Security alerts

1,055 alerts · page 36 of 53

1. Critical (CVSS 9+) Published 2026-10-29 13:33

   CVE-2026-97854 Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the aff...

   Critical·CVSS 9.3 EPSS 1.4%

   Exploit status: No public exploit known

   Affects: Yamaha Corporation NWR100

   Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.

2. Critical (CVSS 9+) Published 2026-10-29 13:00 · updated 2026-11-03 21:28

   CVE-2026-115964 WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability

   Critical·CVSS 9.3 EPSS 0.32%

   Exploit status: No public exploit known

   Affects: StylemixThemes Motors, wordpress motors-car-dealership-classified-listings

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Blind SQL Injection.This issue affects Motors: from n/a through 1.4.126.

3. Critical (CVSS 9+) Published 2026-10-29 12:19 · updated 2026-11-06 12:04

   CVE-2026-114230 Apache Qpid Proton C: Potential authentication bypass: regular AMQP frames can be sent as SASL frames

   Critical·CVSS 9.8 EPSS 0.50%

   Exploit status: No public exploit known

   Affects: apache.org/qpid-proton, debian/qpid-proton, ubuntu/qpid-proton

   When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL frames. This allows authentication bypass. However there will be no user name set so the effects depend on how the application deals with this condition - which o...

4. Critical (CVSS 9+) Published 2026-10-29 12:17 · updated 2026-11-06 12:04

   CVE-2026-105042 Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crash

   Critical·CVSS 9.8 EPSS 0.46%

   Exploit status: No public exploit known

   Affects: apache.org/qpid-proton, redhat/python39-qpid-proton, redhat/python3-qpid-proton and 11 more

   A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash. This issue affects Apache Qpid Proton C: through 0.40.0. Users are recommended to upgrade to version 0.41.1, which fixes the issue.

5. Critical (CVSS 9+) Published 2026-10-29 12:16 · updated 2026-11-06 12:04

   CVE-2026-105031 Apache Qpid Proton C: The OpenSSL TLS implementation adds a locally trusted certificate authority to the existing trusted system trust anchors.

   Critical·CVSS 9.1 EPSS 0.27%

   Exploit status: No public exploit known

   Affects: apache.org/qpid-proton, redhat/qpid-proton, debian/qpid-proton

   When using the OpenSSL TLS implementation, both the pn_ssl_domain_set_trusted_ca_db() & pn_tls_config_set_trusted_certs() APIs added to rather than replaced the default system trust anchors. Leading to potentially trusting unexpected peer certificates. This can be worked around b...

6. Critical (CVSS 9+) Published 2026-10-29 10:53

   CVE-2026-114358 SQL Injection Vulnerability in Radius Xenia M2M Platform

   Critical·CVSS 9.3 EPSS 0.50%

   Exploit status: No public exploit known

   Affects: Radius Synergies Radius Xenia M2M Platform

   This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the password recovery functionality in the web management interface. An unauthenticated remote attacker could exploit this vulnerability by supplying crafted SQL qu...

7. Critical (CVSS 9+) Published 2026-10-29 08:00 · updated 2026-11-03 21:25

   CVE-2026-115245 Chat AI with Dispatcher < 2.4 - Unauthenticated Arbitrary File Upload

   Critical·CVSS 9.8 EPSS 0.46%

   Exploit status: No public exploit known

   Affects: wordpress chat-ai-with-dispatcher

   The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, relying only on a spoofable client-supplied content type, allowing unauthenticated attackers to upload arbitrary files, including PHP, which can lead to remote code execution.

8. Critical (CVSS 9+) Published 2026-10-29 08:00 · updated 2026-11-04 23:31

   CVE-2026-113616 LogixFast Auth < 1.0.4 - Unauthenticated Account Takeover via Password Reset

   Critical·CVSS 9.8 EPSS 0.34%

   Exploit status: No public exploit known

   Affects: wordpress logixfast-auth

   The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset one-time code to the resolved account's own email address, mailing it to the address supplied in the request instead, allowing unauthenticated attackers to reset any user's password, including an...

9. Critical (CVSS 9+) Published 2026-10-29 08:00 · updated 2026-11-03 21:24

   CVE-2026-113617 Automated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal

   Critical·CVSS 9.9 EPSS 0.34%

   Exploit status: No public exploit known

   Affects: wordpress auto-import-products-cart-dragdropfile

   The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before using it to read and delete files, allowing users with minimal permissions, such as subscribers, to read arbitrary files (including ones containing the database...

10. Critical (CVSS 9+) Published 2026-10-29 08:00 · updated 2026-11-04 23:12

    CVE-2026-103693 Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection

    Critical·CVSS 9.0 EPSS 0.47%

    Exploit status: No public exploit known

    Affects: wordpress profilegrid-user-profiles-groups-and-communities, wordpress frontend-dashboard

    The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that...

11. Critical (CVSS 9+) Published 2026-10-29 05:39

    CVE-2026-109516 Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token

    Critical·CVSS 9.8 EPSS 0.58%

    Exploit status: No public exploit known

    Affects: wordpress bot-for-telegram-on-woocommerce, guruteam Bot for Telegram on WooCommerce

    The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.3.0. The /wp-json/woo-telegram/v1/main/ REST endpoint is registered with permission_callback => '__return_true' and...

12. Critical (CVSS 9+) Published 2026-10-29 04:59

    CVE-2026-42922 A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can mak...

    Critical·CVSS 9.8 EPSS 0.53%

    Exploit status: No public exploit known

    Affects: Frangoteam

    A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

13. Critical (CVSS 9+) Published 2026-10-29 03:35

    CVE-2026-66088 Unrestricted Command Execution via system.execute

    Critical·CVSS 9.4 EPSS 0.69%

    Exploit status: No public exploit known

    Affects: Apereo Foundation openEQUELLA

    In openEQUELLA before 2026.1, the system.execute() function available to the scripting engine runs supplied operating system commands without validation or an allow-list of permitted executables. A user able to create or edit scripts can use it to execute arbitrary commands with...

14. Critical (CVSS 9+) Published 2026-10-29 ≈17:54 (approximate time: when CVE Radar first recorded it) · updated 2026-11-02 19:17

    CVE-2026-51863 DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129). A remote attacker can use the validated exploitation pat...

    Critical·CVSS 9.1 EPSS 0.81%

    Exploit status: No public exploit known

    DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129). A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary.

15. Critical (CVSS 9+) Published 2026-10-29 ≈17:54 (approximate time: when CVE Radar first recorded it) · updated 2026-11-04 03:17

    CVE-2026-51912 OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46).

    Critical·CVSS 9.8 EPSS 0.75%

    Exploit status: No public exploit known

    OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46).

16. Critical (CVSS 9+) Published 2026-10-29 ≈17:37 (approximate time: when CVE Radar first recorded it) · updated 2026-11-03 17:17

    CVE-2026-107027 Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

    Critical·CVSS 9.1 EPSS 0.34%

    Exploit status: No public exploit known

    Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

17. Critical (CVSS 9+) Published 2026-10-29 ≈17:37 (approximate time: when CVE Radar first recorded it) · updated 2026-10-30 21:18

    CVE-2026-107017 Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to arbitrarily trigger another user's configured automated actions.

    Critical·CVSS 9.1 EPSS 0.34%

    Exploit status: No public exploit known

    Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to arbitrarily trigger another user's configured automated actions.

18. Critical (CVSS 9+) Published 2026-10-29 ≈17:37 (approximate time: when CVE Radar first recorded it) · updated 2026-10-30 21:18

    CVE-2026-107028 Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-list data.

    Critical·CVSS 9.1 EPSS 0.34%

    Exploit status: No public exploit known

    Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-list data.

19. Critical (CVSS 9+) Published 2026-10-29 ≈17:37 (approximate time: when CVE Radar first recorded it)

    CVE-2026-107032 Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.

    Critical·CVSS 9.1 EPSS 0.50%

    Exploit status: No public exploit known

    Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.

20. Critical (CVSS 9+) Published 2026-10-29 ≈17:37 (approximate time: when CVE Radar first recorded it) · updated 2026-11-03 17:17

    CVE-2026-107048 An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request.

    Critical·CVSS 9.8 EPSS 0.54%

    Exploit status: No public exploit known

    An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).