Protect Web Society

CVE-2026-5680 - Undertow-core: undertow: denial of service via websocket permessage-deflate processing

Maloy Roy Orko August 27, 2026

CVE ID : CVE-2026-5680 Published : Aug. 27, 2026, 4:25 p.m. | 48 minutes ago Descript…

CVE-2026-48549 - Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie

Maloy Roy Orko August 26, 2026

CVE ID : CVE-2026-48549 Published : Aug. 26, 2026, 4:16 p.m. | 56 minutes ago Descrip…

CVE-2026-48548 - Nagios Core CSRF via cmd.cgi

Maloy Roy Orko August 26, 2026

CVE ID : CVE-2026-48548 Published : Aug. 26, 2026, 4:16 p.m. | 56 minutes ago Descrip…

CVE-2026-79785 - X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads

Maloy Roy Orko August 25, 2026

CVE ID : CVE-2026-79785 Published : Aug. 25, 2026, 4:17 p.m. | 55 minutes ago Descrip…

CVE-2026-66907 - Apache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result

Maloy Roy Orko August 24, 2026

CVE ID : CVE-2026-66907 Published : Aug. 24, 2026, 4:13 p.m. | 58 minutes ago Descrip…

CVE-2026-66906 - Apache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir

Maloy Roy Orko August 24, 2026

CVE ID : CVE-2026-66906 Published : Aug. 24, 2026, 4:12 p.m. | 59 minutes ago Descrip…

CVE-2026-19565 - Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey

Maloy Roy Orko August 23, 2026

CVE ID : CVE-2026-19565 Published : Aug. 23, 2026, 8:16 p.m. | 54 minutes ago Descrip…

CVE-2026-75922 - Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line

Maloy Roy Orko August 23, 2026

CVE ID : CVE-2026-75922 Published : Aug. 23, 2026, 6:16 p.m. | 54 minutes ago Descrip…

CVE-2026-74709 - xsk: clear metadata pointer when no timestamp is requested

Maloy Roy Orko August 22, 2026

CVE ID : CVE-2026-74709 Published : Aug. 22, 2026, 4:16 p.m. | 54 minutes ago Descrip…

CVE-2026-74582 - packet: use consistent hard_header_len in non-ring send paths

Maloy Roy Orko August 21, 2026

CVE ID : CVE-2026-74582 Published : Aug. 21, 2026, 4:31 p.m. | 38 minutes ago Descrip…

CVE-2026-18301 - GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability

Maloy Roy Orko August 20, 2026

CVE ID : CVE-2026-18301 Published : Aug. 20, 2026, 4:23 p.m. | 46 minutes ago Descrip…

CVE-2026-64851 - Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlers

Maloy Roy Orko August 19, 2026

CVE ID : CVE-2026-64851 Published : Aug. 19, 2026, 4:18 p.m. | 50 minutes ago Descrip…

CVE-2026-75904 - libmodplug <= 0.8.9.1 - Out-of-Bounds Read in pat_smplooped via Crafted MIDI File

Maloy Roy Orko August 18, 2026

CVE ID : CVE-2026-75904 Published : Aug. 18, 2026, 4:18 p.m. | 50 minutes ago Descrip…

CVE-2026-50770 - Squirro Cognitive Search Privilege Escalation

Maloy Roy Orko August 17, 2026

CVE ID : CVE-2026-50770 Published : Aug. 17, 2026, 6:17 p.m. | 50 minutes ago Descrip…

CVE-2026-50769 - Brainformatik CRM+ SQL Injection

Maloy Roy Orko August 17, 2026

CVE ID : CVE-2026-50769 Published : Aug. 17, 2026, 6:17 p.m. | 50 minutes ago Descrip…

CVE-2026-19958 - iatsiuk pptr-mcp execute Tool vm-executor.ts executeCode code injection

Maloy Roy Orko August 16, 2026

CVE ID : CVE-2026-19958 Published : Aug. 16, 2026, 10:15 p.m. | 52 minutes ago Descri…

CVE-2026-19956 - gomarble-ai facebook-ads-mcp-server server.py fetch_pagination_url server-side request forgery

Maloy Roy Orko August 16, 2026

CVE ID : CVE-2026-19956 Published : Aug. 16, 2026, 8:15 p.m. | 52 minutes ago Descrip…

CVE-2026-15689 - Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in _default_email_password_reset and _default_welcome_send

Maloy Roy Orko August 15, 2026

CVE ID : CVE-2026-15689 Published : Aug. 15, 2026, 2:17 p.m. | 2 hours, 49 minutes ago …

CVE-2026-13196 - Out-of-bounds Write in KUNBUS piControl

Maloy Roy Orko August 14, 2026

CVE ID : CVE-2026-13196 Published : Aug. 14, 2026, 4:16 p.m. | 49 minutes ago Descrip…

CVE-2026-58432 - Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea

Maloy Roy Orko August 13, 2026

CVE ID : CVE-2026-58432 Published : Aug. 13, 2026, 4:44 p.m. | 20 minutes ago Descrip…

CVE-2026-58428 - Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)

Maloy Roy Orko August 13, 2026

CVE ID : CVE-2026-58428 Published : Aug. 13, 2026, 4:44 p.m. | 20 minutes ago Descrip…

CVE-2026-65941 - WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.

Maloy Roy Orko August 12, 2026

CVE ID : CVE-2026-65941 Published : Aug. 12, 2026, 4:17 p.m. | 47 minutes ago Descrip…

CVE-2026-34175 - Hardware-Aware-Automated-MachineLearning Uncontrolled Search Path Vulnerability

Maloy Roy Orko August 11, 2026

CVE ID : CVE-2026-34175 Published : Aug. 11, 2026, 4:28 p.m. | 35 minutes ago Descrip…

CVE-2026-72737 - Dokploy: Cross-organization IDOR in Dokploy backup destinations exposes another tenant's S3 credentials and backups

Maloy Roy Orko August 10, 2026

CVE ID : CVE-2026-72737 Published : Aug. 10, 2026, 6:18 p.m. | 44 minutes ago Descrip…

CVE-2026-19360 - wongcyrus ExcelLexBot Lambda Function ExcelLexBotS3TriggerFunction privileges management

Maloy Roy Orko August 09, 2026

CVE ID : CVE-2026-19360 Published : Aug. 9, 2026, 5:16 p.m. | 1 hour, 44 minutes ago …

CVE-2026-19359 - nxp-auto-goldvip gvip Lambda Function SitewiseCustomFunction access control

Maloy Roy Orko August 09, 2026

CVE ID : CVE-2026-19359 Published : Aug. 9, 2026, 4:30 p.m. | 31 minutes ago Descript…

CVE-2026-19358 - 3CORESec Trapdoor DefaultFunction access control

Maloy Roy Orko August 09, 2026

CVE ID : CVE-2026-19358 Published : Aug. 9, 2026, 4:16 p.m. | 44 minutes ago Descript…

CVE-2026-71944 - D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeQuectel

Maloy Roy Orko August 08, 2026

CVE ID : CVE-2026-71944 Published : Aug. 8, 2026, 5:16 p.m. | 1 hour, 43 minutes ago …

CVE-2026-20345 - ClamAV GPT File Format Processing Memory Corruption Vulnerability

Maloy Roy Orko August 07, 2026

CVE ID : CVE-2026-20345 Published : Aug. 7, 2026, 5:17 p.m. | 1 hour, 41 minutes ago …

CVE-2026-71326 - Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing

Maloy Roy Orko August 06, 2026

CVE ID : CVE-2026-71326 Published : Aug. 6, 2026, 10:18 p.m. | 13 minutes ago Descrip…

CVE-2026-71325 - Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef

Maloy Roy Orko August 06, 2026

CVE ID : CVE-2026-71325 Published : Aug. 6, 2026, 10:18 p.m. | 13 minutes ago Descrip…

CVE-2026-8470 - Langflow is affected by weaknesses in secret handling and sensitive configuration access

Maloy Roy Orko August 05, 2026

CVE ID : CVE-2026-8470 Published : Aug. 5, 2026, 7:17 p.m. | 1 hour, 13 minutes ago D…

CVE-2026-18606 - Razer RzUpdateService Named Pipe RzUpdateService.exe privileges management

Maloy Roy Orko August 03, 2026

CVE ID : CVE-2026-18606 Published : Aug. 3, 2026, 5:16 p.m. | 1 hour, 13 minutes ago …

CVE-2026-18582 - mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap

Maloy Roy Orko August 02, 2026

CVE ID : CVE-2026-18582 Published : Aug. 3, 2026, 1:15 a.m. | 1 hour, 14 minutes ago …

CVE-2026-3245 - PRISMAproduction Deserialization Arbitrary Code Execution

Maloy Roy Orko August 02, 2026

CVE ID : CVE-2026-3245 Published : Aug. 2, 2026, 11:32 p.m. | 56 minutes ago Descript…

CVE-2026-18577 - Incomplete patch leads to administrative account takeover

Maloy Roy Orko August 02, 2026

CVE ID : CVE-2026-18577 Published : Aug. 2, 2026, 11:16 p.m. | 1 hour, 12 minutes ago …

CVE-2026-10848 - Out-of-bounds read in Zephyr OCPP 1.6 RPC message parser (parse_rpc_msg)

Maloy Roy Orko August 02, 2026

CVE ID : CVE-2026-10848 Published : Aug. 2, 2026, 5:16 p.m. | 1 hour, 12 minutes ago …

CVE-2026-54894 - Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys

Maloy Roy Orko August 01, 2026

CVE ID : CVE-2026-54894 Published : Aug. 1, 2026, 7:16 p.m. | 1 hour, 12 minutes ago …