CVE-2026-78279 is a Cross-Site Request Forgery (CSRF) vulnerability affecting WP ManageNinja LLC's Fluent Support Pro plugin versions up to and including 2.3.1. This vulnerability allows an unauthenticated attacker to trick a user into performing unwanted actions via a crafted request. The vulnerability has a medium severity rating with a CVSS score of 5.4.
CVE-2026-78278 is an authorization bypass vulnerability classified as CWE-639 affecting WP ManageNinja LLC's Fluent Boards Pro plugin versions up to and including 2.0.11. It involves insecure direct object references (IDOR) that allow unauthorized access via user-controlled keys. The vulnerability has a medium severity with a CVSS score of 5.3. No patch or remediation information is currently provided by the vendor. There are no known exploits in the wild at this time.
CVE-2026-78277 is a Server-Side Request Forgery (SSRF) vulnerability affecting WP ManageNinja LLC's FluentCRM Pro plugin versions up to and including 3.1.12. The flaw allows an attacker with low privileges to induce the server to make unauthorized requests, potentially leading to limited confidentiality and integrity impacts. The vulnerability has a medium severity with a CVSS score of 4.9. No patch or remediation details are provided in the available data.
CVE-2026-78272 is a medium severity vulnerability in WP ManageNinja LLC's Fluent Support Pro plugin, affecting versions up to and including 2.3.1. It involves broken access control due to missing authorization checks, classified under CWE-862. The vulnerability allows attackers with limited privileges to access or perform actions beyond their authorization scope. No specific affected versions are listed beyond the indication of versions <= 2.3.1. There is no information about available patches or vendor advisories. The CVSS 3.1 base score is 5.4, reflecting a network attack vector with low attack complexity, requiring privileges but no user interaction, and resulting in low confidentiality and integrity impacts without availability impact.
CVE-2026-78270 is a high severity SQL Injection vulnerability in WP ManageNinja LLC's FluentCRM Pro plugin affecting versions up to and including 3.1.12. The flaw involves improper neutralization of special elements in SQL commands, specifically related to author input. This vulnerability could allow an attacker with high privileges to execute unauthorized SQL commands, potentially leading to data confidentiality breaches and partial denial of service. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.
CVE-2026-66623 is a high-severity unauthenticated cross-site scripting (XSS) vulnerability affecting Inisev's Social Media & Share Icons plugin versions up to and including 2.9.9. This vulnerability allows an attacker to inject malicious scripts during web page generation due to improper input neutralization. The flaw requires no privileges but user interaction is needed to trigger the vulnerability.
CVE-2026-66897 is a critical path traversal vulnerability in Canonical's LXD container management software. It allows an attacker with container edit permissions or a user launching a crafted image to overwrite arbitrary files on the host system as root. The flaw arises from a mismatch between path validation and file creation during instance template processing, enabling escape from directory confinement and host root code execution.
CVE-2026-8173 is a medium severity vulnerability in the Murrelektronik Xelity 4TX M GE switch web GUI version 2.1.0. It involves improper error message generation that allows an unauthenticated attacker with network access to the web interface to retrieve MAC addresses logged by the device. This occurs when an authenticated administrator uses the 'Copy learned MAC Addresses' function, and the error messages leak sensitive MAC address information.
Sakura Editor contains an OS command injection vulnerability that allows arbitrary OS commands to be executed when a user opens a terminal in a crafted directory. This occurs if a victim user edits a file located in a specially crafted directory and then invokes the "Open Terminal" feature. The vulnerability has a high severity score of 7.8 and affects the confidentiality, integrity, and availability of the system.
FORT Validator versions up to 1.6.7 have an origin validation error in their RRDP processing that allows a delegated CA under the same Trust Anchor Locator to reference another CA's RRDP URLs. This can cause FORT Validator to delete the victim CA's local snapshot and silently remove validated route-origin data, potentially enabling route hijacking or loss of reachability. Version 1.6.8 includes a patch that rejects cross-origin RRDP snapshot and delta URLs. As a workaround, administrators can disable HTTP/RRDP while keeping rsync enabled, though this may cause data unavailability or staleness where rsync is unsupported.
CVE-2026-43980 is a cross-site scripting (XSS) vulnerability in zenitraM's malla, a web analyzer for Meshtastic networks. The vulnerability arises because node names received via MQTT are stored without sanitization and rendered into the web dashboard DOM without escaping. This allows any participant on a public Meshtastic MQTT broker to inject malicious JavaScript that executes in the browsers of Malla dashboard visitors. The issue was fixed in commit 4086e2b5f61615a813b70b25bc76095083552135.
Miniflux v2 before version 2.3.1 contains an open redirect vulnerability due to improper handling of redirect URLs with backslashes. This allows an unauthenticated attacker to bypass relative-path and host checks in the login flow and redirect users to attacker-controlled external sites. The issue is fixed in version 2.3.1.
CVE-2026-62676 is a vulnerability in omnigent-ai's omnigent v0.1.0 and earlier versions before 0.3.0. The issue lies in the shared shell-command parser which fails open, allowing unrecognized commands to bypass critical policy checks. This can enable an agent intended to be confined to push code or secrets to attacker-controlled repositories, push to protected branches, or escape workspace confinement. The vulnerability stems from the parser returning 'None' (interpreted as allow) for unrecognized commands, rather than denying them.
Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, multipart POST /v1/sessions accepts an authenticated user's agent bundle and omnigent/server/bundles.py validate_agent_bundle does not reject a tools..callable dotted Python path. omnigent/runner/tool_dispatch.py _resolve_spec_callable imports the specified module and _execute_spec_callable_tool invokes the resolved function, allowing a bundle to select subprocess.check_output and execute a local command with the runner process permissions. This can expose runner files, environment variables, credentials, workspace data, internal services, and availability without administrator access. This issue is fixed in version 0.3.0.
CVE-2026-62674 is a critical code injection vulnerability in the omnigent-ai omnigent framework prior to version 0.3.0. It allows an authenticated user with edit access to a session to replace a shared agent bundle lacking a session ID and inject attacker-controlled commands. These commands execute with the permissions of the Omnigent runner process, potentially exposing sensitive files, credentials, workspace data, internal services, and affecting runner availability. The issue is fixed in version 0.3.0.
Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authenticated user can upload a session-scoped agent bundle with an absolute or traversal-containing os_env.cwd value because omnigent/spec/parser.py stores the value verbatim and omnigent/spec/validator.py does not constrain it. On a runner where OMNIGENT_RUNNER_WORKSPACE is unset, omnigent/runner/resource_registry.py preserves the attacker-controlled path and omnigent/inner/os_env.py uses the resolved path as the environment root and copytree source. The _assert_within_cwd check then treats that attacker-selected root as trusted, allowing sys_os_read, write, edit, and shell tools to access runner files and environment secrets outside the intended workspace. This issue is fixed in version 0.3.0.
mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of `mod_auth_openidc`. The issue is fixed in version 2.4.19.4 by stopping the scan at the string terminator so a value-less token is rejected. No in-product workarounds are available. As a stop-gap, an upstream reverse proxy or WAF that rejects or normalizes malformed `Cookie` headers (tokens lacking `=`) can reduce exposure, but upgrading is the recommended remediation.
CVE-2026-16520 is a high-severity vulnerability affecting multiple versions of Genians Genian NAC and Genian ZTNA products. It involves improper input validation and exposure of sensitive information through data queries, leading to SQL Injection and authentication bypass. The affected versions span Genian NAC V4.0, V5.0, and Genian ZTNA V6.0, with specific version ranges detailed. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a significant risk if exploited.
CVE-2026-77113 is a medium severity vulnerability in Canonical Apport affecting versions prior to 2.36.0, 2.34.2, and 2.28.4. It involves a relative path traversal flaw in the apport-unpack component on Linux systems. This flaw allows an attacker to create or overwrite arbitrary files with the privileges of the executing user by manipulating key names in crash report files.
CVE-2026-64846 is a vulnerability in the Nix package manager prior to version 2.35.0. It involves a time-of-check/time-of-use (TOCTOU) race condition related to symbolic link handling during the LocalStore restore path when using the recursive-nix experimental feature. This race condition can allow the Nix process or nix-daemon to create or truncate an empty file outside the build sandbox with the daemon user's permissions. The vulnerability does not allow arbitrary content writes and requires winning the race. The issue is fixed in version 2.35.0.