CVE-2026-20310 - cisco catalyst sd-wan controller Cisco SD-WAN software has a security issue that could allow an attacker to access sensitive files by manipulating links. This is a serious issue because it could lead… Too many irrelevant or confusing CVEs? Use stackflag.com #cisco #CVE #infosec

CVE-2026-20310: Cisco SD-WAN Software: Improper Link Resolution Before File Access

Cisco SD-WAN software has a security issue that could allow an attacker to access sensitive files by manipulating links.

stackflag.com

CVE-2026-20304 - cisco catalyst sd-wan controller Cisco Catalyst SD-WAN software has an access control issue that could allow unauthorized users to access sensitive parts of the network. This is a security concern… Too many irrelevant or confusing CVEs? Use stackflag.com #cisco #CVE #infosec

CVE-2026-20304: Cisco Catalyst SD-WAN Access Control Flaw Exposes Network

Cisco Catalyst SD-WAN software has an access control issue that could allow unauthorized users to access sensitive parts of the network.

stackflag.com

CVE-2026-20267 - cisco ios xe software Cisco IOS XE Software has multiple security weaknesses that can be exploited by unauthorized users. This can lead to unauthorized access or control of the system. Cisco has… Too many irrelevant or confusing CVEs? Use stackflag.com #cisco #CVE #infosec

CVE-2026-20267: Cisco IOS XE Software Improper Access Control

Cisco IOS XE Software has multiple security weaknesses that can be exploited by unauthorized users.

stackflag.com

CVE-2026-9193 A security issue in Progress MarkLogic Server's Hadoop integration allows a user with limited access to gain more power and access sensitive areas. This affects versions before 11.3.6 and 12.0.3. To stay safe,… Too many irrelevant or confusing CVEs? Use stackflag.com #CVE #infosec

CVE-2026-9193: Progress MarkLogic Server Hadoop Privilege Escalation

A security issue in Progress MarkLogic Server's Hadoop integration allows a user with limited access to gain more power and access sensitive areas.

stackflag.com

CVE-2026-9190 The Progress MarkLogic Server before 11.3.6 and 12.0.3 may allow an attacker to bypass security checks and steal user credentials. This can happen if a malicious person sends a specially crafted request to the… Too many irrelevant or confusing CVEs? Use stackflag.com #CVE #infosec

CVE-2026-9190: Progress MarkLogic Server HTTP Request Smuggling Allows Session Hijacking

The Progress MarkLogic Server before 11.3.6 and 12.0.3 may allow an attacker to bypass security checks and steal user credentials.

stackflag.com

CVE-2026-7557 Progress MarkLogic Server versions 11.3.6 and earlier, and 12.0.3 and earlier, have a security issue with their SAML authentication module. An attacker can bypass authentication and pretend to be any user,… Too many irrelevant or confusing CVEs? Use stackflag.com #CVE #infosec

CVE-2026-7557: Progress MarkLogic Server SAML Bypass Vulnerability

Progress MarkLogic Server versions 11.3.6 and earlier, and 12.0.3 and earlier, have a security issue with their SAML authentication module.

stackflag.com

CVE-2026-39923 Flarum, a discussion forum software, has a security issue that allows hackers to reset passwords for any account, even if the password reset token has expired. This is a serious risk because it could allow… Too many irrelevant or confusing CVEs? Use stackflag.com #CVE #infosec

CVE-2026-39923: Flarum before 1.8.16: Expired Password Reset Tokens Can Be Reused

Flarum, a discussion forum software, has a security issue that allows hackers to reset passwords for any account, even if the password reset token has.

stackflag.com

CVE-2026-15360 - ajax load more An unauthenticated attacker can extract sensitive data from the database. This affects all versions of the Ajax Load More WordPress plugin before 8.0.1. To protect your site, update to… Too many irrelevant or confusing CVEs? Use stackflag.com #unknown #CVE #infosec

CVE-2026-15360: Ajax Load More WordPress Plugin SQL Injection Risk

An unauthenticated attacker can extract sensitive data from the database. This affects all versions of the Ajax Load More WordPress plugin before 8.0.1.

stackflag.com

CVE-2026-71289 A default configuration in NASA-AMMOS's Asynchronous Network Management System (ANMS) exposes its management API to the internet, allowing anyone to access sensitive information and send commands to connected… Too many irrelevant or confusing CVEs? Use stackflag.com #CVE #infosec

CVE-2026-71289: NASA-AMMOS ANMS Exposes Management API to the Internet

A default configuration in NASA-AMMOS's Asynchronous Network Management System (ANMS) exposes its management API to the internet, allowing anyone to.

stackflag.com

CVE-2026-71277 The rust-iot-platform has a security weakness that allows anyone to access protected areas of the system by sending a fake Authorization header. This is a concern because it means unauthorized users can access… Too many irrelevant or confusing CVEs? Use stackflag.com #CVE #infosec

CVE-2026-71277: rust-iot-platform: Unauthorized Access through Fake Authorization Headers

The rust-iot-platform has a security weakness that allows anyone to access protected areas of the system by sending a fake Authorization header.

stackflag.com

CVE-2026-71262 The IoTSharp BlobStorageController is not secure because it doesn't require authentication, making it accessible to anyone. This can lead to unauthorized access to and manipulation of files, potentially… Too many irrelevant or confusing CVEs? Use stackflag.com #CVE #infosec

CVE-2026-71262: IoTSharp BlobStorageController lacks authentication, allowing unauthorized access

The IoTSharp BlobStorageController is not secure because it doesn't require authentication, making it accessible to anyone.

stackflag.com

CVE-2026-71263 - freemodbus FreeModbus's Linux TCP port has a flaw in how it handles incoming data. This could allow an attacker to send a specially crafted message that overflows the buffer,… Too many irrelevant or confusing CVEs? Use stackflag.com #freemodbus #cwalterat #CVE #infosec

CVE-2026-71263: FreeModbus Linux TCP Port Buffer Overflow in xMBPortTCPPool()

FreeModbus's Linux TCP port has a flaw in how it handles incoming data.

stackflag.com

CVE-2026-7210 - rootio-python3.11 A security patch has been released for rootio-python3.11 on Root:Debian:12. This update fixes a vulnerability that could allow unauthorized access to your system. We recommend… Too many irrelevant or confusing CVEs? Use stackflag.com #RootDebian12 #CVE #infosec

CVE-2026-61486 - apache lucy All versions of Apache Lucy are affected. Since this project is no longer maintained, you won't receive a fix. Consider switching to a supported alternative or… Too many irrelevant or confusing CVEs? Use stackflag.com #apachelucy #apachefoundation #CVE #infosec

CVE-2026-61486: Apache Lucy: Unpatched Buffer Overflow Risk

All versions of Apache Lucy are affected. Since this project is no longer maintained, you won't receive a fix.

stackflag.com

CVE-2026-71256 - nanomodbus A vulnerability in nanoMODBUS versions 1.23.0 and earlier allows a malicious Modbus server to potentially write to any location in memory, leading to unintended behavior or data… Too many irrelevant or confusing CVEs? Use stackflag.com #nanomodbus #debevv #CVE #infosec

CVE-2026-71256: nanoMODBUS: Malicious Server Can Write to Arbitrary Memory Locations

A vulnerability in nanoMODBUS versions 1.23.0 and earlier allows a malicious Modbus server to potentially write to any location in memory, leading to.

stackflag.com

CVE-2026-71254 - nanomodbus An attacker can send a specific request to a nanoMODBUS server, causing it to write data outside its memory boundaries. This could lead to the server crashing or potentially… Too many irrelevant or confusing CVEs? Use stackflag.com #nanomodbus #debevv #CVE #infosec

CVE-2026-71254: nanoMODBUS Server Denial of Service or Remote Code Execution

An attacker can send a specific request to a nanoMODBUS server, causing it to write data outside its memory boundaries.

stackflag.com

CVE-2025-14009 - rootio-nltk A security issue was found in rootio-nltk, a software component used by Root devices. If exploited, this issue could allow unauthorized access to sensitive data on affected… Too many irrelevant or confusing CVEs? Use stackflag.com #rootionltk #RootPyPI #CVE #infosec

CVE-2026-71248 - inventory-management-system-php An attacker can delete products without permission and bypass login security. This is a serious issue because it allows unauthorized access to sensitive data and… Too many irrelevant or confusing CVEs? Use stackflag.com #harsh21patel #CVE #infosec

CVE-2026-71248: Inventory-Management-System-PHP: Unauthenticated Product Deletion and Login Bypass

An attacker can delete products without permission and bypass login security.

stackflag.com

CVE-2026-71237 - iot-php Miantang IoT-PHP's login feature is vulnerable to unauthorized access. An attacker can bypass the login system and extract sensitive data from the database. To protect your system,… Too many irrelevant or confusing CVEs? Use stackflag.com #iotphp #miantang #CVE #infosec

CVE-2026-71237: Miantang IoT-PHP: Unauthenticated Password Bypass and Data Theft

Miantang IoT-PHP's login feature is vulnerable to unauthorized access. An attacker can bypass the login system and extract sensitive data from the database.

stackflag.com

CVE-2026-71231 - iotsmarthome IOTSmartHome's login system is vulnerable to a security attack that allows an unauthorized user to access user data. This is because the system doesn't properly… Too many irrelevant or confusing CVEs? Use stackflag.com #iotsmarthome #thebradleysanders #CVE #infosec

CVE-2026-71231: IOTSmartHome: Unauthenticated SQL Injection via Cookie

IOTSmartHome's login system is vulnerable to a security attack that allows an unauthorized user to access user data.

stackflag.com

CVE-2026-44945 - rancher A specific type of user in Rancher can gain full control over the system and all clusters it manages. This means they can make changes to the system and its clusters without needing… Too many irrelevant or confusing CVEs? Use stackflag.com #rancher #suse #CVE #infosec

CVE-2026-44945: Rancher Privilege Escalation: Admin Access to All Clusters

A specific type of user in Rancher can gain full control over the system and all clusters it manages.

stackflag.com

CVE-2026-10090 A flaw in Red Hat Advanced Cluster Management for Kubernetes (ACM) allows a user with edit privileges to create a subscription that grants them full control over the cluster. This happens because ACM doesn't… Too many irrelevant or confusing CVEs? Use stackflag.com #CVE #infosec

CVE-2026-10090: Red Hat ACM: Privilege Escalation through Helm Chart

A flaw in Red Hat Advanced Cluster Management for Kubernetes (ACM) allows a user with edit privileges to create a subscription that grants them full.

stackflag.com

CVE-2026-71214 The Aerie/PlanDev sequencing-server allows an attacker to insert arbitrary data without authentication. This is because the server relies on information sent by the client, rather than verifying the client's… Too many irrelevant or confusing CVEs? Use stackflag.com #CVE #infosec

CVE-2026-71214: Aerie/PlanDev sequencing-server allows unauthenticated data insertion

The Aerie/PlanDev sequencing-server allows an attacker to insert arbitrary data without authentication.

stackflag.com

CVE-2026-71207 An attacker can log in without a password by submitting a special input to the login form. This is because the system doesn't properly check user input. Additionally, the system has hardcoded admin credentials… Too many irrelevant or confusing CVEs? Use stackflag.com #CVE #infosec

CVE-2026-71207: Stock-Inventory-Management-System's login.php bypasses authentication

An attacker can log in without a password by submitting a special input to the login form. This is because the system doesn't properly check user input.

stackflag.com

CVE-2026-5581 An attacker can delete any media file in your WordPress site without permission, potentially deleting all media files. This affects all versions of the Multi Uploader for Gravity Forms plugin up to and including… Too many irrelevant or confusing CVEs? Use stackflag.com #CVE #infosec

CVE-2026-5581: Gravity Forms: Unauthorized Media Deletion in Multi Uploader

An attacker can delete any media file in your WordPress site without permission, potentially deleting all media files.

stackflag.com

CVE-2026-49004 - nx799j (red magic 11 air) The ZTE NX799J's built-in PostgreSQL service is misconfigured, allowing an attacker to gain full root access on the device. This is a significant security risk because… Too many irrelevant or confusing CVEs? Use stackflag.com #nx799j #zte #CVE #infosec

CVE-2026-49004: PostgreSQL on ZTE Device Misconfigured, Allows Root Access

The ZTE NX799J's built-in PostgreSQL service is misconfigured, allowing an attacker to gain full root access on the device.

stackflag.com

CVE-2026-9273 - membership plugin – kadence memberships A security issue in the Kadence Memberships plugin for WordPress allows attackers to take control of any account, including administrator accounts, by sending… Too many irrelevant or confusing CVEs? Use stackflag.com #stellarwp #CVE #infosec

CVE-2026-9273: Kadence Memberships Plugin for WordPress: Password Reset Link Poisoning

A security issue in the Kadence Memberships plugin for WordPress allows attackers to take control of any account, including administrator accounts, by.

stackflag.com

CVE-2026-15307 - python-django A critical vulnerability in Debian Linux allows an attacker to execute malicious code on a system without being authenticated. This could potentially allow an… Too many irrelevant or confusing CVEs? Use stackflag.com #pythondjango #debian #Debian11 #CVE #infosec

CVE-2026-67305 - freerdp2 The FreeRDP Windows client before version 3.29.0 has a security flaw that could allow an attacker to take control of a user's computer by sending malicious data… Too many irrelevant or confusing CVEs? Use stackflag.com #freerdp2 #canonical #Ubuntu1604LTS #CVE #infosec

CVE-2026-67293 - freerdp2 FreeRDP, a remote desktop protocol software, fails to properly check the identity of servers using wildcard certificates. This makes it possible for an attacker to… Too many irrelevant or confusing CVEs? Use stackflag.com #freerdp2 #canonical #Ubuntu1604LTS #CVE #infosec