CVE ID :CVE-2026-81999 Published : Sept. 22, 2026, 6:55 p.m. | 8 minutes ago Description :Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could…
CVE ID :CVE-2026-55159 Published : Sept. 21, 2026, 8:17 p.m. | 42 minutes ago Description :luci-app-adblock-fast a WebUI for fast, lightweight DNS-based ad-blocker for OpenWrt that works with dnsmasq, smartdns, or unbound. Prior to 1.2.4-2, the luci.adblock-fast.setCronEntry RPC method accepts an…
CVE ID :CVE-2026-55897 Published : Sept. 21, 2026, 8:17 p.m. | 42 minutes ago Description :luci-app-advanced-reboot is a LuCI (web interface) application for OpenWrt that provides a way to reboot your router into an alternative firmware partition or perform reboot operations…
CVE ID :CVE-2026-58269 Published : Sept. 21, 2026, 8:17 p.m. | 42 minutes ago Description :Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, `POST /api/auth/token` authenticates with username and password only, then…
CVE ID :CVE-2026-49811 Published : Sept. 21, 2026, 8:17 p.m. | 42 minutes ago Description :Dell Command | Monitor (DCM), versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could…
CVE ID :CVE-2026-94572 Published : Sept. 21, 2026, 8:13 p.m. | 46 minutes ago Description :In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control characters. The value is written verbatim…
CVE ID :CVE-2026-94488 Published : Sept. 21, 2026, 6:17 p.m. | 42 minutes ago Description :Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The first fixed stable version is 7.0.1.) This occurs in button.text.toUtf8 in export_output_html.cpp. Exploitation cannot occur…
CVE ID :CVE-2026-62182 Published : Sept. 21, 2026, 6:17 p.m. | 42 minutes ago Description :KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.21.0 until 1.21.2, 1.22.2, and 1.23.1, ConfigUpdateJob processing…
CVE ID :CVE-2026-62369 Published : Sept. 21, 2026, 6:17 p.m. | 42 minutes ago Description :KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.16.0 until 1.21.2, 1.22.2, and 1.23.1, the DecompressTarGz…
CVE ID :CVE-2026-48826 Published : Sept. 21, 2026, 6:17 p.m. | 42 minutes ago Description :HomeBox is a home inventory and organization system. Prior to 0.26.0, HandleWipeInventory in backend authorizes POST /v1/actions/wipe-inventory through the global ctx.User.IsOwner value instead of the caller’s…