🔴 CVE-2026-104286 - Critical (9.8)

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability i...

https://www.thehackerwire.com/vulnerability/CVE-2026-104286/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-54049 - High (8.7)

Sakai is a Collaboration and Learning Environment (CLE). From versions 23.0 to before 23.5, and v...

https://www.themasherwire.com/vulnerability/CVE-2026-54049/

#infosec #potatosecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-54049 - High (8.7)

Sakai is a Collaboration and Learning Environment (CLE). From versions 23.0 to before 23.5, and v...

https://www.thehackerwire.com/vulnerability/CVE-2026-54049/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104851 - High (8.8)

fsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9...

https://www.thehackerwire.com/vulnerability/CVE-2026-104851/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-91828 - High (7.5)

The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. WordPress plugin before 6.3.11 does n...

https://www.thehackerwire.com/vulnerability/CVE-2026-91828/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-80298 - High (8.8)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerabilit...

https://www.thehackerwire.com/vulnerability/CVE-2026-80298/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104410 - High (7.5)

SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish readers ...

https://www.thehackerwire.com/vulnerability/CVE-2026-104410/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104416 - High (7.5)

Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API...

https://www.thehackerwire.com/vulnerability/CVE-2026-104416/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104414 - High (8.1)

Ghost from 2.5.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows a...

https://www.thehackerwire.com/vulnerability/CVE-2026-104414/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104423 - High (7.5)

Zebra (zebrad) before 6.2.1 contains an asymmetric resource consumption vulnerability that allows...

https://www.thehackerwire.com/vulnerability/CVE-2026-104423/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104422 - High (7.5)

The block sync download path in Zebra (zebrad) before 6.3.0 reads a block's height from its unval...

https://www.thehackerwire.com/vulnerability/CVE-2026-104422/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104431 - High (7.5)

Zebra before 6.0.0 contains a denial of service vulnerability that allows unauthenticated peers t...

https://www.thehackerwire.com/vulnerability/CVE-2026-104431/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104430 - High (7.5)

Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy...

https://www.thehackerwire.com/vulnerability/CVE-2026-104430/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104445 - High (8.2)

YesWiki before 4.6.7 contains an authentication bypass vulnerability in the ActivityPub inbox tha...

https://www.thehackerwire.com/vulnerability/CVE-2026-104445/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104443 - High (8.1)

YesWiki before 4.6.7 contains an empty-filter scope bypass in the triples delete API that allows ...

https://www.thehackerwire.com/vulnerability/CVE-2026-104443/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-101104 - High (7.7)

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows a...

https://www.thehackerwire.com/vulnerability/CVE-2026-101104/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-103648 - Critical (9.1)

Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to c...

https://www.thehackerwire.com/vulnerability/CVE-2026-103648/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-104846 - Critical (9.8)

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify ...

https://www.thehackerwire.com/vulnerability/CVE-2026-104846/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104845 - High (7.5)

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify ...

https://www.thehackerwire.com/vulnerability/CVE-2026-104845/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104448 - High (8.1)

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the ajaxdeletepage ha...

https://www.thehackerwire.com/vulnerability/CVE-2026-104448/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack