🔴 CVE-2026-100716 - Critical (9.9)

Froxlor is a server administration panel. In versions 2.3.10 and earlier, the customer data-expor...

https://www.thehackerwire.com/vulnerability/CVE-2026-100716/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-100715 - Critical (9.6)

Froxlor through 2.3.10 is vulnerable to arbitrary file deletion via symlink following in the FTP ...

https://www.thehackerwire.com/vulnerability/CVE-2026-100715/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-100714 - Critical (9.1)

Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting: un...

https://www.thehackerwire.com/vulnerability/CVE-2026-100714/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100713 - High (7.8)

Froxlor 2.3.10 and earlier contain a time-of-check time-of-use (TOCTOU) race condition in the SSH...

https://www.thehackerwire.com/vulnerability/CVE-2026-100713/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100720 - High (8.7)

Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer (the l...

https://www.thehackerwire.com/vulnerability/CVE-2026-100720/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-77203 - High (8.8)

The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Esc...

https://www.thehackerwire.com/vulnerability/CVE-2026-77203/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-85984 - Critical (9.8)

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable t...

https://www.thehackerwire.com/vulnerability/CVE-2026-85984/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-82901 - Critical (9.8)

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload d...

https://www.thehackerwire.com/vulnerability/CVE-2026-82901/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-92161 - Critical (9.8)

FriendsOfFlarum OAuth allows users to log in to Flarum with GitHub, Twitter, Facebook, and other ...

https://www.thehackerwire.com/vulnerability/CVE-2026-92161/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-91837 - High (7.8)

A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unpr...

https://www.thehackerwire.com/vulnerability/CVE-2026-91837/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-89032 - High (7.7)

BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the seman...

https://www.thehackerwire.com/vulnerability/CVE-2026-89032/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94445 - High (8.8)

A malicious txtar could escape the intended execution context and force arbitrary writes to the p...

https://www.thehackerwire.com/vulnerability/CVE-2026-94445/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-91841 - High (7.8)

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged us...

https://www.thehackerwire.com/vulnerability/CVE-2026-91841/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-91840 - High (7.8)

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to e...

https://www.thehackerwire.com/vulnerability/CVE-2026-91840/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-91839 - High (7.8)

A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The nm...

https://www.thehackerwire.com/vulnerability/CVE-2026-91839/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-91838 - High (7.8)

A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivil...

https://www.thehackerwire.com/vulnerability/CVE-2026-91838/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-97064 - Critical (9.1)

X-SpringBoot through 6.0 ships with a hardcoded static master login verification code 172839 enab...

https://www.thehackerwire.com/vulnerability/CVE-2026-97064/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-97063 - Critical (9.1)

X-SpringBoot through 6.0 returns login verification codes in HTTP responses from unauthenticated ...

https://www.thehackerwire.com/vulnerability/CVE-2026-97063/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100208 - High (7.5)

Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to exe...

https://www.thehackerwire.com/vulnerability/CVE-2026-100208/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100532 - High (8.1)

@openclaw/whatsapp (npm) before 2026.8.1 exposes the WhatsApp login tool through the generic chan...

https://www.thehackerwire.com/vulnerability/CVE-2026-100532/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack