CVE-2026-85010

CVE-2026-85010 affects the RestroPress WordPress plugin prior to version 3.4.6 . The plugin fails to validate client-supplied item add-on prices on the server side when items are added to or updated in the cart. This allows unauthenticated attackers to manipulate prices arbitrarily, placing order...

CVE-2026-85113

GiveWP WordPress plugin versions before 4.16.9 fail to remove shortcode delimiters from donor-supplied values (such as donor names) before rendering them on public pages. The shortcode-stripping logic the plugin applies can be defeated by nesting , allowing unauthenticated users to execute arbitr...

CVE-2026-94152

Omega Solution FBP Fulfillment by People 2025 contains an authorization bypass in the User Profile API (file /user/). The vulnerability is triggered by manipulating the ID argument , allowing a low-privileged remote user to access unauthorized user profiles. The impact is a low confidentiality lo...

CVE-2026-15801

CRI-O contains a vulnerability in its container checkpoint and restore feature where insufficient validation of restore metadata may allow a privileged user to perform unintended operations on the host filesystem . Exploitation requires that checkpoint/restore functionality is explicitly enabled ...

CVE-2026-94151

A missing authentication vulnerability in Omega Solution HRM OS (up to version 20260717 ) affects the Role Permission API at the endpoint /role-permission/permission. Manipulating the roleId argument allows an unauthenticated remote attacker to bypass authentication controls, resulting in a low c...

CVE-2026-94150

CVE-2026-94150 is a cross-site scripting (XSS) flaw in Omega Solution HRM OS versions up to 20260717 , located in an unknown function of the SVG File Upload component at /media/view/. The attack can be initiated remotely but requires high privileges and user interaction , resulting in a low integ...

CVE-2026-94149

Omega Solution HRM OS (versions up to 20260717) is affected by an improper control of resource identifiers flaw in the Role Permission Retrieval Endpoint at /role-permission/permission. Manipulating the roleId argument allows a remote, authenticated attacker (low privileges) to access permission ...

CVE-2026-47321

Apache MINA's CompressionFilter uses ZLib to inflate incoming data without bounding the resulting size. An attacker can send a small compressed payload with a compression ratio exceeding 1,000× , exhausting application memory and causing a denial of service (CVSS 3.1: 7.5 HIGH , impact: availabil...

CVE-2026-94148

ScadaBR versions up to 1.1 are affected by an information disclosure vulnerability in the Export Project Endpoint . The function EmportDwr.createExportJSON in /ScadaBR/export_project.htm was left unprotected, while the corresponding import path was already gated with Permissions.ensureAdmin(). Th...

CVE-2026-94146

BioStar BIOS Update Utility 1.9.7.3 contains a write-what-where flaw in the IOCTL Handler (function sub_110BC of BSMEM64_W10.sys), triggered by manipulating the PhysicalAddress/Size argument. A local attacker with low privileges can achieve high impact on confidentiality, integrity, and availabil...

CVE-2026-94218

A flaw in Keycloak's authentication session management allows a user to bypass mandatory 2FA setup enforcement configured via a client policy. During the login process, manually visiting a specific session restart web link clears internal markers that track required security steps, letting the us...

CVE-2026-94217

CVE-2026-94217 is a flaw in the User-Managed Access (UMA) implementation of Keycloak , specifically in the authorization token endpoint when processing permission tickets. When two different users own resources with the same name, the system incorrectly merges permissions from both resources when...

CVE-2026-94145

A cross-site scripting (XSS) vulnerability affects xuxueli xxl-job versions up to 3.4.2/3.5.0 , specifically in the Task Management Interface component. The flaw resides in JobInfoController.java and is triggered by manipulation of the name or author argument, allowing a remote attacker with low ...

CVE-2026-90860

Canva Mobile App for HarmonyOS prior to v1.15.1 failed to restrict HTTP headers returned to an external origin running in a privileged WebView . The underlying cause is an insufficient origin check on WebView responses, allowing a threat actor with control of the WebView to read a user's session ...

CVE-2026-94144

A SQL injection vulnerability exists in drogonframework drogon up to 1.9.13 , specifically in the makeCriteria function within orm_lib/src/Criteria.cc of the ORM component. Manipulating the filter argument allows a remote, unauthenticated attacker to inject SQL, potentially compromising confident...

CVE-2026-94215

Keycloak's Admin REST API contains a cross-realm privilege escalation flaw. The API uses a per-request in-memory cache to resolve clients by their unique identifier without verifying realm ownership , allowing a limited-privilege administrator to read or modify client configurations in the master...

CVE-2026-94213

CVE-2026-94213 affects the Authorization Services component of Keycloak , an open-source identity and access management solution. The flaw resides in the policy evaluation endpoint , used by administrators to test how access policies apply to specific users. Due to missing authorization checks , ...

CVE-2026-82187

The Web to Print Online Designer WordPress plugin (versions before 2.15.0 ) is vulnerable to an unauthenticated arbitrary file upload flaw. The software fails to validate the type or extension of uploaded files and provides the protection token to any visitor who requests it. This allows an unaut...

CVE-2026-94143

Drogon (C++ web framework) up to 1.9.13 is affected by a SQL injection in the ORM Mapper component, specifically in the Mapper::orderBy function within Mapper.h. Manipulating the sort argument allows a remote, unauthenticated attacker to inject SQL. A public proof-of-concept exploit is available....

CVE-2026-94142

BioStar Temperature Monitor Utility 1.2.1806.2200 contains a write-what-where vulnerability in the IOCTL Handler component, specifically in the function sub_1105C of the kernel driver BS_HWMIO64_W10.sys . Manipulation of the PhysicalAddress argument allows a local attacker with low privileges to ...