🔴 CVE-2026-102361 - Critical (9.1)

mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd end...

https://www.thehackerwire.com/vulnerability/CVE-2026-102361/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-101354 - Critical (9.6)

A security flaw has been discovered in FAST FAC1203R 20200116_2.0.4. The affected element is the ...

https://www.thehackerwire.com/vulnerability/CVE-2026-101354/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-102422 - High (8.1)

shell-quote's `quote()` function emits a `{ comment }` token as `#` followed by its text, which c...

https://www.thehackerwire.com/vulnerability/CVE-2026-102422/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-101878 - High (7.5)

Bitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId parameter of the User_ReadBySs...

https://www.thehackerwire.com/vulnerability/CVE-2026-101878/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-101860 - High (8.8)

A vulnerability was found in RaspAP raspap-webgui up to 3.5.5. Affected by this issue is the func...

https://www.thehackerwire.com/vulnerability/CVE-2026-101860/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-102240 - Critical (10)

A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of ...

https://www.thehackerwire.com/vulnerability/CVE-2026-102240/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-101081 - Critical (9.1)

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the funct...

https://www.thehackerwire.com/vulnerability/CVE-2026-101081/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-101894 - Critical (9.1)

The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default dec...

https://www.thehackerwire.com/vulnerability/CVE-2026-101894/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-54160 - High (8.2)

Network UPS Tools is a collection of programs which provide a common interface for monitoring and...

https://www.thehackerwire.com/vulnerability/CVE-2026-54160/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100627 - High (8.1)

Capgo (Cap-go/capgo.app) server backend Supabase functions contain an incorrect authorization fla...

https://www.thehackerwire.com/vulnerability/CVE-2026-100627/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100623 - High (8.8)

Capgo (capgo.app) exposes the legacy membership table public.org_users directly through Supabase ...

https://www.thehackerwire.com/vulnerability/CVE-2026-100623/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100622 - High (7.5)

capgo.app through 12.129.0 fails to verify deletion status when serving cached bundle artifacts f...

https://www.thehackerwire.com/vulnerability/CVE-2026-100622/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-101002 - Critical (9.9)

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the functi...

https://www.thehackerwire.com/vulnerability/CVE-2026-101002/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-101001 - Critical (10)

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function e...

https://www.themasherwire.com/vulnerability/CVE-2026-101001/

#infosec #potatosecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100908 - High (7.5)

A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the co...

https://www.thehackerwire.com/vulnerability/CVE-2026-100908/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-101001 - Critical (10)

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function e...

https://www.thehackerwire.com/vulnerability/CVE-2026-101001/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-101000 - Critical (10)

A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affects the function u...

https://www.thehackerwire.com/vulnerability/CVE-2026-101000/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100631 - High (7.5)

Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9...

https://www.thehackerwire.com/vulnerability/CVE-2026-100631/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100639 - High (8.8)

SiYuan v3.8.3 fails to HTML-escape the data-subtype attribute when generating gutter-button marku...

https://www.thehackerwire.com/vulnerability/CVE-2026-100639/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100638 - High (7.6)

SiYuan versions before v3.8.4 contain a path traversal vulnerability in the setNotebookIcon endpo...

https://www.thehackerwire.com/vulnerability/CVE-2026-100638/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack