CVE-2026-17538 Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress <= 5.6.9 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Customer PII Modification

The LatePoint - Appointment Booking & Reservation plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.6.9. This is due to the processstepcustomer function using isuserloggedin as the sole gate before merging POSTed customer data into an...

CVE-2026-94154 Aurora Heatmap <= 1.7.2 - Unauthenticated Stored Cross-Site Scripting via 'url' Parameter

The Aurora Heatmap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 1.7.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts...

CVE-2026-107315 pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros)

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send buffer instead of zeros, and the server stores those bytes as part of the value. The bytes are messages the driver sent earlier on the same...

CVE-2026-107314

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 enforce no restriction when the requireAuth connection property excludes all six authentication methods the driver knows, for example requireAuth=!password,!md5,!gss,!sspi,!scram-sha-256,!none. The driver then accepts any method...

CVE-2026-89322

Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form of resource and policy names. This may allow an authenticated user with delegated permissions to bypass an explicit deny restriction and access a protected resource or assign a denied policy,...

CVE-2026-105820

The Vault ACL policy cache is vulnerable to a path traversal flaw (CWE-22) when policy names contain specific traversal constructs. This allows a token with a specially crafted policy name to bypass namespace boundaries and utilize the capabilities of policies defined in other namespaces, includi...

CVE-2026-105816

Vault and Vault Enterprise are vulnerable to arbitrary code execution on the host because the software does not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. If Vault utilizes Shamir seals and an external plugin directory , a pri...

CVE-2026-107285

The AsyncHttpClient (AHC) library, used by Java applications, contains a vulnerability in versions prior to 3.0.12 and 2.16.1 . The root cause lies in how NettyRequestFactory.newNettyRequest and requestUri determine whether to attach proxy authentication; because ws is not marked as secure, tunne...

CVE-2026-107284

The AsyncHttpClient (AHC) library for Java applications contains a vulnerability where WebSocketHandler.upgrade fails to properly terminate a handshake when the Sec-WebSocket-Accept value is missing or invalid. While the handshake is technically aborted, the library continues into pipeline instal...

CVE-2026-107283

The AsyncHttpClient (AHC) library for Java applications is vulnerable to reduced authentication security due to the use of a non-cryptographic random source. In versions prior to 3.0.12 and 2.16.1 , the Realm.Builder component generates the HTTP Digest client nonce using ThreadLocalRandom instead...

CVE-2026-107282

The AsyncHttpClient (AHC) library, used in Java applications, contains a cross-host request replay vulnerability in versions prior to 3.0.13 and 2.16.1 . The root cause is that request replays update the current request but retain the target request and proxy context of the original origin. This ...

CVE-2026-105818

The Vault PKI secrets engine ACME server is vulnerable to an issue where it fails to restrict certificate identities that ACME challenges do not validate when using the default directory policy . This flaw allows an ACME client to obtain a certificate containing unverified identity claims , poten...

CVE-2026-107281

The AsyncHttpClient (AHC) library, used by Java applications for asynchronous HTTP requests, is vulnerable to an identity mismatch issue in versions prior to 3.0.13 and 2.16.1 . The root cause is that the HTTP/1.1 connection-pool key omits the authenticated principal for NTLM and Negotiate authen...

CVE-2026-107280

The AsyncHttpClient (AHC) library for Java applications is vulnerable to a cookie injection or overwriting issue in versions prior to 3.0.13 and 2.16.1 . The root cause is that the ThreadSafeCookieStore component validates Domain attributes using domain matching but fails to reject public suffixe...

CVE-2026-107279

The AsyncHttpClient (AHC) library, used by Java applications for asynchronous HTTP requests, is vulnerable in version 3.0.12 . The root cause is that a peer offering only Digest qop=auth-int causes mutual-authentication verification to be skipped. Specifically, AuthenticatorUtils.computeExpectedR...

CVE-2026-107232

The AsyncHttpClient (AHC) library for Java applications is vulnerable to cleartext credential transmission in versions prior to 3.0.12 (3.x) and 2.16.1 (2.x) . The root cause is that the client incorrectly infers an active HTTP proxy tunnel based on the last request method rather than the CONNECT...

CVE-2026-107231

The AsyncHttpClient (AHC) library for Java applications is vulnerable to an authentication downgrade attack in versions prior to 3.0.13 and 2.16.1 . The Realm.Builder component incorrectly treats a Digest challenge that lacks a usable nonce as a Basic challenge . An attacker controlling a proxy o...

CVE-2026-107230

The AsyncHttpClient (AHC) Java library, from version 2.0.0 until 3.0.14 , contains a vulnerability where connection-pool partitioning fails to omit identity-defining fields for Kerberos, SPNEGO, NTLM , and authenticated proxy connections. This flaw allows logins lacking configured principals, pro...

CVE-2026-107229

The AsyncHttpClient (AHC) library for Java applications contains a vulnerability in the ThreadSafeCookieStore component. From version 2.16.0 until 3.0.14 , the library incompletely validates cookie Domain attributes due to missing private-section and public-suffix rules, lack of A-label normaliza...

CVE-2026-107228

The AsyncHttpClient (AHC) library versions 2.1.0 through 3.0.14 contains a vulnerability where the default cookie store silently overrides explicit Cookie headers provided via setHeader or addHeader. In shared client environments, this allows cookies from one user's session to replace another use...

CVE-2026-107227

The AsyncHttpClient (AHC) library is vulnerable to a denial of service (DoS) attack via a decompression bomb when WebSocket permessage-deflate decompression is enabled. In versions 2.2.0 until 3.0.14 , the inbound pipeline aggregates compressed frames before inflation, meaning webSocketMaxFrameSi...

CVE-2026-76286

The Splunk MCP Server is vulnerable to a Server-Side Request Forgery (SSRF) in versions below 1.2.1 . A user with the mcp_tool_execute capability can be induced to run a custom API tool configured by another user. This flaw allows the server to send the executing user's Splunk platform authentica...

CVE-2026-76285

Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 . These vulnerabilities are categorized under CWE-710 (Improper Adherence to Coding Standards) and are grouped by Common Weakness Enumeration. Specific technical detai...

CVE-2026-76284

Splunk addressed multiple internally identified Improper Neutralization vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 . These vulnerabilities are grouped by CWE-707 . No specific root cause, impact, or exploit details are provided in the documents, and no explo...

CVE-2026-76283

Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 . These issues are categorized as Protection Mechanism Failures (CWE-693). The vulnerabilities are grouped by CWE, with CVE-2026-76283 assigned to one specific group. ...

CVE-2026-76282

Splunk addressed an Improper Control of a Resource Through its Lifetime vulnerability in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 . The issue is categorized under CWE-664 . The provided documents do not specify the exact component, root cause, or practical consequences beyon...

CVE-2026-76280

Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72 are vulnerable to an incorrect permission assignment in App Key Value Store (KV Store) collections. An authenticated user without "admin" or "sc_admin" roles ...

CVE-2026-76281

Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are affected by an improper access control vulnerability (CWE-284). Splunk internally identified these issues and addressed them in the mentioned versions. Specific technical details regarding the root cause or component are not provi...

CVE-2026-76278

Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10 are vulnerable to an authorization bypass in the SPL2 module permissions. A user with the edit_spl2_module_permissions capability can use the affected REST API to access permission grants for SPL2 modules they are not authorized to view...

CVE-2026-76279

Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to an improper input validation flaw in the collect Search Processing Language (SPL) command. The root cause is that the system fails to normalize whitespace in index names before enforcing role-based index-access...

CVE-2026-76276

Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10 are vulnerable to an information disclosure flaw in the Discover Splunk Observability Cloud app via Splunk Web. A low-privileged user lacking "admin" or "power" roles can retrieve the app's original source code because production JavaSc...

CVE-2026-76277

Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to improper input validation when creating native Splunk usernames via the REST API . A user with the edit_user capability can create a username ending in a trailing period because the system fails to reject it be...

CVE-2026-76274

Splunk Enterprise versions below 10.4.3 , 10.2.7 , and 10.0.10 are vulnerable to a Server-Side Request Forgery (SSRF) within the Splunk App for Splunk Observability Cloud . An attacker with a role possessing the read_o11y_content capability can exploit the REST API to redirect outbound requests t...

CVE-2026-76275

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 , an improper authorization vulnerability exists in the REST API . Users lacking "admin" or "power" roles can access search query text and job metadata—including job identifiers, dispatch parameters, result counts, and execut...

CVE-2026-76273

Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to improper input validation via the collect Search Processing Language (SPL) command. An attacker with the run_collect capability can exploit the fact that the command fails to validate the index name before proc...

CVE-2026-76272

Splunk Enterprise and Splunk Secure Gateway are vulnerable to an access control flaw via the REST API. In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 , users without "admin" or "power" roles can trigger the gateway to sign attacker-controlled payloads because the system f...

CVE-2026-76270

Splunk Enterprise and Splunk Cloud Platform versions below 10.4.3 (excluding 10.2.x, 10.0.x, and 9.4.x) are vulnerable to an SQL Injection in the SPL2 module filtering functionality. A user with the list_spl2_modules capability can exploit the lack of parameterized user-supplied values in databas...

CVE-2026-76271

The Discover Splunk Observability Cloud app for Splunk Enterprise is vulnerable to a Denial of Service (DoS) condition in versions below 10.4.3 , 10.2.7 , and 10.0.10 (note: 9.4.x is not affected). A low-privileged user without "admin" or "power" roles can exploit the issue by submitting input to...

CVE-2026-76268

In Splunk Enterprise versions below 10.4.3 and 10.2.7 , a missing authentication flaw in the Patroni REST API allows an unauthenticated network attacker to execute arbitrary operating-system commands on a search head cluster member. The root cause is the lack of authentication requirements for cr...

CVE-2026-76269

Splunk Enterprise versions prior to 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to an improper access control flaw in its REST API . The vulnerability occurs because the API fails to fully validate job ownership when processing a user-controlled job identifier. Consequently, a user without...

CVE-2026-76267

In Splunk Enterprise versions below 10.4.3 , 10.2.7 , and 10.0.10 , a log injection vulnerability exists within the Splunk App for Splunk O11y Cloud . An attacker with the read_o11y_content capability can inject forged entries into the application log via the REST API . This occurs because the ap...

CVE-2026-76265

Splunk Enterprise (versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15) and Splunk Secure Gateway (versions below 3.10.11, 3.9.25, and 3.8.72) are vulnerable to an improper access control flaw. The root cause is that multiple REST API endpoints in Splunk Secure Gateway fail to enforce authorizatio...

CVE-2026-76266

Splunk Enterprise on Linux versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 is vulnerable to Local Privilege Escalation . A local user capable of running commands as the Splunk Enterprise user account can trigger the execution of attacker-controlled operating-system commands with root privilege...

CVE-2026-76264

Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.10, and 9.4.15 are vulnerable to an improper authorization flaw via the REST API. An attacker with low-level privileges (not holding admin or power roles) can create or edit scripted lookup definitions using raw configuration endpoints. This i...

CVE-2026-75063

The IBM Planning Analytics Workspace component of IBM Planning Analytics is vulnerable to a cross-site scripting (XSS) attack due to improper output encoding. A remote authenticated attacker could exploit this flaw to execute arbitrary JavaScript. The vulnerability is addressed in IBM Planning An...

CVE-2026-19622

IBM Planning Analytics Local is affected by a security vulnerability (CVE-2026-19622) where a remote attacker can bypass authentication and escalate privileges due to the improper validation of sub-requests . This issue is categorized under CWE-288 . The vulnerability has been addressed in IBM Pl...

CVE-2026-107352

The Amazon Athena engine version 3 contained a vulnerability due to missing authorization checks in request handling. This flaw could have allowed an authenticated user to read limited query metadata , specifically AWS account identifiers and SQL statement text , from other AWS accounts. The vuln...

CVE-2026-107363

In OpenStack Zaqar before version 23.0.1 , a vulnerability exists in the WebSocket transport where it fails to bind the project identifier in subsequent requests to the project authenticated by the Keystone token . An authenticated user with a valid token for one project can substitute another pr...

CVE-2026-1403

GitLab CE/EE versions from 11.7 before 18.8.9 , 18.9 before 18.9.5 , and 18.10 before 18.10.3 are affected by a Denial of Service vulnerability. The root cause is improper validation of CSV file structure during the import process, which allows an authenticated user to cause a denial of service t...

CVE-2026-97717

CVE-2026-97717 is a vulnerability in the proxy sub-system of Absolute Secure Access servers running versions prior to 14.60 . An authenticated attacker can exploit this flaw by sending malformed data to the server, resulting in a persistent denial of service . No specific exploit information or r...