Vuldb Updates

A vulnerability identified as critical has been detected in Elastic Elasticsearch up to 8.19.22/9.4.7/9.5.4. The impacted element is an unknown function of the component Remote Cluster Security. Performing a manipulation results in authorization bypass. This vulnerability is known as CVE-2026-103009. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability categorized as problematic has been discovered in Elastic Elasticsearch up to 8.19.22/9.4.7/9.5.4. This impacts an unknown function of the component Geometry Serialization. Executing a manipulation can lead to uncontrolled recursion. This vulnerability appears as CVE-2026-103008. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Elastic Elasticsearch up to 8.19.20/9.4.5/9.5.1. This vulnerability affects unknown code of the component Aggregation. Executing a manipulation can lead to uncontrolled recursion. This vulnerability is tracked as CVE-2026-103006. The attack can be launched remotely. No exploit exists.

A vulnerability has been found in Elastic Elasticsearch up to 8.19.21/9.4.6/9.5.3 and classified as problematic. This issue affects some unknown processing. The manipulation leads to incorrect authorization. This vulnerability is listed as CVE-2026-103007. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in Elastic Elasticsearch up to 8.19.22/9.3.8/9.4.7/9.5.4. It has been rated as problematic. This affects an unknown function of the component Connector. Performing a manipulation of the argument Description results in uncontrolled memory allocation. This vulnerability is reported as CVE-2026-103005. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability has been found in IATOAI IATO MCP Plugin up to 1.11.0 on WordPress and classified as problematic. Affected is an unknown function. The manipulation leads to improper access controls. This vulnerability is referenced as CVE-2026-32582. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability categorized as problematic has been discovered in GIMP. The affected element is an unknown function of the component DDS Loader. The manipulation results in out-of-bounds write. This vulnerability was named CVE-2026-106062. The attack needs to be approached locally. There is no available exploit.

A vulnerability categorized as problematic has been discovered in WebPros WP Toolkit up to 6.11.3 on WordPress. Affected is an unknown function. Such manipulation leads to argument injection. This vulnerability is traded as CVE-2026-93699. An attack has to be approached locally. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Red Hat Enterprise Linux 6/7/8/9/10. This issue affects some unknown processing of the component DICOM Export. The manipulation results in out-of-bounds write. This vulnerability was named CVE-2026-106063. The attack needs to be approached locally. There is no available exploit.

A vulnerability was found in Red Hat Enterprise Linux. It has been rated as problematic. This impacts an unknown function of the component flatpak-builder. This manipulation causes information disclosure. This vulnerability appears as CVE-2026-107466. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as problematic was found in Elastic Elasticsearch up to 8.19.22/9.4.6/9.5.2. Affected by this issue is some unknown functionality. Such manipulation leads to allocation of resources. This vulnerability is referenced as CVE-2026-102411. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

A vulnerability labeled as problematic has been found in Elastic Elasticsearch. This affects the function Chunk of the component ES|QL. Executing a manipulation can lead to inefficient regular expression complexity. This vulnerability is handled as CVE-2026-102408. The attack can be executed remotely. There is not any exploit available.

A vulnerability labeled as problematic has been found in Elastic Elasticsearch up to 9.2.8/9.3.8/9.4.7/9.5.4. Affected by this vulnerability is an unknown functionality. The manipulation results in uncontrolled recursion. This vulnerability is known as CVE-2026-102409. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in VMware Workstation and Fusion up to 26H1. It has been declared as critical. This impacts an unknown function of the component HGFS. Such manipulation leads to stack-based buffer overflow. This vulnerability is documented as CVE-2026-59347. The attack needs to be performed locally. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in VMware Workstation. This impacts an unknown function of the component Vmxnet3. The manipulation leads to integer overflow. This vulnerability is uniquely identified as CVE-2026-59346. Local access is required to approach this attack. No exploit exists.

A vulnerability categorized as problematic has been discovered in Booking Calendar Plugin up to 11.8.2 on WordPress. This issue affects some unknown processing of the component Settings Handler. Executing a manipulation can lead to information disclosure. This vulnerability is handled as CVE-2026-105195. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability labeled as critical has been found in Appointment Booking Plugin up to 5.6.8 on WordPress. The affected element is an unknown function of the component Abilities API. The manipulation results in authorization bypass. This vulnerability was named CVE-2026-105196. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.

A vulnerability classified as problematic was found in Appointment Booking Plugin up to 5.6.4 on WordPress. Affected is an unknown function. Executing a manipulation can lead to authorization bypass. This vulnerability is tracked as CVE-2026-105197. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability, which was classified as problematic, was found in Appointment Booking Plugin up to 5.7.2 on WordPress. Affected by this issue is some unknown functionality. The manipulation results in authorization bypass. This vulnerability is cataloged as CVE-2026-105198. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability, which was classified as very critical, has been found in Brocade Active Support Connectivity Gateway up to 3.4.x. This vulnerability affects unknown code of the component HTTP Service. This manipulation causes path traversal. This vulnerability is tracked as CVE-2026-85487. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.