CVE-2026-16354

CVE-2026-16354 affects Mozilla Firefox when using the Graphics: ImageLib component, causing information disclosure. The vulnerability is addressed in Firefox 153 and Firefox ESR 115.38 and 140.13. Connected sources corroborate that this issue is resolved by these version fixes; no exploitation st...

CVE-2026-16353

The CVE-2026-16353 entry concerns Mozilla Firefox/Firefox ESR and the DOM Bindings (WebIDL) component. Affected component: Invalid pointer in the DOM: Bindings (WebIDL). Root cause: invalid pointer handling in the DOM Bindings. Impact: high confidentiality, integrity, and availability (per CVSS 3...

CVE-2026-16366

CVE-2026-16366 describes a privilege escalation in the DOM: Navigation component. Affected products are Firefox and Thunderbird before version 153; the issue is fixed in Firefox 153 and Thunderbird 153. The CVSS 3.1 base metrics indicate a High impact with network access as the attack vector, req...

CVE-2026-16365

CVE-2026-16365 affects the DOM: Workers component. The vulnerability is fixed in Firefox 153 and Thunderbird 153. The available data include a CVSS v3.1 base score of 8.8 (HIGH) with network attack vector, low attack complexity, no privileges required, user interaction required, and total impact ...

CVE-2026-16363

The CVE-2026-16363 entry describes a JIT miscompilation vulnerability in the JavaScript: WebAssembly component of Mozilla Firefox. Affected product is Firefox and Firefox ESR; the root cause is a miscompilation in the JavaScript/WebAssembly engine. The vulnerability is rated critical (CVSS v3.1: ...

CVE-2026-16364

CVE-2026-16364 describes incorrect boundary conditions in Mozilla Firefox's Audio/Video: Playback component, with impact per sources as a high-severity issue fixed in Firefox 153. Affected product: Mozilla Firefox versions earlier than 153.0. Root cause: boundary-condition error in the Playback s...

CVE-2026-16352

CVE-2026-16352 is a sandbox-escape vulnerability due to a use-after-free in the Disability Access APIs component of Mozilla Firefox. The issue is fixed in Firefox 153 , and in Firefox ESR 115.38 and 140.13 . Affected product is Mozilla Firefox ESR (earlier than 115.38 per related advisory). The p...

CVE-2026-16351

CVE-2026-16351 is a sandbox escape caused by a use-after-free in the DOM: Navigation component. It affected Mozilla Firefox and Firefox ESR prior to 115.38, with fixes in Firefox 153 and ESR 115.38/140.13. Affected products include Firefox ESR versions older than 115.38 (per multiple feeds), and ...

CVE-2026-16362

CVE-2026-16362 is a use-after-free in Firefox’s WebRTC Audio/Video component. The issue affects Firefox and Firefox ESR prior to the listed fixes, with the vulnerability fixed in Firefox 153 and Firefox ESR 140.13. The CVSS–3.1 metrics indicate network attack vector, no privileges, user interacti...

CVE-2026-16350

CVE-2026-16350 affects Mozilla Firefox and Firefox ESR (Audio/Video: cubeb). The issue is caused by incorrect boundary conditions in cubeb, with a remediation by upgrading to Firefox 153, Firefox ESR 115.38, or Firefox ESR 140.13. Public CVSS 3.1 vector indicates NETWORK attack, no user interacti...

CVE-2026-16349

CVE-2026-16349 : Same-origin policy bypass in the DOM: Navigation component affects Mozilla Firefox and Firefox ESR. Root cause is a bypass vulnerability in the Navigation component that can impact confidentiality, integrity, and availability (CVSS v3.1: 9.8, high) with network attack vector and ...

CVE-2026-6792

Technical details about CVE-2026-6792 are not publicly available in the provided documents. Monitor for updates from official advisories; the available sources only reiterate a Missing Authorization issue affecting FlexCity versions 5.536.0–11052026.

CVE-2026-8285

Technical details about CVE-2026-8285 are not publicly available in the provided documents. Affected: FlexCity (Universal Software Inc.) 5.536.0–11052026. Monitor for updates.

CVE-2026-8284

CVE-2026-8284: Open redirect vulnerability in Universal Software Inc. FlexCity (versions 5.536.0–11052026) allowing URL redirection to untrusted sites via input data manipulation. Affected product: FlexCity. Root cause details are not provided in the supplied documents. Impact as per CVSSv3.1: Co...

CVE-2026-16461

CVE-2026-16461 describes a stack-based buffer overflow in rpcbind’s rpcinfo utility. In rpcbdump() short-mode formatting (used by rpcinfo -s), version numbers from a remote RPCBPROC_DUMP reply are written into a fixed-size stack buffer without bounds checking. This can cause a crash or denial of ...

CVE-2026-65009

OpenRemote prior to v1.26.2 is affected by an information disclosure in the SyslogResource REST endpoint. The vulnerability allows attackers with the read:rules role to call GET /api/{realm}/syslog/event and read operational logs from all tenants, exposing asset IDs, agent connection details, rul...

CVE-2026-65008

Grav 2.0.4 contains a remote code execution vulnerability in Blueprint::dynamicData(), where a Class::method callable string and arguments are passed to call_user_func_array() without an allowlist. The form plugin routes page frontmatter through this path, allowing an authenticated user with admi...

CVE-2026-65007

The Grav api plugin (grav-plugin-api) prior to v1.0.8 fails to properly authorize API key generation and revocation. It intercepts apiKeyGenerate/apiKeyRevoke admin tasks before the account-management ACL runs and authorizes callers solely on admin.login, the baseline permission for all panel use...

CVE-2026-64628

Grav (CVE-2026-64628) suffers a stored XSS in shortcode-core attribute handlers. The XSS bypasses validation because the detector only flags payloads with literal angle brackets, allowing shortcode parameters to inject JavaScript that runs in any viewer’s browser, including admins. Attackers with...

CVE-2026-64627

Parse Server versions 9.0.0–8.6.84/9.0.0–9.10.0-alpha.3 contain a schema disclosure vulnerability where, when GraphQL public introspection is disabled, error messages during variable coercion reveal hidden schema identifiers (e.g., Cloud Code function names, Parse class/field names) to an unauthe...

CVE-2026-59844

CVE-2026-59844 affects libssh: a remote authenticated client can send SSH_FXP_READ with an arbitrarily large length to a libssh SFTP server, causing excessive memory allocation and potential exhaustion via repeated requests. Documents confirm the flaw and its impact (memory exhaustion) across mul...

CVE-2026-59845

CVE-2026-59845 describes a vulnerability in the libssh library where, when using the ProxyCommand feature, an unchecked fork() failure can be stored as PID -1. During cleanup, signals may be sent across the caller’s process tree, enabling local denial of service. The Red Hat advisory confirms thi...

CVE-2026-59843

CVE-2026-59843 : A flaw in libssh allows a remote authenticated peer to advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing subsequent channel writes to loop indefinitely and consume CPU, leading to a denial of service. According to Red Hat, there is no workaround available. The...

CVE-2026-59842

Affects: libssh. In server-side GSSAPI key exchange, a Curve25519 public key shorter than the expected length is copied without proper length validation, causing an out-of-bounds heap read. This could let a remote unauthenticated attacker disclose small amounts of server memory. Mitigation: vendo...

CVE-2026-1617

Turkhotspot 5651 Loglama (Turkmesh) is affected by a SQL injection vulnerability due to improper neutralization of special elements in SQL commands. Affected versions: from 5.1.2 before 5.1.3. Impact per CVSS: high confidentiality, integrity, and availability impact; network attack vector; no req...

CVE-2026-60080

CVE-2026-60080 is a use-after-free in the Rust deserialization logic of Apache Fory. The vulnerability affects Apache Fory versions from 0.13.0 through 1.3.0. A crafted Fory payload can lead to undefined behavior, a process crash, or potential memory disclosure. The recommended remediation is upg...

CVE-2026-64606

CVE-2026-64606 describes a deserialization of untrusted data issue in Apache Fory prior to 1.4.0, where Java lambda deserialization may bypass class-registration checks, affecting the lambda capture class. The vulnerability pattern is a risk to confidentiality, integrity, and availability (per th...

CVE-2026-64609

CVE-2026-64609 affects Apache Fory (formerly Apache Fury). The issue is an out-of-bounds read via sun.misc.Unsafe when using the opt-in out-of-band zero-copy deserialization; readAlignedVarUint() may read beyond the underlying buffer. Affected range is 0.5.0 up to 1.3.x, with 1.4.0+ fixed. Versio...

CVE-2026-64608

Apache Fory: C++ implementation suffers a heap type confusion and out-of-bounds read/write during deserialization in compatible mode. Inconsistent schemas between declared field types and data can trigger memory access issues. Affected: Apache Fory C++ from 0.14.0 up to but not including 1.4.0. R...

CVE-2026-62415

Affected software: Joomla extension Membership Pro (Joomla) prior to version 4.6.2. Issue: default configuration allowed unauthenticated users to upload media assets, enabling potential unauthorized media uploads. No further details on impact, exploit, or fixes are provided in the supplied docume...

CVE-2026-15370

CVE-2026-15370 is a vulnerability in libssh where, during SFTP server directory listing, the longname field is built by unsafe string concatenation into a fixed-size stack buffer. This can allow sufficiently long attacker-controlled filenames to overflow the stack, potentially crashing the server...

CVE-2026-1771

The MapSVG WordPress plugin is affected up to version 8.14.0. The vulnerability stems from missing file type validation in the SVGFile constructor (due to an incorrect conditional check), allowing authenticated attackers with Administrator+ access to upload arbitrary files via the SVGFile upload ...

CVE-2026-1372

The CVE concerns the WordPress plugins Tutor LMS Elementor Addons (

CVE-2026-15145

The CVE concerns the WordPress plugin Essential Addons for Elementor (Lite) with versions up to 6.6.11. It describes a Stored Cross-Site Scripting (XSS) via the Fancy Text Widget caused by insufficient input sanitization/output escaping. Exploitation requires at least Contributor+ privileges (aut...

CVE-2026-8593

CVE-2026-8593 affects Checkmk BI API Pack permission enforcement in versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 (EOL). The issue allows users without permissions to view and modify BI packs and rules. The provided metrics indicate a CVSS v4.0 base score ...

CVE-2026-3183

CVE-2026-3183 affects ManageEngine ADSelfService Plus versions before 6524. The vulnerability is described as a Multi Factor Authentication (MFA) bypass, enabling an attacker with network access and low privileges to bypass MFA (per CVSS 3.1 metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N; base scor...

CVE-2026-8082

CVE-2026-8082 affects the bpost-shipping-platform WordPress plugin before 3.2.3. The issue is improper sanitization of a parameter used in a SQL query during WooCommerce order submission, allowing unauthenticated attackers to perform time-based blind SQL injection on stores running this plugin. R...

CVE-2026-14185

The WPBot WordPress plugin prior to 8.2.0 is vulnerable: its retrieval-augmented-generation (RAG) settings handler lacks a capability and nonce check, allowing authenticated users with subscriber-level access to modify the plugin’s configuration. Root cause is missing authorization in the RAG set...

CVE-2026-14183

The CVE describes a vulnerability in the Classified Listing WordPress plugin prior to version 5.3.9. The payment-receipt handler does not verify that the targeted order belongs to the requesting user, enabling authenticated users with subscriber-level access to read payment receipt details for ot...

CVE-2026-14184

The CVE refers to the Academy LMS WordPress plugin before version 3.8.1, where several lesson AJAX handlers do not verify ownership of a user-supplied identifier. This allows authenticated users with subscriber-level access to read and modify other users’ lesson notes and to mark other users’ les...

CVE-2026-11767

The CVE-2026-11767 entry describes a Stored XSS vulnerability in The Free Builder for Elementor WordPress plugin, affecting versions before 1.6.7. The issue arises from insufficient sanitization of submitted contact form field values, which are stored and later output in the admin dashboard, enab...

CVE-2026-13693

The CVE describes a path-traversal in the Bit Form WordPress plugin (affected: before 3.1.0) where a form file-field value is not restricted to a safe path before reading and attaching to a notification email, allowing unauthenticated attackers to read arbitrary server files (e.g., WordPress conf...

CVE-2026-13694

CVE-2026-13694 affects the Bit Form WordPress plugin prior to 3.1.0. The root cause is improper validation of the workflow-trigger token after its transient expires, enabling unauthenticated attackers to re-trigger configured workflow actions (e.g., notification emails and integrations). Document...

CVE-2026-13439

The CVE-2026-13439 entry affects the WordPress plugin Easy Form Builder by WhiteStudio up to version 4.0.11 , where the password-recovery flow relies on a publicly visible session identifier ('sid') as the reset token stored in wp_emsfb_temp_links, combined with a publicly accessible nonce refres...

CVE-2026-15782

CVE-2026-15782 describes a stored XSS in WPForms – AI Form Builder for WordPress (WordPress plugin) up to version 2.0.0.1, caused by insufficient input sanitization and output escaping. The vulnerability affects pages containing content with OptinMonster integration data-sitekey attributes, and c...

CVE-2026-3182

CVE-2026-3182 affects Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34, with a vulnerability described as cleartext transmission of sensitive information. The CVSS v3.1 base score is 4.3 (Medium), and the issue is network-based with low privileges required and no user interacti...

CVE-2026-15812

CVE-2026-15812 affects kronosnet (

CVE-2026-15811

Kronosnet (version

CVE-2023-37507

Technical details for CVE-2023-37507 are not publicly available in the provided documents. The descriptions only state an information disclosure in HCL DevOps Plan. Monitor sources for updates and new technical details.

CVE-2026-16266

Mongo-object versions before 3.0.3 are vulnerable to prototype pollution via the expandKey() function in util.js, allowing an attacker to modify Object.prototype by crafting paths containing proto . This can lead to DoS or potentially remote code execution, depending on how polluted prototypes im...