CVE-2026-105158 is a medium severity SQL injection vulnerability in RainyGao DocSys affecting versions up to and including 2.02.85. The flaw exists in the BaseController.createDBForMysql function within the Database Management component, where improper handling of the 'url' argument allows remote attackers to perform SQL injection. Exploit code is publicly available, but no official vendor response or patch has been provided yet.
SiYuan versions before 3.8.5 have an information disclosure vulnerability that allows unauthorized users to obtain backlink block IDs and reference counts from password-protected and publish-disabled documents by querying published documents. This bypasses the intended confidentiality of unpublished content.
CVE-2026-105157 is a path traversal vulnerability in RainyGao DocSys affecting versions 2.02.0 through 2.02.85. The vulnerability exists in the DocController.doGetTmp function of the /Doc/doGetTmpFile.do component, where manipulation of the path/fileName argument allows unauthorized file access. Remote exploitation is possible, and a public exploit has been disclosed. The vendor has not yet responded or issued a patch.
A vulnerability in StylemixThemes Cost Calculator Builder (up to version 4.0.17) allows insertion of sensitive information into sent data. This issue could lead to unauthorized retrieval of embedded sensitive data. The vulnerability has a high severity with a CVSS score of 7.5, indicating network exploitable conditions without user interaction or privileges required.
A medium-severity information disclosure vulnerability exists in Weaviate Verba up to version 2.1.3. The flaw is in the get_environment function within the goldenverba/components/util.py file of the generate_stream endpoint. This vulnerability can be exploited remotely without authentication. The vendor was notified but has not responded, and public exploit details are available.
CVE-2026-105156 is a medium severity vulnerability in YzmCMS versions 7.0 through 7.6. It involves the Password function in the MD5 Handler component, which produces password hashes with insufficient computational effort. This weakness could be exploited remotely but requires high complexity and is difficult to exploit. The vendor plans to release a backward-compatible gradual hash migration feature in March 2027 and will provide interim mitigation guidance. No official patch is currently available.
AhsayCBS backup utility versions up to 10.3.4 contain a vulnerability (CVE-2026-105133) that allows unauthenticated remote code execution. Exploitation involves chaining two critical vulnerabilities to bypass authentication and execute code with SYSTEM privileges. Attackers have deployed webshells, cryptocurrency miners disguised as legitimate processes, and persistence mechanisms including fake Windows services and kernel driver exploitation. Managed service providers are primarily targeted.
CVE-2026-105149 is a medium severity SQL injection vulnerability in mooSocial affecting versions 3.2.0 through 3.2.4. The flaw exists in the processing of the /stores/all-products endpoint, specifically via manipulation of the rating argument. The vulnerability can be exploited remotely without authentication. Public exploit code is available, but no official vendor response or patch has been provided.
CVE-2026-105148 is a server-side request forgery (SSRF) vulnerability in SciPhi-AI R2R versions 3.6.0 through 3.6.6. It affects the Retrieval Completion API Endpoint component, specifically the file py/shared/abstractions/llm.py. The vulnerability arises from manipulation of the argument generation_config.api_base, allowing remote attackers to induce the server to make unauthorized requests. Exploit code is publicly available, but no vendor response or patch has been provided.
CVE-2026-105147 is a medium severity vulnerability in SciPhi-AI R2R versions 3.6.0 through 3.6.6. It involves hard-coded credentials in the JWT Secret Handler component due to manipulation of default secret keys. The vulnerability can be exploited remotely without authentication. Although the exploit has been publicly disclosed, there are no known exploits in the wild and the vendor has not responded to the disclosure. No patch or remediation information is currently available.
A path traversal vulnerability exists in Drogon on Windows platforms up to versions 1.9.13-1 and 10.0-beta.3. The flaw is located in the StaticFileRouter::route function within the Static File Router component. This vulnerability can be exploited remotely without authentication and may allow an attacker to access unauthorized files. An exploit has been published, but no vendor response or patch is currently available.
Cozmoslabs TranslatePress versions up to 3.3.6 contain a stored cross-site scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This vulnerability allows persistent injection of malicious scripts, potentially impacting confidentiality, integrity, and availability. The CVSS score is 7.1, indicating high severity. No patch or remediation details are currently available.
A vulnerability in Laradock up to version 20.4 allows remote attackers to cause the download of code without an integrity check. The flaw exists in an unknown function within the workspace/Dockerfile component related to the build process. Exploitation requires high complexity and user interaction, and the exploitability is considered difficult. The vulnerability has a CVSS score of 5.0, indicating a medium severity impact with limited confidentiality, integrity, and availability impact. No patch or vendor response has been provided as of the disclosure date.
CVE-2026-103355 is a critical SQL Injection vulnerability in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) affecting versions up to 2.0.20. It allows unauthenticated attackers to perform blind SQL injection, potentially compromising confidentiality and causing limited availability impact. The vulnerability has a CVSS score of 9.3, indicating a critical severity level.
A critical OS command injection vulnerability exists in Ahsay AhsayCBS up to version 10.3.2 in the Replication Receiver component. The flaw can be exploited remotely without authentication by manipulating the 'random' argument in the /rps/api/json/UpdateReceivers.do endpoint. Exploitation leads to full system compromise. Upgrading to version 10.3.4 resolves the issue.
InternLM MindSearch version 0.1.0 contains a critical code injection vulnerability in the ExecutionAction.run function of its Planner Agent component. This flaw allows remote attackers to manipulate input arguments to execute arbitrary code. The vulnerability has a maximum CVSS score of 10.0, indicating severe impact on confidentiality, integrity, and availability. No patch or remediation is currently available, and the vendor has not responded to inquiries. Although public exploit details exist, there are no reports of active exploitation in the wild.
CVE-2026-105146 is a medium severity SQL injection vulnerability in Comsenz Discuz! affecting the Admin Medal Moderation component. The vulnerability exists in the modmedalsubmit function of the file upload/source/app/admin/child/medals/mod.php, where manipulation of the 'delete' argument allows remote attackers to perform SQL injection. The vendor has not responded to the disclosure, and no patch or remediation guidance is currently available. Exploit code has been made public, but there are no confirmed reports of exploitation in the wild.