Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-08 06:39Z
2026-05-23
2026-05-23 12:17Z
HIGH

CVE-2026-43503 — Linux: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-43503

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail to propagate the SKBFL_SHARED_FRAG bit in skb_shinfo()->flags when moving frags from source to destination. __pskb_copy_fclone() defers the rest of the shinfo metadata to skb_copy_header() after copying frag descriptors, but that helper only carries over gso_{size,se CVSSv3.1 8.8 (HIGH)

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-23
2026-05-23 08:16Z
HIGH

CVE-2026-9295 — Performing a manipulation of the argument vapurl results in buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-9295

A security flaw has been discovered in Edimax BR-6428NS 1.10. This affects the function formWirelessTbl of the file /goform/formWirelessTbl of the component POST Request Handler. Performing a manipulation of the argument vapurl results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH)

CWECWE 120CWECWE 119TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-23
2026-05-23 08:16Z
HIGH

CVE-2026-9294 — Edimax: Such manipulation of the argument pppUserName leads to buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-9294

A vulnerability was identified in Edimax BR-6428NS 1.10. The impacted element is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request Handler. Such manipulation of the argument pppUserName leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.8 (HIGH)

CWECWE 120CWECWE 119VNDEdimaxTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-23
2026-05-23 05:16Z
HIGH

CVE-2026-9284 — WooCommerce: The WooCommerce PayPal Payments plugin for WordPress is vulnerable to unauthorized order manipulation and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-9284

The WooCommerce PayPal Payments plugin for WordPress is vulnerable to unauthorized order manipulation and information disclosure due to missing authorization checks on the `ppc-create-order` and `ppc-get-order` WC-AJAX endpoints in all versions up to, and including, 4.0.1. The `ppc-create-order` endpoint accepts an arbitrary WooCommerce order ID in the `pay-now` context without validating order ownership, allowing attackers to create PayPal orders for any WC order and write P CVSSv3.1 8.2 (HIGH)

CWECWE 862VNDWoocommerceTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-05-23
2026-05-23 05:16Z
HIGH

CVE-2026-6898 — Wishlist: The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-6898

The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'WishListMember3_Hooks::generate_api_key' function in all versions up to, and including, 3.30.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the REST API Secret Key, which can be used to create a new membership level assigned the administrator WordPress role, and register an arbitrary adm CVSSv3.1 8.8 (HIGH)

CWECWE 269VNDWishlistTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-23
2026-05-23 05:16Z
HIGH

CVE-2026-6897 — Wishlist: The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-6897

The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'WishListMember\Features\Team_Accounts::save_settings' function in all versions up to, and including, 3.30.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary plugin options, includes the REST API Secret Key, which can be used to create a new membership level assigned the administrat CVSSv3.1 8.8 (HIGH)

CWECWE 269VNDWishlistTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-23
2026-05-23 05:16Z
HIGH

CVE-2026-6895 — WishList: The WishList Member plugin for WordPress is vulnerable to Missing Authorization leading to Sensitive

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-6895

The WishList Member plugin for WordPress is vulnerable to Missing Authorization leading to Sensitive Information Disclosure and Privilege Escalation in versions up to and including 3.30.1. This is due to the missing capability checks in the 'export_settings' function. This function returns the REST API Secret Key to the attacker in the AJAX JSON response. An attacker who obtains this key can authenticate to the WishList Member API, create a new membership level assigned the a CVSSv3.1 8.8 (HIGH)

CWECWE 269VNDWishlistTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-05-23
2026-05-23 05:16Z
HIGH

CVE-2026-6419 — WishList: The WishList Member plugin for WordPress is vulnerable to Privilege Escalation via Missing Authorization

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-6419

The WishList Member plugin for WordPress is vulnerable to Privilege Escalation via Missing Authorization in versions up to and including 3.30.1. This is due to the missing capability and nonce check in the ajax_get_screen() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to supply an arbitrary admin screen identifier via the data[url] parameter, causing the plugin to load and execute the administrative API configuration te CVSSv3.1 8.8 (HIGH)

CWECWE 269VNDWishlistTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-22
2026-05-22 23:16Z
CRIT

CVE-2026-47280 — Azure: Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-47280

Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network. CVSSv3.1 10.0 (CRITICAL)

CWECWE 287VNDAzureTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2026-05-22
2026-05-22 23:16Z
HIGH

CVE-2026-45659 — Deserialization: of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-45659

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)

CWECWE 502TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-22
2026-05-22 23:16Z
CRIT

CVE-2026-42901 — Origin: validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-42901

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network. CVSSv3.1 10.0 (CRITICAL)

CWECWE 346VNDOriginTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2026-05-22
2026-05-22 23:16Z
CRIT

CVE-2026-41104 — Deserialization: of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-41104

Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose information over a network. CVSSv3.1 10.0 (CRITICAL)

CWECWE 502TYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2026-05-22
2026-05-22 23:16Z
CRIT

CVE-2026-41090 — Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-41090

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network. CVSSv3.1 9.3 (CRITICAL)

CWECWE 77TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-05-22
2026-05-22 23:16Z
CRIT

CVE-2026-40412 — Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40412

Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network. CVSSv3.1 10.0 (CRITICAL)

CWECWE 434TYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2026-05-22
2026-05-22 23:16Z
CRIT

CVE-2026-40411 — Azure: Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40411

Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network. CVSSv3.1 9.9 (CRITICAL)

CWECWE 20VNDAzureTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2026-05-22
2026-05-22 23:16Z
HIGH

CVE-2026-35430 — Authorization: bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35430

Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.8 (HIGH)

CWECWE 639TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-22
2026-05-22 23:16Z
CRIT

CVE-2026-33843 — Authentication: bypass using an alternate path or channel in Microsoft Azure Active Directory B2C

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-33843

Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network. CVSSv3.1 9.1 (CRITICAL)

CWECWE 288TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-05-22
2026-05-22 23:16Z
CRIT

CVE-2026-23652 — Improper neutralization of special elements used in a command ('command injection') in Microsoft Power

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-23652

Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an unauthorized attacker to execute code over a network. CVSSv3.1 10.0 (CRITICAL)

CWECWE 77TYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2026-05-22
2026-05-22 22:16Z
HIGH

CVE-2026-41147 — NukeViet: Versions 4.5.07 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability caused by insufficient

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-41147

NukeViet CMS is a multi Content Management System. Versions 4.5.07 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability caused by insufficient server-side input sanitization in the Request class. The application relies primarily on client-side filtering to sanitize HTML tags and attributes in user-submitted content, which can be bypassed by intercepting and modifying HTTP requests directly (e.g., using Burp Suite). An attacker can inject malicious payloads whic CVSSv3.1 8.7 (HIGH)

CWECWE 79VNDNukevietTYPVulnerability
8.7
CVSS v3.1
94
Edit Score
2026-05-22
2026-05-22 22:16Z
HIGH

CVE-2026-41076 — Versions 5.0.9 and prior in addition to 6.0.0 through 6.0.2 contain an authentication bypass

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-41076

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.9 and prior in addition to 6.0.0 through 6.0.2 contain an authentication bypass vulnerability in RT installations that use LDAP/AD for user authentication. Under certain LDAP server configurations, an attacker may be able to authenticate as any LDAP-backed RT user without supplying valid credentials. This issue has been fixed in versions 5.0.10 and 6.0.3. If developers are unable to upgrade CVSSv3.1 8.1 (HIGH)

CWECWE 287TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-05-22
2026-05-22 22:16Z
HIGH

CVE-2026-41075 — Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection vulnerability.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-41075

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection vulnerability. An authenticated user can craft input that is incorporated into database queries without proper validation, potentially allowing them to read or modify data in the RT database. This issue has been fixed in versions 5.0.10 and 6.0.3. If developers are unable to upgrade immediately, they can temporarily work around CVSSv3.1 8.8 (HIGH)

CWECWE 89TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-22
2026-05-22 22:16Z
HIGH

CVE-2026-41071 — Struktur Libheif: In versions 1.21.2 and prior, a crafted HEIF sequence file where the saiz box

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-41071

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a crafted HEIF sequence file where the saiz box declares more samples than actually exist in the track's chunk table causes a heap-buffer-overflow (out-of-bounds read) in the SampleAuxInfoReader constructor. The SampleAuxInfoReader constructor iterates over saiz->get_num_samples() samples but doesn't validate that this count is consistent with the number of chunks in the chunks vector. W CVSSv3.1 8.1 (HIGH)

CWECWE 125VNDHeifVNDStrukturTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-05-22
2026-05-22 21:16Z
HIGH

CVE-2026-3294 — Tp-link Re305_firmware: An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-3294

An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and reset the administrator password due to insufficient validation. Successful exploitation allows an attacker to obtain full administrative control of the affected device, potentially impacting on confidentiality, integrity, and availability. CVSSv3.1 8.8 (HIGH)

CWECWE 862CWECWE 20VNDTp LinkTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-22
2026-05-22 20:16Z
HIGH

CVE-2026-5843 — Docker Docker_desktop: The MLX backend runs without sandboxing, resulting in arbitrary code execution on the Docker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-5843

The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directories via the model_file configuration field in config.json. When a model's config.json specifies a model_file pointing to a Python file, MLX-LM uses importlib to load and execute it with no trust_remote_code gate or equivalent safety check. The MLX backend runs without sandboxing, resulting in arbitrary code exe CVSSv3.1 8.2 (HIGH)

CWECWE 829VNDDockerVNDMlxTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-05-22
2026-05-22 20:16Z
HIGH

CVE-2026-5817 — Docker Docker_desktop: This causes transformers.AutoTokenizer.from_pretrained() to import and execute arbitrary Python files included in any model

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-5817

The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing. This causes transformers.AutoTokenizer.from_pretrained() to import and execute arbitrary Python files included in any model pulled from an OCI registry, resulting in arbitrary code execution on the Docker host as the Docker Desktop user when inference is triggered. Any container on the Docker network can trig CVSSv3.1 8.2 (HIGH)

CWECWE 829VNDDockerTYPVulnerability
8.2
CVSS v3.1
91
Edit Score