🔴 CVE-2026-59178 - Critical (9.8)

ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior t...

https://www.thehackerwire.com/vulnerability/CVE-2026-59178/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-89023 - High (8.6)

ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization v...

https://www.thehackerwire.com/vulnerability/CVE-2026-89023/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-91079 - High (8.5)

Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print s...

https://www.thehackerwire.com/vulnerability/CVE-2026-91079/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-90946 - High (7.5)

DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthe...

https://www.thehackerwire.com/vulnerability/CVE-2026-90946/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-90945 - Critical (9.8)

Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be o...

https://www.thehackerwire.com/vulnerability/CVE-2026-90945/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-57130 - High (8.1)

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, src/praisonai-agents/pr...

https://www.thehackerwire.com/vulnerability/CVE-2026-57130/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-57129 - High (7.5)

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, MentionsParser._process...

https://www.thehackerwire.com/vulnerability/CVE-2026-57129/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-57126 - High (8.5)

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, SpiderTools._validate_u...

https://www.thehackerwire.com/vulnerability/CVE-2026-57126/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-89712 - Critical (9.8)

In the Linux kernel, the following vulnerability has been resolved:

NFSD: restart ssc_expire_umo...

https://www.thehackerwire.com/vulnerability/CVE-2026-89712/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-89711 - High (8.2)

In the Linux kernel, the following vulnerability has been resolved:

NFSD: remove flawed WARN_ON_...

https://www.thehackerwire.com/vulnerability/CVE-2026-89711/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-89709 - High (8.1)

In the Linux kernel, the following vulnerability has been resolved:

lockd, nfsd: RCU-protect nlm...

https://www.thehackerwire.com/vulnerability/CVE-2026-89709/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-89708 - Critical (9.8)

In the Linux kernel, the following vulnerability has been resolved:

nfsd: RCU-protect cl_cb_sess...

https://www.thehackerwire.com/vulnerability/CVE-2026-89708/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-89707 - High (7.5)

In the Linux kernel, the following vulnerability has been resolved:

nfsd: release path refs on f...

https://www.thehackerwire.com/vulnerability/CVE-2026-89707/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-81648 - Critical (10)

The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization ch...

https://www.thehackerwire.com/vulnerability/CVE-2026-81648/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-90680 - Critical (9.9)

A security flaw has been discovered in D-Link DIR-823G 1.0.2B05_20181207. The impacted element is...

https://www.thehackerwire.com/vulnerability/CVE-2026-90680/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-74933 - High (8.8)

The GenieWords WordPress plugin from 1.5.27 to 1.5.34 does not have authorisation checks on some ...

https://www.thehackerwire.com/vulnerability/CVE-2026-74933/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-37008 - High (8.1)

CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abst...

https://www.thehackerwire.com/vulnerability/CVE-2026-37008/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-88802 - High (7.5)

The MDJM Event Management WordPress plugin before 1.7.8.5 and the Mobile Events Manager WordPress...

https://www.thehackerwire.com/vulnerability/CVE-2026-88802/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-88793 - High (8.8)

The YouTube Embed WordPress plugin from 10.0 to 10.3 does not perform any authorisation check on ...

https://www.thehackerwire.com/vulnerability/CVE-2026-88793/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-90607 - Critical (9.9)

A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function form...

https://www.thehackerwire.com/vulnerability/CVE-2026-90607/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack