The Kirki – Freeform Page Builder, Website Builder & Customizer WordPress plugin is affected by a stored cross-site scripting (XSS) vulnerability in all versions up to and including 6.2.0. This vulnerability arises from insufficient input sanitization and output escaping of page builder text content. Authenticated users with the kirki_content_access capability can inject malicious scripts that execute when other users view the affected pages.
The 10Web Booster WordPress plugin up to version 2.34.10 contains an arbitrary file upload vulnerability due to missing file type validation and leaked authentication nonce. This allows unauthenticated attackers to upload potentially executable files, enabling remote code execution. The vulnerability arises from a world-readable REST nonce file generated during bulk optimization pauses, which bypasses authentication checks.
PhastPress, a WordPress plugin by kiboit, is affected by a Server-Side Request Forgery (SSRF) vulnerability in all versions up to and including 3.10. The vulnerability arises because the scripts service endpoint dynamically constructs its URL whitelist from the HTTP 'Host' header, which can be manipulated by unauthenticated attackers. This allows attackers to bypass the whitelist and force the server to make HTTP requests to arbitrary internal or external destinations, potentially exposing response content.
CVE-2026-76664 is a medium severity vulnerability in Hewlett Packard Enterprise's HPE NonStop EXPAND product involving an out-of-bounds memory read/write condition. This flaw could potentially allow unauthorized memory access leading to partial confidentiality and integrity loss, as well as high impact on availability. No specific affected versions or patches are currently documented.
"Handmade Marketplace App - Creema", an application provided by CREEMA LTD., contains an open redirect vulnerability. This type of vulnerability allows attackers to redirect users to unintended external sites, potentially facilitating phishing or other malicious activities.
"ゲオアプリ", an application provided by GEO CORPORATION, is reported to contain multiple vulnerabilities. Specific technical details, affected versions, and exploitation information are not provided.
Wheels CLI versions prior to 4.1.1 do not verify that the local development server responding to its HTTP requests belongs to the current project. This allows a malicious local process listening on a targeted port to receive sensitive information such as the project's reload password and code submitted via wheels reload or wheels console commands. Other commands may unintentionally affect different local applications by performing state-changing operations against their servers and databases. The vulnerability requires the developer to run an affected command while a malicious process listens on the targeted local port. This issue is fixed in version 4.1.1.
CVE-2026-110908 is an OS command injection vulnerability in the Netgate pfSense FRR package versions 2.0.2_1 and 2.1.2_1. It affects the FRR status filter in the WebGUI, allowing an authenticated user with limited privileges to execute arbitrary commands as root by exploiting improper neutralization of special elements in a shell command pipeline. Updated FRR packages for pfSense Plus 26.07/26.03.1 and CE 2.9.0/2.8.1 address this issue.
CVE-2026-76663 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop TELSERV component. This vulnerability can cause memory corruption leading to a denial of service (DoS) condition. No information about affected versions or available patches is provided.
CVE-2026-76662 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop TELSERV. This flaw can lead to memory corruption and cause a denial of service (DoS) condition. The vulnerability has a medium severity rating with a CVSS score of 5.9. No specific affected versions or patch information are provided. There are no known exploits in the wild at this time.
Backdrop CMS versions 1.34.x before 1.34.6 and 1.35.x before 1.35.2 have a vulnerability related to improper handling of tokens in the token browser. The system does not sufficiently restrict access to token types available for selection, potentially exposing sensitive dynamic data placeholders. However, individual token names remain protected.
CVE-2026-76661 is a high-severity vulnerability in Hewlett Packard Enterprise's HPE NonStop QIOM component. It involves improper input validation leading to an out-of-bounds write that can corrupt buffer data. The vulnerability has a CVSS score of 7.6, indicating significant impact on integrity and availability. No affected versions or patch information are provided. No known exploits in the wild have been reported.
CVE-2026-76660 is a high-severity vulnerability in Hewlett Packard Enterprise's HPE NonStop CIPSAM product. It involves improper input validation that leads to an out-of-bounds write, potentially corrupting buffer data. The vulnerability has a CVSS score of 8.7, indicating significant impact on confidentiality, integrity, and availability. No affected versions or patch information are provided in the available data.
CVE-2026-76066 is an authorization bypass vulnerability in crestalnetwork's IntentKit up to version 2.6.3. The flaw allows unauthenticated or public callers in various contexts (WEB, API, TWITTER, TELEGRAM) to execute owner-only state-changing tools without approval. This occurs because the executor validates tool calls against the full tool registry instead of the per-request narrowed tool advertisement, bypassing intended restrictions. The vulnerability enables unauthorized execution of sensitive operations such as wallet transfers and memory writes.
CVE-2026-76659 is a high-severity vulnerability in the finger daemon component of Hewlett Packard Enterprise's HPE NonStop TCP/IP UTILITIES. It involves missing authentication for a critical function, which could allow an unauthenticated remote attacker to cause a denial of service (DoS). No confidentiality or integrity impact is reported. There is no information about affected versions or available patches.
Ellucian WebAdvisor 3.2 has an unauthenticated XML External Entity (XXE) injection vulnerability in its /WebAdvisor/WebAdvisor endpoint. This flaw allows remote attackers to submit crafted XML POST requests that do not disable external entity and DTD resolution. Exploitation can lead to server-side request forgery (SSRF), disclosure of NTLMv2 hashes via attacker-controlled SMB shares, and reading arbitrary files from the Windows host through out-of-band error channels. WebAdvisor 3.2 reached end-of-support in June 2022, and users are advised to migrate to Colleague Self-Service.
CVE-2026-76656 is a medium severity vulnerability in Hewlett Packard Enterprise's HPE NonStop TCP/IP UTILITIES. It involves missing authentication for a critical function, specifically when the traceroute utility is executed under certain conditions. This flaw could allow an unauthenticated remote attacker to cause a denial of service (DoS) on the affected system.
MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding malicious instructions in untrusted content processed through tools like browse_webpage, search_web, and torrent metadata parsers, which then get passed to the unrestricted ExecuteCommandTool via asyncio.create_subprocess_shell. Attackers can craft content that instructs the model to invoke execute_command with confirm_dangerous set to true, bypassing the validate_command_safety denylist and exploiting the admin session's is_admin context to achieve remote code execution on the host.
CVE-2026-73799 is a high-severity stack-based buffer overflow vulnerability (CWE-121) in Hewlett Packard Enterprise's HPE NonStop SNMP Trap Multiplexer. This flaw may cause memory corruption leading to denial of service. No affected versions or patch information are provided.
CVE-2026-0993 is a buffer overflow vulnerability in the SODOLA SL902-SWTGW124AS device firmware versions up to 200.2.12. It occurs due to improper handling of an oversized boundary value in the Content-Type header of a crafted POST request to the embedded HTTP server. Exploitation can cause the device to become unresponsive, resulting in denial of service by dropping management access and traffic forwarding during recovery.