CVE-2026-108918

A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE2P leads to command injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The...

CVE-2026-77366

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, tool dispatch does not compare the caller-controlled input.vault value with the vault bound to the caller, the JSON Web Token JWT has no vault claim, and the folder access-control list is...

CVE-2026-77364

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined readPaths and writePaths settings allow all paths, strictReadDefault does not protect direct requests, and the .obsidian, .git, and .trash control directories are excluded only duri...

CVE-2026-61994

Missing Authorization vulnerability in RocketGeek WP-Members wp-members allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Members: from n/a through 3.5.7...

CVE-2026-42689

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Pixelite Events Manager events-manager allows Leveraging Race Conditions.This issue affects Events Manager: from n/a through 7.4.7...

CVE-2026-77363

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection. When the documented loopback configuration uses auth.mode set to none, a maliciou...

CVE-2026-108917

A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the argument tftpsIP can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclos...

CVE-2026-109448

Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to...

CVE-2026-108479

Cross-Site Request Forgery CSRF vulnerability in Patreon Patreon WordPress patreon-connect allows Cross Site Request Forgery.This issue affects Patreon WordPress: from n/a through 1.9.17...

CVE-2026-108481

Cross-Site Request Forgery CSRF vulnerability in Patreon Patreon WordPress patreon-connect allows Cross Site Request Forgery.This issue affects Patreon WordPress: from n/a through 1.10.0...

CVE-2026-103080

External Control of Assumed-Immutable Web Parameter vulnerability in VillaTheme Salevo woo-boost-sales allows Input Data Manipulation.This issue affects Salevo: from n/a through 1.3.0...

CVE-2026-108916

A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the file /goform/formAccept. Performing a manipulation of the argument submit-url results in command injection. The attack is possible to be carried out remotely. The exploit has been made public and...

CVE-2026-6232

An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized length field can cause the firmware to write up to 254 arbitrary bytes past the bounds of an internal, non-persistent memory buffer...

CVE-2026-108915

A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was...

CVE-2026-108482

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.11.110...

CVE-2026-107862

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows DOM-Based XSS.This issue affects Quiz And Survey Master: from n/a through 11.2.7...

CVE-2026-108486

Missing Authorization vulnerability in WPMU DEV Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Forminator: from n/a through 1.58.0...

CVE-2026-107418

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28...

CVE-2026-108478

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.8...

CVE-2026-108475

Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.6...

CVE-2026-108476

Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.13...

CVE-2026-84286

ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA kernel without first verifying that the index is within bounds. A malicious model can force the code to read and invoke an out‑of‑range function pointer, resulting in a reproducible crash. Under specific conditions...

CVE-2026-108914

A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifname causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used...

CVE-2026-85976

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration endpoint, which could allow HTTP response splitting and unintended client-side response handling...

CVE-2026-85975

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default. A network-positioned attacker could intercept data or credentials transmitted through an affected connection...

CVE-2026-85974

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connections. A network-positioned attacker could exploit this weakness to intercept or modify communications with an affected service...

CVE-2026-85973

Progress MarkLogic Server 12.x releases before 12.1.0 are vulnerable to cleartext transmission during certain cluster-management communications. This occurs because the system may use unencrypted transport for cluster join operations, potentially allowing a network-positioned attacker to intercep...

CVE-2026-108909

A security flaw in Netcore NR268 1.7.121109 allows for cross-site request forgery (CSRF) via the CGI Endpoint component. An attacker can initiate this attack remotely by performing manipulation on the affected functionality. The exploit has been released to the public and may be used for attacks....

CVE-2026-105274

The hexpm hex_core library, along with vendored components in Hex (mix_hex_repo, mix_hex_api) and rebar3 (r3_hex_repo, r3_hex_api), is vulnerable to a Data Amplification (CWE-409) attack. The vulnerability exists because hex_core decompresses registry responses using zlib:gunzip/1 and decodes Erl...

CVE-2026-85972

Progress MarkLogic Server versions 12.x (before 12.1.0) and 11.x (before 11.3.7) are vulnerable to improper Kerberos server verification . In specific password-based authentication configurations, the software fails to sufficiently verify the identity of the Kerberos authentication service. A net...

CVE-2026-85971

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are affected by a vulnerability where certain log files are assigned overly permissive operating-system permissions . This configuration flaw could allow a local user to read or alter log data, potentially impacting conf...

CVE-2026-85970

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are vulnerable to improper XML external entity restriction. The software enables XML external entity processing by default in multiple server paths, which could allow an attacker to use crafted XML to trigger server-side...

CVE-2026-85969

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are vulnerable to an out-of-bounds write vulnerability within certain language-processing functionality . A remote authenticated attacker can exploit this flaw to cause server instability or achieve limited modification ...

CVE-2026-85968

Progress MarkLogic Server 12.x releases prior to version 12.1.0 are vulnerable to an out-of-bounds read vulnerability within certain query-processing functionality . A remote authenticated attacker could exploit this flaw to cause server instability or result in the disclosure of limited informat...

CVE-2026-75888

A flaw in the OpenShift console allows an authenticated user to perform a Server-Side Request Forgery (SSRF) . By providing a specially crafted Helm chart URL that lacks proper validation, an attacker can force the console pod to fetch arbitrary URLs. This vulnerability could lead to the disclosu...

CVE-2026-85967

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are vulnerable to a cross-site scripting (XSS) vulnerability. A remote attacker could execute scripts within the browser session of an authenticated user, potentially leading to the disclosure of information or the perfo...

CVE-2026-108477

The Booktics WordPress plugin (versions up to and including 1.0.28 ) is vulnerable to a Broken Access Control flaw (CWE-862). The issue stems from incorrectly configured access control security levels , which results in a missing authorization vulnerability. This allows an attacker to exploit the...

CVE-2026-85966

Progress MarkLogic Server releases 12.x before 12.1.0 and 11.x before 11.3.7 are vulnerable to the exposure of security-sensitive information. The root cause is a failure to sufficiently restrict access to specific sensitive data. A remote authenticated attacker with limited management permission...

CVE-2026-108908

A vulnerability exists in the Netcore NR268 version 1.7.121109 within the Web UI component. Specifically, the eval function in the file /router/l7_call_board_user_set.cgi fails to properly sanitize inputs, allowing for cross-site scripting (XSS) . An attacker can trigger this by manipulating the ...

CVE-2026-85965

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are affected by a Use-after-free memory-safety defect within the JavaScript engine integration . This vulnerability could lead to memory corruption , controlled process failure , or server instability . No specific explo...

CVE-2026-85964

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are vulnerable to a path traversal vulnerability in the Query Console . An authenticated user can provide unsafe path values to a privileged filesystem helper , potentially leading to the disclosure of arbitrary server f...

CVE-2026-85963

Progress MarkLogic Server is affected by a vulnerability in deprecated OpsDirector functionality in versions 12.x before 12.1.0 and 11.x before 11.3.7 . The weakness involves Server-Side Request Forgery (SSRF) and the use of a hard-coded cryptographic key , which could allow an unauthenticated re...

CVE-2026-94451

The Quarkus REST Data Panache component is vulnerable to information disclosure and denial of service (DoS) due to an unvalidated sort parameter . An attacker can exploit this flaw on certain endpoints to gain unauthorized access to information or force the database to perform complex tasks, pote...

CVE-2026-108907

A critical improper authentication vulnerability exists in Netcore NR268 version 1.7.121109 within the CGI Execution component. Specifically, a manipulation of the user_ok function allows for remote unauthorized access. The exploit has been publicly disclosed and may be utilized by attackers. Whi...

CVE-2026-85962

Progress MarkLogic Server releases 12.x before 12.1.0 and 11.x before 11.3.7 are vulnerable to an improper authentication vulnerability during SAML processing . An unauthenticated remote attacker can exploit this to force the server to accept an assertion that should be rejected, potentially lead...

CVE-2026-85961

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 on Azure deployments may record security-sensitive authentication information in diagnostic logs under certain configurations. This exposure occurs due to the insertion of sensitive data into log files (CWE-532 ), potent...

CVE-2026-85960

Progress MarkLogic Server (12.x before 12.1.0 and 11.x before 11.3.7) is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in the Query Console due to the use of predictable CSRF tokens. A remote attacker could trick an authenticated user into visiting a malicious page to submit unauthorized...

CVE-2026-85959

The Progress MarkLogic Server is impacted by CVE-2026-85959 , where versions 12.x before 12.1.0 and 11.x before 11.3.7 fail to consistently record successful authentication events in audit logs. This insufficient logging (CWE-778) can hinder the ability to detect or investigate unauthorized acces...

CVE-2026-109374

ZITADEL versions 3.0.0 before 4.19.2 are vulnerable to a privilege escalation flaw within the OIDC token exchange process. The root cause is a failure to properly validate the admin.impersonation check, allowing users with IAM_END_USER_IMPERSONATOR or ORG_END_USER_IMPERSONATOR roles to bypass res...

CVE-2026-109373

ZITADEL versions 3.0.0 before 4.19.2 are vulnerable to an authentication bypass in the Login V2 UI . The root cause allows unauthenticated attackers to forge unsigned session cookies by guessing time-ordered session IDs near a victim's sign-in. By supplying these IDs with empty tokens, attackers ...