CVE ID :CVE-2026-97291 Published : Sept. 30, 2026, 6:18 p.m. | 55 minutes ago Description :Contributor PHP Object Injection in Schema & Structured Data for WP & AMP <= 1.66 versions. Severity: 8.8 | HIGH Visit the link for more details,…
CVE ID :CVE-2026-87004 Published : Sept. 30, 2026, 6:18 p.m. | 55 minutes ago Description :Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.31.3, when the OIDC login flow completes, backend decodes the id_token returned…
CVE ID :CVE-2026-55094 Published : Sept. 30, 2026, 6:18 p.m. | 55 minutes ago Description :Taskcluster is the task execution framework that supports Mozilla’s continuous integration and release processes. Prior to version 100.3.0, Taskcluster is vulnerable to unauthenticated RCE on Taskcluster…
CVE ID :CVE-2026-55107 Published : Sept. 30, 2026, 6:18 p.m. | 55 minutes ago Description :Kobako is a Ruby gem that embeds a Wasm-isolated mruby interpreter inside applications, allowing execution of untrusted Ruby scripts (LLM-generated code, user formulas, student submissions, third-party…
CVE ID :CVE-2026-55224 Published : Sept. 30, 2026, 6:18 p.m. | 55 minutes ago Description :MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other…
CVE ID :CVE-2026-96587 Published : Sept. 29, 2026, 8:42 p.m. | 25 minutes ago Description :The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability…
CVE ID :CVE-2026-94204 Published : Sept. 29, 2026, 8:40 p.m. | 27 minutes ago Description :The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored objects. Because this bucket serves…
CVE ID :CVE-2026-96274 Published : Sept. 29, 2026, 8:17 p.m. | 50 minutes ago Description :In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because…
CVE ID :CVE-2026-76724 Published : Sept. 29, 2026, 8:17 p.m. | 50 minutes ago Description :A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to perform command injection…
CVE ID :CVE-2026-76725 Published : Sept. 29, 2026, 8:17 p.m. | 50 minutes ago Description :A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication…