Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
399,200 results · page 679 of 7984
Sep 14, 2026Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0 - Conditional Content PCVE-2026-85192 · Websites & servers · reported by security@joomla.orgCritical 9.4
Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0 - Conditional Content Pro accepts inline PHP Condition Rules in article syntax. In affected versions, the PHP is passed to the Conditions evaluator without checking who authored the article. Joomla's normal Author text filter preserves the syntax, so publishing the article causes the code to run as the web-server process.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs & Accordions extension for Joomla < 3.1.0 - Tabs & Accordions rewrites CVE-2026-85191 · Websites & servers · reported by security@joomla.orgHigh 7.5
Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs & Accordions extension for Joomla < 3.1.0 - Tabs & Accordions rewrites links matching an item alias into calls to its browser API. The affected renderer places the alias inside a quoted JavaScript argument in an HTML onclick attribute without securing both the JavaScript-string and HTML-attribute contexts. A crafted data-rlta-alias value can therefore change the generated handler.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Joomla Extension - regularlabs.com - Privileged stored XSS via class option in Quick Index extension for Joomla < 5.0.5 - Quick Index inserts configurable classCVE-2026-85190 · Websites & servers · reported by security@joomla.orgHigh 7.5
Joomla Extension - regularlabs.com - Privileged stored XSS via class option in Quick Index extension for Joomla < 5.0.5 - Quick Index inserts configurable class values into generated HTML without escaping them for an HTML attribute. A crafted value can close the intended class attribute and introduce a new attribute. Joomla's content filter cannot reliably prevent this because Quick Index creates the executable HTML after the authored plugin syntax was filtered.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla < 17.0.0 - Modals treats a destination usinCVE-2026-85189 · Websites & servers · reported by security@joomla.orgHigh 7.5
Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla < 17.0.0 - Modals treats a destination using an executable browser URL scheme as an ordinary modal URL. The value can reach both the generated link and the iframe-loading path. Authored content can consequently become JavaScript in a visitor's browser without using Modals' separate Pro JavaScript Events feature.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager (Free, Pro) < 12.1.0, Conditional Content (Free, Pro) < 8.0.0, Content CVE-2026-85188 · Websites & servers · reported by security@joomla.orgMedium 6.9
Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager (Free, Pro) < 12.1.0, Conditional Content (Free, Pro) < 8.0.0, Content Templater (Pro) < 14.2.0, ReReplacer (Pro) < 16.2.0 for Joomla - The Conditions editor creates a default Condition Set name from the item to which the set is linked. The affected code accepts the database table and label-column names from the request. Although these names are quoted as SQL identifiers, they are not restricted to the tables and columns used by supported Regular Labs integrations. An attacker can therefore select a valid but unrelated database field. This is an authorization failure rather than SQL injection.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation.CVE-2026-85125 · Other software · YAMAP INC. · reported by vultures@jpcert.or.jpMedium 5.1
The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation. The in-app browser may cause information leakage from the app or redirect users to unintended websites.
- Product
- YAMAP -Social Trekking GPS App
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026SolarView Compact contains a cross-site scripting vulnerability in Image Management.CVE-2026-82796 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 5.1
SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- Product
- SV-CPT-MC310
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting.CVE-2026-82795 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 5.1
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- Product
- SV-CPT-MC310
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings.CVE-2026-82794 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 8.7
SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- Product
- SV-CPT-MC310
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit.CVE-2026-82793 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 8.6
Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product.
- Product
- CAN-2-WF
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit.CVE-2026-82792 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 4.8
Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
- Product
- CAN-2-WF
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wireless LAN / USB ConvCVE-2026-82791 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 8.7
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- Product
- CAN-2-WF
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US.CVE-2026-82790 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 4.8
Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
- Product
- PC-HELPER Wireless I/O DIO-0404RY-LWF
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026An improper neutralization of directives in dynamically evaluated code ('Eval Injection') issue exists in CONPROSYS HMI System(CHS).CVE-2026-82789 · Other software · Contec · reported by vultures@jpcert.or.jpHigh 8.7
An improper neutralization of directives in dynamically evaluated code ('Eval Injection') issue exists in CONPROSYS HMI System(CHS). If exploited, arbitrary code may be executed by an attacker who can log in to the product.
- Product
- CONPROSYS HMI System(CHS)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Cross-site scripting vulnerability exists in CPSL-08P1EN.CVE-2026-82788 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 5.1
Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
- Product
- CPSL-08P1EN
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Missing authentication for critical function vulnerability exists in CPSL-08P1EN.CVE-2026-82787 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 8.7
Missing authentication for critical function vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an affected product may be operated by a remote attacker without authentication.
- Product
- CPSL-08P1EN
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Insufficiently protected credentials issue exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*.CVE-2026-82786 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 8.2
Insufficiently protected credentials issue exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. If this vulnerability is exploited, sensitive information may be restored from a backup file.
- Product
- Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*.CVE-2026-82785 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 5.3
Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service (DoS) condition.
- Product
- Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*.CVE-2026-82784 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 6.9
Missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. An attacker may execute a REST API without authentication, which could allow the attacker to retrieve I/O values and/or control the output.
- Product
- Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Plaintext storage of a password issue exists in CONPROSYS nano Series .CVE-2026-82783 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 4.1
Plaintext storage of a password issue exists in CONPROSYS nano Series . If this vulnerability is exploited, an attacker with physical access to the product may obtain credentials.
- Product
- Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Out-of-bounds write vulnerability exists in CONPROSYS nano Series.CVE-2026-82782 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 5.3
Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service (DoS) condition.
- Product
- Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Cross-site scripting vulnerability exists in CONPROSYS nano Series.CVE-2026-82781 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 5.1
Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
- Product
- Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series.CVE-2026-82780 · Other software · Contec Co., Ltd · reported by vultures@jpcert.or.jpHigh 8.7
Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product.
- Product
- CPS-TM341G5MB-ADSC1-931
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS TM Series.CVE-2026-82779 · Other software · Contec Co., Ltd · reported by vultures@jpcert.or.jpHigh 8.7
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS TM Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- Product
- CPS-TM341G5MB-ADSC1-931
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026An exposure of information through directory listing issue exists in CONPROSYS PAC Series.CVE-2026-82778 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 5.3
An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication.
- Product
- Integrated Type CPS-PC341[][]-*-9201
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PAC Series.CVE-2026-82777 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 8.7
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- Product
- Integrated Type CPS-PC341[][]-*-9201
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Cross-site scripting vulnerability exists in CONPROSYS PAC Series.CVE-2026-82776 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 5.1
Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
- Product
- Integrated Type CPS-PC341[][]-*-9201
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series.CVE-2026-82775 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 5.3
An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication.
- Product
- M2M Gateway Integrated Type CPS-MG341*
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M ControCVE-2026-82774 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 8.7
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- Product
- M2M Gateway Integrated Type CPS-MG341*
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series.CVE-2026-82773 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 5.1
Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
- Product
- M2M Gateway Integrated Type CPS-MG341*
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Buffer overflow vulnerability exists in Contec EC1000 series.CVE-2026-82772 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 8.7
Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed.
- Product
- ECE1000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Cross-site scripting vulnerability exists in Contec EC1000 series.CVE-2026-82771 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 4.8
Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
- Product
- ECE1000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Buffer overflow vulnerability exists in Contec RP-WAH-SR Series.CVE-2026-82770 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 8.7
Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed.
- Product
- RP-WAH-SR1
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series.CVE-2026-82769 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 4.8
Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
- Product
- RP-WAH-SR1
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Path traversal vulnerability exists in SGA1000.CVE-2026-82768 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 8.6
Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.
- Product
- SGA1000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Cross-site scripting vulnerability exists in SGA1000.CVE-2026-82767 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 4.8
Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
- Product
- SGA1000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000.CVE-2026-82766 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 8.7
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- Product
- SGA1000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series.CVE-2026-82765 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 8.6
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.
- Product
- FXA5000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Cross-site request forgery vulnerability exists in multiple Contec products.CVE-2026-82764 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 5.1
Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.
- Product
- FXA5000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series.CVE-2026-82763 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 4.8
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
- Product
- FXA5000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 serieCVE-2026-82762 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 8.7
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- Product
- FXA5000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image.CVE-2026-71198 · Other software · OpenStack · reported by MITREHigh 7
In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image. Unlike the web-download import path, the location API only checks the URL scheme and does not apply the import_filtering_opts host restrictions. An authenticated user can add a location pointing to internal endpoints such as the cloud metadata service (169.254.169.254), and retrieve the response by downloading the image data. This affects both the new POST /v2/images/{id}/locations API and the old PATCH API when show_multiple_locations is enabled. Deployments with the HTTP store backend enabled are affected.
- Product
- Glance
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlaunchpad.netopenwall.com
Sep 14, 2026The installer for Rakuten Kobo Desktop Application (Windows version) insecurely loads Dynamic Link Libraries.CVE-2026-68955 · Other software · Rakuten Kobo Inc. · reported by vultures@jpcert.or.jpHigh 8.4
The installer for Rakuten Kobo Desktop Application (Windows version) insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privileges of the user who performed the installation.
- Product
- The installer for Rakuten Kobo Desktop Application (Windows version)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.CVE-2026-25832 · Other software · TrustedFirmware · reported by MITRELow 3.7
In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.
- Product
- Mbed TLS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmbed-tls.readthedocs.iombed-tls.readthedocs.io
Sep 14, 2026Withsecure Atlant with Capricorn engine before 2025-01-20_02 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document CVE-2025-26790 · Other software · WithSecure · reported by MITRELow 3.7
Withsecure Atlant with Capricorn engine before 2025-01-20_02 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document file by the antivirus engine.
- Product
- Atlant
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordwithsecure.comsupport.withsecure.com
Sep 14, 2026An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2.CVE-2024-23176 · Other software · MediaWiki · reported by MITREMedium 5.4
An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key massmessage-form-page-help allows XSS.
- Product
- MassMessage
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlists.wikimedia.orgphabricator.wikimedia.org
Sep 14, 2026Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages.CVE-2023-51769 · Other software · Frappe · reported by MITREMedium 6.1
Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages.
- Product
- Frappe
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026An issue was discovered in the content_consent (aka Content Consent) extension through 2.0.1 for TYPO3.CVE-2023-50462 · Other software · TYPO3 · reported by MITREMedium 5.3
An issue was discovered in the content_consent (aka Content Consent) extension through 2.0.1 for TYPO3. It fails to verify whether a specified content element identifier is permitted by the plugin. This enables an unauthenticated user to display various content elements, leading to an insecure direct object reference (IDOR) issue with the potential to expose internal content elements.
- Product
- content_consent
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3.CVE-2023-50461 · Other software · TYPO3 · reported by MITREHigh 8.8
An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3. The Configuration backend module of the extension allows an authenticated user to write to an arbitrary TSConfig page for folders configured as Direct Mail. Exploiting this may lead to Configuration Injection (TYPO3 10.4 and above) and to Arbitrary Code Execution (TYPO3 9.5 and below). A valid backend user account, with access to the Direct Mail Configuration backend module, is needed to exploit this.
- Product
- direct_mail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2026An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3.CVE-2023-50460 · Other software · TYPO3 · reported by MITREMedium 5.4
An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actions (userLogout, confirmUser, refuseUser, and resendUserConfirmation) for any frontend user in the system.
- Product
- femanager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.