CVE ID :CVE-2026-46686 Published : July 16, 2026, 6:16 p.m. | 52 minutes ago Description :Emlog is an open source website building system. In 2.6.13 and earlier, the admin backend user search module’s keyword parameter from admin is processed with addslashes…
CVE ID :CVE-2026-45336 Published : July 16, 2026, 6:16 p.m. | 52 minutes ago Description :HireFlow is a web-based interview management system for managing candidates, scheduling interviews, and tracking hiring progress. In 1.2 and earlier, app.py assigns a hard-coded Flask secret_key…
CVE ID :CVE-2021-27137 Published : July 16, 2026, 6:16 p.m. | 52 minutes ago Description :An issue was discovered in router in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a…
CVE ID :CVE-2026-63087 Published : July 16, 2026, 5:16 p.m. | 1 hour, 52 minutes ago Description :Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the…
CVE ID :CVE-2026-63088 Published : July 16, 2026, 5:16 p.m. | 1 hour, 52 minutes ago Description :stoatchat before 0.14.0 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated network-accessible attackers to bypass the DNS-based IP blocklist by exploiting incomplete address…
Cybersecurity researchers have disclosed details of a previously unreported Internet-of-Things (IoT) botnet framework dubbed TuxBot v3 Evolution that shows signs of being developed with assistance from a large language model (LLM), albeit with not so successful results. “While the AI…
CVE ID :CVE-2026-62948 Published : July 15, 2026, 6:16 p.m. | 47 minutes ago Description :OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into through src statefiles_write_state6()…
CVE ID :CVE-2026-62389 Published : July 15, 2026, 6:16 p.m. | 47 minutes ago Description :ws before 8.21.1 contains a memory exhaustion vulnerability in lib where the fragment guard only triggers when fragment count reaches maxFragments, allowing attackers to exhaust memory…
CVE ID :CVE-2026-59258 Published : July 15, 2026, 6:16 p.m. | 47 minutes ago Description :immich before 3.0.3 contains a broken access control vulnerability in the PUT /albums/:id/user/:userId endpoint that allows shared album editors to modify member roles without owner-only restrictions.…
CVE ID :CVE-2026-58660 Published : July 15, 2026, 6:16 p.m. | 47 minutes ago Description :Kanboard through 1.2.52, fixed in commit 564cc30, BoardAjaxController save() method (used by the kanban board drag-and-drop endpoint) validates the caller’s role on the attacker-supplied project_id but…