CVE ID :CVE-2026-9254 Published : Aug. 24, 2026, 6:17 p.m. | 29 minutes ago Description :An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and…
CVE ID :CVE-2026-76838 Published : Aug. 24, 2026, 6:17 p.m. | 29 minutes ago Description :Hi.Events validates a webhook destination only when it is registered, never when it is used. NoInternalUrlRule in backend resolves the hostname with gethostbyname() and rejects private…
CVE ID :CVE-2026-76835 Published : Aug. 24, 2026, 6:17 p.m. | 29 minutes ago Description :OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication, because the guard added for CVE-2026-40575 is inert in the default…
CVE ID :CVE-2026-76836 Published : Aug. 24, 2026, 6:17 p.m. | 29 minutes ago Description :AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission guarding them. The backend_config property in backend is annotated with…
CVE ID :CVE-2026-8445 Published : Aug. 23, 2026, 2:16 p.m. | 4 hours, 29 minutes ago Description :justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters (angle brackets) in text nodes when converting a parsed document to Markdown…
CVE ID :CVE-2026-7808 Published : Aug. 23, 2026, 2:16 p.m. | 4 hours, 29 minutes ago Description :justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or style) to survive sanitization, potentially leading to cross-site…
CVE ID :CVE-2026-5388 Published : Aug. 23, 2026, 2:16 p.m. | 4 hours, 29 minutes ago Description :justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML serialization, Markdown passthrough (html_passthrough=True), and several custom sanitization-policy edge cases. Depending on…
CVE ID :CVE-2026-78155 Published : Aug. 23, 2026, 10:16 a.m. | 8 hours, 30 minutes ago Description :privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges Severity: 9.9 | CRITICAL Visit the link for…
CVE ID :CVE-2026-10053 Published : Aug. 23, 2026, 10:16 a.m. | 8 hours, 30 minutes ago Description :GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain…
CVE ID :CVE-2026-4703 Published : Aug. 22, 2026, 4:16 p.m. | 2 hours, 29 minutes ago Description :The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to,…