CVE-2026-96337

The ProfilePress WordPress plugin (versions

CVE-2026-96518

The ProfilePress WordPress plugin (versions

CVE-2026-96539

The Ultimate Member WordPress plugin (versions

CVE-2026-96333

The GiveWP WordPress plugin (versions

CVE-2026-96553

The Damian Góra FiboSearch ajax-search-for-woocommerce WordPress plugin (versions

CVE-2026-96336

The WPMU DEV Forminator WordPress plugin is vulnerable to an Authentication Bypass by Spoofing vulnerability (CWE-290) in versions up to and including 1.57.2 . This flaw allows for Identity Spoofing , where an attacker can bypass authentication mechanisms. The impact is categorized as HIGH severi...

CVE-2026-78341

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Incorrect Authorization vulnerability (CWE-863). A high privileged attacker with remote access could exploit this flaw to achieve elevation of privileges and gain unauthorized access . To remediate ...

CVE-2026-78340

Dell Secure Connect Gateway (SCG) Policy Manager , versions prior to 5.34.00.16 , is vulnerable to a Path Traversal vulnerability (CWE-22). A high privileged attacker with local access could exploit this flaw to achieve Code execution and Filesystem access . No specific exploit information or in-...

CVE-2026-71884

In Bouncy Castle for Java LTS versions before 2.73.13 , a vulnerability exists in the native one-shot CTR packet cipher . The component fails to verify if the requested input length fits the remaining counter space left by an IV of 13 to 15 bytes. This allows the counter to wrap, causing the keys...

CVE-2026-78339

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Incorrect Permission Assignment for Critical Resource (CWE-732). A low-privileged attacker with local access could exploit this flaw to achieve information disclosure , bypass protection mechanisms ...

CVE-2026-78027

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918). A high privileged attacker with remote access could exploit this flaw to cause Information disclosure and perform server-side request forgery...

CVE-2026-78026

The Dell Secure Connect Gateway (SCG) Policy Manager in versions prior to 5.34.00.16 is susceptible to an Authorization Bypass Through User-Controlled Key vulnerability. A low-privileged attacker with remote access could potentially exploit this flaw to achieve Elevation of privileges . To mitiga...

CVE-2026-62049

The Crocoblock JetBlocks For Elementor WordPress plugin (versions

CVE-2026-78025

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to a Missing Authentication for Critical Function vulnerability (CWE-306). An unauthenticated attacker with remote access can exploit this flaw to achieve Information disclosure , Protection mechanism byp...

CVE-2026-78024

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , contains a Server-Side Request Forgery (SSRF) vulnerability (CWE-918). A high privileged attacker with remote access could exploit this flaw to cause information disclosure , protection mechanism bypass , server-side...

CVE-2026-78023

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Authorization Bypass Through User-Controlled Key vulnerability (CWE-639). A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges . No specific exploi...

CVE-2026-107935

A path traversal vulnerability exists in gvproxy , the network forwarder component of the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint fails to validate caller-supplied socket paths, which could allow an attacker to delete arbitrary files on the host system. E...

CVE-2026-78022

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to a Not Failing Securely ('Failing Open') condition. This flaw occurs when a security control fails in a manner that permits access rather than denying it. A low privileged attacker with remote access co...

CVE-2026-107655

A vulnerability exists in CUPS where improper handling of specific IPP attributes while processing embedded job ticket comments leads to an unhandled null pointer dereference . An unauthenticated attacker capable of submitting jobs to a shared printer queue can exploit this by sending a crafted I...

CVE-2026-78021

Dell Secure Connect Gateway (SCG) Policy Manager , versions prior to 5.34.00.16 , is vulnerable to a Generation of Error Message Containing Sensitive Information (CWE-209). An unauthenticated attacker with remote access can exploit this flaw to cause information disclosure and information exposur...