Search: 10.4-5

The Duplicator and Duplicator Pro WordPress plugins are vulnerable to PHP Object Injection via deserialization of untrusted data in versions up to 1.5.17 and 4.6.10 respectively. This flaw allows unauthenticated attackers to inject serialized objects into public site content, which are later processed during migration or import operations by an administrator. Exploitation can lead to remote code execution or deletion of critical files such as wp-config.php, potentially resulting in site takeover. The vulnerability requires a sequence of actions: an attacker stores malicious serialized data, an administrator creates a package, and then performs a migration or import that triggers the deserialization. No official patch information is provided in the data.

CVE-2026-113744 is a critical stack-based buffer overflow vulnerability in the Tenda AC19 router firmware version 16.03.10.07. The flaw exists in the formSetFirewallCfg function of the httpd Web Management Service, triggered by manipulation of the firewallEn argument. This vulnerability can be exploited remotely without authentication. Public exploit code has been disclosed.

Golang 1.24 and related versions use system root certificates on most platforms. However, some cases exist where system trust stores may not update automatically, potentially allowing untrustworthy intermediate certificates to be accepted. To mitigate this, a denylist was added in the crypto/x509 package to reject verification attempts involving known untrustworthy intermediate certificates.

Astral uv versions 0.9.17+ds1-3 through 0.9.17+ds1-6 contain a path traversal vulnerability that could allow an attacker to access files outside the intended directory. This vulnerability has a medium severity with a CVSS score of 5.3. No public exploit code or active exploitation in the wild has been reported. The vulnerability affects specific versions prior to 0.11.6.

The uv software versions before 0.11.15 contain a path traversal vulnerability that can be exploited to compromise system confidentiality, integrity, and availability. This vulnerability is rated high severity with a CVSS score of 8.8. The affected versions include specific builds of 0.9.17+ds1-3 through 0.9.17+ds1-6. No public exploits or vendor patch information is provided in the data.

FreeRDP versions before 3.32.0 contain a null-pointer dereference vulnerability that can cause a denial of service. The flaw affects multiple Ubuntu package versions of FreeRDP. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity, with no confidentiality or integrity impact but potential availability impact.

FreeRDP versions before 3.32.1 contain a heap-based buffer overflow vulnerability in the server component. This flaw allows an attacker with local privileges to potentially execute arbitrary code or cause a denial of service. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating significant impact on confidentiality, integrity, and availability.

FreeRDP versions before 3.32.1 contain a heap out-of-bounds read vulnerability that can lead to information disclosure. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity. It affects multiple specific Ubuntu package versions of FreeRDP. No public exploits or known active exploitation have been reported.

FreeRDP version 3.32.0 contains a use-after-free vulnerability in the drdynvc component. This vulnerability can cause a denial of service by crashing the affected system. The issue has a CVSS score of 6.5, indicating a medium severity level. Multiple specific Ubuntu package versions of FreeRDP are affected.

Astral uv versions before 0.8.22 contain a path traversal vulnerability that allows unauthorized modification of data. This vulnerability has a CVSS score of 6.5, indicating a medium severity level. The affected versions include specific builds of version 0.9.17+ds1. There is no indication of public exploits or active exploitation in the wild. No patch or remediation details are provided in the available data.

Mandiant FLARE capa versions prior to 10.0.0 contain a deserialization vulnerability (CWE-502) that allows arbitrary code execution when processing crafted .viv or .exe.viv workspace files. This vulnerability is fixed in version 10.0.0.

Trigger.dev versions prior to 4.5.10 contain a server-side request forgery (SSRF) vulnerability that allows authenticated project members to bypass webhook SSRF protections by targeting the 198.18.0.0/15 benchmarking IP range. This enables attackers to perform blind internal probing and limited state-changing POST requests to internally routed services within this range.

SvelteKit versions from 2.10.0 up to but not including 3.0.0 contain a path traversal vulnerability in the vite preview server on Windows. This flaw allows unauthenticated attackers with network or tunnel access to the preview server to read files outside the intended prerendered output directory. Exploitation can expose sensitive files such as source code, configuration files, or credentials accessible by the server process. The vulnerability is fixed in version 3.0.0.

ArcadeDB versions prior to 26.10.1 contain a remote code execution vulnerability due to improper authorization checks in the GremlinQueryEngine.command() method. Authenticated users, including those with read-only reader roles, can execute Groovy code via the POST /api/v1/command/{database} endpoint if the Groovy engine is enabled. This allows execution of OS commands with the privileges of the server process user. The vulnerability is fixed in version 26.10.1.

ArcadeDB versions from 26.2.1 up to but not including 26.10.1 have a missing authorization vulnerability in the Bolt protocol handler. Authenticated users with credentials for one database can exploit this flaw to read schema metadata of other databases by manipulating the db field in RUN or BEGIN messages. This allows unauthorized enumeration of schemas via commands like db.labels() or SHOW INDEXES. The vulnerability is fixed in version 26.10.1.

ArcadeDB versions from 26.2.1 up to but not including 26.10.1 have a missing authorization vulnerability in the Bolt protocol handler. This flaw allows authenticated users with access to any single database to enumerate all database names by issuing a SHOW DATABASES query over the Bolt port. This exposure can reveal unauthorized database names, potentially disclosing tenant or project identifiers. The vulnerability has a medium severity rating and is fixed in version 26.10.1.

ArcadeDB versions from 26.8.1 up to but not including 26.10.1 have an authorization bypass vulnerability. This flaw allows read-only users to modify edge type schema flags related to lightweight and unique settings without having UPDATE_SCHEMA permissions. Attackers can exploit this by sending an ALTER TYPE command via HTTP, gRPC, or Bolt APIs to persistently change edge storage declarations. The vulnerability is fixed in version 26.10.1.

CVE-2026-114038 is a vulnerability in the device-mapper-multipath component of Red Hat Enterprise Linux 10. A local user can trigger an out-of-bounds read by sending a specially crafted command with a format string ending in a trailing percent character to the multipath daemon. This can lead to limited information disclosure or cause the daemon to crash, resulting in a denial of service. The vulnerability does not allow code execution or privilege escalation and affects unprivileged users via accessible query commands. The impact is moderate with a CVSS score of 5.1.

The golang packages provide the Go programming language compiler. Security Fix(es): * net/http: golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * golang: crypto/x509: Go: crypto/x509: mitigation for security concerns with a specific Certificate Authority (CVE-2026-111943) Bug Fix(es) and Enhancement(s): * Update Go to version 1.26.10+1 [rhel-9.8.z] (JIRA:RHEL-287192) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.