CVE ID :CVE-2026-18500 Published : Aug. 15, 2026, 2:17 p.m. | 4 hours, 24 minutes ago Description :@fastify/jwt is a JSON Web Token plugin for Fastify. In versions before 10.2.2, a per-request verification key passed to request.jwtVerify({ key }) is silently overridden…
CVE ID :CVE-2026-18438 Published : Aug. 15, 2026, 10:16 a.m. | 8 hours, 24 minutes ago Description :The Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! plugin for WordPress is vulnerable to Remote Code Execution…
CVE ID :CVE-2026-16142 Published : Aug. 15, 2026, 9:16 a.m. | 9 hours, 24 minutes ago Description :The TrueBooker plugin for WordPress is vulnerable to Account Takeover in all versions up to, and including, 1.2.6. This is due to the add_front_user_update() AJAX…
CVE ID :CVE-2026-15826 Published : Aug. 15, 2026, 7:16 a.m. | 11 hours, 25 minutes ago Description :The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due…
CVE ID :CVE-2026-19188 Published : Aug. 14, 2026, 6:20 p.m. | 14 minutes ago Description :A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible…
CVE ID :CVE-2026-73850 Published : Aug. 14, 2026, 6:19 p.m. | 16 minutes ago Description :Emlog is an open source website building system. In 2.6.20 and earlier, there is a SQL injection vulnerability in the queryDatabase function in ai.php. Severity: 8.6…
CVE ID :CVE-2026-72970 Published : Aug. 14, 2026, 6:19 p.m. | 16 minutes ago Description :Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. Severity: 8.3 | HIGH Visit the link for more…
CVE ID :CVE-2026-73849 Published : Aug. 14, 2026, 6:19 p.m. | 16 minutes ago Description :Emlog is an open source website building system. In 2.6.26 and earlier, install.php accepts action=reinstall without authentication and deliberately skips the already-installed check because the guard…
CVE ID :CVE-2026-63361 Published : Aug. 14, 2026, 6:18 p.m. | 16 minutes ago Description :LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting vulnerability in the HTML editor popup endpoint. The text and name query parameters are passed through…
CVE ID :CVE-2026-72777 Published : Aug. 13, 2026, 6:23 p.m. | 6 minutes ago Description :Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only checks string patterns without…