THE LATEST / SECURITY & VULNERABILITIES
Threat News
Recent vulnerabilities and security advisories, straight from the source.
Every cached source, newest first. All entries link to the original publisher.
For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.
15,742 stories · Past 30 days · Newest first
Subscribe to this view · RSSSource updates · Some delayed
- NVDUp to date · Checked
- CISA · Known ExploitedUp to date · Checked
- CISA · IndustrialUpdates delayed · Checked
- CERT-EUUp to date · Checked
Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.
- NVD
CVE-2026-112178 — MISP contains an access control flaw in the proposal (shadow attribute) visibility logic. The authorization check accepted a…
High · CVSS 4.0 7.1 · Assessor: 5a6e4751-2f3f-4070-9419-94fb35b644e8
MISP contains an access control flaw in the proposal (shadow attribute) visibility logic. The authorization check accepted any attribute or object carrying one of the user's sharing groups without verifying the distribution level, and denied the owning organisation access to proposals on its own organisation-only attributes. - A user belonging to a sharing group could view proposals on attributes or objects with that sharing group, regardless of the attribute's distribution level (levels 1-3 should restrict visibi…
CVE-2026-112178Read original ↗ (opens in a new tab) - NVD
CVE-2026-112161 — MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A l…
High · CVSS 4.0 8.5 · Assessor: [email protected]
MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A local attacker with write permissions on this file can replace the ‘bin/cygwin1.dll’ library contained within it with a malicious library. When the victim opens a Local Shell session or uses a Cygwin-based function, the application extracts the component and loads the tampered library, executing code with the victim’s permissions. Exploitation requires write access to the plugin and does not,…
CVE-2026-112161Read original ↗ (opens in a new tab) - NVD
CVE-2026-112098 — A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/…
Low · CVSS 4.0 2.1 · Assessor: [email protected]
A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-112098Read original ↗ (opens in a new tab) - NVD
CVE-2026-112097 — A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /ap…
Medium · CVSS 4.0 5.1 · Assessor: [email protected]
A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactions_handler.php?action=save_sale of the component Sales Management Handler. The manipulation of the argument Hsn_Code results in cross site scripting. It is possible to launch the attack remotely.
CVE-2026-112097Read original ↗ (opens in a new tab) - NVD
CVE-2026-112096 — A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /…
Low · CVSS 4.0 2.0 · Assessor: [email protected]
A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactions_handler.php?action=save_purchase of the component Purchase Records Handler. The manipulation of the argument Product_Name/Product_Code/Vendor_Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2026-112096Read original ↗ (opens in a new tab) - NVD
CVE-2026-112095 — A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the file /api/products_handler…
Low · CVSS 4.0 2.0 · Assessor: [email protected]
A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the file /api/products_handler.php?action=save of the component Product Management. Executing a manipulation of the argument Product_Id/Product_Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used.
CVE-2026-112095Read original ↗ (opens in a new tab) - NVD
CVE-2026-111438 — 在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hba_getauthmethod() 在处理 HADR/SW 复制发送方时，不要求 is_node_in…
Medium · CVSS 3.1 6.5 · Assessor: a1a479f7-907b-4ae8-a999-9148cadc9224
在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hba_getauthmethod() 在处理 HADR/SW 复制发送方时，不要求 is_node_internal_connection()，直接调用 check_hba_replication()。check_hba_replication() 仅按 replication 标记做弱匹配，缺少普通 check_hba() 中的远程 trust 禁止等完整校验。因此，非内部网络的 HADR/SW 复制连接可绕过内部连接限制和完整 pg_hba 策略完成认证，进而通过复制协议读取备份与日志数据。 此问题随 HADR 复制发送方绕过内部连接校验进入代码，自 3.0.0 起即存在。受影响版本包括 3.0.x、3.1.x、5.0.x、5.1.0、6.0.x，以及 7.0.0-RC1、7.0.0-RC2、7.0.0-RC3。该问题已在 7.0.0-LTS版本修复，通过要求 HADR/SW 复制发送方必须经过 is_node_internal_connection 校验，使外部复制连接改走普…
CVE-2026-111438Read original ↗ (opens in a new tab) - NVD
CVE-2026-104679 — VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially cra…
Medium · CVSS 4.0 6.9 · Assessor: [email protected]
VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially crafted project file may the product to initiate unintended communication, potentially leading to the leak of sensitive information from the device where the product is installed or resulting in a denial-of-service (DoS) condition.
CVE-2026-104679Read original ↗ (opens in a new tab) - NVD
CVE-2026-112094 — A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxml_load_data of th…
Low · CVSS 4.0 2.0 · Assessor: [email protected]
A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxml_load_data of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-112094Read original ↗ (opens in a new tab) - NVD
CVE-2026-112093 — A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a57…
Low · CVSS 4.0 2.1 · Assessor: [email protected]
A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The impacted element is an unknown function of the file feedback.php. The manipulation of the argument msg leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The proje…
CVE-2026-112093Read original ↗ (opens in a new tab) - NVD
CVE-2026-112092 — A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The af…
Low · CVSS 4.0 2.1 · Assessor: [email protected]
A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The affected element is the function echo of the file doctorregistration.php of the component Doctor Registration. Executing a manipulation of the argument doc_name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version detai…
CVE-2026-112092Read original ↗ (opens in a new tab) - NVD
CVE-2026-112091 — A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d…
Medium · CVSS 4.0 5.5 · Assessor: [email protected]
A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. Impacted is an unknown function of the file delivery/checkfarmer.json.php of the component AJAX Endpoint. This manipulation of the argument fname causes information disclosure. Remote exploitation of the attack is possible. The exploit has been published and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or…
CVE-2026-112091Read original ↗ (opens in a new tab) - NVD
CVE-2026-112090 — A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f…
Low · CVSS 4.0 2.1 · Assessor: [email protected]
A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqli_real_escape_string of the file payment/pay.php. The manipulation of the argument f_no/farmer results in sql injection. The attack may be launched remotely. The exploit is now public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either a…
CVE-2026-112090Read original ↗ (opens in a new tab) - NVD
CVE-2026-111439 — 在 openGauss-server的 src/common/backend/utils/adt/genfile.cpp 模块中，内置函数 pg_read_binary_file_blocks() 存在权限校验逻辑缺陷。该函数在入口处仅校验了起始块…
Medium · CVSS 3.1 4.3 · Assessor: a1a479f7-907b-4ae8-a999-9148cadc9224
在 openGauss-server的 src/common/backend/utils/adt/genfile.cpp 模块中，内置函数 pg_read_binary_file_blocks() 存在权限校验逻辑缺陷。该函数在入口处仅校验了起始块号（startBlockNum）和块数量（blockCount）的范围，随后直接调用底层文件读取例程 ReadBinaryFileBlocksFirstCall()。该底层例程仅执行了路径规范化检查以及针对 .. 路径遍历和数据目录边界的基本检查，缺失了对调用者数据库权限（如 SELECT 权限）的校验。此外，辅助函数 is_row_data_file() 也仅用于识别文件形态，未包含权限检查。因此，任何拥有普通数据库连接权限的用户，只要能够通过 pg_relation_filepath() 等函数获取到目标表的底层关系文件路径（例如压缩数据的 _compress 文件路径），即可无需具备该表的 SELECT 权限，直接读取表数据的二进制块。 此漏洞影响此前3.0.0到6.0.0间的所有版本及补丁版，并在7.0.0-LTS版本修复。修复patch详见：https://gitcod…
CVE-2026-111439Read original ↗ (opens in a new tab) - NVD
CVE-2026-94294 — The App Builder WordPress plugin before 5.7.1 does not require authentication or authorisation before writing attacker-suppl…
Medium · CVSS 3.1 5.3 · Assessor: [email protected]
The App Builder WordPress plugin before 5.7.1 does not require authentication or authorisation before writing attacker-supplied data to one of its options and, on a separate unauthenticated request, redirecting the visitor's browser to a URI built from that stored data.
CVE-2026-94294Read original ↗ (opens in a new tab) - NVD
CVE-2026-94272 — The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status comes…
Medium · CVSS 3.1 5.3 · Assessor: [email protected]
The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status comes from an authorised source, allowing unauthenticated attackers to move any order into a paid state or force it to fail.
CVE-2026-94272Read original ↗ (opens in a new tab) - NVD
CVE-2026-94231 — The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allow…
Medium · CVSS 3.1 5.3 · Assessor: [email protected]
The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing unauthenticated users to create and modify booking services and categories, including their prices.
CVE-2026-94231Read original ↗ (opens in a new tab) - NVD
CVE-2026-94230 — The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does not va…
Medium · CVSS 3.1 5.3 · Assessor: [email protected]
The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does not validate the submitted service price server-side, allowing unauthenticated users to create bookings at a price of their choosing and to attach them to arbitrary customer accounts.
CVE-2026-94230Read original ↗ (opens in a new tab) - NVD
CVE-2026-94229 — The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its confirma…
Medium · CVSS 3.1 5.3 · Assessor: [email protected]
The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its confirmation summary, allowing unauthenticated attackers to enumerate booking identifiers and retrieve the personal information of customers who booked an appointment, as well as invalidate the customer's own confirmation link.
CVE-2026-94229Read original ↗ (opens in a new tab) - NVD
CVE-2026-94228 — The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the tok…
Medium · CVSS 3.1 5.3 · Assessor: [email protected]
The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it does check is issued to unauthenticated visitors, allowing anyone to overwrite the plugin's entire configuration and to discard any setting they do not supply.
CVE-2026-94228Read original ↗ (opens in a new tab) - NVD
CVE-2026-91831 — The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name…
Low · CVSS 3.1 3.8 · Assessor: [email protected]
The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name setting before using it in e-mail headers, allowing users with Author-level access and above to inject arbitrary e-mail headers, such as a hidden Bcc, and to spoof the sender.
CVE-2026-91831Read original ↗ (opens in a new tab) - NVD
CVE-2026-86791 — The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually compl…
Medium · CVSS 3.1 5.3 · Assessor: [email protected]
The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually completed before recording an order as paid, allowing unauthenticated users to mark any unpaid order as paid and to rewrite its total.
CVE-2026-86791Read original ↗ (opens in a new tab) - NVD
CVE-2026-76740 — A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 serve…
High · CVSS 3.1 7.2 · Assessor: [email protected]
A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC.
CVE-2026-76740Read original ↗ (opens in a new tab) - NVD
CVE-2026-74922 — The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endp…
Medium · CVSS 3.1 5.3 · Assessor: [email protected]
The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endpoints when no shared secret has been configured, which is the default state, allowing unauthenticated users to replace the thumbnail image the site publishes for any document.
CVE-2026-74922Read original ↗ (opens in a new tab) - NVD
CVE-2026-74921 — The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before…
Medium · CVSS 3.1 6.8 · Assessor: [email protected]
The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before embedding them in a single-quoted HTML attribute in the rendered gallery markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when a higher privileged user views the content.
CVE-2026-74921Read original ↗ (opens in a new tab)
Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.