🟠 CVE-2026-104988 - High (8.1)

A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open whe...

https://www.thehackerwire.com/vulnerability/CVE-2026-104988/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-39718 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross Sit...

https://www.thehackerwire.com/vulnerability/CVE-2026-39718/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-82039 - High (8.8)

UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQuer...

https://www.thehackerwire.com/vulnerability/CVE-2026-82039/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-82044 - High (7.7)

UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenti...

https://www.thehackerwire.com/vulnerability/CVE-2026-82044/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-82042 - Critical (9.8)

UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attack...

https://www.thehackerwire.com/vulnerability/CVE-2026-82042/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-82041 - Critical (9.9)

UTMStack before 11.2.16 contains a missing authorization vulnerability in UTMIncidentCommandWebso...

https://www.thehackerwire.com/vulnerability/CVE-2026-82041/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-97363 - High (7.5)

The WebSocket Application Programming Interface lacks restrictions on the number of authenticatio...

https://www.thehackerwire.com/vulnerability/CVE-2026-97363/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-95102 - Critical (9.4)

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate char...

https://www.thehackerwire.com/vulnerability/CVE-2026-95102/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94593 - High (7.8)

Armatura One's backup and restore routine records the full database connection command, including...

https://www.thehackerwire.com/vulnerability/CVE-2026-94593/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94592 - High (8.4)

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the da...

https://www.thehackerwire.com/vulnerability/CVE-2026-94592/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94591 - High (8.4)

Armatura One stores database and message-broker credentials in an install configuration file, enc...

https://www.thehackerwire.com/vulnerability/CVE-2026-94591/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-84411 - Critical (9.8)

The web management service in affected RouterOS versions contains an integer underflow in its HTT...

https://www.thehackerwire.com/vulnerability/CVE-2026-84411/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104433 - High (7.5)

Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readSt...

https://www.thehackerwire.com/vulnerability/CVE-2026-104433/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-105080 - Critical (9.9)

In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes ...

https://www.thehackerwire.com/vulnerability/CVE-2026-105080/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-93428 - High (7.5)

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction ...

https://www.thehackerwire.com/vulnerability/CVE-2026-93428/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-92536 - High (8.8)

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restric...

https://www.thehackerwire.com/vulnerability/CVE-2026-92536/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-97644 - High (8.8)

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable ...

https://www.thehackerwire.com/vulnerability/CVE-2026-97644/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-101161 - High (7.5)

The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from ...

https://www.thehackerwire.com/vulnerability/CVE-2026-101161/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-101160 - High (7.5)

The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review ra...

https://www.thehackerwire.com/vulnerability/CVE-2026-101160/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-101159 - High (7.5)

The WP Ultimate Review WordPress plugin before 2.4.4 does not properly sanitise and escape review...

https://www.thehackerwire.com/vulnerability/CVE-2026-101159/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack