CVE ID :CVE-2026-90902 Published : Sept. 23, 2026, 6:39 p.m. | 32 minutes ago Description :Joomla Extension – joomshaper.com – Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 – The coupon bulk update task (administrator/index.php?option=com_easystore&task=coupon.couponBulkUpdate) took…
CVE ID :CVE-2026-77987 Published : Sept. 22, 2026, 8:43 p.m. | 22 minutes ago Description :A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server. The notebook viewer validated the scheme and host of a…
CVE ID :CVE-2026-67615 Published : Sept. 22, 2026, 8:30 p.m. | 35 minutes ago Description :openEQUELLA before 2026.1.0 contains an authenticated remote code execution vulnerability that allows any authenticated non-guest user to execute arbitrary code by exploiting Java deserialization in the…
CVE ID :CVE-2026-91018 Published : Sept. 22, 2026, 8:25 p.m. | 40 minutes ago Description :lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system. Severity:…
CVE ID :CVE-2026-95814 Published : Sept. 22, 2026, 8:21 p.m. | 44 minutes ago Description :Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries, allowing revoked and not-yet-confirmed members to retain read, write, delete, and attachment access…
CVE ID :CVE-2026-88419 Published : Sept. 22, 2026, 8:17 p.m. | 48 minutes ago Description :An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index.php?m=member&f=article&v=thumbUpload) of WuzhiCMS 5.0.0 allows an authenticated low-privileged member to upload a crafted…
CVE ID :CVE-2026-82000 Published : Sept. 22, 2026, 6:56 p.m. | 8 minutes ago Description :Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this…
CVE ID :CVE-2026-75745 Published : Sept. 22, 2026, 6:56 p.m. | 8 minutes ago Description :Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.…
CVE ID :CVE-2026-75744 Published : Sept. 22, 2026, 6:56 p.m. | 8 minutes ago Description :Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts…
CVE ID :CVE-2026-81995 Published : Sept. 22, 2026, 6:56 p.m. | 8 minutes ago Description :Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current…