🟠 CVE-2026-90678 - High (7.5)

An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploita...

https://www.thehackerwire.com/vulnerability/CVE-2026-90678/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-90668 - High (7.5)

The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP re...

https://www.thehackerwire.com/vulnerability/CVE-2026-90668/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-75800 - Critical (9.8)

The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of S...

https://www.thehackerwire.com/vulnerability/CVE-2026-75800/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-90651 - High (8.1)

Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0.0 does not verif...

https://www.thehackerwire.com/vulnerability/CVE-2026-90651/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-77006 - Critical (9.6)

The WebTotem Backups WordPress plugin through 1.0.1 does not validate a user-supplied file path, ...

https://www.thehackerwire.com/vulnerability/CVE-2026-77006/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-77005 - Critical (9.6)

The CODE MONKEYS PROPOSALS WordPress plugin through 1.0.1 does not validate a user-supplied file...

https://www.thehackerwire.com/vulnerability/CVE-2026-77005/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-81742 - High (8.8)

The BE REST Endpoints WordPress plugin through 1.0.0 does not perform any authorization check bef...

https://www.thehackerwire.com/vulnerability/CVE-2026-81742/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-81402 - Critical (9.8)

The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verif...

https://www.thehackerwire.com/vulnerability/CVE-2026-81402/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-80494 - High (8.6)

The Yogeta WP Cloud WordPress plugin through 1.0 does not validate a user-supplied file path befo...

https://www.thehackerwire.com/vulnerability/CVE-2026-80494/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-80491 - High (8.6)

The SAMO Forms WordPress plugin through 1.0.0 does not properly sanitise and escape user input be...

https://www.thehackerwire.com/vulnerability/CVE-2026-80491/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-84047 - High (8.6)

The Album Cover Finder WordPress plugin through 0.7.0 does not properly sanitize and escape a par...

https://www.thehackerwire.com/vulnerability/CVE-2026-84047/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-82845 - Critical (9.9)

The Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as me...

https://www.thehackerwire.com/vulnerability/CVE-2026-82845/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-90560 - High (8.2)

zstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdD...

https://www.thehackerwire.com/vulnerability/CVE-2026-90560/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-90559 - High (7.5)

snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompress(B...

https://www.thehackerwire.com/vulnerability/CVE-2026-90559/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-90558 - Critical (9.8)

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting r...

https://www.thehackerwire.com/vulnerability/CVE-2026-90558/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-90556 - High (7.8)

Freeciv versions before 3.2.6 contain a heap buffer overflow in worklist_load() when processing s...

https://www.thehackerwire.com/vulnerability/CVE-2026-90556/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-87888 - High (8)

The YayPricing WordPress plugin before 3.5.7 does not perform an authorization check on a REST r...

https://www.thehackerwire.com/vulnerability/CVE-2026-87888/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-87842 - High (7.5)

The Zonify WordPress plugin before 1.0.5 does not perform any capability or authentication check...

https://www.thehackerwire.com/vulnerability/CVE-2026-87842/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-87759 - High (8.8)

The Add User Autocomplete WordPress plugin before 1.2 does not perform any capability or nonce ch...

https://www.thehackerwire.com/vulnerability/CVE-2026-87759/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-85681 - Critical (9.8)

The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on o...

https://www.thehackerwire.com/vulnerability/CVE-2026-85681/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack