🟠 CVE-2026-65954 - High (8.6)

PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffer. From 1.0.0-alpha1 until ...

https://www.thehackerwire.com/vulnerability/CVE-2026-65954/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-59977 - High (8.1)

ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the /delete/{id} endpoint use...

https://www.thehackerwire.com/vulnerability/CVE-2026-59977/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-59976 - High (8.1)

ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter use...

https://www.thehackerwire.com/vulnerability/CVE-2026-59976/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-57143 - High (8.8)

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxng_search and the ...

https://www.thehackerwire.com/vulnerability/CVE-2026-57143/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-87744 - Critical (9.1)

A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attacker...

https://www.thehackerwire.com/vulnerability/CVE-2026-87744/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-85966 - High (7.7)

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not suff...

https://www.thehackerwire.com/vulnerability/CVE-2026-85966/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-85965 - High (8)

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain mem...

https://www.thehackerwire.com/vulnerability/CVE-2026-85965/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-85975 - High (7.5)

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cle...

https://www.thehackerwire.com/vulnerability/CVE-2026-85975/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-85956 - Critical (9.6)

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a rem...

https://www.thehackerwire.com/vulnerability/CVE-2026-85956/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-85955 - Critical (9.9)

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a rem...

https://www.thehackerwire.com/vulnerability/CVE-2026-85955/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-9191 - Critical (9.6)

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not suff...

https://www.thehackerwire.com/vulnerability/CVE-2026-9191/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

A critical security flaw in the WordPress Bricksforge plugin is under active exploitation.

Patchstack reports the vulnerability allows remote code executio…

https://en.hacks.gr/energes-epitheseis-se-gnostes-istoselides-ekthetoyn-sovaro-provlima-sto-bricksforge/

#WordPress #Bricksforge #Patchstack

🟠 CVE-2026-78355 - High (8.7)

A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticat...

https://www.thehackerwire.com/vulnerability/CVE-2026-78355/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-93582 - Critical (9.4)

The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authen...

https://www.thehackerwire.com/vulnerability/CVE-2026-93582/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-78357 - Critical (9.1)

Previously issued authentication tokens are not immediately invalidated when an OTRS agent or cus...

https://www.thehackerwire.com/vulnerability/CVE-2026-78357/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-89234 - High (8.6)

The WP-Partner WordPress plugin through 1.2.1 does not sanitise and escape a parameter before usi...

https://www.thehackerwire.com/vulnerability/CVE-2026-89234/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-89232 - High (8.6)

The Recordbrowser WordPress plugin through 1.1.7 does not sanitise and escape a parameter before ...

https://www.thehackerwire.com/vulnerability/CVE-2026-89232/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-87690 - High (8.8)

The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a rela...

https://www.thehackerwire.com/vulnerability/CVE-2026-87690/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-96227 - High (8.8)

The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form-submis...

https://www.thehackerwire.com/vulnerability/CVE-2026-96227/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-108576 - Critical (10)

A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function pro...

https://www.thehackerwire.com/vulnerability/CVE-2026-108576/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack