2026

Missing Authorization vulnerability in Soflyy Breakdance allows Exploiting Incorrectly Configured Access Control Securit

A vulnerability was detected in Kino-Kafkaesque ssh-mcp-server up to 8ebbbb99b26f80ff6162fe00957c6dec73fbc5a5. Impacted

A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0. This issue affects the function sc

A weakness has been identified in WonderTrader up to 0.9.9. This vulnerability affects the function MatchEngine::update_

A security flaw has been discovered in Shibby Tomato 1.28.0000. This affects the function sub_40F88C of the file /tmp/pp

Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allow

The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Email Header Injection in all versions up to

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Logo Software Indu

In Apache CXF's DefaultEncryptingOAuthDataProvider, revoked access tokens still decrypt successfully, and TokenIntrospec

In Apache CXF's DefaultEncryptingCodeDataProvider, a captured authorization code can be redeemed an unlimited number of

Apache CXF’s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim che

Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter map witho

In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and stores the `scope` val

The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btn_wrapper_classes' attribute

The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Stored C

A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via c

A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by this issue is the function new_qoslimit_start of

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to authorization bypass in all versions up

The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More plugin for WordPress is

Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, wit

Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs and external entities. Ho

An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF

Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the "maxFormParameterCount" co

The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the `c_hash` parameter when operating in th

Apache CXF allows to control the maximum attachment size via the "attachment-max-size". Prior to Apache CXF 4.2.3 and 4.

A vulnerability was determined in Shibby Tomato 1.28.0000. Affected by this vulnerability is the function new_qoslimit_s

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leadin

An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke Ca

An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an

Apache Polaris did not consistently validate storage locations supplied during table and view registration. An authenti

A vulnerability was determined in OpenHands up to 0.62.0. The affected element is the function initialize_repo of the fi

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update if

In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify handle

In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize completion before reque

In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: capture_urb_complete: redundant us

In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in meson_cry

In the Linux kernel, the following vulnerability has been resolved: smb/client: Fix error code in smb2_aead_req_alloc()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_close() replay

In the Linux kernel, the following vulnerability has been resolved: libfs: set SB_I_NOEXEC and SB_I_NODEV by default in

In the Linux kernel, the following vulnerability has been resolved: HID: hid-lenovo-go: cancel cfg_setup work in hid_go

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: initialize reset_work at allocat

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not trim a device which is not writeable

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Unconditionally sfence.vma for spurious

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid WARNING in sva unbind path The I

In the Linux kernel, the following vulnerability has been resolved: dma-buf/udmabuf: skip redundant cpu sync to fix cac

In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration f

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix data races on ring->ready On weakl

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: arc: emac: quiesce interrupts before

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain bus_reset work on device remo