🔴 CVE-2026-105638 - Critical (9.1)

Plane is an open-source project management tool. Prior to 1.4.0, Plane's magic-code email login u...

https://www.thehackerwire.com/vulnerability/CVE-2026-105638/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-58865 - High (7.5)

In multiple functions of PduParser.java, there is a possible persistent denial of service due to ...

https://www.thehackerwire.com/vulnerability/CVE-2026-58865/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-97303 - High (7.6)

Missing Authorization vulnerability in Apps Mav Scratch & Win – Giveaways and Contests scratch-...

https://www.thehackerwire.com/vulnerability/CVE-2026-97303/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-97283 - Critical (9.8)

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager a...

https://www.thehackerwire.com/vulnerability/CVE-2026-97283/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104979 - High (8.7)

Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create ...

https://www.thehackerwire.com/vulnerability/CVE-2026-104979/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104978 - High (8.2)

Plane is an open-source project management tool. Prior to 1.4.0, Plane's project invitation list ...

https://www.thehackerwire.com/vulnerability/CVE-2026-104978/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104977 - High (7.7)

Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and G...

https://www.thehackerwire.com/vulnerability/CVE-2026-104977/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-105628 - High (7.6)

Plane is an open-source project management tool. Prior to 1.4.0, Plane's OAuth avatar synchroniza...

https://www.thehackerwire.com/vulnerability/CVE-2026-105628/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-105631 - High (7.5)

Plane is an open-source project management tool. Prior to 1.4.0, WorkspaceFileAssetEndpoint.get a...

https://www.thehackerwire.com/vulnerability/CVE-2026-105631/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-105630 - High (8.7)

Plane is an open-source project management tool. Prior to 1.4.0, an authenticated low-privilege w...

https://www.thehackerwire.com/vulnerability/CVE-2026-105630/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104970 - High (8.1)

Plane is an open-source project management tool. From 0.13 until 1.4.0, InstanceAdminSignUpEndpoi...

https://www.thehackerwire.com/vulnerability/CVE-2026-104970/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-12171 - High (7.8)

auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-cha...

https://www.thehackerwire.com/vulnerability/CVE-2026-12171/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-105314 - High (7.5)

Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /ap...

https://www.thehackerwire.com/vulnerability/CVE-2026-105314/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104389 - High (8.5)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...

https://www.thehackerwire.com/vulnerability/CVE-2026-104389/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104408 - High (7.6)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...

https://www.thehackerwire.com/vulnerability/CVE-2026-104408/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-19184 - High (8.4)

The NXP GAU ADC driver (drivers/adc/adc_mcux_gau_adc.c) validated the caller-supplied sequence->b...

https://www.thehackerwire.com/vulnerability/CVE-2026-19184/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-79820 - Critical (9)

A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.

https://www.thehackerwire.com/vulnerability/CVE-2026-79820/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104891 - High (7.5)

mppx-condition-gate provides conditional free-access wrappers for mppx payment methods. Prior to ...

https://www.thehackerwire.com/vulnerability/CVE-2026-104891/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-77805 - High (7.9)

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the in...

https://www.thehackerwire.com/vulnerability/CVE-2026-77805/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-92931 - High (8.8)

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package ...

https://www.thehackerwire.com/vulnerability/CVE-2026-92931/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack