CVE ID :CVE-2026-8431 Published : May 12, 2026, 7:16 p.m. | 36 minutes ago Description :An administrative user with access to configure webhooks can execute arbitrary commands by configuring and then triggering webhooks containing specific FreeMarker template syntax. This issue affects…
CVE ID :CVE-2026-8430 Published : May 12, 2026, 7:16 p.m. | 36 minutes ago Description :SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the public space that is limited to certain nginx configurations, allowing attackers to execute…
CVE ID :CVE-2026-8429 Published : May 12, 2026, 7:16 p.m. | 36 minutes ago Description :SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the private space that allows attackers to execute arbitrary code in the context of…
CVE ID :CVE-2026-34660 Published : May 12, 2026, 7:16 p.m. | 36 minutes ago Description :Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the…
CVE ID :CVE-2026-34659 Published : May 12, 2026, 7:16 p.m. | 36 minutes ago Description :Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context…
CVE ID :CVE-2026-7790 Published : May 11, 2026, 7:16 p.m. | 28 minutes ago Description :Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te module) allows Excessive Allocation. The chunked transfer-encoding parser in cow_http_te accepts an unbounded number of hex digits in…
CVE ID :CVE-2026-45223 Published : May 11, 2026, 7:16 p.m. | 28 minutes ago Description :Crabbox before 0.9.0 contains an authentication bypass vulnerability in the coordinator user-token verification path where the verifyUserToken() function fails to reject payloads containing an admin claim,…
CVE ID :CVE-2026-42864 Published : May 11, 2026, 7:16 p.m. | 28 minutes ago Description :FireFighter is an incident management application. Prior to 0.0.54, the POST /api/v2/firefighter/raid/jira_bot endpoint (CreateJiraBotView) is reachable without authentication (permission_classes = [permissions.AllowAny]). Its attachments payload is fetched…
Checkmarx has confirmed that a modified version of the Jenkins AST plugin was published to the Jenkins Marketplace. “If you are using Checkmarx Jenkins AST plugin, you need to ensure that you are using the version 2.0.13-829.vc72453fa_1c16 that was published…
CVE ID :CVE-2026-4892 Published : May 11, 2026, 6:16 p.m. | 1 hour, 28 minutes ago Description :A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a crafted DHCPv6…