The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its Button module settings before outputting them on the front end, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (e.g. in multisite setups).
The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its page-builder module settings before outputting them, allowing users with access to the builder (Administrator by default) to inject arbitrary JavaScript that executes when the affected page is viewed by any visitor; this has impact even on administrators where the unfiltered_html capability is disallowed, e.g. in multisite setups.
The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its staff member settings before outputting them in pages, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (e.g. in multisite setups).
The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its module settings before outputting them in an href attribute, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (e.g. in multisite setups).
Able2Shell is a collection of 33 reported zero-day vulnerabilities in N-able N-central, disclosed publicly with proof-of-concept code. Among these, seven critical vulnerabilities have been officially recognized and patched by N-able in the N-central 2026.4 Hotfix 2 release. The vulnerabilities include high-severity issues such as XML external entity (XXE) attacks, server-side request forgery (SSRF), OGNL injection, local privilege escalation, remote code execution, and stored cross-site scripting (XSS). One exploit chain allows unauthenticated remote command execution as the nable user, and others can lead to root privileges through chained exploits. N-able has confirmed and patched the most critical issues but has not mapped all 33 findings individually. The affected versions are N-central prior to 2026.4.1.26. No confirmed customer compromises have been reported as of November 10, 2026.
A cryptographic integrity vulnerability (CVE-2026-42784) exists in the sequoia-openpgp implementation used by rust-rpm-sequoia, related to key flag confusion. This issue affects Red Hat Enterprise Linux 10.0 Extended Update Support and related variants. Red Hat has issued an important security advisory and released updated packages to address this flaw.
Red Hat has issued an important security advisory for the nodejs:22 module in Red Hat Enterprise Linux 8, addressing multiple vulnerabilities in Node.js and its dependencies. The update fixes several denial of service issues in the brace-expansion and undici libraries, certificate validation bypasses, cache poisoning, and DNS hostname truncation bugs. These vulnerabilities could lead to denial of service, information disclosure, and TLS certificate validation bypass. The advisory includes a rebase to the latest Node.js 22 release for RHEL 8. Users are advised to apply the update to mitigate these issues.
Fenrir Inc.'s Sleipnir Mobile for iPhone / iPad, including the Black Edition, suffers from improper certificate validation. This vulnerability could allow a man-in-the-middle attacker to intercept encrypted communications. The issue affects versions up to and including 4.15.1. The CVSS score is 4.2, indicating a medium severity level.
A security vulnerability in Vim (Vi IMproved) allows arbitrary code execution via Vimscript injection through an unescaped filename in the netrw s:NetrwMarkFile() filter() expression. This issue is identified as CVE-2026-43961 and affects Red Hat Enterprise Linux 8 versions. The vulnerability has been rated with an Important security impact by Red Hat. A fix is available through updated Vim packages provided by Red Hat.
A denial of service vulnerability (CVE-2026-116260) exists in libimobiledevice due to a double free in the service_receive function. This issue affects Red Hat Enterprise Linux 8 and related products. Red Hat has issued a security update to address this flaw.
This Red Hat Security Advisory addresses multiple vulnerabilities and bugs in the Linux kernel packages, which form the core of Linux operating systems. The update fixes a range of security issues including out-of-bounds writes, buffer overflows, null pointer dereferences, denial of service conditions, and privilege checks across various kernel subsystems such as drm/amdkfd, procfs, netfilter, Bluetooth, libceph, and nvme. The advisory covers a broad set of CVEs and includes bug fixes and enhancements to improve kernel stability and security. Red Hat recommends applying the update promptly and rebooting the system for the fixes to take effect.
Akaunting version 3.3.0 contains a stored cross-site scripting (XSS) vulnerability in its XLSX item-import workflow. An authenticated Manager can import an item with a name containing malicious HTML markup. When another authenticated user selects this item while creating a document, the stored name is rendered using Vue's v-html directive, leading to execution of attacker-controlled code within the victim's Akaunting session.
Sleipnir Mobile for iPhone and iPad, including the Black Edition provided by Fenrir Inc., is vulnerable to improper certificate verification. This vulnerability relates to the application's failure to correctly validate SSL/TLS certificates, which could undermine secure communications.
A path traversal vulnerability (CWE-22) exists in the TwigView plugin for CakePHP versions prior to 1.3.3 and 2.1.2. This flaw allows arbitrary file reading when unvalidated user input is passed to the FileLoader::findTemplate() function. The issue has been fixed in versions 1.3.3 and 2.1.2.
The TwigView plugin for CakePHP versions prior to 1.3.3 and 2.1.2 contains a deserialization vulnerability due to unrestricted use of the unserialize filter. This flaw allows deserialization of untrusted data, potentially enabling remote code execution. The issue has been fixed in versions 1.3.3 and 2.1.2.
CVE-2026-61810 is a vulnerability in libspdm version 1.4.0 where the FINISH request and response messages include new fields (OpaqueDataLength and OpaqueData) that are not covered by the signature or HMAC verification. This omission allows an active attacker to modify the opaque data in transit without detection. The issue was addressed in libspdm version 1.4.1.
OpenSearch Dashboards versions 2.14.0 to before 2.19.6 and 3.0.0 to before 3.7.0 contain a Server-Side Request Forgery (SSRF) vulnerability in the fetchDataSourceMetaData route. This flaw allows an authenticated user to supply internal or loopback endpoints to probe internal network resources because this route does not validate URLs against configured deny or allow lists. The vulnerability has been fixed in versions 2.19.6 and 3.7.0.
CVE-2026-64678 is a critical deserialization vulnerability in nitrite-java versions prior to 4.4.1. The vulnerability arises from unsafe deserialization of legacy database files without any class allowlist or filtering, allowing arbitrary classes on the application classpath to be instantiated during deserialization. This can enable remote code execution if a suitable gadget class is present. The issue is fixed in version 4.4.1.
The npm package 'chalks-log' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a separate, secure machine. Removing the package alone does not guarantee removal of all malicious software, as the attacker may have gained full control of the system.
The npm package @solana-trade/core contains malicious code that compromises any computer on which it is installed or running. Installation of this package can lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package and rotation of all secrets and keys from a separate, uncompromised system is strongly advised.