🟠 CVE-2026-80217 - High (8.8)

Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can ...

https://www.thehackerwire.com/vulnerability/CVE-2026-80217/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-77853 - High (8.8)

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue ...

https://www.thehackerwire.com/vulnerability/CVE-2026-77853/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-91003 - Critical (9.1)

A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzgl_asp of t...

https://www.thehackerwire.com/vulnerability/CVE-2026-91003/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-75983 - High (7.5)

The Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress...

https://www.thehackerwire.com/vulnerability/CVE-2026-75983/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-90711 - Critical (9.1)

proxy-addr is a Node.js module that determines a request's client address behind trusted reverse ...

https://www.thehackerwire.com/vulnerability/CVE-2026-90711/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-91771 - High (8.8)

Weights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the...

https://www.thehackerwire.com/vulnerability/CVE-2026-91771/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-91200 - High (8.8)

DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-...

https://www.thehackerwire.com/vulnerability/CVE-2026-91200/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-53713 - Critical (9.1)

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-ba...

https://www.thehackerwire.com/vulnerability/CVE-2026-53713/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-12944 - Critical (9.6)

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with r...

https://www.thehackerwire.com/vulnerability/CVE-2026-12944/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-91144 - High (7.5)

ZFile through 5.0.5 fails to validate requested file paths against a share link's allowed entries...

https://www.thehackerwire.com/vulnerability/CVE-2026-91144/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-65838 - High (8.2)

Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.27.35, the opaAut...

https://www.thehackerwire.com/vulnerability/CVE-2026-65838/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-73496 - High (7.7)

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jir...

https://www.thehackerwire.com/vulnerability/CVE-2026-73496/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-82028 - High (8.8)

Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgr...

https://www.thehackerwire.com/vulnerability/CVE-2026-82028/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-91080 - High (7.5)

webhook through 2.8.3 reads the entire request body into memory before evaluating trigger rules, ...

https://www.thehackerwire.com/vulnerability/CVE-2026-91080/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-59178 - Critical (9.8)

ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior t...

https://www.thehackerwire.com/vulnerability/CVE-2026-59178/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-89023 - High (8.6)

ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization v...

https://www.thehackerwire.com/vulnerability/CVE-2026-89023/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-91079 - High (8.5)

Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print s...

https://www.thehackerwire.com/vulnerability/CVE-2026-91079/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-90946 - High (7.5)

DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthe...

https://www.thehackerwire.com/vulnerability/CVE-2026-90946/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-90945 - Critical (9.8)

Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be o...

https://www.thehackerwire.com/vulnerability/CVE-2026-90945/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-57130 - High (8.1)

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, src/praisonai-agents/pr...

https://www.thehackerwire.com/vulnerability/CVE-2026-57130/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack