A missing authorization vulnerability exists in Brainstorm Force SureDash (up to version 1.12.2) due to incorrectly configured access control security levels. This flaw allows unauthorized network attackers to access certain functionality without proper permissions. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity impact primarily affecting confidentiality. No known exploits are currently reported in the wild. No patch or remediation information is provided in the available data.
A low-severity vulnerability (CVE-2026-114459) was found in mod_qos versions 11.76-4, 11.76-5, 11.76-6, 11.77-1, 11.78-1, 11.79-1, and 11.79-1build1. The flaw relates to inspecting HTTP response bodies and results in a low impact on availability. No known exploits are reported in the wild.
CVE-2026-111847 is a missing authorization vulnerability in Kings Plugins MarketKing for WooCommerce. It affects versions from initial releases up to 2.1.79. The flaw allows exploitation of incorrectly configured access control, potentially leading to limited confidentiality and integrity impacts. The vulnerability has a medium severity rating with a CVSS score of 5.4. A fix is available in version 2.1.80.
An out-of-bounds read and write vulnerability exists in the Count-Min sketch deserialization of Apache DataSketches C++ versions 4.1.0 through 5.2.0. The flaw arises because the deserialization function does not properly check input size including the preamble, allowing reads beyond the input buffer. Additionally, a crafted serialized sketch can cause integer overflow in table size calculation, leading to heap memory corruption during later operations. This can cause application crashes and potentially enable further exploitation. Only applications deserializing Count-Min sketches from untrusted sources are affected. Upgrading to version 5.3.0 resolves the issue.
A vulnerability in the Photo Engine (Media Organizer & Lightroom) WordPress plugin before version 6.5.8 allows authenticated users with author role or higher to delete media attachments they are not authorized to, including those uploaded by other users and administrators. This is due to missing authorization checks on targeted media attachments.
A Stored Cross-Site Scripting (XSS) vulnerability exists in the Photo Engine (Media Organizer & Lightroom) WordPress plugin versions before 6.5.8. The plugin fails to properly sanitize and escape collection and gallery names before storing and displaying them in the administrative dashboard. This allows authenticated users with author role or higher to inject malicious scripts that execute in the context of the admin dashboard.
The Royal MCP WordPress plugin versions before 1.5.7 contain an improper authentication vulnerability. The plugin does not restrict preview-link tokens to the specific preview they were issued for. As a result, anyone with a valid token can authenticate as the token's owning user, who is an administrator by default, across the entire REST API without requiring a nonce. This flaw allows full site takeover.
NT OneAPP by NewType Infortech has a vulnerability (CVE-2026-114223) where sensitive information such as plaintext usernames and passwords can be extracted from backup data. This occurs when an unauthenticated local attacker obtains ADB backup access authorization and the user confirms the backup operation. The vulnerability is due to cleartext storage of sensitive information in backup data. It affects versions from 0 up to and including 1.5.22. The CVSS score is 6.7, indicating a medium severity risk.
NT OneAPP by NewType Infortech contains an authentication bypass vulnerability (CWE-287) that allows unauthenticated local attackers to bypass the app's PIN lock via a deep link, gaining access to protected resources of a logged-in user. The vulnerability affects versions from 0 up to and including 1.5.22. The CVSS 4.0 score is 6.9, indicating medium severity. No patch or vendor advisory is currently provided, and no known exploits are reported in the wild.
NT OneAPP by NewType Infortech contains a hard-coded credentials vulnerability (CWE-798) that allows unauthenticated remote attackers to obtain a hard-coded cryptographic key. This key can be used to decrypt login request contents, exposing users' plaintext account credentials and device information. The vulnerability affects versions from 0 up to and including 1.5.22. The CVSS 4.0 score is 9.1, indicating critical severity.
A vulnerability in Roundcube was fixed that addressed a bug where an alias login was not properly qualified by the IMAP host. This flaw could allow an attacker with low privileges to gain unauthorized access under certain conditions. The issue affects multiple specific versions of Roundcube. The CVSS score is 6.8, indicating a medium severity impact with high confidentiality and integrity impact but no availability impact.
A vulnerability in Roundcube involves the CSS proxy content processing lacking a size limit, potentially leading to denial of service conditions. The issue affects multiple specific versions of Roundcube. The CVSS score is 5.3, indicating a medium severity impact primarily affecting availability. No known exploits are reported in the wild, and no patch or remediation details are provided in the available data.
A Server-Side Request Forgery (SSRF) vulnerability in Roundcube allows bypass of the is_local_url() filter via NAT64 64:ff9b::/96 addresses. This vulnerability affects multiple specific versions of Roundcube and has a high severity rating with a CVSS score of 7.2. The flaw could allow an attacker to cause the server to make unauthorized requests, potentially leading to information disclosure or other impacts.
A vulnerability in Roundcube allows bypassing remote content blocking via SVG SMIL by attribute. This issue affects multiple specific versions of Roundcube and has a medium severity rating with a CVSS score of 5.3. The vulnerability does not require privileges or user interaction to exploit and impacts confidentiality without affecting integrity or availability.
A vulnerability in Roundcube allows bypassing remote content blocking via CSS escapes in FuncIRI attributes. This issue affects multiple specific versions of Roundcube and has a medium severity rating with a CVSS score of 5.3. The vulnerability does not require user interaction or privileges and impacts confidentiality by potentially allowing remote content to be loaded despite blocking mechanisms.
A high-severity vulnerability (CVE-2026-114727) in Roundcube involves unsafe handling of attachment content passed to ImageMagick during image resizing. This flaw could lead to high impact on confidentiality, integrity, and availability. Multiple specific versions of Roundcube are affected. The vulnerability has a CVSS score of 8.3, indicating a serious risk. No public exploits are known in the wild. The product is not a cloud service, and no explicit patch information is provided in the input.
A mail header injection vulnerability exists in Roundcube via the From display-name in the Bounce (resend) action. This flaw allows an attacker to inject malicious content into email headers when resending bounced emails. The vulnerability affects multiple specific versions of Roundcube. The CVSS score is 5.8, indicating a medium severity impact primarily on email integrity.
A mail header injection vulnerability exists in Roundcube affecting specific versions. The flaw involves injection via the References, In-Reply-To, Message-ID, and From email header parameters. This vulnerability has a medium severity rating with a CVSS score of 5.0. No known exploits in the wild have been reported. The affected versions are explicitly listed and include multiple specific package versions.
A high-severity vulnerability (CVE-2026-114724) in Roundcube affects multiple specific versions. The flaw involves an object injection primitive in the rcube_session::unserialize() function via session keys prefixed with an exclamation mark (!). This vulnerability can lead to complete compromise of confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 score of 7.4, indicating high impact. No public exploits or known exploitation in the wild have been reported. The affected versions are explicitly listed, and the product is not a cloud service.