2026

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch S

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_unini

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow in log_replay conver

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.data_off in UpdateReco

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action at

Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism

The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission cal

Leantime 3.6.2 and prior contains a broken access control vulnerability that allows authenticated users to read mileston

The Calendar WordPress plugin before 1.3.18 does not properly escape a user-supplied event field before outputting it in

The Quiz and Survey Master (QSM) WordPress plugin before 11.1.3 does not implement rate limiting or standard failed-log

The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration Wor

The FacturaONE para WooCommerce con VeriFactu WordPress plugin before 5.37 does not authenticate one of its request hand

The Contact Form 7 WordPress plugin before 2.5 does not validate the host of a user-supplied return URL before using it

The Download Manager WordPress plugin before 3.3.62 does not bind its temporary download token to the requesting session

The Smart Manager WordPress plugin before 8.92.0 does not properly encode a post field before rendering it into an HTML

The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input

The WPBot WordPress plugin before 8.5.2 does not validate administrator-configured field identifiers before using them

The MPG WordPress plugin before 4.1.8 does not sanitise and escape a parameter before reflecting it back in the respons

The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.3.0 does not validate the type of uploaded f

The 微信二维码登陆 WordPress plugin through 1.3 does not properly validate WeChat webhook requests, as its signature check alwa

Simply Schedule Appointments is vulnerable to unauthenticated Stored Cross-Site Scripting in all versions up to and incl

The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggrega

The Masteriyo LMS WordPress plugin before 2.3.1 does not correctly verify authorization on an unauthenticated AJAX acti

The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not prevent its custom registrat

The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it

The Clover Payment Gateway by Zaytech for WooCommerce WordPress plugin before 1.3.6 does not verify that an approved ext

The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing

The MainWP Child WordPress plugin before 6.1.2 does not verify the requester's identity in its site-registration reques

The Advanced Ads WordPress plugin before 2.0.23 does not sanitize and escape a shortcode parameter before outputting it

The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-suppl

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in

A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file commo

A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _visit_pattern of the file

Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker t

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a ne

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with ar

NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into t

A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.exter

A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file s

A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserN

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_q

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Increase weight to u16 In CLOS netwo

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who contr

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/mod

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of t

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and i

A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functio

In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/userspace.c allocated a new thre

OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows una