CVE-2026-64941 is an open redirect vulnerability in phoenixframework's phoenix_live_view component. The vulnerability arises because the redirect/2 function improperly validates the :to parameter, allowing ASCII tab, LF, or CR characters that browsers strip before URL parsing. This enables attackers to redirect users to arbitrary external sites. The issue affects multiple versions before fixed releases and has a low CVSS score indicating limited impact.
A vulnerability in Nishishi Factory's Tegalog -Fumy Otegaru Memo Logger- involves a permissive regular expression that may allow an attacker with access to the product to log in to the management console and perform any available operations. This vulnerability has a high severity score of 8.6 and does not currently have a confirmed patch or remediation guidance.
A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.
A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9. This affects an unknown part of the file src/index.ts. This manipulation of the argument name/modelfile/source/destination causes command injection. The attack can only be executed locally. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability was detected in NightTrek Supabase-MCP cc994ab2d2a36b0af6ee7c7f3e6ce8e08cda2170/db03237d92f7dc2f0da0d70a87dba84ebcde5b66. Affected by this issue is some unknown functionality of the component generate_types. The manipulation of the argument schema results in command injection. The attack needs to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.
SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash.
CVE-2026-16027 is a Server-Side Request Forgery (SSRF) vulnerability in the Revenue Administration Türkiye's E-Signature product. It affects versions from 2.4.4.0 up to but not including 2.5.1.0. The vulnerability allows an attacker to induce the server to make unintended requests. The CVSS score is 5.4, indicating a medium severity level. No official patch or remediation guidance is currently available. There are no known exploits in the wild at this time.
CVE-2026-66447 is a critical unauthenticated SQL Injection vulnerability affecting the nickboss WordPress File Upload plugin versions up to and including 5.1.7. This flaw allows remote attackers to inject SQL commands without authentication, potentially leading to high confidentiality impact and limited availability impact. No official patch or remediation guidance has been provided yet.
CVE-2026-65570 is an authentication bypass vulnerability affecting the 'Login with phone number' product by Hamid Alinia in versions up to and including 1.8.70. This vulnerability allows unauthenticated attackers to bypass authentication mechanisms by spoofing, potentially leading to full compromise of confidentiality, integrity, and availability. The vulnerability is classified under CWE-290 (Authentication Bypass by Spoofing) and has a high severity with a CVSS score of 8.1. No official patch or remediation guidance has been provided yet.
CVE-2026-65544 is a high-severity Cross-Site Scripting (XSS) vulnerability affecting Super Socializer versions up to and including 7.14.5. This vulnerability allows unauthenticated attackers to inject malicious scripts during web page generation due to improper input neutralization. The flaw impacts confidentiality, integrity, and availability of the affected application. No official patch or remediation guidance has been provided yet.
CVE-2026-65542 is a high severity authentication bypass vulnerability affecting Super Socializer versions up to and including 7.14.5. The flaw involves unauthenticated broken authentication due to an alternate path or channel, classified under CWE-288. This vulnerability allows attackers to bypass authentication mechanisms potentially leading to full compromise of confidentiality, integrity, and availability. No official patch or remediation guidance has been provided by the vendor as of the publication date. There are no known exploits in the wild currently reported.
CVE-2026-65520 is a critical unauthenticated SQL Injection vulnerability affecting miniOrange WP OAuth Server versions up to and including 6.2.0. This flaw allows an attacker to inject SQL commands without authentication, potentially leading to high confidentiality impact and limited availability impact. No official patch or remediation guidance is currently confirmed from the vendor. Users should monitor vendor advisories for updates and apply fixes once available.
CVE-2026-61964 is a high severity vulnerability in WPManageNinja's Ninja Tables plugin, affecting versions up to and including 5.2.9. It is an unauthenticated Cross-Site Scripting (XSS) flaw that arises from improper neutralization of input during web page generation. This vulnerability allows attackers to inject malicious scripts that can impact confidentiality, integrity, and availability. No official patch or remediation guidance has been provided yet.
OMICRON StationScout before version 3.05 has a cryptographic timing side-channel vulnerability in its backend authentication. This flaw may allow unauthenticated attackers to forge valid credentials, bypass authentication and authorization, and impersonate legitimate clients. Successful exploitation can lead to full access to system configuration, enabling modification or unauthorized changes to system parameters and injection of network traffic.
OMICRON StationGuard version 4.00 has an improper input validation vulnerability in its IEC 61850 Sampled Values frame processing. A specially crafted Sampled Values frame can cause the affected process to terminate, disrupting alert processing for this traffic type. The overall system and other traffic processing remain unaffected. The process automatically restarts after termination, and the failure is immediately reported to the user. The vulnerability has a low severity score and no known exploits in the wild.
OMICRON StationGuard before version 4.10 has a cryptographic timing side-channel vulnerability in its backend authentication mechanism. This flaw may allow an unauthenticated attacker to forge valid credentials, bypass authentication and authorization, and impersonate legitimate clients. Successful exploitation grants full access to system configuration, enabling unauthorized modification or reset of system parameters.
CVE-2026-18909 is a stack-based buffer overflow vulnerability in ELAN Microelectronics Corp.'s ELAN Smart-Pad driver on Windows, specifically in ETD.sys and ETDSMBus.sys. The flaw occurs during Intel SMBus recovery when ETDSMBus.sys fails to enforce an upper bound on a hardware-derived report count, allowing an out-of-range value to be used as a loop counter for a stack buffer copy in ETD.sys without size validation. A local attacker with standard user privileges can trigger a kernel crash (BSOD) causing denial of service. This affects versions up to and including 24.21.52.3. No patch or official remediation has been confirmed yet.
The FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Recipient Display Name (to.name) in Email Logs in all versions up to, and including, 2.2.95 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The payload is delivered via an attacker-controlled recipient display name (to.name) in a wp_mail() call and does not fire in the log list view — only in the detail view when an administrator uses the Prev/Next navigation controls, as that path bypasses the escapeHtml pipeline used by the list view.
There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver. This may allow a local, authenticated user to escalate privileges and execute arbitrary code. This vulnerability affects NI-PAL 26.3.1 and prior versions running on Microsoft Windows.