CVE-2026-117548 is a NULL pointer dereference vulnerability in Red Hat Directory Server 11's 389-ds-base component. It occurs when a ModifyDN (rename) operation uses an attribute's schema alias name instead of its canonical name as the new relative distinguished name. An authenticated attacker with ModifyDN permission can exploit this to crash the directory server, causing denial of service. This flaw does not affect default configurations and requires non-default access control instructions granting ModifyDN rights to non-administrative users. Mitigation involves reviewing and restricting such access control instructions until a fix is available.
CVE-2026-117627 is a vulnerability in the JWT Authorization Grant implementation of the keycloak-services component in Red Hat Build of Keycloak. When configured with certain login restrictions for OIDC or Google identity providers, these restrictions are enforced during browser logins but bypassed during JWT-based grant flows. This allows an authenticated client with valid credentials to obtain access tokens for users who should be blocked by identity provider claim filters.
This content describes deploying a local Ghidra Server to support malware analysis labs by providing project persistence, versioning, collaboration, and confidentiality. It explains how Ghidra Server enables storing analysis projects outside virtual machines to avoid data loss when reverting snapshots. The server is lightweight, runs on Linux with Java, and uses Java RMI for communication. Proper network configuration and user authentication are important. The server hosts raw malware samples but does not execute them, so it should be isolated within the lab network and never exposed to the Internet.
CVE-2026-114488 is a vulnerability in Wildfly, affecting Red Hat JBoss Enterprise Application Platform 8, where a remote attacker can bypass authentication on IIOP EJB invocations. This occurs because the CSIv2 security interceptor accepts ITTPrincipalName identity assertions without verifying transport-level authentication, allowing impersonation of any principal on IIOP-exposed @Remote EJBs if certain non-default configurations are enabled.
CVE-2026-19610 is a vulnerability in Red Hat JBoss Enterprise Application Platform 7's platform-mbean component. The flaw is due to missing Role-Based Access Control (RBAC) checks in the handler for the read-resource operation on the runtime management resource. This allows authenticated users with low-privileged roles, such as Monitor, to access sensitive JVM system properties and configuration details that should be restricted.
CVE-2026-15564 is a vulnerability in Wildfly's IIOP listener used by Red Hat JBoss Enterprise Application Platform 7. It allows deserialization of input streams before authentication, potentially enabling an attacker with access to the IIOP port to send malicious objects. Exploitation requires the target EJB to accept untyped method parameters and the presence of exploitable gadget chains in the classpath. By default, the IIOP service binds to localhost, limiting remote exploitation. Red Hat rates this vulnerability as Moderate due to these restrictive conditions.
The Community Events WordPress plugin versions from 1.4.9 up to but not including 1.6.0 contain a cross-site scripting (XSS) vulnerability. This flaw arises because the plugin does not perform authorization or nonce checks on public event submissions and fails to properly escape several submitted values before displaying them in the admin dashboard and public calendar. As a result, unauthenticated users can inject arbitrary scripts that execute in the browsers of administrators reviewing these submissions. The issue is fixed in version 1.6.0.
The Video Player for YouTube WordPress plugin versions before 2.1.4 have an improper access control vulnerability. Specifically, versions before 2.1.4 do not perform capability checks on the player-preset AJAX handler, allowing users with Contributor role and above to read the site-wide player-preset configuration. Versions before 2.1.1 also allow these users to modify and delete the configuration.
The Photo Engine (Media Organizer & Lightroom) WordPress plugin versions before 6.6.0 lack proper authorization checks in a REST API route that updates post data. Authenticated users with Author-level access or higher can modify titles, content, excerpts, and other fields of arbitrary posts, pages, and attachments, including those owned by other users. This vulnerability is fixed in version 6.6.0.
The Chat AI with Dispatcher WordPress plugin before version 2.4 allows unauthenticated attackers to upload arbitrary files due to improper validation of uploaded files. The plugin relies solely on a spoofable client-supplied content type, enabling attackers to upload dangerous file types such as PHP scripts. This vulnerability can lead to remote code execution on affected systems.
GeoDirectory WordPress plugin versions prior to 2.8.197 do not enforce post password protection on listings, allowing unauthenticated users to access content and custom fields of password-protected published listings.
The Automated Import Products to Cart WordPress plugin before version 1.0.4 contains a path traversal vulnerability that allows users with minimal permissions, such as subscribers, to read and delete arbitrary files on the server. This occurs because the plugin does not properly sanitize user-supplied file paths before using them for file operations.
The LogixFast Auth WordPress plugin versions before 1.0.4 contain a vulnerability in the password reset functionality. The plugin sends the password-reset one-time code to the email address supplied in the request rather than the email address associated with the user account. This flaw allows unauthenticated attackers to reset any user's password, including administrators, leading to account takeover.
A vulnerability in the Two Factor Authentication WordPress plugin (before 1.17.0) and the All-In-One Security (AIOS) WordPress plugin (before 5.5.0) allows improper authentication. The flaw occurs because the plugins do not bind the two-factor authentication code to the account being authenticated. An attacker who knows a victim's password and has their own two-factor-enabled account can bypass the victim's second-factor check by using their own two-factor code, thereby gaining access to the victim's session.
A Cross-Site Request Forgery (CSRF) vulnerability exists in the WP Photo Album Plus WordPress plugin before version 9.3.04.004. The plugin fails to verify the origin or a security token for a comment-management request, which allows attackers to trick logged-in users with comment-moderation rights into deleting photo comments without their consent.
A stored cross-site scripting (XSS) vulnerability exists in the Enable SVG, WebP, and ICO Upload WordPress plugin versions before 1.1.6. The flaw allows users with author role and above to upload SVG files containing animation elements that can change a link's target to a javascript: URI. This bypasses the plugin's SVG sanitization and enables XSS attacks that execute in WebKit-based browsers such as Safari.
The Enable SVG, WebP, and ICO Upload WordPress plugin before version 1.1.6 contains a stored cross-site scripting (XSS) vulnerability. This occurs because the plugin does not properly sanitize uploaded SVG files whose content is not detected as SVG, while still storing and serving them as SVG images. Users with author role or higher privileges can exploit this flaw to perform stored XSS attacks.
The Hide Price Until Login WordPress plugin versions before 1.1.2 contain a missing authorization vulnerability. This flaw allows anyone to create a WordPress account and obtain a logged-in session even if user registration is disabled on the site.
A vulnerability in the Wallet System for WooCommerce WordPress plugin before version 2.8.2 allows authenticated users with minimal privileges to overwrite KYC documents and verification status of any other user, including administrators. This occurs because the plugin's KYC document submission handler does not restrict actions to the current user's account and lacks ownership or capability checks on the user ID supplied in requests.
A vulnerability in the WP Post Author WordPress plugin before version 4.2.0 allows unauthenticated users to access integration settings, including the reCAPTCHA secret key, due to insufficient access restrictions.