| CVE-2026-124057 | CRITICAL | 9.1 | A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiMultipleC… | 2026-11-07 |
| CVE-2026-124258 | MEDIUM | 5.3 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorr… | 2026-11-07 |
| CVE-2026-124058 | CRITICAL | 9.1 | A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. Affected is the function setWiFiRepeaterConfig … | 2026-11-07 |
| CVE-2026-124059 | CRITICAL | 9.1 | A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is t… | 2026-11-07 |
| CVE-2026-124060 | CRITICAL | 9.1 | A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCust… | 2026-11-07 |
| CVE-2026-99283 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: tcp: use UNACK time… | 2026-11-07 |
| CVE-2026-99284 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: propagate shared-frag marker… | 2026-11-07 |
| CVE-2026-120531 | HIGH | 7.2 | The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site… | 2026-11-07 |
| CVE-2025-71458 | HIGH | 7.5 | FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql … | 2026-11-06 |
| CVE-2026-107492 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-06 |
| CVE-2026-123268 | LOW | 3.5 | A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. A… | 2026-11-06 |
| CVE-2026-123269 | LOW | 3.3 | A vulnerability was detected in libyal libvmdk. Affected by this vulnerability is the function libvmdk_descrip… | 2026-11-06 |
| CVE-2026-63017 | CRITICAL | 9.0 | Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources … | 2026-11-06 |
| CVE-2026-63774 | CRITICAL | 9.0 | Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execut… | 2026-11-06 |
| CVE-2026-77299 | HIGH | 7.5 | Regexp2 is a feature-rich RegExp engine for Go. Prior to version 2.3.0, when regexp2 compiles and matches a pa… | 2026-11-06 |
| CVE-2026-89142 | MEDIUM | 6.3 | In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead… | 2026-11-06 |
| CVE-2026-114366 | NA | N/A | An information disclosure vulnerability in the Qt Framework QWebSocket authentication handling of the Qt WebSo… | 2026-11-06 |
| CVE-2026-119431 | HIGH | 7.7 | A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload functionality. Insu… | 2026-11-06 |
| CVE-2026-119432 | HIGH | 8.7 | A stored cross-site scripting (XSS) vulnerability exists in the Foxit Workspace's file share preview functiona… | 2026-11-06 |
| CVE-2026-119433 | HIGH | 7.7 | A server-side request forgery (SSRF) vulnerability exists in an undocumented API endpoint of Foxit Workspace d… | 2026-11-06 |
| CVE-2026-107124 | MEDIUM | 6.4 | A flaw was found in the OIDC logout endpoint of the keycloak-services component, which handles user session te… | 2026-11-06 |
| CVE-2026-109081 | MEDIUM | 6.8 | A flaw was found in Keycloak. The Dynamic Client Registration (DCR) endpoint does not properly validate author… | 2026-11-06 |
| CVE-2026-110525 | NA | N/A | The MCB WordPress plugin through 1.0.0 does not sanitise or escape request header values before storing them … | 2026-11-06 |
| CVE-2026-110532 | NA | N/A | The Mail Mage WordPress plugin through 0.0.25 does not properly sanitise and escape a user-supplied value befo… | 2026-11-06 |
| CVE-2026-110813 | NA | N/A | The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not properly sanitize a stored field def… | 2026-11-06 |
| CVE-2026-110955 | NA | N/A | The Wurdey WordPress plugin through 1.0.0 does not verify a request signature before logging a user in, allowi… | 2026-11-06 |
| CVE-2026-113584 | NA | N/A | The placester WordPress plugin through 1.4.3 does not perform any capability, nonce or ownership check on an A… | 2026-11-06 |
| CVE-2026-113615 | NA | N/A | The GS JWT Authentication for WP REST API WordPress plugin through 1.0.0 does not sanitize or parameterize a r… | 2026-11-06 |
| CVE-2026-114427 | NA | N/A | The GutenKit WordPress plugin before 2.5.5 does not properly sanitize custom CSS saved against a post before … | 2026-11-06 |
| CVE-2026-115230 | NA | N/A | The WHIZZ WordPress plugin through 1.1.8 does not validate the password-reset key before updating a user's pas… | 2026-11-06 |
| CVE-2026-115673 | NA | N/A | The Anti-Spam, Spam FireWall by CleanTalk WordPress plugin before 6.91 does not escape a commenter-supplied va… | 2026-11-06 |
| CVE-2026-116533 | NA | N/A | The Static Snapshot WordPress plugin through 0.2.1 does not sanitise shell metacharacters in a user-supplied v… | 2026-11-06 |
| CVE-2026-118045 | NA | N/A | The Ever Accounting WordPress plugin before 2.3.3 does not restrict the file path supplied to its CSV import … | 2026-11-06 |
| CVE-2026-118167 | NA | N/A | The MC4WP: Mailchimp for WordPress plugin before 4.15.0 does not validate that the Mailchimp audience a sign-u… | 2026-11-06 |
| CVE-2026-118186 | NA | N/A | The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin bef… | 2026-11-06 |
| CVE-2026-118187 | NA | N/A | The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin bef… | 2026-11-06 |
| CVE-2026-118188 | NA | N/A | The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin bef… | 2026-11-06 |
| CVE-2026-118239 | NA | N/A | The AutomatorWP WordPress plugin before 6.0.7 does not check that the user completing its Zoom and AWeber int… | 2026-11-06 |
| CVE-2026-118639 | NA | N/A | The Surfer WordPress plugin before 1.8.1.759 discloses a sensitive API credential to low-privileged users thr… | 2026-11-06 |
| CVE-2026-119259 | NA | N/A | The All-in-One Video Gallery WordPress plugin before 5.1.0 does not check the type, status or ownership of th… | 2026-11-06 |
| CVE-2026-120408 | NA | N/A | The All-in-One Video Gallery WordPress plugin before 5.1.0 does not escape a video's stored thumbnail URL bef… | 2026-11-06 |
| CVE-2026-121837 | MEDIUM | 4.3 | A flaw was found in the REST Data Panache component of Quarkus. When a security constraint is applied to an en… | 2026-11-06 |
| CVE-2026-123037 | MEDIUM | 6.7 | A flaw was found in the ansible-core user module. When generate_ssh_key is enabled, User.ssh_key_gen() guards … | 2026-11-06 |
| CVE-2026-12967 | NA | N/A | The WCFM Membership WordPress plugin before 2.12.1 does not verify that payment was made before completing a … | 2026-11-06 |
| CVE-2026-19688 | MEDIUM | 6.8 | A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The Admin API … | 2026-11-06 |
| CVE-2026-86606 | NA | N/A | The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more WordPress plugin before 3.13.7 does … | 2026-11-06 |
| CVE-2026-87784 | NA | N/A | The Cool Media Filter WordPress plugin through 1.0.1 does not perform any capability or nonce check when updat… | 2026-11-06 |
| CVE-2026-92396 | NA | N/A | The ShopEngine Gutenberg WooCommerce Builder Blocks Addon WordPress plugin before 2.4.4 does not validate the… | 2026-11-06 |
| CVE-2026-92856 | MEDIUM | 4.9 | A flaw was found in the SAML brokering component of Keycloak, an identity and access management solution. The … | 2026-11-06 |
| CVE-2026-96447 | MEDIUM | 4.2 | A flaw was found in the TokenManager component of Keycloak, an open-source identity and access management solu… | 2026-11-06 |