Threat database

CVE-2026-111409 is a missing authorization vulnerability in the YITH PayPal Express Checkout for WooCommerce plugin. This flaw allows unauthorized access due to incorrectly configured access control security levels. It affects versions from the initial release up to 1.61.0 inclusive. The vulnerability has a medium severity with a CVSS score of 5.3. No official patch or remediation information is provided in the available data.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calendar: from n/a through 6.18.1.

CVE-2026-110900 is a missing authorization vulnerability in Liquid Web / StellarWP BookIt plugin versions before 2.6.0.6. It allows unauthorized users to exploit incorrectly configured access control security levels, potentially leading to unauthorized modification of data. The vulnerability has a medium severity with a CVSS score of 5.3. No known exploits are reported in the wild, and no official patch information is provided in the available data.

CVE-2026-110901 is an authorization bypass vulnerability in WPMU DEV SmartCrawl SEO plugin versions before 3.17.1. It arises from incorrectly configured access control security levels that allow an attacker with limited privileges to exploit a user-controlled key to bypass authorization checks. The vulnerability has a medium severity with a CVSS score of 5.4.

CVE-2026-110380 is a missing authorization vulnerability in Arraytics WP Event Solution up to version 4.1.26. It allows unauthorized users to exploit incorrectly configured access control security levels, potentially leading to unauthorized modification of data. The vulnerability has a medium severity rating with a CVSS score of 5.3. No official patch or remediation information is provided in the available data.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Stored XSS.This issue affects MapSVG: from n/a through 8.16.1.

CVE-2026-111399 is a high-severity SQL Injection vulnerability in PT Norther Lights Production's MapSVG product. It affects versions from 0 up to 8.16.1 inclusive. The flaw involves improper neutralization of special elements in SQL commands, allowing an attacker with low privileges and no user interaction to cause a partial confidentiality breach and limited availability impact. The vulnerability has a CVSS 3.1 score of 8.5. No patch or remediation information is provided in the available data.

Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Retrieve Embedded Sensitive Data.This issue affects MapSVG: from n/a through 8.16.1.

CVE-2026-111555 is a vulnerability in the luksmeta component of Red Hat Enterprise Linux 10. It involves improper boundary validation of metadata slots, allowing an attacker with the ability to supply or modify a disk header to redirect wipe or load operations outside the intended metadata area. This can lead to overwriting or zeroing out encrypted payload data, causing persistent data loss and corrupted storage. Exploitation generally requires privileged access to raw block devices or tricking an administrator into processing a malicious disk image.

CVE-2026-105958 is a high-severity vulnerability in spice-server on Red Hat Enterprise Linux 6. It involves multiple migration data handlers that improperly use client-supplied offsets without validating bounds. This flaw allows a malicious authenticated SPICE client during VM live migration to perform out-of-bounds read and write operations on the message buffer, potentially leading to arbitrary heap memory disclosure or heap corruption.

CVE-2026-68571 is a high-severity code injection vulnerability in Apache Kylin affecting versions 4.0.0 through 5.0.4. The flaw arises from improper control of code generation via a special parameter in the JDBC URL. This vulnerability mainly impacts Kylin services exposed directly to public networks, which is uncommon, while typical in-house deployments are mostly unaffected. The issue is resolved in Apache Kylin version 5.0.5.

Apache Kylin versions 5.0.0 through 5.0.4 contain a critical SQL Injection vulnerability due to improper neutralization of special elements in SQL commands and missing authentication for a critical backend cache API. This flaw allows unauthenticated attackers to execute injected SQL commands, potentially compromising confidentiality, integrity, and availability. The issue primarily affects Kylin services exposed directly to public networks, which is uncommon in typical in-house deployments. Upgrading to version 5.0.5 resolves the vulnerability.

GLM 5.3 is an advanced open-weight AI model released for free use by the cybersecurity community. It is designed specifically to assist defenders with tasks such as code review, vulnerability triage, penetration testing, reverse engineering, malware analysis, and threat modeling. The model has demonstrated significant capabilities in building exploits and identifying vulnerabilities, comparable to other leading models in the field. It is accessible via an API with a free token allowance upon registration with a work email. The release aims to empower security professionals with a powerful tool for authorized security testing and research.

Apache Kylin versions 4.0.0 through 5.0.4 contain a critical deserialization of untrusted data vulnerability (CWE-502) that arises from unsafe Java deserialization via a broken external cache service. This vulnerability allows remote attackers to execute arbitrary code without authentication. The issue is fixed in Apache Kylin version 5.0.5.

Apache Kylin versions 4.0.0 through 5.0.4 contain a missing authorization vulnerability in a backend metadata dump API. This flaw allows unauthorized access due to insufficient authorization checks and lack of path confinement. The vulnerability primarily impacts Kylin services exposed directly to public networks, which is uncommon, while typical in-house deployments are mostly unaffected. The issue is fixed in version 5.0.5.

Exposure of Sensitive Information (system level configuration info) to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.

Burger King Japan suffered a data breach in early October 2026, exposing 11.18 million customer records from its official smartphone app. The compromised data includes personal information such as names, dates of birth, gender, email addresses, phone numbers, and order history. No credit card information or user credentials were accessed. The breach was detected and access was blocked promptly. Burger King Japan has reported the incident to Japan's Personal Information Protection Commission and is investigating the cause with external cybersecurity experts. Customers are advised to be vigilant against phishing attempts impersonating the company. No secondary damages like fraud have been confirmed so far.

CVE-2026-105959 is a high severity vulnerability in the spice-server component of Red Hat Enterprise Linux 6. It involves an integer overflow or wraparound issue where a size_t allocation size is truncated to int during a malloc callback. This flaw allows a malicious authenticated SPICE client to trigger a large heap buffer overflow during VM live migration by sending a crafted max_encoders value in migration data.

A cybersecurity incident affecting BAE Systems has disrupted the Bankruptcy Noticing Center (BNC), which handles notices for all federal bankruptcy courts in the US. This disruption has halted the generation and sending of bankruptcy notices nationwide for about a week. The incident has also impacted related services such as the National Creditor Registration Service, preventing users from generating creditor mailing lists. The cause of the incident and whether any data was compromised have not been disclosed. Courts continue to accept filings and open new cases, but notices issued through the BNC since October 9 have not been delivered. Restoration timelines remain uncertain.

SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search __globals__. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when DUMPER_SERVER_PORT is set, running code in the scheduler process on the next forward pass.