Protect Web Society

CVE-2026-56567 - HCL iControl is affected by multiple security vulnerabilities.

Maloy Roy Orko July 31, 2026

CVE ID : CVE-2026-56567 Published : July 31, 2026, 4:17 p.m. | 2 hours, 11 minutes ago …

CVE-2026-15974 - CVE-2026-15974

Maloy Roy Orko July 30, 2026

CVE ID : CVE-2026-15974 Published : July 30, 2026, 7:17 p.m. | 1 hour, 10 minutes ago …

CVE-2026-20316 - Cisco Secure Firewall Management Center Software Static Credential Vulnerability

Maloy Roy Orko July 29, 2026

CVE ID : CVE-2026-20316 Published : July 29, 2026, 5:16 p.m. | 1 hour, 10 minutes ago …

CVE-2026-54635 - pytonapi has a Webhook Custom Path Authentication Bypass

Maloy Roy Orko July 28, 2026

CVE ID : CVE-2026-54635 Published : July 28, 2026, 5:09 p.m. | 1 hour, 17 minutes ago …

CVE-2026-66390 - Apache Wicket: crafted Link URL strings can break out of the JavaScript sequence

Maloy Roy Orko July 27, 2026

CVE ID : CVE-2026-66390 Published : July 27, 2026, 5:16 p.m. | 1 hour, 9 minutes ago …

CVE-2026-17500 - ggml-org llama.cpp json-schema-to-grammar.cpp _visit_pattern null pointer dereference

Maloy Roy Orko July 26, 2026

CVE ID : CVE-2026-17500 Published : July 27, 2026, 1:16 a.m. | 1 hour, 9 minutes ago …

CVE-2026-57978 - Microsoft Edge (Chromium-based) Spoofing Vulnerability

Maloy Roy Orko July 26, 2026

CVE ID : CVE-2026-57978 Published : July 26, 2026, 5:17 p.m. | 1 hour, 8 minutes ago …

CVE-2026-17434 - nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization

Maloy Roy Orko July 25, 2026

CVE ID : CVE-2026-17434 Published : July 26, 2026, 3 a.m. | 1 hour, 25 minutes ago De…

CVE-2026-17432 - NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access control

Maloy Roy Orko July 25, 2026

CVE ID : CVE-2026-17432 Published : July 26, 2026, 1:16 a.m. | 1 hour, 8 minutes ago …

CVE-2026-65623 - Quadratic CPU blow-up reassembling fragmented WebSocket messages in Bandit

Maloy Roy Orko July 24, 2026

CVE ID : CVE-2026-65623 Published : July 24, 2026, 5:17 p.m. | 1 hour, 6 minutes ago …

CVE-2026-11804 - Program Module Vulnerability

Maloy Roy Orko July 23, 2026

CVE ID : CVE-2026-11804 Published : July 23, 2026, 3:07 p.m. | 1 hour, 16 minutes ago …

CVE-2026-16607 - Authenticated local root privilege escalation vulnerability in openFT for Linux and Oracle Solaris

Maloy Roy Orko July 22, 2026

CVE ID : CVE-2026-16607 Published : July 22, 2026, 3:07 p.m. | 1 hour, 15 minutes ago …

CVE-2026-47398 - PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334

Maloy Roy Orko July 21, 2026

CVE ID : CVE-2026-47398 Published : July 21, 2026, 5:17 p.m. | 1 hour, 5 minutes ago …

CVE-2026-54051 - Network-AI has an an OS Command Injection issue

Maloy Roy Orko July 20, 2026

CVE ID : CVE-2026-54051 Published : July 20, 2026, 5:17 p.m. | 1 hour, 4 minutes ago …

CVE-2026-44359 - Meshtastic GitHub repo vulnerable to Arbitrary Code Execution via pull_request_target Fork Checkout in CI Workflow

Maloy Roy Orko July 19, 2026

CVE ID : CVE-2026-44359 Published : July 19, 2026, 11:06 p.m. | 1 hour, 15 minutes ago …

CVE-2026-12484 - Unsafe Deserialization in keras.layers.TorchModuleWrapper.from_config

Maloy Roy Orko July 19, 2026

CVE ID : CVE-2026-12484 Published : July 19, 2026, 7:47 p.m. | 34 minutes ago Descrip…

CVE-2026-16150 - RobinHerbots Inputmask Internal Deep Merge Helper extend.js extendAliases prototype pollution

Maloy Roy Orko July 18, 2026

CVE ID : CVE-2026-16150 Published : July 18, 2026, 7:15 p.m. | 1 hour, 5 minutes ago …

CVE-2026-16130 - nearai ironclaw write_file path_utils.rs validate_path link following

Maloy Roy Orko July 18, 2026

CVE ID : CVE-2026-16130 Published : July 18, 2026, 5:15 p.m. | 1 hour, 5 minutes ago …

CVE-2026-12705 - Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool

Maloy Roy Orko July 17, 2026

CVE ID : CVE-2026-12705 Published : July 17, 2026, 3:16 p.m. | 1 hour, 2 minutes ago …

CVE-2026-12715 - Missing Authorization in Firebase Studio allows Cross-Tenant Source Code Theft

Maloy Roy Orko July 17, 2026

CVE ID : CVE-2026-12715 Published : July 17, 2026, 3:09 p.m. | 1 hour, 9 minutes ago …

CVE-2026-14871 - osTicket v1.18.3 - v1.17.7 - BOLA/IDOR in ticket field viewing allows cross-department data disclosure

Maloy Roy Orko July 17, 2026

CVE ID : CVE-2026-14871 Published : July 17, 2026, 2:55 p.m. | 1 hour, 23 minutes ago …

CVE-2026-45367 - HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint

Maloy Roy Orko July 16, 2026

CVE ID : CVE-2026-45367 Published : July 16, 2026, 5:16 p.m. | 1 hour, 1 minute ago D…

CVE-2026-55723 - NGINX Ingress Controller vulnerability

Maloy Roy Orko July 15, 2026

CVE ID : CVE-2026-55723 Published : July 15, 2026, 3:16 p.m. | 1 hour ago Description…

CVE-2026-54562 - Cloudreve: Non-admin remote download users can SSRF loopback/internal services and read imported responses

Maloy Roy Orko July 15, 2026

CVE ID : CVE-2026-54562 Published : July 15, 2026, 3:16 p.m. | 1 hour ago Description…

CVE-2026-11403 - Nexus Repository Manager - Insufficient Entropy in Format-Specific API Key Generation

Maloy Roy Orko July 14, 2026

CVE ID : CVE-2026-11403 Published : July 14, 2026, 3:28 p.m. | 48 minutes ago Descrip…

CVE-2026-11944 - openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download

Maloy Roy Orko July 14, 2026

CVE ID : CVE-2026-11944 Published : July 14, 2026, 3:23 p.m. | 52 minutes ago Descrip…

CVE-2026-13221 - Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk

Maloy Roy Orko July 13, 2026

CVE ID : CVE-2026-13221 Published : July 13, 2026, 5:16 p.m. | 58 minutes ago Descrip…

CVE-2026-10663 - Use-after-free / double-free of the root USB device in the experimental USB host stack

Maloy Roy Orko July 12, 2026

CVE ID : CVE-2026-10663 Published : July 12, 2026, 5:16 p.m. | 58 minutes ago Descrip…

CVE-2026-15470 - Eleveo Call Recording Software group.jsp improper authorization

Maloy Roy Orko July 11, 2026

CVE ID : CVE-2026-15470 Published : July 12, 2026, 12:16 a.m. | 1 hour, 57 minutes ago …

CVE-2026-58281 - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Maloy Roy Orko July 11, 2026

CVE ID : CVE-2026-58281 Published : July 11, 2026, 9:16 p.m. | 56 minutes ago Descrip…

CVE-2026-10660 - Shared reassembly buffer in Bluetooth BAP Broadcast Assistant enables cross-connection memory corruption

Maloy Roy Orko July 11, 2026

CVE ID : CVE-2026-10660 Published : July 11, 2026, 5:16 p.m. | 56 minutes ago Descrip…

CVE-2026-55780 - NanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry Size

Maloy Roy Orko July 10, 2026

CVE ID : CVE-2026-55780 Published : July 10, 2026, 5:16 p.m. | 53 minutes ago Descrip…

CVE-2026-59218 - Open WebUI: Account enumeration via observable login timing discrepancy

Maloy Roy Orko July 09, 2026

CVE ID : CVE-2026-59218 Published : July 9, 2026, 5:17 p.m. | 52 minutes ago Descript…

CVE-2026-39822 - Root escape via symlink plus trailing slash in os

Maloy Roy Orko July 08, 2026

CVE ID : CVE-2026-39822 Published : July 8, 2026, 5:17 p.m. | 29 minutes ago Descript…

CVE-2026-14935 - Gstreamer: gstreamer: webrtcbin accepts remote sdp without a=fingerprint due to inverted presence check

Maloy Roy Orko July 07, 2026

CVE ID : CVE-2026-14935 Published : July 7, 2026, 4:16 p.m. | 1 hour, 29 minutes ago …

CVE-2026-48614 - Plesk XML API Improper Authorization Privilege Escalation

Maloy Roy Orko July 06, 2026

CVE ID : CVE-2026-48614 Published : July 6, 2026, 4:46 p.m. | 59 minutes ago Descript…

CVE-2026-14761 - radareorg radare2 str.c r_str_append integer overflow

Maloy Roy Orko July 05, 2026

CVE ID : CVE-2026-14761 Published : July 5, 2026, 4:19 p.m. | 1 hour, 25 minutes ago …

CVE-2026-12195 - myVesta is affected by an authenticated remote cod

Maloy Roy Orko July 04, 2026

CVE ID : CVE-2026-12195 Published : July 4, 2026, 12:16 p.m. | 5 hours, 27 minutes ago …

CVE-2026-14612 - Freeipa: ipa: idm: freeipa: off-by-one buffer overflows in ipa-otpd oauth2.c during oauth2 device authorization

Maloy Roy Orko July 03, 2026

CVE ID : CVE-2026-14612 Published : July 3, 2026, 3:11 p.m. | 2 hours, 32 minutes ago …

CVE-2026-50281 - Craft CMS: Mass assignment via id in newAttributes during bulk duplicate overwrites existing elements

Maloy Roy Orko July 02, 2026

CVE ID : CVE-2026-50281 Published : July 2, 2026, 4:02 p.m. | 1 hour, 41 minutes ago …

CVE-2026-44935 - Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer

Maloy Roy Orko July 02, 2026

CVE ID : CVE-2026-44935 Published : July 2, 2026, 4 p.m. | 1 hour, 43 minutes ago Des…

CVE-2026-58455 - Dockwatch 0.6.567 Unauthenticated OS Command Injection via ajax/compose.php

Maloy Roy Orko July 02, 2026

CVE ID : CVE-2026-58455 Published : July 2, 2026, 3:12 p.m. | 2 hours, 31 minutes ago …

CVE-2026-34114 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in translate_text.php

Maloy Roy Orko July 01, 2026

CVE ID : CVE-2026-34114 Published : July 1, 2026, 4:21 p.m. | 1 hour, 20 minutes ago …

CVE-2026-56149 - Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Maloy Roy Orko July 01, 2026

CVE ID : CVE-2026-56149 Published : July 1, 2026, 4:21 p.m. | 1 hour, 21 minutes ago …

CVE-2026-34113 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speech_text.php

Maloy Roy Orko July 01, 2026

CVE ID : CVE-2026-34113 Published : July 1, 2026, 4:21 p.m. | 1 hour, 21 minutes ago …

CVE-2026-34112 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac.php

Maloy Roy Orko July 01, 2026

CVE ID : CVE-2026-34112 Published : July 1, 2026, 4:20 p.m. | 1 hour, 21 minutes ago …