Sun, Sep 20 · 12:17 PM CDTCVE-2026-94003
10.0/10 · Must read/watchNVDvuln
Summary
A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri of the file /cgi-bin/mbox-config of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public
CVECVE-2026-94003
SeverityCRITICAL
TypeNEW
PublishedSun, Sep 20 · 12:17 PM CDT
ModifiedSun, Sep 20 · 12:17 PM CDT
CVE-2026-94089
10.0/10 · Must read/watchNVDvuln
Summary
A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfa_authentication.cgi of the component Authentication Handler. Executing a manipulation of the argument id/password can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit
CVECVE-2026-94089
SeverityCRITICAL
TypeNEW
PublishedSun, Sep 20 · 09:16 PM CDT
ModifiedSun, Sep 20 · 09:16 PM CDT
CVE-2026-94097
10.0/10 · Must read/watchNVDvuln
Summary
A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/network_tools of the component CGI Diagnostic Endpoint. This manipulation of the argument param/key/val causes command injection. Remote exploitation of the attack is possible. The exploit has bee
CVECVE-2026-94097
SeverityCRITICAL
TypeNEW
PublishedMon, Sep 21 · 12:16 AM CDT
ModifiedMon, Sep 21 · 12:16 AM CDT
CVE-2026-94095
9.9/10 · Must read/watchNVDvuln
Summary
A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown functionality of the file /usr/bin/network_tools of the component Traceroute Diagnostic Feature. The manipulation of the argument url leads to command injection. The attack may be initiated remotely. The e
CVECVE-2026-94095
SeverityCRITICAL
TypeNEW
PublishedMon, Sep 21 · 12:16 AM CDT
ModifiedMon, Sep 21 · 12:16 AM CDT
CVE-2026-94096
9.9/10 · Must read/watchNVDvuln
Summary
A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/network_tools of the component LAN IP Configuration Handler. The manipulation of the argument ipv4 results in command injection. The attack may be launched remotely. The exploit has
CVECVE-2026-94096
SeverityCRITICAL
TypeNEW
PublishedMon, Sep 21 · 12:16 AM CDT
ModifiedMon, Sep 21 · 12:16 AM CDT
CVE-2026-94099
9.9/10 · Must read/watchNVDvuln
Summary
A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. This issue affects some unknown processing of the file restore.cgi of the component Backup Restore. Performing a manipulation of the argument QUERY_STRING results in command injection. The attack is possible to be carried out remotely. The explo
CVECVE-2026-94099
SeverityCRITICAL
TypeNEW
PublishedMon, Sep 21 · 01:16 AM CDT
ModifiedMon, Sep 21 · 01:16 AM CDT
CVE-2026-94100
9.9/10 · Must read/watchNVDvuln
Summary
A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_vlan of the file /usr/bin/routerd of the component WAN VLAN Reconfiguration. Executing a manipulation of the argument vlan_wanX.ports can lead to buffer overflow. The attack may be performed from remote. The ex
CVECVE-2026-94100
SeverityCRITICAL
TypeNEW
PublishedMon, Sep 21 · 01:16 AM CDT
ModifiedMon, Sep 21 · 01:16 AM CDT
CVE-2026-94101
9.9/10 · Must read/watchNVDvuln
Summary
A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246. The affected element is the function vlan_load_form_uci of the file /usr/bin/routerd. The manipulation of the argument wan_num leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed public
CVECVE-2026-94101
SeverityCRITICAL
TypeNEW
PublishedMon, Sep 21 · 02:16 AM CDT
ModifiedMon, Sep 21 · 02:16 AM CDT
CVE-2026-90817
9.8/10 · Must read/watchNVDvuln
Summary
An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating HTTP requests to access an unintended controller route from a public survey context and by supplying a crafted file-
CVECVE-2026-90817
SeverityCRITICAL
TypeNEW
PublishedSun, Sep 20 · 01:17 PM CDT
ModifiedSun, Sep 20 · 01:17 PM CDT
CVE-2026-94098
9.1/10 · Must read/watchNVDvuln
Summary
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This vulnerability affects unknown code of the file /www/cgi-bin/upgrade of the component Firmware Upgrade CGI Endpoint. Such manipulation of the argument QUERY_STRING leads to command injection. The attack can be executed remotely. The exploit is pu
CVECVE-2026-94098
SeverityCRITICAL
TypeNEW
PublishedMon, Sep 21 · 01:16 AM CDT
ModifiedMon, Sep 21 · 01:16 AM CDT
CVE-2026-94036
8.8/10 · Worth your timeNVDvuln
Summary
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwd_set results in improper access controls. The attack must originate from the local network. The
CVECVE-2026-94036
SeverityHIGH
TypeNEW
PublishedSun, Sep 20 · 04:16 PM CDT
ModifiedSun, Sep 20 · 04:16 PM CDT
CVE-2026-94104
8.8/10 · Worth your timeNVDvuln
Summary
NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails to validate file extensions for new filenames or when chunks parameter is 2 or higher. Attackers with view-only back-office access can upload PHP files to the web-accessible image/data/ directory and e
CVECVE-2026-94104
SeverityHIGH
TypeNEW
PublishedSun, Sep 20 · 12:17 PM CDT
ModifiedSun, Sep 20 · 12:17 PM CDT
CVE-2026-94106
8.8/10 · Worth your timeNVDvuln
Summary
getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings. Attackers can craft malicious filenames containing shell metacharacters to inject arbitrary commands executed with the privileges of the process embedding getID3.
CVECVE-2026-94106
SeverityHIGH
TypeNEW
PublishedSun, Sep 20 · 12:17 PM CDT
ModifiedSun, Sep 20 · 12:17 PM CDT
CVE-2026-94109
8.8/10 · Worth your timeNVDvuln
Summary
openEQUELLA versions before 2026.1.0 contain a remote code execution vulnerability in FreeMarker template compilation due to an unsandboxed TemplateClassResolver configuration. Authenticated attackers can inject malicious template expressions through collection summaries, dashboard portlets, or MIME templates to instan
CVECVE-2026-94109
SeverityHIGH
TypeNEW
PublishedSun, Sep 20 · 12:17 PM CDT
ModifiedSun, Sep 20 · 12:17 PM CDT
CVE-2026-83284
8.6/10 · Worth your timeNVDvuln
Summary
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle BI Publisher. Success
CVECVE-2026-83284
SeverityHIGH
TypeUPDATED
PublishedTue, Sep 15 · 08:18 PM CDT
ModifiedMon, Sep 21 · 01:16 AM CDT
CVE-2026-87963
8.6/10 · Worth your timeNVDvuln
Summary
The Yo WordPress plugin from 1.1 through 1.3.1 does not sanitize or parameterize the username request parameter before using it in a SQL query, and reads it before WordPress applies its request escaping, allowing unauthenticated attackers to perform SQL injection and read arbitrary database contents including administr
CVECVE-2026-87963
SeverityHIGH
TypeUPDATED
PublishedThu, Sep 17 · 07:16 AM CDT
ModifiedSun, Sep 20 · 02:16 PM CDT
CVE-2026-87067
8.5/10 · Worth your timeNVDvuln
Summary
The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be instantiated when it deserialises a value taken from an XML-RPC request, allowing users who hold its forms-management permission to write a file of their choosing and execute arbitrary code. That permission belongs to an admini
CVECVE-2026-87067
SeverityHIGH
TypeUPDATED
PublishedSun, Sep 20 · 07:16 AM CDT
ModifiedSun, Sep 20 · 02:16 PM CDT
CVE-2025-3501
8.2/10 · Worth your timeNVDvuln
Summary
A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended.
CVECVE-2025-3501
SeverityHIGH
TypeUPDATED
PublishedTue, Apr 29 · 09:15 PM CDT
ModifiedMon, Sep 21 · 06:17 AM CDT
CVE-2026-13577
8.2/10 · Worth your timeNVDvuln
Summary
Dancer2 versions before 2.2.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable. Dancer2::Core::Role::SessionFactory::generate_id silently falls back to a built-in rand-derived session id unless both Math::Random::ISAAC::XS and Crypt::URandom are available. The fallback session id is g
CVECVE-2026-13577
SeverityHIGH
TypeUPDATED
PublishedMon, Jul 20 · 08:16 AM CDT
ModifiedSun, Sep 20 · 11:16 AM CDT
CVE-2026-82842
8.1/10 · Worth your timeNVDvuln
Summary
The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resolving the identity by login name whatever the site has chosen, which allows an attacker who can have the site's identity provider assert a log
CVECVE-2026-82842
SeverityHIGH
TypeUPDATED
PublishedSun, Sep 20 · 07:16 AM CDT
ModifiedSun, Sep 20 · 02:16 PM CDT
CVE-2026-87159
8.1/10 · Worth your timeNVDvuln
Summary
Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (India). Successful attacks of thi
CVECVE-2026-87159
SeverityHIGH
TypeUPDATED
PublishedTue, Sep 15 · 08:19 PM CDT
ModifiedMon, Sep 21 · 12:16 AM CDT
CVE-2026-87166
8.1/10 · Worth your timeNVDvuln
Summary
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerabil
CVECVE-2026-87166
SeverityHIGH
TypeUPDATED
PublishedTue, Sep 15 · 08:19 PM CDT
ModifiedMon, Sep 21 · 12:16 AM CDT
CVE-2026-87167
8.1/10 · Worth your timeNVDvuln
Summary
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerabi
CVECVE-2026-87167
SeverityHIGH
TypeUPDATED
PublishedTue, Sep 15 · 08:19 PM CDT
ModifiedMon, Sep 21 · 12:16 AM CDT
CVE-2026-87168
8.1/10 · Worth your timeNVDvuln
Summary
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerabi
CVECVE-2026-87168
SeverityHIGH
TypeUPDATED
PublishedTue, Sep 15 · 08:19 PM CDT
ModifiedMon, Sep 21 · 12:16 AM CDT
CVE-2026-94107
8.1/10 · Worth your timeNVDvuln
Summary
NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that generates recovery codes using substr(md5(mt_rand()), 0, 10). Attackers who know an administrator's email address can request a password reset and predict the token to gain administrative account access w
CVECVE-2026-94107
SeverityHIGH
TypeNEW
PublishedSun, Sep 20 · 12:17 PM CDT
ModifiedSun, Sep 20 · 12:17 PM CDT
