CVE-2026-19891

CVE-2026-19891 affects TRENDnet TEW-WLC100 firmware (version 2.05b02) and involves an issue in the IKE Phase 1 Aggressive Mode component, specifically the /etc/racoon.conf function. The attacker can remotely manipulate the exchange_mode argument, resulting in missing encryption of sensitive data....

CVE-2025-44521

Technical details for CVE-2025-44521 are not publicly available in the provided documents; monitor for updates.

CVE-2025-45216

Technical details for CVE-2025-45216 are not publicly available in the provided documents. Monitor for updates as additional information may be published later.

CVE-2026-26590

Technical details are not publicly available in the provided documents for CVE-2026-26590. Monitor for updates.

CVE-2026-35102

CVE-2026-35102 is currently documented as a reserved candidate with no public technical details in the initial entry. The connected CIRCL sighting shows a published proof-of-concept linked to a Telegram post, indicating an exploit exists in the wild or simulated for demonstration, but the provide...

CVE-2026-29866

CVE-2026-29866 is reserved with no public technical details in the provided documents. A CIRCL sighting indicates a published-proof-of-concept for this CVE, hosted at a Telegram link, but there are no disclosed affected products, versions, root cause, impact, or remediation in the supplied data. ...

CVE-2026-34419

Technical details are not publicly available in the provided documents for CVE-2026-34419 . A PoC link exists in CIRCL sighting, but no product/vendor/version, root cause, or impact information is provided here. Monitor for updates.

CVE-2026-73632

Apache Struts 7.2.1's JSON plugin shares per-response serialization state across concurrent requests, letting one user observe another's response content. Only the SMD/JSON-RPC interceptor path is affected; it is disabled by default. No in-the-wild exploitation is reported. Upgrade to 7.3.0. See ...

CVE-2026-73631

Apache Struts 7.2.1's JSON plugin shares per-request parsing state across concurrent requests, allowing one user's JSON-parsed data to leak into another's session and bypassing configured parsing limits. Affected deployments are those using JSON request body population. Upgrade to Struts 7.3.0. N...

CVE-2026-73635

Apache Struts (versions 2.0.0–2.3.37, 2.5.0–2.5.33, 6.0.0–6.10.0, 7.0.0–7.2.1) is vulnerable to unbounded localized-text cache growth: when no fixed locale is set, the request-supplied locale causes caches to expand without limit, exhausting the Java heap and causing denial of service. CVSS 7.5 (...

CVE-2026-73634

An unauthenticated endpoint collecting Content Security Policy violation reports reads submitted data into memory without size limits, allowing a single request to exhaust the heap and cause denial of service. Affects Struts 6.0.0–6.10.0 and 7.0.0–7.2.1; core distribution is unaffected by default...

CVE-2026-18438

The CVE-2026-18438 entry concerns the Templately – Elementor & Gutenberg Template Library WordPress plugin (versions up to 3.7.1). Root cause: a filename validation/destination mismatch in fetch_remote_file causes the destination path to be derived from the URL, while the Content-Disposition file...

CVE-2026-16142

CVE-2026-16142 concerns the TrueBooker WordPress plugin (versions up to 1.2.6). The vulnerability arises because the add_front_user_update() AJAX handler is registered for unauthenticated users and accepts an arbitrary truebooker_wp_user_id, passing it directly to wp_update_user() without authent...

CVE-2026-15142

The CVE-2026-15142 entry documents a Privilege Escalation vulnerability in the WordPress plugin Real Estate Manager Pro up to version 12.8.6, caused by improper capability handling in the allow_attachment_actions() function. An authenticated user with Subscriber-level access or higher can escalat...

CVE-2026-44402

Technical details for CVE-2026-44402 are not publicly available in the provided documents. Monitor for updates as additional information may be disclosed by the reserving entity.

CVE-2026-14279

CVE-2026-14279 affects the Wholesale Market plugin for WordPress. Vulnerable through version 2.2.2 via the ced_wholesale_request_send AJAX action. The root cause is flawed access control: the ced_wholesale_request_send_callback() only verifies a nonce and a positive user ID, then calls WP_User::a...

CVE-2026-15826

The User Profile Builder WordPress plugin (≤ 3.16.4) is vulnerable to unauthenticated authentication bypass via type confusion , rated CVSS 9.8 Critical . The root cause is in wppb_log_in_user(), which calls absint() on the return value of wp_insert_user() before the is_wp_error() check. A regist...

CVE-2026-18807

The ECS WordPress plugin (versions before 4.3.8) lacks capability and ownership checks on dynamic repeater AJAX handlers, allowing any contributor-level user to read, modify, or delete other users' post binding configurations and alter site-wide presets. Remediation is to upgrade to ECS 4.3.8 or ...

CVE-2026-14230

In ECS (Ele Custom Skin) plugin for Elementor before 4.3.8, Dynamic Repeater AJAX handlers lack capability and object-ownership checks. A low-privileged Contributor can write unsanitized data-source bindings into any post, including admin pages, causing stored XSS that fires in visitor or admin s...

CVE-2026-16611

The Product Feed PRO for WooCommerce plugin (before 13.5.7) exposes a REST read route without authorization checks, letting unauthenticated attackers retrieve feed rules, filters, field mappings, and the full product category taxonomy. CVSS 3.1 scores this HIGH (7.5) for confidentiality impact. E...