2026

Chamilo is a learning management system. Prior to version 1.11.34, the functionality for the user to update the category

Chamilo is a learning management system. Prior to version 1.11.34, there is a stored cross-site scripting (XSS) vulnerab

Chamilo is a learning management system. Prior to version 1.11.34, there is a stored cross-site scripting (XSS) vulnerab

Chamilo is a learning management system. Prior to version 1.11.34, a Cross-Site Request Forgery (CSRF) vulnerability all

Chamilo is a learning management system. Prior to version 1.11.34, a stored XSS vulnerability exists in Chamilo LMS that

Chamilo is a learning management system. Prior to version 1.11.34, there is a stored XSS vulnerability in Chamilo LMS (V

A vulnerability was detected in DefaultFuction Jeson Customer Relationship Management System 1.0.0. Impacted is an unkno

A vulnerability was identified in Wavlink WL-NU516U1 V240425. This vulnerability affects the function sub_401A0C of the

A vulnerability was determined in Wavlink WL-NU516U1 V240425. This affects the function sub_405AF4 of the file /cgi-bin/

A vulnerability was found in HSC Cybersecurity Mailinspector up to 5.3.2-3. Affected by this issue is some unknown funct

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Sensitive Information Exposure

Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber P

Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Prot

Sensitive information disclosure due to improper configuration of a headless browser. The following products are affecte

Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyb

Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Prot

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protec

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protec

Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acr

Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cy

Denial of service due to insufficient input validation in authentication logging. The following products are affected: A

Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Pro

Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acron

Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cybe

Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect

Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyb

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: A

Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cy

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absenc

Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonat

Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are a

Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber

Payment Orchestrator Service Elevation of Privilege Vulnerability

'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.

Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose

Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.

Microsoft Devices Pricing Program Remote Code Execution Vulnerability

A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function add_data_segme

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

OpenClaw versions prior to 2026.2.12 contain a vulnerability in the BlueBubbles (optional plugin) webhook handler in whi

OpenClaw versions prior to 2026.2.14 decode base64-backed media inputs into buffers before enforcing decoded-size budget

OpenClaw versions prior to 2026.2.14 contain a local file inclusion vulnerability in BlueBubbles extension (must be inst

OpenClaw versions prior to 2026.2.14 contain a command hijacking vulnerability that allows attackers to execute unintend

OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the fetchWithGuard function that alloc