CVEs published April 29, 2026

SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “/web_comunications/cms/get_provincias” endpoint.

Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP response headers.

Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables.

cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

Cockpit v2.13.5 and earlier is vulnerable to arbitrary code execution via the filter parameter within multiple endpoints.

TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function.

An attacker accessing both the official DocsGPT website or any local and public deployment, can craft a malicious payload bypassing the "MCP test" behavior to achieve arbitrary remote code execution (RCE).

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Path Traversal.

Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting.

Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook trigger for GITScm polling", resulting in a stored…

A path traversal vulnerability in Wazuh's cluster synchronization extraction routine allows an authenticated cluster peer to write arbitrary files outside the intended extraction directory on other cluster…

AgentFlow contains an arbitrary code execution vulnerability that allows attackers to execute local Python pipeline files by supplying a user-controlled pipeline_path parameter to the POST /api/runs and…

A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535.

A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535.

A vulnerability was determined in UTT HiPER 1250GW up to 3.2.7-210907-180535.

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus OS My Computer allows OS Command…

Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack.

Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Hijacking a…

Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Authentication Bypass.

This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses.

This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status.

Cockpit 2.13.5 and earlier is affected by a misconfiguration within the Bucket component _isFileTypeAllowed function where a specially crafted filename bypasses an extension filter.

Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that allows authenticated attackers with collection management privileges to…

This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES encryption keys in client-side JavaScript.

Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption.

Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause memory corruption by…

Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network actor to corrupt the device's IPv6 address assignment, DNS configuration, and lease…

This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned…

Jenkins HTML Publisher Plugin 427 and earlier does not escape job name and URL in the legacy wrapper file, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with…

A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.

Local privilege escalation due to improper input validation.

Local privilege escalation due to improper input validation.

An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x80002008 requests.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Burge TaxoPress simple-tags allows Blind SQL Injection.This issue affects TaxoPress: from n/a…

Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to a job to write files to…

Pgjdbc is vulnerable to a client-side denial of service during SCRAM-SHA-256 authentication.

Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence.

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec.

TOTOLINK A3002RU V3 <= V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formMapDelDevice function.

A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4.

A vulnerability was found in Algovate xhs-mcp 0.8.11.

A vulnerability was found in PolarVista xcode-mcp-server 1.0.0.

A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0.

A security vulnerability has been detected in geekgod382 filesystem-mcp-server 1.0.0.

A weakness has been identified in florensiawidjaja BioinfoMCP up to 7ada7918b9e515604d3c0ae264d3a9af10bf6e54.

A security vulnerability has been detected in EyouCMS up to 1.7.9.

A flaw has been found in fatbobman mail-mcp-bridge up to 1.3.3.

A vulnerability was detected in ezequiroga mcp-bases 357ca19c7a49a9b9cb2ef639b366f03aba8bea39/c630b8ab0f970614d42da8e566e9c0d15a16414c.

Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting Incorrectly Configured Access Control Security Levels.

GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration user-registration allows Reflected XSS.This issue affects User Registration:…

This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data.

This vulnerability exists in e-Sushrut due to improper authorization checks during resource access.

This vulnerability exists in e-Sushrut due to improper access control in resource access validation.

Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability.

Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems.

A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.

Local privilege escalation due to DLL hijacking vulnerability.

Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause a denial of service (device crash) by…

Insufficient packet validation in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to bypass all checksum and minimum-size validation by spoofing the Ethernet source MAC address…

Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server.

Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) invokes parameterless constructors of classes specified in configuration when deserializing inheritance strategies,…

Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels.

Multiple heap-based out-of-bounds WRITE vulnerabilities exist in parse_uname_string() (remoted_op.c).

Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component.

A stack-based buffer overflow exists in print_hex_string() in wazuh-remoted.

Wazuh's server API brute-force protection for POST /security/user/authenticate can be bypassed by sending concurrent authentication requests.

A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K.

A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0.

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.

An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account.

Dell/Alienware Purchased Apps, versions prior to 1.1.31.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability.

The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'frontend_rewrite' function's 'WPMETEOR[N]WPMETEOR' placeholder content in all…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP Image Widget image-widget allows Stored XSS.This issue affects Image Widget: from n/a through…

Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application.

Server-Side Request Forgery (SSRF) vulnerability in ILLID Share This Image share-this-image allows Server Side Request Forgery.This issue affects Share This Image: from n/a through <= 2.14.

Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic.

Helpy contains a stored cross-site scripting vulnerability in the post author display logic.

Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network user to cause a denial of service (device crash) when outgoing ping…

A security flaw has been discovered in geldata gel-mcp 0.1.0.

A vulnerability was identified in NousResearch hermes-agent 0.8.0.

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs betterdocs allows Retrieve Embedded Sensitive Data.This issue affects BetterDocs: from n/a…

Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through <= 4.14.5.

The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to unauthorized data access in all versions up to, and including, 7.4.5 This is due to the REST API endpoint at…

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources.

A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.

wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU).

A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0.

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0.

A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0.

A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0.

A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0.

A weakness has been identified in EyouCMS up to 1.7.9.

AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without enforcing application/json validation, allowing attackers to bypass trust-boundary…

A security flaw has been discovered in NousResearch hermes-agent 0.8.0.

A heap-based out-of-bounds WRITE occurs in GetAlertData, resulting in writing a NULL byte exactly 1 byte before the start of the buffer allocated by strdup.

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0.

Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a…

Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows…

Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL with…

A missing permission check in Jenkins Script Security Plugin 1399.ve6a_66547f6e1 and earlier allows attackers with Overall/Read permission to enumerate pending and approved Script Security classpaths.

Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contain(s) a Server-Side Request Forgery (SSRF) vulnerability.

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0.

Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.