@thehackerwire.bsky.social🟠 CVE-2026-100685 - High (7.7)
Budibase before 3.45.0 fails to properly scope the GET /api/chat-links endpoint by workspace, all...
https://www.thehackerwire.com/vulnerability/CVE-2026-100685/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100684 - High (8.1)
Budibase versions 3.41.0 before 3.45.0 contain an authentication bypass in the OIDC/SSO login pat...
https://www.thehackerwire.com/vulnerability/CVE-2026-100684/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100683 - High (8)
Budibase (@budibase/server) before 3.45.0 builds MySQL and MSSQL column-rename DDL in packages/ba...
https://www.thehackerwire.com/vulnerability/CVE-2026-100683/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100682 - High (8.8)
Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon uplo...
https://www.thehackerwire.com/vulnerability/CVE-2026-100682/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🔴 CVE-2026-100740 - Critical (9.9)
A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_pa...
https://www.thehackerwire.com/vulnerability/CVE-2026-100740/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100680 - High (8.1)
Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI...
https://www.thehackerwire.com/vulnerability/CVE-2026-100680/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100692 - High (7.5)
Hugo is a static site generator. In versions after v0.123.0 and before v0.166.0, Hugo's symlink c...
https://www.thehackerwire.com/vulnerability/CVE-2026-100692/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100690 - High (7.5)
Hugo versions from v0.161.0 through v0.165.0 run Node.js tools (css.PostCSS, css.TailwindCSS, js....
https://www.thehackerwire.com/vulnerability/CVE-2026-100690/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100686 - High (8.1)
Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/gr...
https://www.thehackerwire.com/vulnerability/CVE-2026-100686/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100697 - High (8.6)
Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin (plugins/drivers/clickhou...
https://www.thehackerwire.com/vulnerability/CVE-2026-100697/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100693 - High (8.4)
Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive validation flaw in the secur...
https://www.thehackerwire.com/vulnerability/CVE-2026-100693/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100707 - High (7.7)
Kyverno before 1.19.1 contains a namespace isolation bypass in the apiCall context entry of names...
https://www.thehackerwire.com/vulnerability/CVE-2026-100707/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🔴 CVE-2026-100706 - Critical (9.9)
kyverno before 1.19.1 fails to properly validate URL-encoded path segments in Policy apiCall urlP...
https://www.thehackerwire.com/vulnerability/CVE-2026-100706/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100705 - High (7.6)
Kyverno before 1.19.1 is vulnerable to server-side request forgery. The default egress blocklist ...
https://www.thehackerwire.com/vulnerability/CVE-2026-100705/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100704 - High (7.7)
Kyverno is a policy engine for Kubernetes. In versions 1.14.0 through 1.19.0, the ImageValidating...
https://www.thehackerwire.com/vulnerability/CVE-2026-100704/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100703 - High (7.7)
Kyverno 1.16.0 through 1.19.0 registers the globalcontext.Lib CEL library in its policy environme...
https://www.thehackerwire.com/vulnerability/CVE-2026-100703/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100700 - High (7.5)
nodemailer before 10.0.6 contains a denial of service vulnerability in the addressparser free-tex...
https://www.thehackerwire.com/vulnerability/CVE-2026-100700/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100711 - High (7.5)
froxlor versions before 2.3.12 fail to invalidate existing panel sessions, API keys, and 2FA trus...
https://www.thehackerwire.com/vulnerability/CVE-2026-100711/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100709 - High (7.5)
Froxlor through 2.3.10 stores only a numeric user ID in remembered-2FA tokens (panel_2fa_tokens) ...
https://www.thehackerwire.com/vulnerability/CVE-2026-100709/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🔴 CVE-2026-100717 - Critical (9.9)
froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl r...
https://www.thehackerwire.com/vulnerability/CVE-2026-100717/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
