Live threat intelligence radar

CVE-2026-65555 is a critical vulnerability in Uncanny Owl's Uncanny Toolkit for LearnDash that allows incorrect privilege assignment leading to privilege escalation. Versions from initial release up to 3.8.2 are affected. The issue is resolved in version 3.8.3.

CVE-2026-119481 is a critical Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuilder versions prior to 3.6.8. It allows privilege escalation, potentially enabling an attacker to gain unauthorized high-level access. The issue affects all versions from initial release up to 3.6.7.1 and has been fixed in version 3.6.8.

CVE-2026-119468 is a stored cross-site scripting (XSS) vulnerability in the Noptin newsletter plugin affecting versions prior to 4.4.3. It allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts. The issue is fixed in version 4.4.3.

CVE-2026-118513 is an authentication bypass vulnerability in the Symfony framework's X509Authenticator and X509AuthenticationListener components. It affects Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to 7.4.23, and 8.x prior to 8.1.11. The flaw allows an attacker with a certificate from the trusted CA who can manipulate the Common Name (CN) in the certificate's Subject DN to authenticate as any user, including privileged users. This vulnerability arises from improper parsing of the Subject DN string, where escaped characters are misinterpreted, enabling spoofing. The issue is a regression following an incomplete fix for CVE-2026-45063. The vulnerability is fixed by properly splitting and unescaping the DN into Relative Distinguished Names (RDNs) before attribute extraction.

CVE-2026-107479 is a numeric truncation vulnerability in the QTextCodec conversion functions within the Qt 5 Core Compatibility APIs module of the Qt Framework. This integer truncation issue can cause applications using the affected functionality to crash. The vulnerability has a low severity score and does not have known exploits in the wild.

The Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance WordPress plugin up to version 1.7 is vulnerable to stored cross-site scripting (XSS) via the comment field. This vulnerability arises from insufficient input sanitization and output escaping in the plugin's Remove mode, allowing unauthenticated attackers to inject malicious scripts that execute when users view the affected pages. Exploitation requires the malicious comment to be published either automatically for known commenters or through manual approval by a moderator.

A crafted DXF document causes a heap buffer overflow in Draw in Apache OpenOffice 4.1.16 and earlier. This could cause a crash or otherwise a corruption of memory areas. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

CVE-2026-114456 is a vulnerability in multiple Snowflake client drivers implementing the external browser single sign-on flow. The local loopback callback listener used during authentication reflected arbitrary Origin headers in CORS responses and accepted the first token-bearing request without verifying a CSRF state value. This flaw could allow an attacker able to reach the listener during an active login to submit a forged callback response, causing the authentication attempt to fail. Fixed versions are available across all affected Snowflake drivers.

The Mobile builder plugin for WordPress up to version 1.4.2 contains a privilege escalation vulnerability. This flaw arises from a PHP loose-comparison logic error in the meta key allow-list check combined with insufficient permission verification. Authenticated users with Subscriber-level access or higher can exploit this to overwrite user meta data, including wp_capabilities, thereby elevating their privileges to Administrator.

CVE-2026-121925 is a stack-based buffer overflow vulnerability in the Snowflake PHP PDO Driver and libsnowflakeclient that occurs during SAML-based authentication. The flaw arises from copying a value from the identity provider's HTML response into a fixed-size buffer without length validation. An attacker controlling or redirecting the SAML endpoint could exploit this by sending an oversized response, potentially causing a crash or remote code execution. Fixed versions are libsnowflakeclient 2.11.1 and Snowflake PHP PDO Driver 4.3.0.