Threat Intelligence Feed

HIGH · CVE-2026-17196 The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all ve MED · CVE-2026-107450 In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/src/mutation/smart_li CVE-2026-107449 linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enha CVE-2023-5649 An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a CVE-2023-5648 In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL CVE-2026-94584 A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions befor CVE-2026-94580 An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage CVE-2026-94575 A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low- CVE-2026-87688 An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS admin CVE-2026-87687 An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 throug CVE-2026-87685 An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions b CVE-2026-87675 An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions bef CVE-2026-87674 A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2. CVE-2026-87673 An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versi CVE-2026-87667 An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS ver CVE-2026-87666 An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions bef CVE-2026-87660 An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of CVE-2026-107448 Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a MED · CVE-2026-107446 containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-boun MED · CVE-2026-107445 A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when acces MED · CVE-2026-107444 A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when l CVE-2026-94583 A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric CVE-2026-94582 A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabri CVE-2026-94578 Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Author CVE-2026-92862 The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application t CVE-2026-92861 The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an CVE-2026-87686 An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabri CVE-2026-87684 A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before CVE-2026-87678 An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versio CVE-2026-87676 A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions befor CVE-2026-87672 An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS v CVE-2026-87671 An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0 CVE-2026-87670 An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The intern CVE-2026-87669 A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releas CVE-2026-87668 A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions bef CVE-2026-87665 A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabr CVE-2026-87659 A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions bef MED · CVE-2017-20283 NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Impr CVE-2026-87726 Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with CVE-2026-87683 Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS ver HIGH · CVE-2026-17196 The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all ve MED · CVE-2026-107450 In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/src/mutation/smart_li CVE-2026-107449 linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enha CVE-2023-5649 An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a CVE-2023-5648 In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL CVE-2026-94584 A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions befor CVE-2026-94580 An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage CVE-2026-94575 A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low- CVE-2026-87688 An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS admin CVE-2026-87687 An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 throug CVE-2026-87685 An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions b CVE-2026-87675 An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions bef CVE-2026-87674 A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2. CVE-2026-87673 An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versi CVE-2026-87667 An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS ver CVE-2026-87666 An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions bef CVE-2026-87660 An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of CVE-2026-107448 Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a MED · CVE-2026-107446 containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-boun MED · CVE-2026-107445 A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when acces MED · CVE-2026-107444 A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when l CVE-2026-94583 A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric CVE-2026-94582 A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabri CVE-2026-94578 Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Author CVE-2026-92862 The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application t CVE-2026-92861 The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an CVE-2026-87686 An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabri CVE-2026-87684 A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before CVE-2026-87678 An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versio CVE-2026-87676 A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions befor CVE-2026-87672 An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS v CVE-2026-87671 An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0 CVE-2026-87670 An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The intern CVE-2026-87669 A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releas CVE-2026-87668 A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions bef CVE-2026-87665 A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabr CVE-2026-87659 A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions bef MED · CVE-2017-20283 NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Impr CVE-2026-87726 Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with CVE-2026-87683 Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS ver