🟠 CVE-2026-87839 - High (7.5)

The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not valid...

https://www.thehackerwire.com/vulnerability/CVE-2026-87839/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94036 - High (8.8)

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402....

https://www.thehackerwire.com/vulnerability/CVE-2026-94036/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-87067 - High (8.5)

The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be ins...

https://www.thehackerwire.com/vulnerability/CVE-2026-87067/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-85017 - High (7.5)

The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability...

https://www.thehackerwire.com/vulnerability/CVE-2026-85017/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-82842 - High (8.1)

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion f...

https://www.thehackerwire.com/vulnerability/CVE-2026-82842/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94104 - High (8.8)

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi(...

https://www.thehackerwire.com/vulnerability/CVE-2026-94104/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-94003 - Critical (10)

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_...

https://www.thehackerwire.com/vulnerability/CVE-2026-94003/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94109 - High (8.8)

openEQUELLA versions before 2026.1.0 contain a remote code execution vulnerability in FreeMarker ...

https://www.thehackerwire.com/vulnerability/CVE-2026-94109/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94107 - High (8.1)

NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten...

https://www.thehackerwire.com/vulnerability/CVE-2026-94107/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94106 - High (8.8)

getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fa...

https://www.thehackerwire.com/vulnerability/CVE-2026-94106/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-90817 - Critical (9.8)

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routin...

https://www.thehackerwire.com/vulnerability/CVE-2026-90817/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-93962 - High (8.3)

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted eleme...

https://www.themasherwire.com/vulnerability/CVE-2026-93962/

#infosec #potatosecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-86553 - High (8.5)

SmartLife app dynamically generates fresh SmartLife application authentication parameters inside ...

https://www.thehackerwire.com/vulnerability/CVE-2026-86553/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-93962 - High (8.3)

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted eleme...

https://www.thehackerwire.com/vulnerability/CVE-2026-93962/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-80441 - Critical (9.8)

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection ...

https://www.thehackerwire.com/vulnerability/CVE-2026-80441/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-82887 - High (8.8)

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrar...

https://www.thehackerwire.com/vulnerability/CVE-2026-82887/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-82885 - High (8.8)

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated pr...

https://www.thehackerwire.com/vulnerability/CVE-2026-82885/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-94084 - Critical (9.4)

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected b...

https://www.thehackerwire.com/vulnerability/CVE-2026-94084/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-94083 - Critical (9.4)

Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup c...

https://www.thehackerwire.com/vulnerability/CVE-2026-94083/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-93958 - Critical (9.1)

A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function s...

https://www.thehackerwire.com/vulnerability/CVE-2026-93958/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack