CVE-20XX-?: newest critical and exploited CVEs
- 184posts a week
- 9 Novlast post
Subscribe
Latest posts
CVE-2026-115252: Unknown Confection WordPress Cable (Critical 10.0)
No fix listed. The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks before saving its settings and writing one of them, unmodified, into a standalone PHP file that it then serves, allowing unauthenticated users to execute arbitrary PHP…
CVE-2026-123870: The otterdog webapp evaluates a format-string built from the… (Critical 9.5)
Fix listed. The otterdog webapp evaluates a format-string built from the incoming GitHub webhook JSON body using Python's eval(). When the GITHUB_WEBHOOK_SECRET configuration value is unset or empty (the code default is None), the HMAC signature check is skipped entirely, allowing an…
CVE-2026-124580: Chengdu Feiyuxing Technology VW2100 (Critical 10.0)
No fix listed. A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This impacts the function handle_wechat_cn_wifi of the file var/html/webserver of the component Weixin Auth Endpoint. The manipulation of the argument extend results in os…
CVE-2026-124577: Intelbras SG 2404 PoE L2+ (Critical 9.3)
No fix listed. A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknown function of the file /EXCU_SHELL of the component Web Management Interface. Executing a manipulation can lead to improper authentication. The attack can be launched…
CVE-2026-113364: NEC Corporation WebSAM WinShare (Critical 9.3)
No fix listed. Buffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary code with SYSTEM privileges via a crafted packet with a malformed…
CVE-2026-113363: NEC Corporation WebSAM WinShare (Critical 9.3)
No fix listed. Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary commands with SYSTEM privileges via a crafted…
CVE-2026-119506: DynamiApps Frontend Admin by DynamiApps (Critical 9.1)
No fix listed. Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1.
CVE-2026-6715: IBM Concert (Critical 9.8)
Fix listed. IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating system command without adequate validation or sanitization. Successful exploitation allows remote attackers to execute arbitrary commands on the underlying operating system…
CVE-2026-17466: IBM Optim (Critical 9.1)
Fix listed. IBM Optim 1.0.0, 1.1.0, and 1.2.0 could allow a remote authenticated attacker to obtain sensitive information due to path traversal.
CVE-2026-15266: IBM Concert (Critical 9.8)
Fix listed. IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be exploited to run arbitrary system commands on the host.
CVE-2026-114464: IBM Process Mining (Critical 9.3)
Fix listed. IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control.
CVE-2026-107331: IBM DataStage on Cloud Pak for Data (Critical 9.9)
Fix listed. IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability.
CVE-2026-101117: IBM WebSphere Extreme Scale (Critical 9.1)
Fix listed. IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due to improper Content Security Policy configuration.
CVE-2026-109900: Melapress Melapress Role Editor (Critical 9.6)
No fix listed. Incorrect Privilege Assignment vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Privilege Escalation.This issue affects Melapress Role Editor: from n/a through 1.3.0.
CVE-2026-124493: JiHong88 suneditor (Critical 9.3)
Fix listed. SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the DocumentType constructor that injects header textContent into innerHTML without HTML escaping. Attackers can store entity-encoded HTML in h1-h6 headers that executes JavaScript when editors using…
CVE-2026-124494: JiHong88 suneditor (Critical 9.3)
Fix listed. SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability because the html.clean() sanitizer's _normalizeURL() function decodes named entities like : to an empty string. Attackers can inject href values such as javascript: that pass the _isSafeURL() check…
CVE-2026-124490: openemr (Critical 9.4)
Fix listed. OpenEMR before 8.3.0 contains a path traversal vulnerability in the RingCentral RCFaxClient disposeDocument() method of oe-module-faxsms that allows authenticated attackers to read and write arbitrary files via the file_path parameter. Attackers can use action=download to read…
CVE-2026-124469: openemr (Critical 9.4)
Fix listed. OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Fee Sheet drug-inventory lookup (DrugSalesService::sellDrug) that interpolates the prod[N][warehouse] POST field into an ORDER BY clause. Low-privileged authenticated users can submit Fee Sheet product lines with…
CVE-2026-124463: openemr (Critical 9.3)
Fix listed. OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability that allows authenticated users with CAMOS access to inject HTML by saving malicious CAMOS content through ajax_save.php. Attackers can store a script payload that executes unencoded when the entry is printed via…
CVE-2026-124450: openemr (Critical 9.3)
Fix listed. OpenEMR before 8.3.0 contains a broken access control and path traversal vulnerability in the fax/sms module disposeDocument action via an unvalidated file_path parameter. Authenticated low-privilege users can read sqlconf.php to recover database credentials and write arbitrary files as…
In the directory since 5 Nov 2026 · last checked 9 Nov 2026 · ATOM