CVE ID :CVE-2026-124059 Published : Nov. 7, 2026, 7:17 p.m. | 56 minutes ago Description :A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig of the file The manipulation of the…
CVE ID :CVE-2026-124058 Published : Nov. 7, 2026, 7:17 p.m. | 56 minutes ago Description :A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. Affected is the function setWiFiRepeaterConfig of the file Executing a manipulation of the argument ApCliKeyStr can…
CVE ID :CVE-2026-124057 Published : Nov. 7, 2026, 6:17 p.m. | 1 hour, 56 minutes ago Description :A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiMultipleConfig of the file Performing a manipulation of the argument…
CVE ID :CVE-2026-124318 Published : Nov. 7, 2026, 3:17 p.m. | 2 hours, 57 minutes ago Description :Treeio through 2.0 contains an insecure deserialization vulnerability in UpdateRecord.get_format_strings and ModuleSetting.loads that allows staff users to execute code via unverified pickle data. Attackers can…
CVE ID :CVE-2026-123966 Published : Nov. 7, 2026, 2:17 p.m. | 3 hours, 57 minutes ago Description :A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function saveParentControlInfo of the file This manipulation of the argument…
CVE ID :CVE-2026-120984 Published : Nov. 7, 2026, 2:17 p.m. | 3 hours, 57 minutes ago Description :A flaw was found in the Keycloak server’s client management component. When a client is created or imported with authorization services enabled, the system fails…
CVE ID :CVE-2026-122041 Published : Nov. 7, 2026, 1:16 p.m. | 4 hours, 57 minutes ago Description :The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unauthorized deletion of arbitrary attachments due to a missing capability/ownership check in…
CVE ID :CVE-2026-120841 Published : Nov. 7, 2026, 1:16 p.m. | 4 hours, 57 minutes ago Description :Improper Control of Filename for Include/Require Statement in PHP Program (‘PHP Remote File Inclusion’) vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows PHP Local File Inclusion.This…
CVE ID :CVE-2026-86005 Published : Nov. 6, 2026, 9:17 p.m. | 20 minutes ago Description :Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, the administrative…
CVE ID :CVE-2026-86044 Published : Nov. 6, 2026, 9:17 p.m. | 20 minutes ago Description :JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop exposed getServerInfo to the renderer without confirming that the current page still…