🟠 CVE-2026-108859 - High (7.5)

mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP...

https://www.thehackerwire.com/vulnerability/CVE-2026-108859/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108865 - High (8.2)

AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthent...

https://www.thehackerwire.com/vulnerability/CVE-2026-108865/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108863 - High (7.5)

Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthe...

https://www.thehackerwire.com/vulnerability/CVE-2026-108863/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108905 - High (7.5)

pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in T...

https://www.thehackerwire.com/vulnerability/CVE-2026-108905/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108902 - High (8.1)

pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the p...

https://www.thehackerwire.com/vulnerability/CVE-2026-108902/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-19736 - High (7.8)

The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller's byte ...

https://www.thehackerwire.com/vulnerability/CVE-2026-19736/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-19669 - High (7.8)

The user-mode syscall verifiers z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() i...

https://www.thehackerwire.com/vulnerability/CVE-2026-19669/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-19935 - High (7.5)

The Bluetooth LE host queues received L2CAP connection-oriented channel (CoC) data for deferred p...

https://www.thehackerwire.com/vulnerability/CVE-2026-19935/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

Wordfence vs Patchstack vs Sucuri: cuál conviene en 2026

¿Firewall, virtual patching o limpieza de malware? Mirá en qué se diferencian Wordfence vs Patchstack vs Sucuri y cuál te conviene en 2026 según tu sitio

#wordfence #patchstack #sucuri #virtualpatching #seguridadwordpress

🟠 CVE-2026-78530 - High (7.7)

Subscriber Arbitrary File Deletion in FoodBakery <= 4.6 versions.

https://www.thehackerwire.com/vulnerability/CVE-2026-78530/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-78529 - Critical (9.8)

Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.

https://www.thehackerwire.com/vulnerability/CVE-2026-78529/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-66569 - Critical (9.8)

Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.

https://www.thehackerwire.com/vulnerability/CVE-2026-66569/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-66568 - Critical (9.8)

Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.

https://www.thehackerwire.com/vulnerability/CVE-2026-66568/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-66567 - Critical (9.8)

Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.

https://www.thehackerwire.com/vulnerability/CVE-2026-66567/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-66566 - High (8.1)

Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.

https://www.thehackerwire.com/vulnerability/CVE-2026-66566/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-81797 - Critical (9.8)

Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= ...

https://www.thehackerwire.com/vulnerability/CVE-2026-81797/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-78535 - Critical (9.8)

Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.

https://www.thehackerwire.com/vulnerability/CVE-2026-78535/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-78533 - Critical (9.8)

Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.

https://www.thehackerwire.com/vulnerability/CVE-2026-78533/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-104801 - Critical (9.1)

The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to...

https://www.thehackerwire.com/vulnerability/CVE-2026-104801/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94538 - High (8.1)

The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions u...

https://www.thehackerwire.com/vulnerability/CVE-2026-94538/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack