2026

KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verificati

Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication,

Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track

Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwt_refresh route that issues new JWT acces

Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content

Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirm_password, login_return_to_requested

Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route that allows logged-in

pac4j-saml before 6.5.6 does not require signature validation of SAML LogoutRequest messages in SAML2LogoutValidator.val

pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform() that accepts backslash-p

pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the

pac4j-oidc before 6.5.6 accepts OIDC callbacks carrying only an access token without authorization code or ID token vali

pac4j-oidc before 6.5.6 fails to verify access token signatures, issuers, audiences, or expiry when extracting Keycloak

Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoint

The cohttp package before 6.3.0 for OCaml allows directory traversal.

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal netw

su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t an

argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller c

RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-exi

The Omnivore API (packages/api) before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in toke

rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attacker

rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lac

Formwork through 2.3.14 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer

BookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP import functionality that al

Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrep

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated

Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first throu

The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file

In the Linux kernel, the following vulnerability has been resolved: net: gro: properly validate BIG TCP aggregation cri

The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its AJAX

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied dur

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order informa

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or s

The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values be

The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 does not verify that a subscription belongs to th

The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds th

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check that a user holds the req

The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its unauthenticated end

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation che

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform any authorisation

The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does not verify the amount

The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature, gr

The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when impor

The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes, al

The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its REST API routes, and th

The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its wallet payment handling be

The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its delivery endpoints

The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when saving one of its setti

The Newsletters WordPress plugin before 4.17 does not generate its API key using a sufficiently random source, deriving