PATCHBAY / PUBLICThreat News
Appearance
Color mode

Stronger text, borders, and focus indicators. Works with either color mode.

Online

THE LATEST / SECURITY & VULNERABILITIES

Threat News

Recent vulnerabilities and security advisories, straight from the source.

The complete recent NVD stream, including unscored entries. All entries link to the original publisher.

For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.

16,936 stories · Past 30 days · Newest first

Subscribe to this view · RSS
Source updates

Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.

  1. NVD

    CVE-2026-85298 — An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Appl…

    High · CVSS 4.0 7.3 · Assessor: f45cbf4e-4146-4068-b7e1-655ffc2c548c

    An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project. This vulnerability was patched on 27 August 2026, and no customer action is needed.

    CVE-2026-85298
    Read original (opens in a new tab)
  5. NVD

    CVE-2026-97315 — The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form b…

    Medium · CVSS 3.1 5.4 · Assessor: [email protected]

    The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML notification email sent to the site owner, allowing unauthenticated users to inject arbitrary HTML, such as phishing links, into that email.

    CVE-2026-97315
    Read original (opens in a new tab)
  6. NVD

    CVE-2026-88998 — The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications, and t…

    Medium · CVSS 3.1 5.3 · Assessor: [email protected]

    The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications, and the validated signature does not cover the order or the amount, allowing unauthenticated attackers to forge a payment confirmation and mark arbitrary orders as paid without paying.

    CVE-2026-88998
    Read original (opens in a new tab)
  7. NVD

    CVE-2026-88842 — A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas. Wh…

    Low · CVSS 3.1 3.3 · Assessor: [email protected]

    A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited data corruption.

    CVE-2026-88842
    Read original (opens in a new tab)
  8. NVD

    CVE-2026-82844 — The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepting a…

    Medium · CVSS 3.1 5.3 · Assessor: [email protected]

    The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepting a submission on forms using its PayPal Commerce gateway, allowing unauthenticated visitors to submit paid forms without paying. The form's confirmation is delivered and its notification emails are sent even though no order exists at the payment provider and no payment is recorded.

    CVE-2026-82844
    Read original (opens in a new tab)
  11. NVD

    CVE-2026-108072 — Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located…

    Medium · CVSS 4.0 5.4 · Assessor: [email protected]

    Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without sufficient privileges to write to them. A local attacker with a valid session on the terminal or remote desktop server could modify these files to execute arbitrary commands within another user’s security context when that user logs in using the same theme or operating mode. Depending on the affected user’s privileges, exploitation could all…

    CVE-2026-108072
    Read original (opens in a new tab)
  12. NVD

    CVE-2026-108071 — Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism. A remote att…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism. A remote attacker authenticated with valid first-factor credentials could bypass the second-factor verification because the authentication flow does not correctly apply the MFA validation result, allowing the attacker to complete the login without a valid second-factor token and gain access to protected applications and resources.

    CVE-2026-108071
    Read original (opens in a new tab)
  13. NVD

    CVE-2026-108070 — A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remo…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources.

    CVE-2026-108070
    Read original (opens in a new tab)
  15. NVD

    CVE-2026-105067 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webnus Modern Events C…

    High · CVSS 3.1 8.5 · Assessor: [email protected]

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webnus Modern Events Calendar Lite modern-events-calendar-lite allows Blind SQL Injection.This issue affects Modern Events Calendar Lite: from n/a before 7.37.0.

    CVE-2026-105067
    Read original (opens in a new tab)
  16. NVD

    CVE-2026-104795 — The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runtime f…

    High · CVSS 3.1 8.8 · Assessor: [email protected]

    The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runtime fingerprinting. When scanning a container, the coordinator: 1. **fork()s** a child process 2. **setns()** into the target container's PID and mount namespaces 3. **fchdir()** back to an orphaned FD pointing at the extractor's own root filesystem (where `/crio.sock` is hostPath-mounted) 4. Calls **only `seteuid(target_uid)`** — changing the effective UID but leaving the **real UID and saved-set…

    CVE-2026-104795
    Read original (opens in a new tab)
  17. NVD

    CVE-2026-103905 — The authentication middleware of the JTL-Shop administration backend processes the plugin safe mode toggle on the admin logo…

    High · CVSS 4.0 8.7 · Assessor: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

    The authentication middleware of the JTL-Shop administration backend processes the plugin safe mode toggle on the admin logout route before checking whether the requesting user is authenticated. An unauthenticated remote attacker can therefore switch the shop's plugin safe mode on and off, which deactivates all installed plugins and their functionality, such as payment and shipping integrations, resulting in a shop-wide denial of service. The attack requires a single request and can be automated against many insta…

    CVE-2026-103905
    Read original (opens in a new tab)
  18. NVD

    CVE-2026-103904 — The public consent endpoint of JTL-Shop accepts arbitrary consent names from unauthenticated visitors without validating the…

    High · CVSS 4.0 8.6 · Assessor: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

    The public consent endpoint of JTL-Shop accepts arbitrary consent names from unauthenticated visitors without validating them against the configured consent items. These names are stored in the consent statistics and rendered without output encoding in the administration backend. An unauthenticated remote attacker can thereby inject script code that is executed in the browser session of an administrator viewing the consent statistics page, allowing actions to be performed with the administrator's privileges.

    CVE-2026-103904
    Read original (opens in a new tab)
  19. NVD

    CVE-2026-103358 — Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template Customizer for WooComme…

    High · CVSS 3.1 7.5 · Assessor: [email protected]

    Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows Code Injection.This issue affects Email Template Customizer for WooCommerce: from n/a through 1.3.4.

    CVE-2026-103358
    Read original (opens in a new tab)
  20. NVD

    CVE-2026-103308 — The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not verify the authenticity of payment gateway return reque…

    Medium · CVSS 3.1 6.5 · Assessor: [email protected]

    The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not verify the authenticity of payment gateway return requests, relying on a merchant secret that is empty on a store which has not entered its credentials, allowing unauthenticated attackers to mark arbitrary orders as paid and to disclose the name, email address and postal address of any order's customer.

    CVE-2026-103308
    Read original (opens in a new tab)
  21. NVD

    CVE-2026-101341 — Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved for th…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbitrary sized out of bound stack writes, including an overwrite of a callback function pointer which is called directly after parse. Zone files which are written out by NSD itself, such for zones for which the NSD instance is secondary, will not be formatted like this. The zone file must be fed to NSD directly, (but it could come, for example, from an operator controlle…

    CVE-2026-101341
    Read original (opens in a new tab)
  22. NVD

    CVE-2026-101339 — A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous server)…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous server) can overwrite the stack with up to 191 bytes of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD instance is secondary, will not be formatted like this. The zone file must be fed to NSD directly, (but it could come, for example, from an operator controlled provisioning system).

    CVE-2026-101339
    Read original (opens in a new tab)
  23. NVD

    CVE-2026-101338 — When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond the limit, the base64 decoder can write attacker controlled data of unlimited size. Zone files which are written out by NSD itself, such as for zones for which the NSD instance is secondary, will not be formatted like this. The zone file must be fed to NSD directly, (but it could come, for example, from an operator controlled provisioning system).

    CVE-2026-101338
    Read original (opens in a new tab)
  24. NVD

    CVE-2026-101337 — When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This enables attackers to overwrite the stack with up to 64K of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD instance is secondary, will not be formatted like this. The zone file must be fed to NSD directly, (but it could come, for example, from an operator controlled provisioning system).

    CVE-2026-101337
    Read original (opens in a new tab)
  25. NVD

    CVE-2026-101301 — The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen before e…

    Medium · CVSS 3.1 5.3 · Assessor: [email protected]

    The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen before entering its snippet safe mode, allowing unauthenticated visitors to disable all of the site's automatically inserted snippets for their own requests.

    CVE-2026-101301
    Read original (opens in a new tab)

Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.