Vuldb Updates

A vulnerability labeled as critical has been found in Linux Kernel up to 6.18.26/7.0.3. The impacted element is the function svm_copy_vmrun_state of the component LBR Handler. Executing a manipulation can lead to information disclosure. This vulnerability appears as CVE-2026-46014. The attacker needs to be present on the local network. There is no available exploit. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 7.0.3. This vulnerability affects the function memfd_luo_retrieve_folios. The manipulation results in infinite loop. This vulnerability is known as CVE-2026-46013. An attack on the physical device is feasible. No exploit is available. You should upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3. This impacts the function rxkad_verify_response of the component rxrpc. Such manipulation leads to memory leak. This vulnerability is traded as CVE-2026-46012. Access to the local network is required for this attack to succeed. There is no exploit available. Upgrading the affected component is advised.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3. The affected element is the function mtk_jpeg_release of the component Workqueue Call Handler. Performing a manipulation results in use after free. This vulnerability is reported as CVE-2026-46011. The attacker must have access to the local network to execute the attack. No exploit exists. You should upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.18.26/7.0.3. This affects the function rxgk_extract_token of the component rxrpc. This manipulation causes privilege escalation. This vulnerability appears as CVE-2026-46010. The attacker needs to be present on the local network. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3. Impacted is the function epf_ntb_epc_destroy. Such manipulation leads to improper update of reference count. This vulnerability is documented as CVE-2026-46009. The attack requires being on the local network. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in Welcart e-Commerce Plugin up to 2.12.4 on WordPress. The impacted element is an unknown function. This manipulation of the argument wp_usces_order_old causes sql injection. The identification of this vulnerability is CVE-2026-107752. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as problematic has been found in meum Tutor LMS Plugin up to 4.1.0 on WordPress. Affected by this vulnerability is the function Input::sanitize_array. The manipulation of the argument ID leads to authorization bypass. This vulnerability is listed as CVE-2026-92715. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in thimpress LearnPress Plugin up to 4.4.10 on WordPress. It has been declared as critical. This issue affects the function LP_Session_Handler::get of the component Checkout AJAX Action. Executing a manipulation of the argument checkout-email can lead to deserialization. This vulnerability is handled as CVE-2026-104736. The attack can be executed remotely. There is not any exploit available.

A vulnerability labeled as problematic has been found in murgroland WP Booking System Plugin up to 2.1.0.3 on WordPress. This affects an unknown function. Such manipulation of the argument ID leads to information disclosure. This vulnerability is referenced as CVE-2026-109368. It is possible to launch the attack remotely. No exploit is available.

A vulnerability marked as critical has been reported in murgroland WP Booking System Plugin up to 2.1.0.3 on WordPress. This impacts an unknown function. Performing a manipulation results in authorization bypass. This vulnerability is identified as CVE-2026-109369. The attack can be initiated remotely. There is not any exploit available.

A vulnerability, which was classified as problematic, was found in WPEverest User Registration & Membership Plugin up to 5.2.8 on WordPress. This vulnerability affects the function ur_process_registration of the component AJAX Action. Such manipulation leads to cross site scripting. This vulnerability is documented as CVE-2026-96660. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in murgroland Booking System Plugin up to 2.1.0.3 on WordPress. It has been rated as problematic. Impacted is the function admin_init of the file profile.php. The manipulation leads to authorization bypass. This vulnerability is uniquely identified as CVE-2026-108123. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability, which was classified as problematic, has been found in WPEverest User Registration & Membership Plugin up to 5.2.8 on WordPress. This affects the function trigger_bulk_action. This manipulation of the argument new_role causes cross-site request forgery. This vulnerability is registered as CVE-2026-92978. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in themifyme Themify Builder Plugin up to 7.8.2 on WordPress. It has been classified as problematic. The affected element is an unknown function of the component Shortcode Handler. The manipulation of the argument visible leads to cross site scripting. This vulnerability is traded as CVE-2026-111726. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in ThimPress LearnPress Plugin up to 4.4.10 on WordPress. It has been classified as problematic. This vulnerability affects unknown code. Performing a manipulation results in improper authorization. This vulnerability is known as CVE-2026-107744. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in themifyme Themify Popup Plugin up to 1.4.7 on WordPress and classified as problematic. Impacted is an unknown function. Executing a manipulation of the argument popup_width_unit can lead to cross site scripting. This vulnerability appears as CVE-2026-109989. The attack may be performed from remote. There is no available exploit.

A vulnerability classified as problematic was found in daigo75 EU VAT Assistant for WooCommerce Plugin up to 2.1.30.260413 on WordPress. Affected by this issue is some unknown functionality. The manipulation of the argument vat_number results in cross site scripting. This vulnerability is cataloged as CVE-2026-103899. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in SICK RFU63x. Impacted is an unknown function of the component SSH Interface. This manipulation causes risky cryptographic algorithm. This vulnerability appears as CVE-2022-46833. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in SICK RFU62x. This issue affects some unknown processing of the component SSH Interface. The manipulation results in risky cryptographic algorithm. This vulnerability is reported as CVE-2022-46832. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.