A vulnerability in the Mollie Payments for WooCommerce WordPress plugin before version 8.2.0 allows unauthenticated users to create orders for draft or unpublished products via the PayPal express-checkout endpoint. This occurs because the plugin does not verify the publication status of products before processing orders.
The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify an order's payment state or the requested payment gateway before removing a configured payment-surcharge fee, allowing unauthenticated users to reduce an order's total before completing payment.
ManageEngine Key Manager Plus versions before 7151 contain a command injection vulnerability (CWE-78) that allows authenticated users with certificate deployment privileges to execute arbitrary OS commands via crafted input when configuring deployment targets. This vulnerability has a high severity score of 8.8 and was fixed in version 7151.
ManageEngine Key Manager Plus versions prior to 7151 contain an improper access control vulnerability that allows authenticated low-privilege users to export cryptographic keys beyond their authorized scope. This vulnerability is addressed in version 7151.
CVE-2025-11229 is a privilege management vulnerability in WSO2 Identity Server that occurs when the 'authorize_all_scopes' configuration is enabled. This misconfiguration allows applications using the client credentials grant type to obtain all API scopes, including sensitive internal and console scopes, without explicit authorization. Exploiting this flaw can lead to privilege escalation, unauthorized administrative actions, access to confidential data, and potential full account takeover. The issue affects multiple versions of WSO2 Identity Server prior to their respective fixed releases.
A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is reflected into the HTTP Location header after successful authentication, allowing an unvalidated redirect to an attacker-controlled URL.
A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-time use, allowing replay of previously consumed assertion IDs within their validity period.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066)
* kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259)
* kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534)
* kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159)
* kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CVE-2026-68156)
* kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155)
* kernel: ipvs: reload ip header after head reallocation (CVE-2026-68476)
* kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)
* kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641)
* kernel: ipvs: do not propagate one-packet flag to synced conns (CVE-2026-80714)
* kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)
* kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period (CVE-2026-98432)
* kernel: ZDI-CAN-33367: Linux Kernel skbuff skb_zerocopy Improper Ownership Management Local Privilege Escalation Vulnerability ()
Bug Fix(es) and Enhancement(s):
* Critical Bug Fixes for customer issues with lpfc [rhel-8.6.z] (JIRA:RHEL-286150)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Akeeba Backup for Joomla! versions prior to 10.3.7, 9.1.8, and 7.9.0 lack anti-CSRF protections on certain actions. This vulnerability allows an attacker to trick an authenticated user into performing unintended operations by visiting a malicious page. The issue has a medium severity rating and is addressed in the specified fixed versions.
A medium-severity vulnerability exists in Linksys E5600 version 1.1.0.26 affecting the strcpy function in /cgi-bin/mesh_login.cgi. This flaw involves an out-of-bounds write triggered by manipulation of certain JSON request parameters. The vulnerability can be exploited remotely and public exploit code is available. The affected product is no longer supported by the vendor, and no patch or vendor response has been provided.
@better-auth/expo versions before 1.7.16 contain a vulnerability that allows unauthenticated attackers to perform account takeover actions, such as changing any account's email address. This occurs because the library signs a caller-supplied state value without verifying that the value was issued by the server. After updating to a fixed version, it is necessary to rotate the application secret to fully mitigate the risk.
A medium-severity information disclosure vulnerability exists in Linksys E5600 version 1.1.0.26, specifically in the /cgi-bin/fqc.cgi component related to Factory Quality Control. The flaw allows remote attackers to obtain sensitive information without authentication. Exploit code is publicly available. The affected product is no longer supported by the vendor, and no patch or remediation has been provided.
A high-severity security flaw exists in Linksys E5600 version 1.1.0.26, specifically in the init_multipart function of the /cgi-bin/upload_fw.cgi component's Header Parser. This vulnerability allows remote attackers to perform out-of-bounds write operations. Exploit code has been publicly released. The affected product is no longer supported by the vendor, and no patch or remediation has been provided.
A SQL injection vulnerability exists in funadmin version 7.1.0 in the Curd::selectList function within the /frontend/ajax/index file of the Frontend List Endpoint component. The flaw allows remote attackers to manipulate the selectFields argument to execute SQL injection attacks. Public exploit code has been released, and the vendor has not responded to disclosure attempts.
A critical stack-based buffer overflow vulnerability exists in TOTOLINK A950RG firmware version 4.1.2cu.5268_B20221104, specifically in the Multi-SSID Configuration component's setWiFiMultipleConfig/delWiFiMultipleConfig functions. The flaw is triggered by manipulating the wepkey2/wepkey3 arguments via the /cgi-bin/cstecgi.cgi interface. Remote attackers can exploit this vulnerability without user interaction. Public exploit code is available.
A stack-based buffer overflow vulnerability exists in certain ASUS Router firmware versions. This flaw allows an unauthenticated attacker within network proximity to execute arbitrary commands with root privileges by sending a specially crafted device name. The vulnerability is rated high severity with a CVSS score of 8.7. No specific affected versions or patch information are provided in the available data.
A critical OS command injection vulnerability exists in Qihoo 360 devices D603-2, D600-2, D606-6, and D706 up to version 6.4.9. The flaw is in the testspeed_command function of the /fs2/bin/iscm file, allowing remote attackers to manipulate the host argument to execute arbitrary OS commands. Public exploit code is available. The vendor has not responded to disclosure requests, and no patch information is provided.
A missing authorization vulnerability in ASUS Armoury Crate allows a local attacker to write content to a specific file or registry location with Local System privileges or cause a recoverable system crash via the service's exposed inter-process interface. This flaw requires local access and does not involve user interaction. The vulnerability is identified as CVE-2026-110464 with a medium severity rating.
A command injection vulnerability exists in Qihoo 360 D603-2, D600-2, and D606-6 devices up to version 6.3.2. The flaw is in the on_push_message function of the /fs2/bin/iscm component's Timezone Push Handler, where manipulation of the tz argument can lead to remote OS command injection. This vulnerability has a CVSS score of 7.3 (high severity). The issue is resolved by upgrading to version 6.4.0, which implements a validation check for the timezone parameter.