing authorization checks....

CVE-2026-104390

The Booktics WordPress plugin (versions up to and including 1.0.27 ) is affected by a Broken Access Control vulnerability. This issue stems from Missing Authorization (CWE-862), where incorrectly configured access control security levels allow for unauthorized actions. The impact is categorized a...

CVE-2026-105876

The WordPress Modula Image Gallery plugin (versions up to and including 3.0.11 ) contains a Missing Authorization vulnerability (CWE-862) within the modula-best-grid-gallery component. This flaw allows an attacker to Retrieve Embedded Sensitive Data from the plugin. No specific remediation steps ...

CVE-2026-97146

Apache YuniKorn 1.9.0 and earlier allows bypassing the check for the user annotation by setting a secondary label on the pod. If the pod has the label 'app=yunikorn' the checks limiting the user annotation content are not run. The label is used to identify the YuniKorn application itself in the...

CVE-2026-104393

The Happy Addons for Elementor plugin for WordPress (versions through 3.50.0 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation within the happy-elementor-addons component. This vulnerability allows an att...

CVE-2026-78243

Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribute, for a user specified in the pod the server crashes if a membership record...

CVE-2026-105875

The BdThemes Prime Slider – Addons For Elementor (bdthemes-prime-slider-lite ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation . This vulnerability affects versions from n/a through 4.6.2 ....

CVE-2026-92393

Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks. Workloads in YuniKorn are defined as the following Kubernetes objects: "deployments", "replicasets", "statefulsets", "daemonsets", "jobs", "cronjobs". The CREATE...

CVE-2026-104391

The ExpressTech Quiz And Survey Master (quiz-master-next) WordPress plugin, versions n/a through 11.2.7 , is vulnerable to Stored Cross-Site Scripting (XSS) . This flaw stems from the Improper Neutralization of Input During Web Page Generation . While the documents confirm the existence of the vu...

CVE-2026-103075

The Hustle WordPress plugin (specifically the wordpress-popup component) versions up to and including 7.8.14.2 is vulnerable to a Broken Access Control issue. The root cause is a Missing Authorization vulnerability (CWE-862), which allows for the exploitation of incorrectly configured access cont...

CVE-2026-105884

The WP Media Rocket Lazy Load plugin (versions up to and including 2.4.0 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the Improper Neutralization of Input During Web Page Generation , which allows an attacker to inject malicious scripts into the web page. This vu...

CVE-2026-105873

The BdThemes Element Pack Elementor Addons plugin (bdthemes-element-pack-lite ) for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) . This vulnerability, identified as CWE-79 , stems from the improper neutralization of input during web page generation . The issue affects versions thr...

CVE-2026-97294

The David Lingren Media LIbrary Assistant plugin for WordPress (versions through 3.41 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the Improper Neutralization of Input During Web Page Generation , which allows an attacker to inject malicious scripts. Exploitation...

CVE-2026-105871

The BdThemes Element Pack Elementor Addons WordPress plugin (specifically bdthemes-element-pack-lite ) is vulnerable to Stored Cross-Site Scripting (XSS) . This issue affects versions up to and including 8.8.6 due to the improper neutralization of input during web page generation. The vulnerabili...

CVE-2026-15894

The Zephyr RTOS Bluetooth Mesh stack is vulnerable to a stack-based buffer overflow in the On-Demand Private Proxy solicitation handler (subsys/bluetooth/mesh/solicitation.c). The sol_pdu_decrypt() function copies a received Solicitation PDU into a fixed 17-byte stack buffer without bounding the ...

CVE-2026-19186

An integer underflow vulnerability exists in the ieee802154_decipher_data_frame() function within subsys/net/l2/ieee802154/ieee802154_frame.c . The software fails to verify if a received frame is long enough before subtracting header and authentication tag lengths from the total length. Because t...

CVE-2026-103416

The Eclipse ThreadX NetX Duo version 6.5.1.202602 contains an out-of-bounds write vulnerability in the TLS 1.3 handshake message cache . An attacker can provide a handshake message larger than the allocated cache, causing data to be written into the session control block and overwriting internal ...

CVE-2025-64391

A vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to write arbitrary files as SYSTEM by manipulating mount points and symbolic links during installation. This issue affects Veeam Agent for Microsoft Windows versions 13.0.4.1341 and all earlier version 13 and ...

CVE-2025-64392

CVE-2025-64392 is a reflected cross-site scripting (XSS) vulnerability in Veeam Backup Enterprise Manager . It allows an attacker to execute scripts in the browser of an authenticated portal user who opens a crafted link. This flaw affects Veeam Backup Enterprise Manager (Veeam Backup & Replicati...

CVE-2026-93026

This vulnerability in Veeam Backup & Replication allows an authenticated user with the Backup Viewer role to modify or delete the Enterprise Manager master key and read or overwrite stored antivirus update credentials on the Veeam Backup Server. The issue impacts Veeam Backup & Replication 12.3.2...

CVE-2026-58068

A vulnerability in Veeam Agent for Microsoft Windows allows a local attacker to trigger a denial-of-service (DoS) condition by terminating arbitrary processes on the system. This issue affects versions 13.0.4.1341 and all earlier version 13 and 6 builds; however, unsupported product versions are ...

CVE-2026-58069

A vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host. This issue impacts Windows-based deployments. The vulnerability was resolved in the following versions: Veeam Backup & Replication 13.1 (build 13.1.0.41...

CVE-2025-64393

A critical vulnerability (CVSS 4.0: 9.4) exists in Veeam Backup & Replication (build 12.3.2.4854 and earlier version 12 builds) due to insecure deserialization of untrusted data received via the Mount Service . This flaw allows a low-privileged user with the Backup Viewer role to perform remote c...

CVE-2026-93684

Apache Impala versions up to and including 4.5.2 are vulnerable to a stored XSS (CWE-79) flaw. An SQL user with only SELECT permissions can inject malicious JavaScript into a table alias . This payload executes in the browser of another user who views the query plan within the Impala Web UI . To ...

CVE-2026-90466

Apache Impala version 4.5.2 is vulnerable to a path traversal vulnerability involving the trusted_jar_paths startup flag. An attacker can exploit this to load an attacker-controlled JAR file via a relative path, provided that a trusted path is already configured by an administrator. The attack is...

CVE-2026-97720

Apache Impala versions up to and including 4.5.2 are vulnerable to an authentication bypass in the Impala executor webserver . The root cause is an incorrect implementation of JWT/OAuth authentication where Bearer token signatures are not validated , allowing an attacker to access resources serve...

CVE-2026-5703

The Satel Iberia SenNet Datalogger Serie 200 contains a path traversal vulnerability in its web portal. An authenticated user can read arbitrary files or list directories accessible to the web server's system user by modifying the URL to include a path traversal payload . This vulnerability could...

CVE-2026-89417

The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 6.3.10 . The root cause is insufficient input sanitization and output escaping regarding the 's' Search Parameter within the comments...

CVE-2026-107104

A vulnerability exists in the Manacle Technologies ERP System due to unsafe deserialization of user-controlled data. An unauthenticated remote attacker can exploit this by providing specially crafted data to the affected functionality. Successful exploitation may lead to arbitrary code execution ...

CVE-2026-107103

A SQL Injection vulnerability exists in the Manacle Technologies ERP System due to insufficient validation and parameterization of user-supplied input in an API endpoint . An unauthenticated remote attacker can exploit this by providing specially crafted input to the vulnerable endpoint. Successf...

CVE-2026-107102

The Manacle Technologies ERP System contains an account takeover vulnerability due to improper validation of payment callback parameters and inadequate authentication controls within an API endpoint. An unauthenticated remote attacker can manipulate specific parameters to force the application to...