CVE-2026-110459 is an improper access control vulnerability in Ubiquiti Inc's UniFi Protect AI Key. A malicious actor with network access could exploit this flaw to obtain information, make unauthorized changes, and cause a denial of service (DoS) on the device. The vulnerability affects versions prior to 2.2.8. It has a high severity score of 8.6 and does not require user interaction or privileges to exploit.
CVE-2026-110458 is a low severity path traversal vulnerability in Ubiquiti Inc's UniFi Protect AI Key. An attacker with network access could exploit this flaw under certain conditions to create or truncate files on the affected device. No known exploits are reported in the wild. The vulnerability affects versions from 0 up to but not including 2.2.8.
Rakuten Mobile, Inc.'s Rakuten Mini smartphones use AOSP test keys for Android Verified Boot (AVB), allowing physical attackers to install crafted system images. This vulnerability affects device integrity and confidentiality with physical access.
CVE-2026-110457 is a path traversal vulnerability in Ubiquiti Inc's UniFi Protect AI Key. An attacker with network access and under certain conditions could exploit this flaw to read information about files on the device. The vulnerability has a low severity score of 3.7 and does not allow modification or denial of service. Affected versions are those prior to 2.2.8. No known exploits or patches are currently reported.
CVE-2026-110456 is an improper access control vulnerability in Ubiquiti Inc's UniFi Protect AI Key. A malicious actor with network access could exploit this flaw under certain conditions to access internal resources through the device. The vulnerability affects versions prior to 2.2.8. The CVSS score is 5.3, indicating a medium severity level. There are no known exploits in the wild and no vendor-provided patch information is available at this time.
CVE-2026-110455 is an improper input validation vulnerability in Ubiquiti Inc's UniFi Protect AI Key that allows a network-based attacker to perform command injection under certain conditions. The vulnerability affects versions from 0 up to but not including 2.2.8. It has a high severity with a CVSS score of 8.1. No official patch or remediation details are provided in the available data.
CVE-2026-110454 is an improper access control vulnerability in Ubiquiti Inc's UniFi Protect AI Key. A malicious actor with network access could exploit this flaw to access internal resources through the device. The vulnerability affects versions from 0 up to but not including 2.2.8. The CVSS 3.1 base score is 5.3, indicating a medium severity level. There are no known exploits in the wild, and no patch or remediation information is currently provided.
SiteGuard Server Edition for Apache httpd contains an OS command injection vulnerability that allows an attacker with limited privileges to execute arbitrary operating system commands with root or SYSTEM level privileges. This vulnerability is classified as high severity with a CVSS score of 7.8. No specific affected versions or patch information is provided.
The Hyyan WooCommerce Polylang Integration WordPress plugin versions up to and including 1.5.0 contain an SQL Injection vulnerability via the 'variation_ids' parameter in the 'woocommerce_remove_variations' AJAX action. Authenticated users with Subscriber-level access or higher can exploit this flaw to append additional SQL queries, potentially extracting sensitive database information. The vulnerability arises from insufficient escaping and lack of proper query preparation of user-supplied input.
The Social Share Buttons & Analytics Plugin – GetSocial.io for WordPress contains a stored cross-site scripting (XSS) vulnerability in all versions up to and including 4.5. Authenticated users with subscriber-level access or higher can inject malicious scripts via the 'response' parameter. These scripts are stored in WordPress options and execute in an administrator's browser when visiting the GetSocial settings page.
The NewStatPress WordPress plugin versions up to and including 1.4.5 contain a stored cross-site scripting (XSS) vulnerability in the 'Last referrers' meta box on the Overview admin page. This vulnerability arises from insufficient output escaping of user-supplied query strings recorded in the plugin's statistics table. An unauthenticated attacker can inject malicious scripts that execute when a high-privileged user views the Overview page and interacts with the injected link.
Nix versions before 2.35.3, when run unsandboxed on macOS or FreeBSD, have an incorrect authorization vulnerability that allows build users to make unauthorized connections from daemon clients. This issue is tracked as CVE-2026-110453 and is classified under CWE-863 (Incorrect Authorization). The vulnerability has a medium severity with a CVSS score of 4.3.
CVE-2026-110452 is a medium severity vulnerability in NixOS Nix affecting multiple versions before 2.35.3. The multi-user installer incorrectly assigns ownership of store contents to the invoking user instead of root, potentially leading to improper access control.
In the third quarter of 2026, multiple attack campaigns targeted poorly managed Linux SSH servers using brute force, dictionary attacks, and vulnerability exploits. Attackers deployed ShellBot, a Perl-based DDoS bot with port scanning and UDP flooding capabilities. A complex attack chain involved a user-mode rootkit loaded via /etc/ld.so.preload, which then deployed the XMRig cryptocurrency miner disguised as a bash process using the XHide concealment tool. Additionally, the Fisieredoor backdoor was used to execute commands and install SSH brute-force tools such as goauto and tsm-family that systematically targeted systems with credential lists. Organizations are advised to implement strong password policies, maintain regular patching schedules, and enforce access controls on externally exposed SSH infrastructure.
CVE-2026-110451 is a medium severity vulnerability in NixOS Nix affecting multiple versions before 2.35.3. It involves an incorrect authorization issue (CWE-863) that allows a Seatbelt sandbox escape on macOS when an unconfined build is used due to mishandling of a size threshold.
NixOS Nix versions before 2.35.3 contain a vulnerability that allows privilege escalation during a repair operation. This occurs because the repair process may destroy and then replace a store path before verifying its content, leading to incorrect behavior order. The issue affects multiple version ranges prior to 2.35.3.
CVE-2026-110449 is an integer overflow vulnerability in NixOS Nix affecting multiple versions prior to 2.35.3. The flaw occurs due to mishandling of list allocation when evaluating untrusted expressions, leading to an out-of-bounds write. This vulnerability can cause integrity impact and limited availability impact but does not affect confidentiality.
The NewStatPress WordPress plugin is affected by a stored Cross-Site Scripting (XSS) vulnerability in versions up to and including 1.4.5. This vulnerability arises from improper sanitization of the QUERY_STRING / REQUEST_URI parameter, allowing unauthenticated attackers to inject malicious scripts. Exploitation depends on an administrator placing the vulnerable shortcode on a public page and the attacker's crafted URL gaining enough hits to appear in the top pages list.
The JTL-Connector for WooCommerce WordPress plugin is affected by a critical arbitrary file upload vulnerability in all versions up to and including 2.4.3. This flaw arises from improper authentication handling and insufficient file type validation, allowing unauthenticated attackers to upload potentially executable files. Successful exploitation could lead to remote code execution on the affected system.
The Avada (Fusion) Builder WordPress plugin up to version 3.16.1 contains a vulnerability that allows unauthenticated attackers to access sensitive user information. This is due to improper exposure of user meta data via the 'args[link_target]' parameter. Attackers can retrieve administrator emails, login names, user levels, and WooCommerce customer personally identifiable information such as billing email, phone, and address. The required nonce to exploit this is publicly exposed on pages using the [fusion_instagram] shortcode, enabling anonymous harvesting.