CVE-2026-33986 - High
🟠 CVE-2026-33986 - High (7.5)
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in yuv_...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-33984 - High
🟠 CVE-2026-33984 - High (7.5)
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in resi...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-4257 - Critical
🔴 CVE-2026-4257 - Critical (9.8)
The Contact Form by Supsystic plugin for WordPress is vulnerable to Server-Side Template Injectio...
www.thehackerwire.com/vulnerability/CVE-2026-4...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-32877 - High
🟠 CVE-2026-32877 - High (8.2)
Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decr...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-32877 - High
🟠 CVE-2026-32877 - High (8.2)
Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decr...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-28228 - High
🟠 CVE-2026-28228 - High (8.8)
OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and c...
www.thehackerwire.com/vulnerability/CVE-2026-2...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-31946 - Critical
🔴 CVE-2026-31946 - Critical (9.8)
OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and c...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-34558 - Critical
🔴 CVE-2026-34558 - Critical (9.1)
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architectur...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-34557 - Critical
🔴 CVE-2026-34557 - Critical (9.1)
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architectur...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
🚨 EUVD-2026-17192
📊 8.7/10
🏢 Tautulli
📝 Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /newsletter/image/images API endpoint is vuln...
🔗 euvd.enisa.europa.eu/vulnerability/EUVD-2026-...
#potatosecurity #infosec #cve #euvd
CVE-2026-33871 - High
🟠 CVE-2026-33871 - High (7.5)
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.13...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-29925 - High
🟠 CVE-2026-29925 - High (7.7)
Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckD...
www.thehackerwire.com/vulnerability/CVE-2026-2...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-29924 - High
🟠 CVE-2026-29924 - High (7.6)
Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload...
www.thehackerwire.com/vulnerability/CVE-2026-2...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-21710 - High
🟠 CVE-2026-21710 - High (7.5)
A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received...
www.thehackerwire.com/vulnerability/CVE-2026-2...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-29953 - High
🟠 CVE-2026-29953 - High (7.5)
SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the columnAsInsert f...
www.thehackerwire.com/vulnerability/CVE-2026-2...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-29954 - High
🟠 CVE-2026-29954 - High (7.6)
In KubePlus 4.1.4, the mutating webhook and kubeconfiggenerator components have an SSRF vulnerabi...
www.thehackerwire.com/vulnerability/CVE-2026-2...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-30077 - High
🟠 CVE-2026-30077 - High (7.5)
OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message. Not all decode failures ...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-29872 - High
🟠 CVE-2026-29872 - High (8.2)
A cross-session information disclosure vulnerability exists in the awesome-llm-apps project in co...
www.thehackerwire.com/vulnerability/CVE-2026-2...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-34714 - Critical
🔴 CVE-2026-34714 - Critical (9.2)
Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-3991 - High
🟠 CVE-2026-3991 - High (7.8)
Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 R...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-3502 - High
🟠 CVE-2026-3502 - High (7.8)
TrueConf Client downloads application update code and applies it without performing verification....
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-33711 - High
🟠 CVE-2026-33711 - High (7.8)
Incus is a system container and virtual machine manager. Incus provides an API to retrieve VM scr...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-4046 - High
🟠 CVE-2026-4046 - High (7.5)
The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion...
www.thehackerwire.com/vulnerability/CVE-2026-4...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-33032 - Critical
🔴 CVE-2026-33032 - Critical (9.8)
Nginx UI is a web user interface for the Nginx web server. In versions 2.3.5 and prior, the nginx...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-33030 - High
🟠 CVE-2026-33030 - High (8.8)
Nginx UI is a web user interface for the Nginx web server. In versions 2.3.3 and prior, Nginx-UI ...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-32287 - High
🟠 CVE-2026-32287 - High (7.5)
Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-32286 - High
🟠 CVE-2026-32286 - High (7.5)
The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised ...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-3573 - High
🟠 CVE-2026-3573 - High (7.5)
Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Inje...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-4933 - High
🟠 CVE-2026-4933 - High (7.5)
Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Brow...
www.thehackerwire.com/vulnerability/CVE-2026-4...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-32286 - High
🟠 CVE-2026-32286 - High (7.5)
The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised ...
www.thehackerwire.com/vulnerability/CVE-2026-3...
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
