24h | 7d | 30d

CVE-2026-94108

Overview

  • james-heinrich
  • getid3
20 Sep 2026
Published
21 Sep 2026
Updated
CVSS v4.0
HIGH (8.3)
EPSS
0.54%
KEV

Description

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft malicious XML metadata in media files to disclose local files, perform server-side request forgery, or cause denial of service through entity expansion.

Statistics

  • 1 Post
Last activity: 3 hours ago

Fediverse

Profile picture fallback
Hugo | DevOps | Cybersecurity @hugovalters

CVE-2026-94108: XXE in getID3 (through 1.9.26) lets crafted media metadata leak local files, trigger SSRF, or DoS via entity expansion on PHP under 8.0. CVSS 6.5, unpatched. Patch status unknown - harden libxml and update now. valtersit.com/cve/CVE-2026-941

  • 0
  • 0
  • 0
  • 3h ago

CVE-2026-103922

Overview

  • ionic-team
  • capacitor
01 Oct 2026
Published
01 Oct 2026
Updated
CVSS v3.1
CRITICAL (9.3)
EPSS
0.34%
KEV

Description

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame to /_capacitor_http_interceptor_. The native proxy can fetch an attacker-selected URL and return the response as a document at the application's own origin, allowing script in that response to access same-origin storage, cookies, and registered Capacitor plugin capabilities. Applications remain affected when CapacitorHttp is disabled because affected releases serve the proxy path regardless of that setting. This issue is fixed in versions 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1.

Statistics

  • 1 Post
Last activity: 17 hours ago

Bluesky

Profile picture fallback
Packet Storm News @packetstorm.bsky.social
Reproducing CVE-2026-103922: WebView Origin Confusion https://packetstorm.news/news/view/46985 #news
  • 0
  • 0
  • 0
  • 17h ago

CVE-2026-90817

Overview

  • Vanderbilt University
  • REDCap
20 Sep 2026
Published
21 Sep 2026
Updated
CVSS v3.1
CRITICAL (9.8)
EPSS
3.75%
KEV

Description

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating HTTP requests to access an unintended controller route from a public survey context and by supplying a crafted file-path/stream parameter during import handling. If successfully exploited, this could allow the attacker to remotely execute arbitrary code on the REDCap server. The attacker does not have to be authenticated in order to exploit this, but exploitation requires knowledge of a valid public survey hash. This vulnerability exists in REDCap 13.3.0 and higher.

Statistics

  • 1 Post
Last activity: 7 hours ago

Fediverse

Profile picture fallback
Hugo | DevOps | Cybersecurity @hugovalters

CVE-2026-90817: unauthenticated RCE in REDCap survey passthrough and Data Import routing. CVSS 9.8, no patch confirmed. Treat exposed instances as at risk and restrict access now. #CVE #infosec #cybersecurity valtersit.com/cve/CVE-2026-908

  • 0
  • 0
  • 0
  • 7h ago

CVE-2026-119096

Overview

  • uncannyowl
  • Uncanny Toolkit for LearnDash
31 Oct 2026
Published
31 Oct 2026
Updated
CVSS v3.1
CRITICAL (9.8)
EPSS
0.46%
KEV

Description

The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.8.2 via the `email` parameter of the `uo_login_action()` function. This is due to a parser-differential flaw in which the plugin's account-verification gate resolves the submitted `email` value using the raw, unsanitized string passed to `get_user_by()`, while the subsequent `wp_signon()` call relies on WordPress core's internal `sanitize_user()` to strip appended junk characters — causing the gate lookup to fail and be skipped entirely while the real account is still resolved and authenticated. This makes it possible for unauthenticated attackers to log in to unverified or administrator-suspended accounts whose credentials they already possess, obtaining a valid `wordpress_logged_in` session cookie and defeating the plugin's account-approval and account-suspension controls. The nonce required to reach the handler is freely obtainable in the same request from the unauthenticated `ult-refresh-nonce` endpoint, making exploitation trivial for any attacker with network access to the site and knowledge of a target account's credentials.

Statistics

  • 1 Post
Last activity: 19 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

CVE-2026-119096 | CRITICAL auth bypass in Uncanny Toolkit for LearnDash <=3.8.2. Attackers with creds for unverified/suspended accounts can log in via a parser-differential flaw. No patch yet — monitor logins & restrict access. radar.offseq.com/threat/the-un

  • 0
  • 0
  • 0
  • 19h ago

CVE-2026-120195

Overview

  • WAVLINK
  • WL-WN579A3-A
01 Nov 2026
Published
01 Nov 2026
Updated
CVSS v4.0
CRITICAL (10.0)
EPSS
Pending
KEV

Description

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument wlan_ssid leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.

Statistics

  • 1 Post
Last activity: 5 hours ago

Bluesky

Profile picture fallback
Aiutocomputerhelp.it @aiuto-ch.bsky.social
CVE Radar | CVE-2026-120195 | CVSS 10.0 WAVLINK Setup Wizard Command Injection NVD describes a critical vulnerability in WAVLINK WL-WN579A3-A firmware version 2026-03-10-94f93d4. Full analysis: https://t.me/aiutocomputerhelp_lab/1349
  • 0
  • 0
  • 0
  • 5h ago

CVE-2026-118764

Overview

  • isaacs
  • minimatch
29 Oct 2026
Published
30 Oct 2026
Updated
CVSS v4.0
MEDIUM (6.9)
EPSS
0.29%
KEV

Description

minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to 11.0.1, src/index.ts implements firstPhasePreProcess() so that, at optimizationLevel 2 or higher, it repeatedly expands attacker-controlled **/.. pattern segments inside a fixpoint loop, allowing generated globParts entries to be processed and expanded again. secondPhasePreProcess() then compares the expanded entries pairwise, so a short malicious glob can cause excessive CPU and memory consumption during pattern compilation. This issue is fixed in version 11.0.1.

Statistics

  • 1 Post
Last activity: 21 hours ago

Bluesky

Profile picture fallback
Lambda Watchdog @lambdawatchdog.bsky.social
🚨 New MEDIUM CVE detected in AWS Lambda 🚨 CVE-2026-118764 impacts minimatch in 4 Lambda base images. Details: https://github.com/aws/aws-lambda-base-images/issues/790 More: https://lambdawatchdog.com/ #AWS #Lambda #CVE #CloudSecurity #Serverless
  • 0
  • 0
  • 0
  • 21h ago

CVE-2026-76781

Overview

  • Red Hat
  • Red Hat Hardened Images
  • libxml2-main
17 Sep 2026
Published
30 Oct 2026
Updated
CVSS
Pending
EPSS
0.16%
KEV

Description

A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a `nextCatalog` element lacks its mandatory `catalog` attribute, leading to the application crashing and causing a Denial of Service (DoS).

Statistics

  • 1 Post
Last activity: 21 hours ago

Bluesky

Profile picture fallback
Lambda Watchdog @lambdawatchdog.bsky.social
🚨 New MEDIUM CVE detected in AWS Lambda 🚨 CVE-2026-76781 impacts libxml2 in 27 Lambda base images. Details: https://github.com/aws/aws-lambda-base-images/issues/787 More: https://lambdawatchdog.com/ #AWS #Lambda #CVE #CloudSecurity #Serverless
  • 0
  • 0
  • 0
  • 21h ago

CVE-2026-94015

Overview

  • SourceCodester
  • Drug Recommendation System
20 Sep 2026
Published
28 Sep 2026
Updated
CVSS v4.0
MEDIUM (6.9)
EPSS
0.43%
KEV

Description

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drug_recommender/Admin/edit_user.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.

Statistics

  • 1 Post
Last activity: 5 hours ago

Fediverse

Profile picture fallback
Hugo | DevOps | Cybersecurity @hugovalters

CVE-2026-94015: SQL injection in SourceCodester Drug Recommendation System 1.0 via edit_user.php, CVSS 7.3. Public exploit, no patch confirmed. Update immediately. #CVE #infosec #cybersecurity valtersit.com/cve/CVE-2026-940

  • 0
  • 0
  • 0
  • 5h ago

CVE-2026-120197

Overview

  • WAVLINK
  • WL-WN530HG4B
01 Nov 2026
Published
01 Nov 2026
Updated
CVSS v4.0
CRITICAL (9.4)
EPSS
Pending
KEV

Description

A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.

Statistics

  • 2 Posts
Last activity: 2 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

CVE-2026-120197 (CRITICAL, CVSS 9.4): WAVLINK WL-WN530HG4B routers have an OS command injection flaw in port_forward (/cgi-bin/wapi.cgi). Public exploit code exists. Restrict access, monitor devices, and check for updates. radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 5h ago
Profile picture fallback
OffSequence @offseq

WAVLINK WL-WN530HG4B M_V260724 has a CRITICAL OS command injection (CVE-2026-120197, CVSS 9.9). Exploit code is public, no patch yet. Restrict management interface access. radar.offseq.com/threat/a-flaw

  • 0
  • 0
  • 0
  • 2h ago

CVE-2026-118539

Overview

  • Drupal
  • Commerce Core
30 Oct 2026
Published
31 Oct 2026
Updated
CVSS
Pending
EPSS
0.30%
KEV

Description

Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41, from 3.0.0 to 3.3.13.

Statistics

  • 1 Post
Last activity: 17 hours ago

Bluesky

Profile picture fallback
Pia @cecallihelper.bsky.social
"Drupal warns that threat actors are exploiting a highly critical security flaw, tracked as CVE-2026-118539, in its Commerce Core module. The vulnerability is caused by missing authorization checks" securityaffairs.com/202162/secur... #cybersec #infosec finance data security policy
  • 0
  • 0
  • 0
  • 17h ago
Showing 21 to 30 of 51 CVEs