9 November 2026

14 results · Clear filters · Feed

• High 8.0
  CVE-2026-125399 Public exploit

  Fluxion before 6.39 OS Command Injection via Crafted SSID

  Fluxion before 6.39 contains an OS command injection vulnerability in the fluxion.sh target scanner, which decodes access point ESSIDs with eval after escaping only single quotes. Attackers within Wi-Fi range can broadcast an access point with a crafted SSID …

  FluxionNetwork fluxion
  Nov 9, 2026
• Medium 5.3
  CVE-2026-125394 Public exploit

  FreeRDP before 3.33.0 contains a heap use-after-free vulnerability in update_gdi_patblt(), update_gdi_polygon_cb() and …

  FreeRDP FreeRDP freerdp2 freerdp Debian Ubuntu
  Nov 9, 2026
• Critical 9.8
  CVE-2026-123807 Public exploit

  Signal K Server: Unauthenticated path traversal in resources-provider v2 API leads to JWT secret disclosure, admin impersonation and remote code execution

  Signal K Server is a server application that runs on a central hub in a boat. From 2.0.0 until 2.34.0 for Signal K Server and from 1.0.0 until 1.5.3 for @signalk/resources-provider, the v2 REST route GET /signalk/v2/api/resources/:resourceType/:resourceId acc…

  SignalK signalk-server resources-provider
  Nov 9, 2026
• Medium 5.9
  CVE-2026-122056 Public exploit

  Openscap: one-byte heap buffer overflow in sds-compose may lead to denial-of-service

  A flaw was found in OpenSCAP. A heap-based buffer overflow can occur when processing a specially crafted Extensible Configuration Checklist Description Format (XCCDF) document using the sds-compose option. An attacker could exploit this vulnerability to corru…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Nov 9, 2026
• Critical 9.3
  CVE-2026-56712 Public exploit

  Replicate Cog through 0.23.1 SSRF via cog.File and cog.Path URL Inputs

  Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the Cog process to make server-side HTTP requests by submitting prediction inputs with attacker-controlled URLs that are not validated against the…

  replicate cog cog Ubuntu
  Nov 9, 2026
• Critical 10.0
  CVE-2026-110468 Public exploit

  Remote Code Execution via Unrestricted File Upload in WidzialniCMS

  WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the currentpath parameter, an unauthenticated attacker can upload ar…

  Fundacja Widzialni WidzialniCMS
  Nov 9, 2026
• Critical 9.3
  CVE-2026-124079 Public exploit

  rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 contain a deserialization of untrusted data vulnerability…

  rConfig rConfig Pro rConfig Core
  Nov 9, 2026
• High 8.8
  CVE-2026-94434 Public exploit

  OS Command Injection Leading to Root Code Execution in TÜBİTAK BİLGEM's Pardus Boot Repair

  Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0…

  TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair
  Nov 9, 2026
• Critical 9.1
  CVE-2026-123753 Public exploit

  Apache Axis2/Java: SSRF via WS-Addressing ReplyTo and FaultTo endpoints

  Server-Side Request Forgery (SSRF) vulnerability in Apache Axis2/Java. An unauthenticated caller could supply a non-anonymous WS-Addressing wsa:ReplyTo or wsa:FaultTo address, and Axis2 would open a connection to that address to deliver the response or fault,…

  Apache Software Foundation Apache Axis2/Java
  Nov 9, 2026
• Critical 10.0
  CVE-2026-115252 Public exploit

  Confection 0.4.0 - 0.4.7 - Unauthenticated RCE via Write Key Option

  The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks before saving its settings and writing one of them, unmodified, into a standalone PHP file that it then serves, allowing unauthenticated users …

  Web / CMS
  Nov 9, 2026
• High 7.3
  CVE-2026-68982 Public exploit

  Apache Airflow: CeleryExecutor: forged callback workloads run on Celery workers without workload-token validation

  Apache Airflow's CeleryExecutor ran callback workloads (`ExecuteCallback`, used for deadline-alert callbacks) without validating the workload's authentication token. Anyone able to write to the Celery broker could enqueue a forged callback and execute arbitra…

  Apache Software Foundation Apache Airflow
  Nov 9, 2026
• High 8.8
  CVE-2026-86829 Public exploit

  Apache Airflow: Deserialization of task-controlled XCom values in the Scheduler during dependency evaluation

  Apache Airflow's scheduler fully deserializes XCom values written by task code while evaluating task dependencies. A Dag author, who controls what a task writes to XCom, therefore controls data that is deserialized inside the scheduler process - a context the…

  Apache Software Foundation Apache Airflow
  Nov 9, 2026
• Medium 6.0
  CVE-2026-92606 Public exploit

  TOCTOU Race Condition in TÜBİTAK BİLGEM's Pardus MyComputer

  Time-of-check time-of-use (TOCTOU) race condition vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus MyComputer allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This issue affects Pardus MyComputer: from 0…

  TÜBİTAK BİLGEM Software Technologies Research Institute Pardus MyComputer
  Nov 9, 2026
• High 7.3
  CVE-2026-124576 Public exploit

  BeikeShop Guest Order Lookup OrderRepo.php getOrderByNumber behavioral workflow

  A security flaw has been discovered in BeikeShop up to 2.0.0.31. Impacted is the function OrderRepo::getOrderByNumber of the file beike/Repositories/OrderRepo.php of the component Guest Order Lookup. Performing a manipulation of the argument order_number resu…

  Nov 9, 2026