Threat database

CVE-2026-53420 is a buffer overflow vulnerability in the Zoom Phone feature of Zoom Workplace Clients. It may allow an unauthenticated attacker to escalate privileges via network access. The vulnerability affects versions prior to 7.2.0. The CVSS score is 8.0, indicating high severity with impacts on confidentiality, integrity, and availability.

CVE-2026-53418 is a high-severity vulnerability in Zoom Workplace for Android before version 7.2.1. It involves improper authorization in the handler for a custom URL scheme, which may allow an unauthenticated user to escalate privileges via network access. The vulnerability has a CVSS score of 8.1, indicating a significant impact on confidentiality and integrity without requiring user interaction. No known exploits are reported in the wild. The issue is fixed in version 7.2.1.

UnicomAI Wanwu versions up to 0.6.5 contain an authorization bypass vulnerability that allows authenticated users to mint AppKeys tied to other users' MCP servers. This enables attackers to open MCP sessions and invoke server tools using the victim's upstream authentication. The vulnerability has a low CVSS score of 2.3, indicating limited impact and complexity.

UnicomAI Wanwu versions up to 0.6.5 have a missing authorization vulnerability that allows any authenticated user to revoke other users' AppKeys for arbitrary applications via the unpublish endpoint. This flaw enables attackers to delete API keys across organizations, disrupting client access to MCP and OpenAPI services. The vulnerability has a medium severity with a CVSS score of 5.3.

Wanwu versions before 0.6.3 have an insecure direct object reference vulnerability that allows any authenticated user to delete other users' legacy AppKeys by specifying a numeric apiId. This flaw enables attackers to revoke AppKeys across organizations by iterating through sequential key IDs, disrupting MCP and OpenAPI clients until new keys are issued by the owners.

UnicomAI Wanwu versions before 0.6.3 have an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants' applications by manipulating the appId parameter. This flaw enables attackers to send DELETE requests with guessed sequential assistant IDs to remove victims' applications, workflows, conversations, and related data permanently.

CVE-2026-86405 is a critical vulnerability in the Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module. It involves improper verification of cryptographic signatures, allowing signature spoofing due to improper validation. This affects versions from 26.8.1 up to but not including 26.9.1. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-85531 is a critical vulnerability in the OpenCart Virtual POS Module by Sipay Electronic Money and Payment Services Inc. It involves improper verification of cryptographic signatures, allowing signature spoofing due to improper validation. This affects versions from 26.8.2 up to but not including 26.9.1.

Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code in the Appliance Management Console (AMC).

CVE-2026-102257 is a high-severity Zip Slip vulnerability in the SonicWall SMA1000 Appliance Management Console (AMC) interface. It allows an attacker with high privileges to extract files outside the intended directory by using a specially crafted archive, potentially leading to remote code execution.

CVE-2026-102256 is a high-severity vulnerability in the SonicWall SMA1000 appliance involving improper neutralization of special elements in OS commands. This post-authentication flaw could allow a remote authenticated attacker with administrator privileges to execute arbitrary operating system commands, leading to remote code execution. The vulnerability requires authentication and low attack complexity. No specific affected versions or patch information is provided.

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.

CVE-2026-82924 is an improper control of interaction frequency vulnerability in Expert Mail by Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. This flaw allows brute force attacks due to insufficient rate limiting or interaction controls. The vulnerability affects versions of Expert Mail up to and including 2026-09-18. It has a medium severity with a CVSS score of 5.3, indicating limited confidentiality impact and no integrity or availability impact.

Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.

Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 versions.

CVE-2026-39769 is a high-severity authentication bypass vulnerability in Iqonic Designs Graphina – Charts and Graphs For Elementor plugin. It allows attackers to exploit the password recovery mechanism via an alternate path or channel, bypassing authentication controls. The vulnerability affects versions from the initial release up to 3.1.12 inclusive.

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint

The postgresql-operator charm runs a Prometheus postgres_exporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover the password, which grants read-only pg_monitor access to PostgreSQL. This is fixed in the dev track (14/edge) in revisions 1189 (arm64) and 1190 (amd64), and in the stable track (14/stable) in revisions 1216 (arm64) and 1217 (amd64).

CVE-2026-12392 is an information exposure vulnerability in Canonical MAAS that allows unauthenticated attackers to retrieve the RPC secret in plaintext via the vendor data metadata endpoint. This affects versions prior to 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0. The vulnerability requires that the target machine was deployed with the 'register as rack' option enabled and that the attacker can obtain or infer the machine's system ID to exploit the flaw.