Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-09-15 08:15Z
1w ago
2026-09-05 07:17Z
CRIT

CVE-2026-78362 — SEO: The SEO Flow by LupsOnline WordPress plugin before 3.0.3 does not correctly validate the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-78362

The SEO Flow by LupsOnline WordPress plugin before 3.0.3 does not correctly validate the credential supplied with its API requests, allowing unauthenticated users to be served as the administrator who configured the SEO Flow by LupsOnline WordPress plugin before 3.0.3 and take over the site. Exploitation requires the SEO Flow by LupsOnline WordPress plugin before 3.0.3 to have been configured, which is its normal operating state. CVSSv3.1 9.8 (CRITICAL) · EPSS 4th percentile

CWECWE 269VNDSeoTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
1w ago
2026-09-05 07:17Z
HIGH

CVE-2026-77826 — RegistrationMagic: The RegistrationMagic WordPress plugin before 6.0.9.9 does not verify which application a Facebook access

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-77826

The RegistrationMagic WordPress plugin before 6.0.9.9 does not verify which application a Facebook access token was issued to before accepting it as proof of identity, allowing unauthenticated attackers to log in as an existing user whose token they can obtain, or to create and log into a new account even when user registration is disabled. CVSSv3.1 8.8 (HIGH) · EPSS 4th percentile

CWECWE 287VNDRegistrationmagicTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
1w ago
2026-09-05 07:17Z
HIGH

CVE-2026-19887 — Welcart: The Welcart e-Commerce plugin for WordPress is vulnerable to PHP Object Injection in all

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-19887

The Welcart e-Commerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.1 via deserialization of untrusted input in the Telecom EDY payment callback (usces_action_acting_transaction). Unauthenticated attackers can store arbitrary 'reserve' key/value pairs as order metadata during a public checkout, then invoke the callback with an attacker-chosen 'option' parameter to select and unserialize that metadata without any provide CVSSv3.1 8.8 (HIGH)

CWECWE 502VNDWelcartTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
1w ago
2026-09-05 06:17Z
HIGH

CVE-2026-86145 — PCRE2: before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-86145

PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API). CVSSv3.1 8.2 (HIGH)

CWECWE 424VNDPcre2TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
1w ago
2026-09-05 06:17Z
CRIT

CVE-2026-83627 — Hummingbird: The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-83627

The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.21.0 via the log_msg() function in core/modules/class-page-cache.php. The page-cache debug log is written to wp-content/wphb-logs/page-caching-log.php, a directly web-accessible PHP file that is supposed to be protected by a leading '<?php die(); ?>' header. That header is guarded by class_exists( 'Filesystem CVSSv3.1 9.8 (CRITICAL)

CWECWE 94VNDHummingbirdTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
1w ago
2026-09-05 06:17Z
CRIT

CVE-2026-13447 — Mstore: The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-13447

The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signature verification in the FirebasePhoneAuthHelper::verify_id_token() function, which decodes and validates Firebase ID token claims (alg, kid, aud, iss) but never calls openssl_verify() or any equivalent to validate the JWT signature against Google's actual public key certificates. This makes it possible f CVSSv3.1 9.8 (CRITICAL)

CWECWE 287VNDMstoreTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
1w ago
2026-09-05 05:17Z
HIGH

CVE-2026-86140 — In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-86140

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow. CVSSv3.1 8.0 (HIGH)

CWECWE 121TYPVulnerability
8.0
CVSS v3.1
90
Edit Score
728 × 90 / responsive · programmatic ad slot
1w ago
2026-09-05 00:17Z
HIGH

CVE-2026-52775 — YesWiki: Prior to version 4.6.6, YesWiki through the latest development branch contains a SQL injection

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-52775

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki through the latest development branch contains a SQL injection vulnerability in ReactionManager::deleteUserReaction() that allows any authenticated user to inject arbitrary SQL via the {idreaction} and {id} URL path parameters. The parameters are concatenated directly into a SQL LIKE clause without escaping or parameterization. This issue has been patched in version 4.6.6. CVSSv3.1 8.8 (HIGH)

CWECWE 89VNDYeswikiTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
1w ago
2026-09-05 00:17Z
HIGH

CVE-2026-52771 — YesWiki: From version 4.2.0 to before version 4.6.6, ApiController::deletePage() interpolates a page tag retrieved from

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-52771

YesWiki is a wiki system written in PHP. From version 4.2.0 to before version 4.6.6, ApiController::deletePage() interpolates a page tag retrieved from the database into a DELETE FROM …_links WHERE to_tag = '$tag' query without escaping. The page tag is attacker-controlled — the POST /api/pages/{tag} API accepts arbitrary URL-encoded values, including single quotes, and stores them. A low-privilege authenticated user can therefore create a page whose tag is a SQL fragment, ma CVSSv3.1 8.3 (HIGH)

CWECWE 89VNDYeswikiTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
1w ago
2026-09-05 00:17Z
HIGH

CVE-2026-52769 — YesWiki: From version 4.6.2 to before version 4.6.6, the POST /api/forms/{formId}/actor/inbox route - exposed publicly

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-52769

YesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, the POST /api/forms/{formId}/actor/inbox route - exposed publicly with acl:"public" - accepts an HTTP Signature header whose keyId parameter is a URL. HttpSignatureService::verifySignature() parses the header and immediately makes a server-side HTTP GET to that URL, before any cryptographic verification or URL validation. An unauthenticated remote attacker can therefore make YesWiki issue arb CVSSv3.1 8.3 (HIGH)

CWECWE 918VNDYeswikiTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
1w ago
2026-09-05 00:17Z
HIGH

CVE-2026-52767 — YesWiki: The -1 row is the bypass: PHP's truthiness rules make -1 a truthy value

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-52767

YesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, HttpSignatureService::verifySignature() checks the result of PHP's openssl_verify() with a loose boolean negation - if (!openssl_verify(...)) { throw ... }. PHP's openssl_verify has four possible return values: 1, 0, -1, and "false". The -1 row is the bypass: PHP's truthiness rules make -1 a truthy value, so !(-1) === false, the throw is skipped, and the controller proceeds to processActivity CVSSv3.1 8.2 (HIGH)

CWECWE 347VNDYeswikiTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
1w ago
2026-09-05 00:17Z
CRIT

CVE-2026-52766 — YesWiki: Combined with YesWiki's allow-by-default action ACL model, any user who has page write access

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-52766

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the {{erasespamedcomments}} wiki action (actions/EraseSpamedCommentsAction.php) accepts a suppr[] array from POST and deletes every wiki page whose tag appears in that array, with no authorization check anywhere in the action body or in the page-deletion path it invokes. Combined with YesWiki's allow-by-default action ACL model, any user who has page write access, which is the default for everyone (default_write CVSSv3.1 9.1 (CRITICAL)

CWECWE 862CWECWE 276VNDYeswikiTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
1w ago
2026-09-04 23:17Z
HIGH

CVE-2026-48019 — Laravel: Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-48019

Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticated attacker to interfere with outbound email processing in applications that send mail to user-supplied addresses. This issue has been patched in versions 12.60.0 and 13.10.0. CVSSv3.1 8.9 (HIGH)

CWECWE 93VNDLaravelTYPVulnerability
8.9
CVSS v3.1
95
Edit Score
1w ago
2026-09-04 22:17Z
HIGH

CVE-2026-82684 — Tycon: Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-82684

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability. This could allow an attacker to extract system credentials, configurations, or flash contents. CVSSv3.1 8.1 (HIGH)

CWECWE 862VNDTyconTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
1w ago
2026-09-04 22:17Z
HIGH

CVE-2026-77393 — Ignition: In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-77393

In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects (if they can execute gateway scripts). Ignition 8.1.54 restricts project creation to Designer sessions and no longer relies on this setting. The 8.3 series is not affected. CVSSv3.1 8.8 (HIGH)

CWECWE 276VNDIgnitionTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
1w ago
2026-09-04 22:17Z
CRIT

CVE-2026-75925 — CRLF: Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-75925

Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. Configuration values accepted by the local service are written to a file later consumed by a privileged subprocess, without line-ending sequences being neutralized, which allows additional directives to be introduced into that file. The configuration interface accepts changes without authenticating or verifying the origin of the requester CVSSv3.1 9.6 (CRITICAL)

CWECWE 93VNDCrlfTYPVulnerability
9.6
CVSS v3.1
98
Edit Score
1w ago
2026-09-04 21:17Z
HIGH

CVE-2026-82712 — Tycon: Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-82712

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker to perform state changing operations on the device. CVSSv3.1 8.8 (HIGH)

CWECWE 352VNDTyconTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
1w ago
2026-09-04 21:17Z
HIGH

CVE-2026-79423 — RCE: An authenticated remote code execution (RCE) vulnerability in the admin_config.php component of seacms v13.6

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-79423

An authenticated remote code execution (RCE) vulnerability in the admin_config.php component of seacms v13.6 allows attackers to execute arbitrary code via a crafted POST request. CVSSv3.1 8.8 (HIGH) · EPSS 15th percentile

CWECWE 78VNDRceTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
1w ago
2026-09-04 21:17Z
CRIT

CVE-2026-50894 — easyadmin v2.0.2.2 is vulnerable to Unrestricted Upload of File with Dangerous Type in the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-50894

easyadmin v2.0.2.2 is vulnerable to Unrestricted Upload of File with Dangerous Type in the background management interface which allows authenticated remote attackers to execute arbitrary code and gain server privileges via a crafted file upload. CVSSv3.1 9.8 (CRITICAL) · EPSS 15th percentile

CWECWE 434TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
1w ago
2026-09-04 21:17Z
CRIT

CVE-2025-67066 — SQL: Injection vulnerability in oasys sysoa version 1.0 allows a remote attacker to execute

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-67066

SQL Injection vulnerability in oasys sysoa version 1.0 allows a remote attacker to execute arbitrary code via the outtype parameter in the /outaddresspaging path CVSSv3.1 9.8 (CRITICAL) · EPSS 10th percentile

CWECWE 89TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
1w ago
2026-09-04 20:17Z
CRIT

CVE-2026-79391 — MQTT: The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-79391

No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations. CVSSv3.1 9.8 (CRITICAL) · EPSS 11th percentile

CWECWE 306VNDMqttTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
1w ago
2026-09-04 20:17Z
CRIT

CVE-2026-71625 — An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-71625

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component CVSSv3.1 9.8 (CRITICAL) · EPSS 11th percentile

CWECWE 269CWECWE 640TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
1w ago
2026-09-04 20:17Z
CRIT

CVE-2026-71624 — An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-71624

An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core/models/ETMemberModel.class.php, core/controllers/ETMemberController.class.php, and core/lib/ET.class.php components CVSSv3.1 9.8 (CRITICAL) · EPSS 9th percentile

CWECWE 94TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
1w ago
2026-09-04 20:17Z
HIGH

CVE-2026-61699 — nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-61699

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.7.1, revocation is the only in-band mechanism that isolates a compromised/offboarded host from a Nebula mesh. Because the blocklist never reaches any peer's config.yml, a Blocked host retains full overlay reachability to every peer under its CA (and internal services on the mesh) for up to 30d (agent) / 365d (mobile). An attacker who exfiltrates host.key+host.crt can run stock slackhq/neb CVSSv3.1 8.1 (HIGH)

CWECWE 672CWECWE 299TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
1w ago
2026-09-04 20:17Z
HIGH

CVE-2026-53932 — Prior to version 1.9.4, a crafted backup archive can trigger OS command injection during

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-53932

laravel-backup-restore restores database backups made with spatie/laravel-backup. Prior to version 1.9.4, a crafted backup archive can trigger OS command injection during database restore. This issue has been patched in version 1.9.4. CVSSv3.1 8.0 (HIGH)

CWECWE 77CWECWE 78TYPVulnerability
8.0
CVSS v3.1
90
Edit Score