🟠 CVE-2026-107805 - High (7.5)

Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signa...

https://www.thehackerwire.com/vulnerability/CVE-2026-107805/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108101 - High (7.5)

HortusFox (hortusfox-web) through 6.3 contains an unrestricted file upload vulnerability in Plant...

https://www.thehackerwire.com/vulnerability/CVE-2026-108101/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-108107 - Critical (9.8)

PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radiu...

https://www.thehackerwire.com/vulnerability/CVE-2026-108107/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108106 - High (7.5)

Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that all...

https://www.thehackerwire.com/vulnerability/CVE-2026-108106/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-108109 - Critical (9.1)

PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password ...

https://www.thehackerwire.com/vulnerability/CVE-2026-108109/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-28745 - High (7.5)

Usernames and passwords, including the default credentials, are stored in the configuration file ...

https://www.thehackerwire.com/vulnerability/CVE-2026-28745/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-15340 - Critical (9.8)

lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.

https://www.thehackerwire.com/vulnerability/CVE-2026-15340/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-39460 - High (8.1)

Usernames and passwords, including the default factory credentials, are stored in plaintext withi...

https://www.thehackerwire.com/vulnerability/CVE-2026-39460/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-39453 - High (8.3)

Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be...

https://www.thehackerwire.com/vulnerability/CVE-2026-39453/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-33367 - High (8.1)

SNMP can be used to perform administrative actions such as retrieving configuration files, modify...

https://www.thehackerwire.com/vulnerability/CVE-2026-33367/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-75346 - High (7.5)

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit...

https://www.thehackerwire.com/vulnerability/CVE-2026-75346/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-75351 - High (7.5)

OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP Forward...

https://www.thehackerwire.com/vulnerability/CVE-2026-75351/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-108264 - Critical (9.1)

Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other m...

https://www.thehackerwire.com/vulnerability/CVE-2026-108264/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-108263 - Critical (9.9)

Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, ...

https://www.thehackerwire.com/vulnerability/CVE-2026-108263/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-108261 - Critical (9.3)

Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, th...

https://www.thehackerwire.com/vulnerability/CVE-2026-108261/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108260 - High (7.6)

Tina is a headless content management system. Prior to 0.2.1, the tina-markdown element in packag...

https://www.thehackerwire.com/vulnerability/CVE-2026-108260/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108259 - High (8.2)

Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch value...

https://www.thehackerwire.com/vulnerability/CVE-2026-108259/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-62376 - High (8.1)

Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store pas...

https://www.thehackerwire.com/vulnerability/CVE-2026-62376/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-57458 - High (8.1)

Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API to...

https://www.thehackerwire.com/vulnerability/CVE-2026-57458/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-92705 - High (7.8)

Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically ...

https://www.thehackerwire.com/vulnerability/CVE-2026-92705/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack