CVE-2026-121576: AtlasAiDev MCP Server for WordPress: Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub…

Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub allows Privilege Escalation.This issue affects MCP Server for WordPress: from n/a through 2.0.1...

CVE-2026-125040: Red Hat: A flaw was found in the SRT and WebVTT subtitle parser in GStreamer's gst-plugins-base

A flaw was found in the SRT and WebVTT subtitle parser in GStreamer's gst-plugins-base. While sanitizing inline subtitle markup, the parser repeatedly searches the remaining text with unanchored regular expressions. A crafted subtitle cue with a long line of unmatched markup-like text can force...

CVE-2026-123465: myCred: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in myCred myCred mycred allows…

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in myCred myCred mycred allows Retrieve Embedded Sensitive Data.This issue affects myCred: from n/a through 4.0.2...

CVE-2026-110469: Fundacja Widzialni WidzialniCMS: WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpoint

WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the uploadPath parameter, an unauthenticated attacker can upload arbitrary files to any locations on the server, leading t...

CVE-2026-125221: FFmpeg: FFmpeg through 9.0.2 contains an uncontrolled recursion vulnerability in score_header() in libavcodec/flac_parser.c…

FFmpeg through 9.0.2 contains an uncontrolled recursion vulnerability in scoreheader in libavcodec/flacparser.c that allows attackers to exhaust the thread stack via crafted FLAC input. Attackers can supply a FLAC stream packed with many small valid-looking frame headers, forcing deep recursion...

CVE-2026-12977: Red Hat: A flaw was found in the deployment-operation family of WildFly Core

A flaw was found in the deployment-operation family of WildFly Core. Certain handlers, such as upload-deployment-url, lack proper sensitivity classification, allowing an administrator with the restricted "Maintainer" role to read sensitive configuration files. This can lead to the exfiltration of...

CVE-2026-121760: weDevs weDocs: Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Control…

Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects weDocs: from n/a through 2.6.1...

CVE-2026-121764: FolioVision FV Flowplayer Video Player: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Stored XSS.This issue affects FV Flowplayer Video Player: from n/a through 7.5.56.7212...

CVE-2026-125231: FFmpeg: FFmpeg 4.4 through 9.0.2 contains a NULL pointer dereference vulnerability in libavcodec/adxdec.c because…

FFmpeg 4.4 through 9.0.2 contains a NULL pointer dereference vulnerability in libavcodec/adxdec.c because adxdecodeheader updates the channel layout before validating the sample rate. Attackers can supply a crafted ADX/AAX stream with mid-stream new-extradata side data carrying an invalid sample...

CVE-2026-125254: FFmpeg: FFmpeg through 9.0.2 contains a division by zero vulnerability in the VVC decoder because ff_vvc_slice_rpl() fails to…

FFmpeg through 9.0.2 contains a division by zero vulnerability in the VVC decoder because ffvvcslicerpl fails to validate numrefidxactive against built reference list entries. Attackers can supply a crafted VVC bitstream whose excess reference indices yield a zero POC difference in ffvvcmvscale,...

CVE-2026-112204: Fundacja Widzialni WidzialniCMS: WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint

WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execution in the victim's browser, allowing e.g session cookie theft. This issue has been fixed in version 2.5...

CVE-2026-113961: Apple: An authorization issue was addressed with improved validation

An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A remote attacker may be able to join an iMessage...

CVE-2026-118795: CompuGroup Medical: Administrative roles and module permissions are stored in mutable local database fields, allowing privilege escalation…

Administrative roles and module permissions are stored in mutable local database fields, allowing privilege escalation for attackers with database write access...

CVE-2026-125069: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because…

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because mpdecodeframe ignores initgetbits failure. Attackers supplying a roughly 2^28-byte packet through the libavcodec API overflow the bit count, causing reads from a NULL buffer that crash the...

CVE-2026-125187: FFmpeg: FFmpeg through 9.0.2 contains a reachable assertion vulnerability in the TTA encoder's tta_encode_frame() in…

FFmpeg through 9.0.2 contains a reachable assertion vulnerability in the TTA encoder's ttaencodeframe in libavcodec/ttaenc.c, which never reserves output packet space for the 4-byte CRC. Attackers can supply audio whose sample values and length produce a small, poorly compressible final frame,...

CVE-2026-112164: laservideo lasergest: The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV,…

The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV, allowing an attacker with access to the application package to recover them in cleartext...

CVE-2026-119504: DynamiApps Frontend Admin by DynamiApps: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DynamiApps…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Stored XSS.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1...

CVE-2026-119515: Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services: Missing Authorization vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services…

Missing Authorization vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services radius-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Booking — Booking Calendar for Appointments & Services: from n/a...

CVE-2026-125234: FFmpeg: FFmpeg through 9.0.2 contains an integer overflow vulnerability in wavpack_encode_init() in libavcodec/wavpackenc.c…

FFmpeg through 9.0.2 contains an integer overflow vulnerability in wavpackencodeinit in libavcodec/wavpackenc.c that causes an infinite loop when computing block size from sample rate and channel count. Attackers can supply a crafted audio file, such as a WAV header declaring a huge sample rate...

CVE-2026-19706: Red Hat: During ABI bootstrap, the bootstrap node's approve-csr.service approves and signs every CSR without identity validation

During ABI bootstrap, the bootstrap node's approve-csr.service approves and signs every CSR without identity validation. An attacker on the install network can retrieve the unauthenticated Ignition file ports 22623/22624, extract a limited kubeconfig, submit a CSR for CN=system:admin, receive the...

CVE-2026-123129: Unknown Event Tickets Manager for WooCommerce: The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not validate the ticket-type price sent to…

The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not validate the ticket-type price sent to one of its unauthenticated AJAX actions when the referenced product has no ticket types configured, and stores the submitted price site-wide, where it is applied to the next eve...

CVE-2026-124575: SiteServer SSCMS: A vulnerability was identified in SiteServer SSCMS up to 7.1.3/7.2.1/7.4.0

A vulnerability was identified in SiteServer SSCMS up to 7.1.3/7.2.1/7.4.0. This issue affects the function LoginController.Submit of the file src/SSCMS.Web/Controllers/Admin/LoginController.Submit.cs of the component Admin-Login CAPTCHA. Such manipulation of the argument isForceLogoutAndLogin...

CVE-2026-119078: Apache Software Foundation Apache Commons Codec: Apache Commons Codec's Blake3 class documented the output of its doFinalize methods as depending on any previously…

Apache Commons Codec's Blake3 class documented the output of its doFinalize methods as depending on any previously finalized bytes, so that consecutive calls would return different output. In fact, doFinalize does not change the hash state: calling it again without supplying more input returns th...

CVE-2026-124577: Intelbras SG 2404 PoE L2+: A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72

A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknown function of the file /EXCUSHELL of the component Web Management Interface. Executing a manipulation can lead to improper authentication. The attack can be launched remotely. The exploit...

CVE-2026-123364: OctoPrint: OctoPrint provides a web interface for controlling consumer 3D printers

OctoPrint provides a web interface for controlling consumer 3D printers. From 2.0.0rc1 until 2.0.0rc7, an authenticated user can supply a crafted default port or baudrate through a connect request to the bundled Serial Connector plugin. OctoPrint persists these values in...

CVE-2026-123371: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment

compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From 0.2.0 until 0.32.0, compose-lint automatically follows a .compose-lint.yml policy-file symbolic link outside the project and includes part of the target line when that external fil...

CVE-2026-118461: CompuGroup Medical: The shared client accepts caller-controlled doctor identifiers for read and write operations without requiring…

The shared client accepts caller-controlled doctor identifiers for read and write operations without requiring authentication or authorization credentials...

CVE-2026-124625: n/a PipraPay: A security vulnerability has been detected in PipraPay 3.0.0

A security vulnerability has been detected in PipraPay 3.0.0. Affected by this issue is the function deleteData of the file pp-content/pp-include/pp-functions.php of the component Admin Panel. The manipulation of the argument selectedids/ItemID leads to sql injection. It is possible to initiate t...

CVE-2026-112172: CompuGroup Medical: CGM XDent and XMedical expose PHP synchronization endpoints that allow unauthenticated attackers to manipulate session…

CGM XDent and XMedical expose PHP synchronization endpoints that allow unauthenticated attackers to manipulate session variables and execute arbitrary SQL queries against backend MySQL databases...

CVE-2026-125230: FFmpeg: FFmpeg through 9.0.2 contains an integer overflow vulnerability in the pcm_rechunk bitstream filter that allows…

FFmpeg through 9.0.2 contains an integer overflow vulnerability in the pcmrechunk bitstream filter that allows attackers to trigger division by zero via a crafted channel count. Attackers can supply a file declaring a huge channel count that is remuxed into MXF, GXF or DAUD, overflowing samplesiz...

CVE-2026-125237: FFmpeg: FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in libavcodec/dpx.c that leaves…

FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in libavcodec/dpx.c that leaves dpx-hwaccelpictureprivate allocated when Vulkan hwaccel callbacks fail. Attackers can supply crafted DPX images that make startframe, decodeslice or endframe fail, triggering an avassert0 abort on...

CVE-2026-119613: ash-project ash_ai: Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai allows a caller of an…

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashai allows a caller of an AshAi tool to read internal error details, including module names and data values, by making a tool call fail. AshAi.ToToolError gained an implementation for...

CVE-2026-119483: 10Web Form Maker by 10Web: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.50...

CVE-2026-124033: AWS aws-parallelcluster: The export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before version 3.16.0 contain a…

The export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before version 3.16.0 contain a relative path traversal issue. An authenticated remote user with write access to the log export Amazon S3 bucket could use a crafted S3 object key to write files outside the...

CVE-2026-125200: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/libx265.c because libx265_encode_frame() never…

FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/libx265.c because libx265encodeframe never frees the rpu.payload allocated by ffdovirpugenerate. Attackers can supply crafted Dolby Vision HEVC or AV1 files that leak one RPU allocation per encoded frame during libx265...

CVE-2026-124558: DataLinkDC Dinky: A vulnerability has been found in DataLinkDC Dinky up to 1.2.5

A vulnerability has been found in DataLinkDC Dinky up to 1.2.5. The impacted element is the function SqlGateway.onOpen of the file SqlGateway.java of the component sql-gateway Endpoint. Such manipulation of the argument connectAddress leads to server-side request forgery. It is possible to launch...

CVE-2026-123797: supertokens supertokens-core: SuperTokens Core is an open source authentication server

SuperTokens Core is an open source authentication server. Prior to 11.3.6, 11.4.6, and 12.0.8, app-specific management requests using an unknown tenant path and an older supported cdi-version can bypass API-key and public-tenant enforcement. In...

CVE-2026-115337: Progress Software WS_FTP Server: Improper access control in Progress WS_FTP Server versions prior to 2025.0.5 could allow an authenticated user with…

Improper access control in Progress WSFTP Server versions prior to 2025.0.5 could allow an authenticated user with certain folder-management permissions to bypass access restrictions and access or modify files belonging to other users...

CVE-2026-125201: FFmpeg: FFmpeg 7.0 before 8.1.3 and 9.x before 9.0.2 contains a heap out-of-bounds write vulnerability in vk_av1_decode_slice()…

FFmpeg 7.0 before 8.1.3 and 9.x before 9.0.2 contains a heap out-of-bounds write vulnerability in vkav1decodeslice in libavcodec/vulkanav1.c because the tile-count limit is checked only on entry. Attackers can supply a crafted AV1 stream with more than 256 tiles decoded via the Vulkan hardware...

CVE-2026-124502: yungifez Skuul School Management System: A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.3

A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.3. Affected by this vulnerability is the function GraduationController::resetGraduation of the file app/Http/Controllers/GraduationController.php of the component Delete Handler. Such manipulation of t...

CVE-2026-124584: wummel patool: A vulnerability has been found in wummel patool 4.1.0

A vulnerability has been found in wummel patool 4.1.0. This vulnerability affects the function extractgzip of the file patoolib/fileutil.py of the component Gzip Extraction Handler. The manipulation leads to symlink following. Local access is required to approach this attack. The researcher claim...

CVE-2026-121842: Mozilla Firefox for iOS: Privilege escalation in the Reader View component in Firefox for iOS

Privilege escalation in the Reader View component in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0...

CVE-2026-115340: Progress Software WS_FTP Server: Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session…

Progress Software WSFTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session data to a temporary file during file transfer operations...

CVE-2026-118465: CompuGroup Medical: Shared components expose hard-coded Access, workgroup, CCBasic, DBISAM, and related database credentials that are…

Shared components expose hard-coded Access, workgroup, CCBasic, DBISAM, and related database credentials that are identical across installations...

CVE-2026-118464: CompuGroup Medical: Shared cryptographic services use fixed vendor-wide secrets, deterministic IVs, null salts, and reversible…

Shared cryptographic services use fixed vendor-wide secrets, deterministic IVs, null salts, and reversible transformations to protect credentials, IPC data, configuration values, and clinical fields...

CVE-2026-125198: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformat_jni_setBuffer() in…

FFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformatjnisetBuffer in libavcodec/mediacodecwrapper.c that never frees buffers wrapped with NewDirectByteBuffer. Attackers can supply crafted media files with large extradata, leaking native memory on each MediaCodec decoder...

CVE-2026-125213: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the PSD decoder in libavcodec/psd.c that allows…

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the PSD decoder in libavcodec/psd.c that allows attackers to corrupt heap memory on 32-bit builds by supplying a crafted PSD image. Attackers can choose dimensions and channel counts whose product exceeds 4 GB, truncating the...

CVE-2026-125210: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaption_trans_text_subtitle() in…

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaptiontranstextsubtitle in libavcodec/libaribcaption.c when decoding with subtype text. Attackers can supply a crafted ARIB STD-B24 caption stream with zero regions, causing a pointer write past a zero-sized sub-rects...

CVE-2026-125202: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapi_hevc_start_frame() in…

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapihevcstartframe in libavcodec/vaapihevc.c that copies unbounded PPS tile counts into fixed-size arrays. Attackers can supply a crafted HEVC bitstream with a large picture and many tiles to write controlled 16-bit values pas...

CVE-2026-109582: DOS Co., Ltd. SS1: Insecure storage of sensitive information issue exists in SS1 provided by DOS Co., Ltd

Insecure storage of sensitive information issue exists in SS1 provided by DOS Co., Ltd. Sensitive information used by the product may be obtained...