[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-14780 | 24 Sep 2026 | CVSS 7.5 | PaperCut NG/MFA vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insufficient sanitization and access restrictions… | Fix |
| CVE-2026-74991 | 24 Sep 2026 | CVSS 6.8 | Unknown WPFormsThe WPForms WordPress plugin before 2.0.2 does not verify that a Stripe payment object supplied during a public form submission belongs to it before… | |
| CVE-2026-97151 | 24 Sep 2026 | CVSS 8.4 | mwilliamson mammoth.jsmammoth (aka mammoth.js) before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document. Converting a crafted .docx… | |
| CVE-2026-97152 | 24 Sep 2026 | CVSS 8.6 | NanomsgNanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of… | |
| CVE-2026-97155 | 24 Sep 2026 | CVSS 6.5 | Fabasoft Folio ClientFabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not… | |
| CVE-2026-96898 | 24 Sep 2026 | CVSS 7.3 | yhx070424 ShopXOA vulnerability was detected in yhx070424 ShopXO up to 2.2.7. Affected by this vulnerability is an unknown functionality of the file… | |
| CVE-2026-96892 | 24 Sep 2026 | CVSS 4.3 | Edimax BR-6428nCA flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the component goform Handler. Executing a… | |
| CVE-2026-97149 | 24 Sep 2026 | CVSS 5.3 | OpenStack SwiftIn OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempURL signature only covers the… | |
| CVE-2026-96881 | 24 Sep 2026 | CVSS 5.3 | TaleLin lin-cms-spring-bootA vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file… | |
| CVE-2026-96882 | 24 Sep 2026 | CVSS 5.3 | TaleLin lin-cms-spring-bootA vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file… | |
| CVE-2026-96884 | 24 Sep 2026 | CVSS 6.3 | MantisZipA security flaw has been discovered in MantisZip up to 0.4.5. Affected by this issue is the function Path.Combine of the file MainWindow.UI.cs of the… | |
| CVE-2026-96891 | 24 Sep 2026 | CVSS 9.8 | D-Link DIR-825A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnel_set_params of the file tunnel.c of the component rp-l2tp… | |
| CVE-2026-96880 | 24 Sep 2026 | CVSS 5.3 | TaleLin lin-cms-spring-bootA vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file… | |
| CVE-2026-97055 | 24 Sep 2026 | CVSS 8.1 | signozSigNoz from v0.8.0 before v0.143.0 defaults the JWT tokenizer signing secret (tokenizer::jwt::secret, set via SIGNOZ_TOKENIZER_JWT_SECRET or the… | |
| CVE-2026-97056 | 24 Sep 2026 | CVSS 6.8 | signozSigNoz versions from v0.98.0 up to (but not including) v0.143.0, when configured to use the opaque session tokenizer (which was not the default… | |
| CVE-2026-96777 | 24 Sep 2026 | CVSS 6.3 | Forma LMSA vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file… | |
| CVE-2026-96803 | 24 Sep 2026 | CVSS 7.3 | java110 MicroCommunityA vulnerability was identified in java110 MicroCommunity up to 2.0. Affected is the function QueryServiceSMOImpl.fallBack of the file… | |
| CVE-2026-96810 | 24 Sep 2026 | CVSS 3.5 | huanzi-qch base-adminA vulnerability was identified in huanzi-qch base-admin up to 52816b760cd53244989fd664bbb2b3d4edbfdbf1. This issue affects the function Save of the… | |
| CVE-2026-18467 | 24 Sep 2026 | CVSS 9.8 | paytiumsupport Paytium: Mollie payment forms & donationsThe Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.3… | |
| CVE-2026-96772 | 24 Sep 2026 | CVSS 5.3 | Intelliants Subrion CMSA security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file… | |
| CVE-2026-96773 | 24 Sep 2026 | CVSS 4.3 | Intelliants Subrion CMSA weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file… | |
| CVE-2026-96774 | 24 Sep 2026 | CVSS 5.3 | SPON Communications IP Network Audio Device XC-9603A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.3_20181106 Build 107. This affects the function loadCfg of the… | |
| CVE-2026-96763 | 24 Sep 2026 | CVSS 5.4 | kvcache-ai mooncakeA security flaw has been discovered in kvcache-ai mooncake up to 0.3.12/0.3.13.post1/0.3.14-rc1. This issue affects the function… | |
| CVE-2026-96764 | 24 Sep 2026 | CVSS 4.3 | kvcache-ai mooncakeA weakness has been identified in kvcache-ai mooncake up to 0.3.12/0.3.14-rc1. Impacted is the function MasterService::GetReplicaListByRegex of the… | |
| CVE-2026-96751 | 24 Sep 2026 | CVSS 7.3 | pmTicket Project-Management-SoftwareA vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function… | |
| CVE-2026-96762 | 24 Sep 2026 | CVSS 7.3 | kvcache-ai mooncakeA vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegment of the component RPC Path… | |
| CVE-2026-89078 | 24 Sep 2026 | CVSS 9.9 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-92470 | 24 Sep 2026 | CVSS 7.7 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-92529 | 24 Sep 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-92530 | 24 Sep 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-92628 | 24 Sep 2026 | CVSS 3.1 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-92874 | 24 Sep 2026 | CVSS 5.4 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-93577 | 24 Sep 2026 | CVSS 9.9 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-96739 | 24 Sep 2026 | CVSS 4.3 | SEMCMSA flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/upload_json.php of the… | |
| CVE-2026-82370 | 24 Sep 2026 | CVSS 8.6 | Brocade SANnavUnauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary… | |
| CVE-2026-96680 | 23 Sep 2026 | CVSS 4.3 | ByteDance Coze Scraper ExtensionA vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function… | |
| CVE-2026-96606 | 23 Sep 2026 | CVSS 5.3 | LB-Link BL-CPE600EUA security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects unknown code of the file Mifi_config.bin of the… | |
| CVE-2026-96676 | 23 Sep 2026 | CVSS 6.3 | Fast FAC1900RA vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impacted element is the function get_alias_name of the component uhttpd. Such… | |
| CVE-2026-96678 | 23 Sep 2026 | CVSS 6.3 | weiqingwen spring-boot-forumA security vulnerability has been detected in weiqingwen spring-boot-forum up to 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f. Affected is the function… | |
| CVE-2026-70125 | 23 Sep 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseMicrosoft Office Outlook Remote Code Execution Vulnerability | Fix |
| CVE-2026-59980 | 23 Sep 2026 | CVSS 6.3 | hpack: Unbounded variable integer decoding can cause run-away computation on malformed inputhpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on… | Fix |
| CVE-2026-96603 | 23 Sep 2026 | CVSS 7.3 | Abdurrab5 online-makeup-storeA vulnerability has been found in Abdurrab5 online-makeup-store. Affected is the function confirm_logged_in/confirm_user of the file functions.php of… | |
| CVE-2026-96604 | 23 Sep 2026 | CVSS 7.3 | SoftNews Media Group DataLife EngineA vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function strip_data of the file… | |
| CVE-2026-86583 | 23 Sep 2026 | CVSS 8.8 | carazo Import and export users and customersThe Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via… | |
| CVE-2026-93352 | 23 Sep 2026 | CVSS 9.8 | plank laravel-mediableLaravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the .pht extension is absent from the… | |
| CVE-2026-96601 | 23 Sep 2026 | CVSS 7.3 | Abdurrab5 online-makeup-storeA vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login… | |
| CVE-2026-96602 | 23 Sep 2026 | CVSS 7.3 | Abdurrab5 online-makeup-storeA flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer… | |
| CVE-2026-75887 | 23 Sep 2026 | CVSS 7.5 | Red Hat OpenShift Container Platform 4.12A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the `lng` and `ns`… | |
| CVE-2026-80423 | 23 Sep 2026 | CVSS 6.5 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to the exposure of… | Fix |
| CVE-2026-81208 | 23 Sep 2026 | CVSS 7.7 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted… | Fix |
| CVE-2026-81536 | 23 Sep 2026 | CVSS 7.7 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity… | Fix |
| CVE-2026-81537 | 23 Sep 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to OS command injection. | Fix |
| CVE-2026-19125 | 23 Sep 2026 | CVSS 8.1 | lynn999 EthPress – Web3 LoginThe EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.5. This is due to the… | |
| CVE-2026-80412 | 23 Sep 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper escaping of… | Fix |
| CVE-2026-80425 | 23 Sep 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization… | Fix |
| CVE-2026-82369 | 23 Sep 2026 | CVSS 8.6 | Brocade SANnavInsufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authenticated users to break out of… | |
| CVE-2026-96556 | 23 Sep 2026 | CVSS 7.3 | Neethuharii CafeManagementA flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier of the file AddCashierCode.php… | |
| CVE-2026-6730 | 23 Sep 2026 | CVSS 7.8 | IBM ConcertIBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and… | |
| CVE-2026-6794 | 23 Sep 2026 | CVSS 7.8 | IBM ConcertIBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this… | |
| CVE-2026-6925 | 23 Sep 2026 | CVSS 5.3 | IBM ConcertIBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL… | |
| CVE-2026-6928 | 23 Sep 2026 | CVSS 9.8 | IBM ConcertIBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or… | Fix |
| CVE-2026-6935 | 23 Sep 2026 | CVSS 7.8 | IBM ConcertIBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path… | Fix |
| CVE-2026-75886 | 23 Sep 2026 | CVSS 7.2 | Red Hat OpenShift Container Platform 4.17A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in the CatalogdHandler, which lacks proper… | |
| CVE-2026-80379 | 23 Sep 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization… | Fix |
| CVE-2026-67232 | 23 Sep 2026 | CVSS 7.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The cowboy WebSocket options at line 117… | |
| CVE-2026-67235 | 23 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-header BodySize (a uint64) was… | |
| CVE-2026-67240 | 23 Sep 2026 | CVSS 2.3 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, pattern_to_regex maps % -> .*? and _ -> ., then compiles ^...$ with… | |
| CVE-2026-67404 | 23 Sep 2026 | CVSS 7.4 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bundle is available… | |
| CVE-2026-67405 | 23 Sep 2026 | CVSS 8.1 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, Neither the Web-MQTT handler… | |
| CVE-2026-6718 | 23 Sep 2026 | CVSS 6.2 | IBM ConcertIBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files. | Fix |
| CVE-2026-6721 | 23 Sep 2026 | CVSS 9.8 | IBM ConcertIBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially crafted input that is incorporated into OS commands… | |
| CVE-2026-67219 | 23 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, add_binding/3 parses the routing key as an… | |
| CVE-2026-67220 | 23 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, 4.3.0, When a binding is created on an x-jms-topic… | |
| CVE-2026-67221 | 23 Sep 2026 | CVSS 4.9 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The AMQP 0-9-1 shovel calls… | |
| CVE-2026-67224 | 23 Sep 2026 | CVSS 4.9 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The trace consumer constructs the output… | |
| CVE-2026-67228 | 23 Sep 2026 | CVSS 6.9 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The runtime-parameters lookup path coerces the URL :component… | |
| CVE-2026-67229 | 23 Sep 2026 | CVSS 4.9 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, add_vhost/2 calls… | |
| CVE-2026-67231 | 23 Sep 2026 | CVSS 9.1 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a… | |
| CVE-2026-66069 | 23 Sep 2026 | CVSS 2.3 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, is_authorized/2 uses is_authorized_monitor for all methods… | |
| CVE-2026-66072 | 23 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, get_chunk_selector/1 calls binary_to_atom… | |
| CVE-2026-66074 | 23 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, match_value/3 passes the user-supplied… | |
| CVE-2026-66075 | 23 Sep 2026 | CVSS 5.4 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, is_authorized/2 for the… | |
| CVE-2026-66077 | 23 Sep 2026 | CVSS 6.1 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, The management UI uses EJS 1.0 in which <%= … | |
| CVE-2026-66080 | 23 Sep 2026 | CVSS 4.9 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 4.1.11, 4.2.6, and 4.3.0, validate_partitions only checks that the requested… | |
| CVE-2026-67218 | 23 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22, 4.1.11, 4.2.6, and 4.3.0, accept_content/2 at line 56 calls… | |
| CVE-2026-66067 | 23 Sep 2026 | CVSS 6.0 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The stream open handler calls only check_vhost_access; it omits the… | |
| CVE-2026-66068 | 23 Sep 2026 | CVSS 4.4 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, ?LOG_DEBUG("shutting down Shovel '~ts'… | |
| CVE-2026-96826 | 23 Sep 2026 | CVSS 7.6 | Shazzad Hossain Khan W4 Post ListImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shazzad Hossain Khan W4 Post List allows Blind… | |
| CVE-2026-96889 | 23 Sep 2026 | CVSS 7.8 | Librsvg: Use-after-free when XML includes have duplicated entitiesA flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a… | Fix |
| CVE-2026-96550 | 23 Sep 2026 | CVSS 3.7 | sfturing hosp_orderA vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This issue affects the function getProperties of the… | |
| CVE-2026-96551 | 23 Sep 2026 | CVSS 4.3 | sfturing hosp_orderA vulnerability was determined in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. Impacted is an unknown function of the file… | |
| CVE-2026-96552 | 23 Sep 2026 | CVSS 3.1 | sfturing hosp_orderA vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function MD5.getMD5… | |
| CVE-2026-94183 | 23 Sep 2026 | CVSS 7.4 | The Browser Company of New York Arc SearchArc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running… | |
| CVE-2026-86065 | 23 Sep 2026 | CVSS 7.5 | Klever-Go: Unauthenticated WebSocket /subscribe: no read-size limit, no connection cap, permissive origin -> remote node memory/goroutine exhaustion (DoS)Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /subscribe endpoint in… | Fix |
| CVE-2026-87898 | 23 Sep 2026 | CVSS 9.4 | WebPros Plesk extension "Site Import"OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges. | |
| CVE-2026-87899 | 23 Sep 2026 | CVSS 9.4 | WebPros cPanelExecution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges. | |
| CVE-2026-87900 | 23 Sep 2026 | CVSS 9.4 | WebPros WP Toolkit for cPanelArgument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary… | |
| CVE-2026-84724 | 23 Sep 2026 | CVSS 6.6 | Red Hat Ansible Automation Platform 2.5 for RHEL 8An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch… | |
| CVE-2026-85475 | 23 Sep 2026 | CVSS 7.2 | Red Hat Ansible Automation Platform 2.7A flaw was found in the Ansible Automation Platform automation controller. The external logging (rsyslog) configuration is generated by interpolating… | |
| CVE-2026-86064 | 23 Sep 2026 | CVSS 8.6 | Klever-Go: /log controls global node loggingKlever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /log WebSocket route configured in… | Fix |
Page 163 of 168