VulDB Recent Entries

A vulnerability, which was classified as very critical, has been found in Dell Secure Connect Gateway. The affected element is an unknown function. Performing a manipulation results in hard-coded credentials. This vulnerability was named CVE-2026-80170. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as problematic was found in Dell Secure Connect Gateway. Impacted is an unknown function. Such manipulation leads to improper certificate validation. This vulnerability is uniquely identified as CVE-2026-79734. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in Dell Secure Connect Gateway. This issue affects some unknown processing. This manipulation causes information disclosure. This vulnerability is handled as CVE-2026-78487. It is possible to launch the attack on the local host. There is not any exploit available.

A vulnerability described as problematic has been identified in Dell Secure Connect Gateway. This vulnerability affects unknown code. The manipulation results in improper certificate validation. This vulnerability is known as CVE-2026-80164. It is possible to launch the attack remotely. No exploit is available.

A vulnerability marked as very critical has been reported in Dell Secure Connect Gateway. This affects an unknown part. The manipulation leads to path traversal. This vulnerability is traded as CVE-2026-80130. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability labeled as very critical has been found in Dell Secure Connect Gateway. Affected by this issue is some unknown functionality. Executing a manipulation can lead to improper authentication. This vulnerability appears as CVE-2026-80128. The attack may be performed from remote. There is no available exploit.

A vulnerability identified as critical has been detected in Dell Secure Connect Gateway. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in path traversal. This vulnerability is reported as CVE-2026-80131. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability categorized as very critical has been discovered in Dell Secure Connect Gateway. Affected is an unknown function. Such manipulation leads to path traversal. This vulnerability is documented as CVE-2026-80129. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Very Good Plugins Fusion Plugin up to 3.47.13 on WordPress. It has been rated as critical. This impacts the function thrivecart of the component Thrivecart Auto Login Handler. This manipulation of the argument role causes improper privilege management. This vulnerability is registered as CVE-2026-14444. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in icegram Email Subscribers & Newsletters Plugin up to 5.9.27 on WordPress. It has been declared as critical. This affects the function do_shortcode of the component Shortcode Handler. The manipulation results in code injection. This vulnerability is cataloged as CVE-2026-12757. The attack may be launched remotely. There is no exploit available.

A vulnerability categorized as problematic has been discovered in MojoX::Authentication up to 0.005. This affects the function parse_assertion of the component SAML2. Executing a manipulation can lead to improper certificate validation. The identification of this vulnerability is CVE-2026-86304. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Apache Software Foundation Apache Ant. It has been rated as critical. The impacted element is an unknown function of the component ftp/scp. Performing a manipulation results in path traversal. This vulnerability was named CVE-2026-78254. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in itsourcecode Sales and Inventory System 1.0. It has been declared as critical. The affected element is an unknown function of the file /pages/cust_edit1.php. Such manipulation of the argument ID leads to sql injection. This vulnerability is uniquely identified as CVE-2026-86310. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability was found in itsourcecode Sales and Inventory System 1.0. It has been classified as critical. Impacted is an unknown function of the file /pages/pro_searchfrm.php. This manipulation of the argument ID causes sql injection. This vulnerability is handled as CVE-2026-86309. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability was found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930 and classified as problematic. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DB_DEBUG results in information disclosure. This vulnerability is known as CVE-2026-86308. It is possible to launch the attack remotely. Furthermore, an exploit is available. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2026-86307. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability, which was classified as critical, was found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects an unknown part of the file App/Home/Model/UserModel.class.php of the component Cookie Helper. Executing a manipulation of the argument Username can lead to improper authentication. This vulnerability appears as CVE-2026-86306. The attack may be performed from remote. In addition, an exploit is available. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability, which was classified as critical, has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is the function Upload::upload of the file ThinkPHP/Library/Think/Upload.class.php. Performing a manipulation results in unrestricted upload. This vulnerability is reported as CVE-2026-86305. The attack is possible to be carried out remotely. Moreover, an exploit is present. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability classified as critical was found in curl libcurl. Affected by this vulnerability is an unknown functionality of the component HTTP2 Server Push. Such manipulation leads to use after free. This vulnerability is documented as CVE-2026-18924. The attack can be executed remotely. There is not any exploit available.

A vulnerability classified as critical has been found in Authen::SASL::Perl::DIGEST_MD5 up to 2.2099. Affected is the function server_step of the file lib/Authen/SASL/Perl/DIGEST_MD5.pm. This manipulation causes improper authentication. This vulnerability is registered as CVE-2026-86219. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.