https://junglewise.ai/threats/cve-2026-6543-ibm-langflow-desktop-code-injection-in-code-validation-endpoint2026-05-11 https://junglewise.ai/threats/cve-2026-3345-ibm-langflow-desktop-path-traversal-in-api-v2-file-upload2026-05-11 https://junglewise.ai/threats/cve-2026-1577-ibm-db2-11-5-0-through-11-5-9-and-12-1-0-through-12-1-4-for-linux2026-05-10 https://junglewise.ai/threats/cve-2025-36335-ibm-watsonx-data-intelligence-plaintext-credential-storage2026-05-14 https://junglewise.ai/threats/cve-2025-36180-ibm-watsonx-data-improper-pod-communication-restriction2026-05-14 https://junglewise.ai/threats/cve-2026-4503-ibm-langflow-desktop-idor-in-image-download-endpoint2026-05-11 https://junglewise.ai/threats/cve-2026-4502-ibm-langflow-desktop-path-traversal-in-v2-api2026-05-11 https://junglewise.ai/threats/cve-2026-40912-traefik-authentication-bypass-in-stripprefixregex-middleware2026-07-21 https://junglewise.ai/threats/cve-2026-3346-ibm-langflow-desktop-stored-xss-in-markdown-rendering2026-05-11 https://junglewise.ai/threats/cve-2026-3340-ibm-langflow-desktop-ssrf-in-url-component2026-05-11 https://junglewise.ai/threats/cve-2026-39858-traefik-auth-bypass-in-forwardauth-middleware-via-header-spoofing2026-06-30 https://junglewise.ai/threats/cve-2026-35051-traefik-auth-bypass-in-forwardauth-middleware-via-header-spoofing2026-06-30 https://junglewise.ai/threats/cve-2026-3833-gnutls-policy-bypass-in-nameconstraints-comparison2026-05-27 https://junglewise.ai/threats/cve-2026-3832-gnutls-certificate-revocation-bypass-in-ocsp-response-handling2026-06-01 https://junglewise.ai/threats/cve-2026-33845-gnutls-integer-underflow-in-dtls-handshake-parsing2026-05-27 https://junglewise.ai/threats/cve-2026-40171-jupyter-notebook-authentication-token-theft-via-commandlinker-xss2026-09-25 https://junglewise.ai/threats/cve-2026-36960-u-speed-n300-router-csrf-in-web-management-interface2026-07-05 https://junglewise.ai/threats/cve-2025-14543-rti-connext-professional-xxe-in-core-libraries2026-06-17 https://junglewise.ai/threats/cve-2026-7500-keycloak-improper-access-control-in-account-rest-api2026-06-10 https://junglewise.ai/threats/cve-2026-36959-u-speed-n300-missing-rate-limiting-in-api-login2026-07-05 https://junglewise.ai/threats/cve-2026-36958-u-speed-n300-resource-exhaustion-dos-in-boa-http-server2026-07-05 https://junglewise.ai/threats/cve-2026-36957-dbit-n300-t1-pro-denial-of-service-in-boa-web-server2026-07-05 https://junglewise.ai/threats/cve-2026-36956-dbit-n300-t1-pro-csrf-in-web-management-interface2026-07-05 https://junglewise.ai/threats/cve-2026-7246-pallets-click-command-injection-in-click-edit2026-06-30 https://junglewise.ai/threats/cve-2026-7163-red-hat-multicluster-engine-information-disclosure-in-assisted2026-05-19 https://junglewise.ai/threats/cve-2026-7402-meware-pdks-flooding-vulnerability-due-to-improper-rate-limiting2026-06-06 https://junglewise.ai/threats/cve-2026-7399-meware-pdks-authorization-bypass-via-user-controlled-key2026-06-06 https://junglewise.ai/threats/cve-2026-7382-meware-pdks-sensitive-information-exposure2026-06-06 https://junglewise.ai/threats/cve-2025-14576-the-qt-company-qt-svg-code-injection-in-vectorimage-component2026-06-30 https://junglewise.ai/threats/cve-2024-13971-lobster-data-lobster-pro-xxe-in-xml-parser2026-05-17 https://junglewise.ai/threats/cve-2026-41016-apache-airflow-smtp-provider-improper-certificate-validation2026-05-22 https://junglewise.ai/threats/cve-2018-1002208-abb-pcm6002026-05-14 https://junglewise.ai/threats/cve-2023-5869-abb-ability-symphony-plus-engineering2026-05-14 https://junglewise.ai/threats/cve-2025-10571-abb-edgenius-management-portal2026-05-14 https://junglewise.ai/threats/cve-2025-14510-abb-ability-optimax2026-05-14 https://junglewise.ai/threats/cve-2026-7270-an-operator-precedence-bug-in-the-kernel-results-in-a-scenario2026-05-10 https://junglewise.ai/threats/cve-2026-5402-wireshark-tls-protocol-dissector-heap-overflow2026-06-30 https://junglewise.ai/threats/cve-2024-39847-4d-server-xxe-in-soap-endpoints2026-05-17 https://junglewise.ai/threats/cve-2026-7446-vetcoders-mcp-server-semgrep-command-injection-in-mcp-interface2026-09-25 https://junglewise.ai/threats/cve-2026-41940-webpros-cpanel-whm-authentication-bypass-in-login-flow2026-05-15 https://junglewise.ai/threats/cve-2026-41680-marked-denial-of-service-via-infinite-recursion-in-tokenizer2026-09-25 https://junglewise.ai/threats/openclaw-path-traversal-in-webchat-audio-embedding-a5efd6552026-05-29 https://junglewise.ai/threats/cve-2026-7404-getsimpletool-mcpo-simple-server-path-traversal-in-delete-shared2026-09-26 https://junglewise.ai/threats/cve-2026-42232-n8n-xml-node-prototype-pollution-leading-to-rce2026-09-25 https://junglewise.ai/threats/cve-2026-42231-n8n-prototype-pollution-in-xml-webhook-body-parser2026-09-25 https://junglewise.ai/threats/cve-2026-42235-n8n-cross-site-scripting-via-mcp-oauth-client2026-09-25 https://junglewise.ai/threats/cve-2026-42226-n8n-credential-authorization-bypass-in-dynamic-node-parameters2026-09-25 https://junglewise.ai/threats/cve-2026-42234-n8n-python-task-runner-sandbox-escape2026-09-25 https://junglewise.ai/threats/cve-2026-42227-n8n-public-api-variables-idor-privilege-escalation2026-09-25 https://junglewise.ai/threats/cve-2026-42236-n8n-unauthenticated-denial-of-service-via-mcp-client-registration2026-09-25 https://junglewise.ai/threats/cve-2026-42228-n8n-hosted-chat-websocket-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-42229-n8n-sql-injection-in-seatable-node2026-09-25 https://junglewise.ai/threats/cve-2026-42230-n8n-open-redirect-in-mcp-oauth-consent-flow2026-09-25 https://junglewise.ai/threats/cve-2026-42233-n8n-sql-injection-in-oracle-database-node-limit-field2026-09-25 https://junglewise.ai/threats/cve-2026-42237-n8n-sql-injection-in-snowflake-and-mysql-nodes2026-09-25 https://junglewise.ai/threats/cve-2026-41586-hyperledger-fabric-sdk-java-deserialization-rce-in-channel-class2026-05-20 https://junglewise.ai/threats/cve-2018-25311-videoflow-digital-video-protection-dvp-directory-traversal-in2026-05-26 https://junglewise.ai/threats/cve-2018-25304-free-download-manager-buffer-overflow-in-url-import-functionality2026-05-26 https://junglewise.ai/threats/cve-2026-7425-amazon-freertos-plus-tcp-memory-safety-issues-in-ipv6-router2026-05-15 https://junglewise.ai/threats/cve-2026-7424-amazon-freertos-plus-tcp-integer-underflow-in-dhcpv6-parser2026-05-15 https://junglewise.ai/threats/cve-2026-7422-amazon-freertos-plus-tcp-multiple-vulnerabilities-in-icmp-and2026-05-15 https://junglewise.ai/threats/cve-2026-6849-pardus-os-my-computer-os-command-injection2026-06-06 https://junglewise.ai/threats/cve-2026-5166-tubitak-bilgem-pardus-software-center-path-traversal2026-06-06 https://junglewise.ai/threats/cve-2026-42198-postgresql-pgjdbc-denial-of-service-via-unbounded-scram2026-06-30 https://junglewise.ai/threats/cve-2026-38993-cockpit-cms-directory-traversal-in-buckets-component2026-06-30 https://junglewise.ai/threats/cve-2026-37555-libsndfile-integer-overflow-in-ima-adpcm-codec2026-06-30 https://junglewise.ai/threats/cve-2026-42523-jenkins-github-plugin-stored-xss-in-job-url-validation2026-09-24 https://junglewise.ai/threats/cve-2026-7111-hmbrand-text-csv-xs-use-after-free-in-callback-handling2026-06-25 https://junglewise.ai/threats/cve-2026-5161-tubitak-bilgem-pardus-about-symlink-attack-vulnerability2026-06-06 https://junglewise.ai/threats/cve-2026-5141-tubitak-bilgem-pardus-software-center-privilege-escalation2026-06-06 https://junglewise.ai/threats/cve-2026-41952-acronis-windows-agents-local-privilege-escalation-via-improper2026-05-19 https://junglewise.ai/threats/cve-2026-41220-acronis-devicelock-dlp-and-cyber-protect-cloud-agent-privilege2026-05-19 https://junglewise.ai/threats/cve-2026-25852-acronis-devicelock-dlp-privilege-escalation-via-dll-hijacking2026-05-19 https://junglewise.ai/threats/cve-2026-5140-tubitak-bilgem-pardus-update-crlf-injection-authentication-bypass2026-06-06 https://junglewise.ai/threats/cve-2026-22740-spring-framework-denial-of-service-in-webflux-multipart-handling2026-07-02 https://junglewise.ai/threats/cve-2026-22741-spring-framework-cache-poisoning-in-static-resource-resolution2026-07-02 https://junglewise.ai/threats/cve-2026-42249-ollama-for-windows-path-traversal-in-update-mechanism2026-05-18 https://junglewise.ai/threats/cve-2026-42248-ollama-for-windows-missing-integrity-check-in-update-mechanism2026-05-18 https://junglewise.ai/threats/cisa-zero-trust-principles-for-operational-technology-guidance-a18c7a1c2026-05-14 https://junglewise.ai/threats/cve-2026-3325-crm-sistemas-megacms-sql-injection-in-get-provincias-endpoint2026-05-19 https://junglewise.ai/threats/cve-2026-42615-gchq-cyberchef-xss-in-show-base64-offsets-operation2026-09-25 https://junglewise.ai/threats/cve-2026-23773-dell-disk-library-for-mainframe-ssrf-in-dlm-8700-and-27002026-07-25 https://junglewise.ai/threats/cve-2026-40560-miyagawa-starman-http-request-smuggling-via-improper-header2026-07-25 https://junglewise.ai/threats/cve-2026-7363-google-chrome-use-after-free-in-canvas2026-07-24 https://junglewise.ai/threats/cve-2026-7361-google-chrome-use-after-free-in-ios2026-07-24 https://junglewise.ai/threats/cve-2026-7360-google-chrome-site-isolation-bypass-in-compositing2026-07-24 https://junglewise.ai/threats/cve-2026-7359-google-chrome-use-after-free-in-angle2026-07-24 https://junglewise.ai/threats/cve-2026-7358-google-chrome-use-after-free-in-animation2026-07-24 https://junglewise.ai/threats/cve-2026-7357-google-chrome-use-after-free-in-gpu2026-07-24 https://junglewise.ai/threats/cve-2026-7356-google-chrome-use-after-free-in-navigation2026-07-24 https://junglewise.ai/threats/cve-2026-7355-google-chrome-use-after-free-in-media2026-07-24 https://junglewise.ai/threats/cve-2026-7354-google-chrome-out-of-bounds-read-and-write-in-angle2026-07-24 https://junglewise.ai/threats/cve-2026-7353-google-chrome-heap-buffer-overflow-in-skia2026-07-24 https://junglewise.ai/threats/cve-2026-7352-google-chrome-use-after-free-in-media2026-07-24 https://junglewise.ai/threats/cve-2026-7351-google-chrome-race-condition-in-mhtml2026-07-24 https://junglewise.ai/threats/cve-2026-7350-google-chrome-use-after-free-in-webmidi2026-07-24 https://junglewise.ai/threats/cve-2026-7349-google-chrome-use-after-free-in-cast2026-07-24 https://junglewise.ai/threats/cve-2026-7348-google-chrome-use-after-free-in-codecs2026-07-24 https://junglewise.ai/threats/cve-2026-7347-google-chrome-use-after-free-in-chromoting2026-07-24 https://junglewise.ai/threats/cve-2026-7346-google-chrome-out-of-bounds-memory-access-in-tint2026-07-24 https://junglewise.ai/threats/cve-2026-7345-google-chrome-sandbox-escape-in-feedback-component2026-07-24 https://junglewise.ai/threats/cve-2026-7344-google-chrome-use-after-free-in-accessibility2026-07-24 https://junglewise.ai/threats/cve-2026-7343-google-chrome-use-after-free-in-views2026-07-24 https://junglewise.ai/threats/cve-2026-7342-google-chrome-webview-use-after-free-in-android2026-07-24 https://junglewise.ai/threats/cve-2026-7341-google-chrome-use-after-free-in-webrtc2026-07-24 https://junglewise.ai/threats/cve-2026-7340-google-chrome-integer-overflow-in-angle2026-07-24 https://junglewise.ai/threats/cve-2026-7339-google-chrome-heap-buffer-overflow-in-webrtc2026-07-24 https://junglewise.ai/threats/cve-2026-7338-google-chrome-use-after-free-in-cast2026-07-24 https://junglewise.ai/threats/cve-2026-7337-google-chrome-type-confusion-in-v82026-07-24 https://junglewise.ai/threats/cve-2026-7336-google-chrome-use-after-free-in-webrtc2026-07-24 https://junglewise.ai/threats/cve-2026-7335-google-chrome-use-after-free-in-media2026-07-24 https://junglewise.ai/threats/cve-2026-7334-google-chrome-use-after-free-in-views2026-07-24 https://junglewise.ai/threats/cve-2026-7333-google-chrome-use-after-free-in-gpu2026-07-24 https://junglewise.ai/threats/cve-2026-42167-proftpd-mod-sql-sql-injection-in-logging-pipeline2026-07-08 https://junglewise.ai/threats/cve-2026-7319-elinsky-execution-system-mcp-path-traversal-in-add-action-tool2026-07-24 https://junglewise.ai/threats/cve-2026-7318-elie-mcp-project-path-traversal-in-search-papers2026-07-24 https://junglewise.ai/threats/cve-2026-7317-trilby-media-grav-cms-insecure-deserialization-in-filecache2026-07-24 https://junglewise.ai/threats/cve-2026-7316-eiliyaabedini-aider-mcp-command-injection-in-code-with-ai-tool2026-07-24 https://junglewise.ai/threats/cve-2026-7315-eiceblue-spire-pdf-mcp-server-path-traversal-in-get-pdf-path2026-07-24 https://junglewise.ai/threats/cve-2026-7314-eiceblue-spire-doc-mcp-server-path-traversal-in-convert-document2026-07-24 https://junglewise.ai/threats/cve-2026-7306-xuxueli-xxl-job-hard-coded-default-token-in-openapi-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-7305-xuxueli-xxl-job-ssrf-in-trigger-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-7303-xuxueli-xxl-job-idor-in-execution-log-handler2026-07-24 https://junglewise.ai/threats/cve-2026-7297-sourcecodester-pizzafy-ecommerce-system-xss-in-save-user2026-07-24 https://junglewise.ai/threats/cve-2026-7296-sourcecodester-pizzafy-ecommerce-system-xss-in-save-order2026-07-24 https://junglewise.ai/threats/cve-2026-41649-outline-idor-in-shares-create-api-allows-cross-workspace-document2026-07-25 https://junglewise.ai/threats/cve-2026-41446-snap-one-wattbox-800-820-series-hidden-diagnostic-endpoints-auth2026-07-25 https://junglewise.ai/threats/cve-2026-37750-mahmoudai1-school-management-system-reflected-xss-in-register-php2026-07-20 https://junglewise.ai/threats/cve-2026-33467-elastic-package-registry-signature-verification-bypass-in-self2026-07-25 https://junglewise.ai/threats/cve-2026-24178-nvidia-nvflare-dashboard-authorization-bypass-in-user-management2026-09-26 https://junglewise.ai/threats/cve-2026-7295-sourcecodester-pizzafy-ecommerce-system-xss-in-save-menu2026-07-24 https://junglewise.ai/threats/cve-2026-6238-gnu-glibc-buffer-over-read-in-dns-debugging-functions2026-06-19 https://junglewise.ai/threats/cve-2026-42432-openclaw-privilege-escalation-via-node-pairing-reconnect-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-42429-openclaw-privilege-escalation-in-gateway-plugin-http2026-09-25 https://junglewise.ai/threats/cve-2026-3893-carlson-vasco-b-gnss-receiver-missing-authentication2026-06-16 https://junglewise.ai/threats/cve-2026-38949-htmly-stored-xss-in-image-content-creation-functionality2026-05-11 https://junglewise.ai/threats/cve-2026-38651-gravitl-netmaker-authentication-bypass-in-verifyhosttoken2026-05-18 https://junglewise.ai/threats/cve-2025-60889-stellargroup-hpx-insecure-deserialization-in-shared-pointer2026-05-18 https://junglewise.ai/threats/cve-2025-60887-cista-insecure-deserialization-memory-address-leak-in-cista-raw2026-07-05 https://junglewise.ai/threats/cve-2026-7324-mozilla-firefox-and-thunderbird-memory-safety-bugs2026-06-30 https://junglewise.ai/threats/cve-2026-7323-mozilla-firefox-and-thunderbird-memory-safety-bugs2026-06-30 https://junglewise.ai/threats/cve-2026-7322-mozilla-firefox-and-thunderbird-memory-safety-bugs2026-06-30 https://junglewise.ai/threats/cve-2026-7320-mozilla-firefox-and-thunderbird-out-of-bounds-read-in-audio-video2026-06-30 https://junglewise.ai/threats/cve-2026-27760-opencats-php-code-injection-in-installer-ajax-endpoint2026-07-14 https://junglewise.ai/threats/cve-2026-5944-cisco-intersight-device-connector-improper-access-control-in2026-05-18 https://junglewise.ai/threats/cve-2026-5781-mphrx-minerva-privilege-escalation-in-mouser-update-endpoint2026-05-28 https://junglewise.ai/threats/cve-2026-5435-gnu-glibc-out-of-bounds-write-in-ns-printrrf-tsig-handling2026-07-14 https://junglewise.ai/threats/cve-2026-41636-apache-thrift-node-js-bindings-uncontrolled-recursion2026-09-25 https://junglewise.ai/threats/cve-2026-6807-nsa-grassmarlin2026-05-14 https://junglewise.ai/threats/cve-2026-3323-vega-vegapuls-6x-missing-authentication-in-configuration-interface2026-05-11 https://junglewise.ai/threats/cve-2026-41607-apache-thrift-out-of-bounds-read-in-c-json-implementation2026-06-30 https://junglewise.ai/threats/cve-2026-41606-apache-thrift-uncontrolled-recursion-in-c-glib-dispatch2026-06-30 https://junglewise.ai/threats/cve-2026-41605-apache-thrift-integer-overflow-in-swift-compact-protocol2026-06-30 https://junglewise.ai/threats/cve-2026-41604-apache-thrift-out-of-bounds-read-in-swift-range-skip-function2026-06-30 https://junglewise.ai/threats/cve-2026-41603-apache-thrift-improper-certificate-validation-in-java2026-06-30 https://junglewise.ai/threats/cve-2026-41602-apache-thrift-integer-overflow-in-go-tframedtransport2026-06-30 https://junglewise.ai/threats/cve-2025-48431-apache-thrift-denial-of-service-in-c-glib-language-bindings2026-06-30 https://junglewise.ai/threats/cve-2026-40966-spring-ai-improper-access-control-in-vectorstorechatmemoryadvisor2026-07-17 https://junglewise.ai/threats/cve-2025-10539-desktime-time-tracking-app-improper-tls-validation-in-update2026-05-18 https://junglewise.ai/threats/cve-2026-41525-kde-dolphin-sandbox-escape-via-filemanager1-protocol2026-05-19 https://junglewise.ai/threats/cve-2024-54013-hanwha-vision-camera-auth-bypass-in-web-server2026-06-27 https://junglewise.ai/threats/cve-2024-54012-hanwha-vision-camera-os-command-injection-in-knb-series-firmware2026-06-27 https://junglewise.ai/threats/cve-2024-54011-hanwha-vision-camera-improper-input-validation-in-firmware2026-06-27 https://junglewise.ai/threats/cve-2026-40356-mit-kerberos-5-integer-underflow-in-negoex-message-parsing2026-07-08 https://junglewise.ai/threats/cve-2026-42510-openstack-ironic-command-injection-in-ipmi-console-interfaces2026-06-08 https://junglewise.ai/threats/cve-2026-40355-mit-kerberos-5-null-pointer-dereference-in-negoex-parsing2026-07-08 https://junglewise.ai/threats/cve-2026-7223-bigsweetpotatostudio-hyperchat-ssrf-in-ai-proxy-middleware2026-09-25 https://junglewise.ai/threats/cve-2026-7222-code-projects-coaching-management-system-stored-xss-in-complaint2026-07-24 https://junglewise.ai/threats/cve-2026-7221-tencentcloudbase-cloudbase-mcp-ssrf-in-open-url-api-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-7220-jackwrichards-fastlymcp-os-command-injection-in-fastly-cli-tool2026-07-24 https://junglewise.ai/threats/cve-2026-7219-totolink-n300rt-buffer-overflow-in-boafrm-formipqos2026-07-24 https://junglewise.ai/threats/cve-2026-7218-totolink-n300rt-buffer-overflow-in-libapmib-so2026-07-24 https://junglewise.ai/threats/cve-2026-7217-deepractice-promptx-path-traversal-in-document-file-handler2026-07-24 https://junglewise.ai/threats/cve-2026-7216-donchelo-processing-claude-mcp-bridge-path-traversal-in-create2026-07-24 https://junglewise.ai/threats/cve-2026-7215-egtai-gmx-vmd-mcp-command-injection-in-vmd-launch-handler2026-07-24 https://junglewise.ai/threats/cve-2026-1460-zyxel-multiple-cpe-and-ont-devices-command-injection-in-dhcp2026-07-08 https://junglewise.ai/threats/cve-2026-0711-zyxel-multiple-products-command-injection-in-easymesh-apis2026-07-08 https://junglewise.ai/threats/cve-2026-7214-eghuzefa-engineer-your-data-path-traversal-in-file-operations2026-07-24 https://junglewise.ai/threats/cve-2026-7213-ef10007-mlops-mcp-path-traversal-in-save-file-tool2026-07-24 https://junglewise.ai/threats/cve-2026-7212-edvardlindelof-notes-mcp-path-traversal-in-notes-mcp-py2026-07-24 https://junglewise.ai/threats/cve-2026-7211-dvladimirov-mcp-command-injection-in-gitsearchrequest2026-07-24 https://junglewise.ai/threats/cve-2026-7206-dubydu-sqlite-mcp-sql-injection-and-path-traversal-in-extract-to2026-09-26 https://junglewise.ai/threats/cve-2026-7205-duartium-papers-mcp-server-path-traversal-in-search-papers2026-07-24 https://junglewise.ai/threats/cve-2026-7204-totolink-a8000ru-command-injection-in-setpptpservercfg2026-07-24 https://junglewise.ai/threats/cve-2026-7203-totolink-a8000ru-command-injection-in-seturlfilterrules2026-07-24 https://junglewise.ai/threats/cve-2026-7202-totolink-a8000ru-command-injection-in-setwifiwpsstart2026-07-24 https://junglewise.ai/threats/cve-2026-32649-milesight-cameras-command-injection-in-web-server2026-07-25 https://junglewise.ai/threats/cve-2026-32644-milesight-aiot-cameras-hard-coded-ssl-private-keys2026-07-25 https://junglewise.ai/threats/cve-2026-20766-milesight-aiot-cameras-heap-overflow-in-firmware2026-07-20 https://junglewise.ai/threats/openclaw-feishu-extension-path-traversal-in-upload-image-91576a082026-09-25 https://junglewise.ai/threats/openclaw-insufficient-environment-variable-sanitization-in-host-exec-ecf4e0312026-09-25 https://junglewise.ai/threats/openclaw-msteams-thread-history-sender-allowlist-bypass-via-graph-api-a101e8382026-09-25 https://junglewise.ai/threats/openclaw-ssh-sandbox-tar-upload-symlink-following-2cc7422c2026-09-25 https://junglewise.ai/threats/openclaw-trailing-dot-localhost-cdp-host-bypass-5a8545c22026-09-25 https://junglewise.ai/threats/cve-2026-7200-sourcecodester-pharmacy-sales-and-inventory-system-xss-in-types2026-07-24 https://junglewise.ai/threats/cve-2026-7199-sourcecodester-pharmacy-sales-and-inventory-system-sql-injection2026-07-24 https://junglewise.ai/threats/cve-2026-7196-codeastro-online-classroom-sql-injection-in-guestdetails2026-07-24 https://junglewise.ai/threats/cve-2026-41372-openclaw-loopback-protection-bypass-in-cdp-discovery2026-09-25 https://junglewise.ai/threats/cve-2026-41371-openclaw-privilege-escalation-in-chat-send-session-reset2026-09-25 https://junglewise.ai/threats/cve-2026-41370-openclaw-path-traversal-in-acp-dispatch2026-09-25 https://junglewise.ai/threats/cve-2026-41369-openclaw-insufficient-environment-variable-sanitization-in-host2026-09-25 https://junglewise.ai/threats/cve-2026-41368-openclaw-environment-variable-disclosure-in-jq-safe-bin-policy2026-09-25 https://junglewise.ai/threats/cve-2026-41367-openclaw-authorization-bypass-in-discord-component-interactions2026-09-25 https://junglewise.ai/threats/cve-2026-41366-openclaw-arbitrary-host-file-read-in-appendlocalmediaparentroots2026-09-25 https://junglewise.ai/threats/cve-2026-41365-openclaw-sender-allowlist-bypass-in-ms-teams-thread-history2026-09-25 https://junglewise.ai/threats/cve-2026-41364-openclaw-symlink-following-in-ssh-sandbox-tar-upload2026-09-25 https://junglewise.ai/threats/cve-2026-41363-openclaw-path-traversal-in-feishu-extension-resolveuploadinput2026-09-25 https://junglewise.ai/threats/cve-2026-41362-openclaw-improper-cache-isolation-in-zalo-webhook-deduplication2026-09-25 https://junglewise.ai/threats/cve-2026-40977-vmware-spring-boot-link-resolution-vulnerability-in2026-07-24 https://junglewise.ai/threats/cve-2026-40976-spring-boot-authentication-bypass-in-default-web-security-filter2026-06-30 https://junglewise.ai/threats/cve-2026-40975-spring-boot-weak-prng-in-random-value-property-source2026-06-30 https://junglewise.ai/threats/cve-2026-40974-vmware-spring-boot-improper-certificate-validation-in-cassandra2026-07-24 https://junglewise.ai/threats/cve-2026-40973-vmware-spring-boot-insecure-temporary-directory-in2026-07-24 https://junglewise.ai/threats/cve-2026-40972-vmware-spring-boot-timing-attack-in-devtools-remote-secret2026-07-24 https://junglewise.ai/threats/cve-2026-27785-milesight-aiot-cameras-hard-coded-credentials2026-07-25 https://junglewise.ai/threats/cve-2024-1708-connectwise-screenconnect-path-traversal2026-05-15 https://junglewise.ai/threats/cve-2026-7194-sourcecodester-pharmacy-sales-and-inventory-system-sql-injection2026-07-24 https://junglewise.ai/threats/cve-2026-7183-aligungr-ueransim-uncaught-exception-in-radio-link-simulation2026-07-24 https://junglewise.ai/threats/cve-2026-7179-ospg-binwalk-path-traversal-in-wince-extraction-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-40971-vmware-spring-boot-improper-certificate-validation-in-rabbitmq2026-07-24 https://junglewise.ai/threats/cve-2026-28747-milesight-aiot-cameras-authorization-bypass-via-weak-key2026-07-25 https://junglewise.ai/threats/cve-2026-7178-chatgptnextweb-nextchat-ssrf-in-artifacts-endpoint2026-07-24 https://junglewise.ai/threats/pimcore-sql-injection-in-dataobject-composite-index-handling-6e57fdb62026-05-28 https://junglewise.ai/threats/cve-2026-5362-pimcore-stored-xss-in-document-embed-editable2026-05-18 https://junglewise.ai/threats/cve-2026-3087-python-shutil-path-traversal-in-zip-extraction-on-windows2026-06-04 https://junglewise.ai/threats/cve-2026-7191-aws-qnabot-arbitrary-code-execution-via-sandbox-bypass2026-05-15 https://junglewise.ai/threats/cve-2026-40970-vmware-spring-boot-improper-certificate-validation-in2026-05-14 https://junglewise.ai/threats/cve-2026-31688-linux-kernel-use-after-free-in-driver-core-driver-match-device2026-06-17 https://junglewise.ai/threats/cve-2026-31686-linux-kernel-double-free-in-kasan-memory-management2026-06-01 https://junglewise.ai/threats/cve-2026-38936-diskover-community-reflected-xss-in-selectindices-php2026-07-05 https://junglewise.ai/threats/cve-2026-38935-diskover-community-reflected-xss-in-view-php2026-07-05 https://junglewise.ai/threats/cve-2026-38934-diskoverdata-diskover-community-csrf-in-settings-process-php2026-07-05 https://junglewise.ai/threats/cve-2026-30462-daylight-studio-fuelcms-path-traversal-in-blocks-module2026-07-05 https://junglewise.ai/threats/cve-2026-41465-projeqtor-path-traversal-in-dynamicdialog-php2026-05-26 https://junglewise.ai/threats/cve-2026-30352-leonvanzyl-autoforge-remote-code-execution-in-devserver-api2026-07-05 https://junglewise.ai/threats/cve-2026-40514-smartertools-smartermail-cryptographic-weakness-in-sharing2026-06-04 https://junglewise.ai/threats/cve-2026-32688-elixir-plug-plug-cowboy-denial-of-service-via-atom-table2026-05-22 https://junglewise.ai/threats/cve-2025-15626-ribblr-ios-app-authorization-bypass-via-user-controlled-key2026-05-19 https://junglewise.ai/threats/cve-2026-33453-apache-camel-remote-code-execution-in-camel-coap-component2026-06-30 https://junglewise.ai/threats/cve-2026-27172-apache-camel-unsafe-java-deserialization-in-camel-consul2026-06-30 https://junglewise.ai/threats/cve-2026-40858-apache-camel-unsafe-deserialization-in-camel-infinispan2026-06-30 https://junglewise.ai/threats/cve-2026-40022-apache-camel-authentication-bypass-in-camel-platform-http-main2026-06-30 https://junglewise.ai/threats/cve-2026-33454-apache-camel-header-injection-in-camel-mail-component2026-06-27 https://junglewise.ai/threats/cve-2026-7101-tenda-f456-buffer-overflow-in-fromwrlclientset2026-05-28 https://junglewise.ai/threats/cve-2026-40860-apache-camel-remote-code-execution-via-unsafe-jms-deserialization2026-09-25 https://junglewise.ai/threats/cve-2026-40473-apache-camel-camel-mina-insecure-deserialization-in-minaconverter2026-06-30 https://junglewise.ai/threats/cve-2026-40453-apache-camel-rce-via-case-variant-header-injection-in-non-http2026-06-27 https://junglewise.ai/threats/cve-2026-40048-apache-camel-pqc-unsafe-deserialization-in2026-06-30 https://junglewise.ai/threats/cve-2026-22077-oppo-wallet-app-trusted-domain-validation-flaw2026-05-19 https://junglewise.ai/threats/cve-2026-42371-uriparser-numeric-truncation-in-comparerange2026-05-18 https://junglewise.ai/threats/cve-2026-3006-winfsp-local-privilege-escalation-via-kernel-heap-overflow2026-06-30 https://junglewise.ai/threats/cve-2026-42363-geovision-gv-ip-device-utility-insufficient-encryption-in-device2026-05-19 https://junglewise.ai/threats/cve-2026-6786-mozilla-firefox-and-thunderbird-memory-safety-bugs2026-05-26 https://junglewise.ai/threats/cve-2026-6785-mozilla-firefox-and-thunderbird-memory-safety-bugs2026-05-27 https://junglewise.ai/threats/cve-2026-41909-openclaw-paired-device-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-44117-openclaw-qqbot-direct-media-upload-ssrf-validation-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-44114-openclaw-environment-variable-namespace-collision-via-workspace2026-09-25 https://junglewise.ai/threats/cve-2026-41908-openclaw-assistant-media-route-scope-enforcement-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-42284-gitpython-argument-injection-in-clone-and-submodule-update2026-05-13 https://junglewise.ai/threats/cve-2026-42275-openziti-zrok-symlink-following-in-webdav-drive-backend2026-05-12 https://junglewise.ai/threats/cve-2026-42274-dadrus-heimdall-authorization-bypass-via-path-normalization2026-05-12 https://junglewise.ai/threats/cve-2026-42273-dadrus-heimdall-case-sensitive-host-matching-policy-bypass2026-05-12 https://junglewise.ai/threats/cve-2026-42272-dadrus-heimdall-authorization-bypass-via-case-sensitive-url2026-05-12 https://junglewise.ai/threats/cve-2026-6999-bivocom-tr321-cross-site-scripting-in-wireless-setting2026-05-14 https://junglewise.ai/threats/cve-2026-31685-linux-kernel-netfilter-out-of-bounds-access-in-ip6t-eui642026-06-01 https://junglewise.ai/threats/cve-2026-31684-linux-kernel-out-of-bounds-read-in-act-csum-nested-vlan-handling2026-06-01 https://junglewise.ai/threats/cve-2026-31682-linux-kernel-out-of-bounds-read-in-bridge-br-nd-send2026-07-14 https://junglewise.ai/threats/cve-2026-31681-linux-kernel-netfilter-out-of-bounds-read-in-xt-multiport2026-06-01 https://junglewise.ai/threats/cve-2026-31680-linux-kernel-use-after-free-in-ipv6-flowlabel2026-07-14 https://junglewise.ai/threats/cve-2026-31676-linux-kernel-race-condition-in-rxrpc-response-packet-handling2026-06-01 https://junglewise.ai/threats/cve-2026-31674-linux-kernel-out-of-bounds-access-in-netfilter-ip6t-rt2026-07-14 https://junglewise.ai/threats/cve-2026-31673-linux-kernel-race-condition-in-af-unix-diagnostic-interface2026-06-01 https://junglewise.ai/threats/cve-2026-6951-steveukx-simple-git-remote-code-execution-via-config-flag2026-09-25 https://junglewise.ai/threats/cve-2026-42171-nullsoft-nsis-privilege-escalation-in-system-installers2026-05-18 https://junglewise.ai/threats/cve-2026-41481-langchain-langchain-text-splitters-ssrf-redirect-bypass-in2026-09-26 https://junglewise.ai/threats/cve-2026-41473-cyberpanel-authentication-bypass-in-ai-scanner-api2026-07-14 https://junglewise.ai/threats/cve-2026-41472-cyberpanel-stored-xss-in-ai-scanner-dashboard2026-07-14 https://junglewise.ai/threats/cve-2026-41501-electerm-command-injection-in-runlinux-function2026-09-25 https://junglewise.ai/threats/excalidraw-xss-via-mermaid-sequence-diagram-labels-476855522026-09-25 https://junglewise.ai/threats/cve-2026-41485-kyverno-controller-denial-of-service-via-foreach-mutation-panic2026-05-11 https://junglewise.ai/threats/cve-2026-41325-kirby-is-vulnerable-to-authorization-bypass-during-page-file-and2026-05-11 https://junglewise.ai/threats/cve-2026-6966-aws-tough-and-tuftool-multiple-vulnerabilities-in-tuf2026-05-15 https://junglewise.ai/threats/cve-2026-41433-opentelemetry-ebpf-instrumentation-privileged-java-agent2026-05-14 https://junglewise.ai/threats/cve-2026-41427-oauth-2-1-provider-unprivileged-users-can-register-oauth-clients2026-09-25 https://junglewise.ai/threats/gemini-cli-remote-code-execution-via-workspace-trust-and-tool-8a3cf9122026-05-11 https://junglewise.ai/threats/cve-2026-41907-uuidjs-uuid-out-of-bounds-write-in-v3-v5-and-v6-functions2026-09-25 https://junglewise.ai/threats/cve-2026-41326-kata-containers-arbitrary-file-write-via-copyfile-symlink2026-06-30 https://junglewise.ai/threats/cve-2026-33662-op-tee-os-integer-underflow-in-rsassa-pkcs1-v1-5-encoding2026-06-05 https://junglewise.ai/threats/cve-2026-42044-axios-prototype-pollution-gadget-in-parsereviver2026-09-25 https://junglewise.ai/threats/cve-2026-42043-axios-no-proxy-bypass-via-rfc-1122-loopback-subnet-addresses2026-09-25 https://junglewise.ai/threats/cve-2026-42041-axios-prototype-pollution-authentication-bypass-in-validatestatus2026-09-25 https://junglewise.ai/threats/cve-2026-42039-axios-unbounded-recursion-denial-of-service-in-toformdata2026-09-25 https://junglewise.ai/threats/cve-2026-42033-axios-prototype-pollution-gadgets-in-mergeconfig2026-09-25 https://junglewise.ai/threats/cve-2026-41898-rust-openssl-buffer-over-read-in-psk-and-cookie-callbacks2026-07-15 https://junglewise.ai/threats/cve-2026-41681-rust-openssl-stack-buffer-overflow-in-mdctxref-digest-final2026-07-15 https://junglewise.ai/threats/cve-2026-41678-rust-openssl-out-of-bounds-write-in-aes-unwrap-key2026-07-17 https://junglewise.ai/threats/cve-2026-41676-rust-openssl-buffer-overflow-in-deriver-derive2026-07-15 https://junglewise.ai/threats/cve-2026-41140-poetry-path-traversal-in-sdist-extraction2026-09-26 https://junglewise.ai/threats/cve-2026-40897-josdejong-mathjs-arbitrary-code-execution-in-expression-parser2026-09-25 https://junglewise.ai/threats/cve-2026-6911-aws-ops-wheel-auth-bypass-and-privilege-escalation-in-v2-api2026-05-15 https://junglewise.ai/threats/cve-2026-42241-g-research-parquetsharp-stack-overflow-in-decimalconverter2026-05-11 https://junglewise.ai/threats/k8sgpt-has-prompt-injection-through-its-k8sgpt-operator-3b2134dd2026-05-11 https://junglewise.ai/threats/go-zserio-has-unbounded-memory-allocation-for-all-platforms-09223ff22026-05-11 https://junglewise.ai/threats/rustls-webpki-denial-of-service-via-panic-on-malformed-crl-bit-string-ced38f7e2026-05-11 https://junglewise.ai/threats/cve-2026-6550-aws-encryption-sdk-for-python-key-commitment-policy-bypass-via2026-05-15 https://junglewise.ai/threats/cve-2026-41305-postcss-has-xss-via-unescaped-style-in-its-css-stringify-output2026-09-25 https://junglewise.ai/threats/cve-2026-31671-linux-kernel-information-leak-in-xfrm-user-build-report2026-07-14 https://junglewise.ai/threats/cve-2026-31670-linux-kernel-memory-exhaustion-in-rfkill-subsystem2026-07-14 https://junglewise.ai/threats/cve-2026-31669-linux-kernel-slab-use-after-free-in-mptcp-ipv6-subflow2026-07-14 https://junglewise.ai/threats/cve-2026-31665-linux-kernel-use-after-free-in-netfilter-nft-ct-timeout-object2026-07-14 https://junglewise.ai/threats/cve-2026-31664-linux-kernel-heap-memory-leak-in-xfrm-build-polexpire2026-06-01 https://junglewise.ai/threats/cve-2026-31663-linux-kernel-race-condition-in-xfrm-network-device-handling2026-06-19 https://junglewise.ai/threats/cve-2026-31658-linux-kernel-memory-leak-in-altera-tse-ethernet-driver2026-07-14 https://junglewise.ai/threats/cve-2026-31657-linux-kernel-batman-adv-use-after-free-in-bridge-loop-avoidance2026-06-01 https://junglewise.ai/threats/cve-2026-31656-linux-kernel-i915-driver-use-after-free-in-heartbeat-management2026-06-01 https://junglewise.ai/threats/cve-2026-31651-linux-kernel-null-pointer-dereference-in-vub300-mmc-driver2026-07-14 https://junglewise.ai/threats/cve-2026-31649-linux-kernel-stmmac-integer-underflow-in-jumbo-frm2026-07-14 https://junglewise.ai/threats/cve-2026-31642-linux-kernel-infinite-loop-in-rxrpc-call-removal2026-06-01 https://junglewise.ai/threats/cve-2026-31641-linux-kernel-heap-buffer-overflow-in-rxrpc-rxgk-token-loading2026-06-30 https://junglewise.ai/threats/cve-2026-31637-linux-kernel-improper-decryption-validation-in-rxrpc-rxkad2026-06-01 https://junglewise.ai/threats/cve-2026-31635-linux-kernel-dos-via-oversized-rxrpc-response-authenticator2026-05-18 https://junglewise.ai/threats/cve-2026-31634-linux-kernel-reference-count-leak-in-rxrpc-server-keyring2026-06-01 https://junglewise.ai/threats/cve-2026-31630-linux-kernel-stack-overflow-in-af-rxrpc-procfs-helpers2026-06-01 https://junglewise.ai/threats/cve-2026-31629-linux-kernel-use-after-free-in-nfc-llcp-component2026-06-01 https://junglewise.ai/threats/cve-2026-31628-linux-kernel-information-disclosure-in-amd-zen1-hardware-divider2026-07-14 https://junglewise.ai/threats/cve-2026-31627-linux-kernel-missing-bounds-check-in-i2c-s3c24xx-driver2026-06-01 https://junglewise.ai/threats/cve-2026-31626-linux-kernel-use-of-uninitialized-memory-in-rtl8723bs-driver2026-06-01 https://junglewise.ai/threats/cve-2026-31625-linux-kernel-null-pointer-dereference-in-alps-hid-driver2026-06-01 https://junglewise.ai/threats/cve-2026-31624-linux-kernel-undefined-shift-in-hid-core-s32ton2026-06-01 https://junglewise.ai/threats/cve-2026-31623-linux-kernel-buffer-overflow-in-cdc-phonet-usb-driver2026-06-01 https://junglewise.ai/threats/cve-2026-31622-linux-kernel-heap-overflow-in-nfc-digital-sdd-response-handler2026-06-01 https://junglewise.ai/threats/cve-2026-31619-linux-kernel-out-of-bounds-access-in-alsa-fireworks-driver2026-06-01 https://junglewise.ai/threats/cve-2026-31618-linux-kernel-divide-by-zero-in-fbdev-tdfxfb-driver2026-06-01 https://junglewise.ai/threats/cve-2026-31617-linux-kernel-integer-underflow-in-usb-ncm-gadget-driver2026-06-01 https://junglewise.ai/threats/cve-2026-31616-linux-kernel-heap-overflow-in-phonet-usb-gadget-driver2026-06-01 https://junglewise.ai/threats/cve-2026-31615-linux-kernel-null-pointer-dereference-in-renesas-usb3-driver2026-06-01 https://junglewise.ai/threats/cve-2026-31613-linux-kernel-oob-read-in-smb-client-symlink-parsing2026-05-23 https://junglewise.ai/threats/cve-2026-31612-linux-kernel-ksmbd-information-leak-in-smb2-get-ea2026-06-01 https://junglewise.ai/threats/cve-2026-31611-linux-kernel-ksmbd-out-of-bounds-read-in-parse-dacl2026-06-01 https://junglewise.ai/threats/cve-2026-31610-linux-kernel-ksmbd-memory-leak-in-spnego-token-decoding2026-07-24 https://junglewise.ai/threats/cve-2026-31607-linux-kernel-heap-out-of-bounds-write-in-usbip-pack-ret-submit2026-06-01 https://junglewise.ai/threats/cve-2026-31605-linux-kernel-divide-by-zero-in-udlfb-driver2026-06-01 https://junglewise.ai/threats/cve-2026-31603-linux-kernel-division-by-zero-in-sm750fb-driver2026-06-01 https://junglewise.ai/threats/cve-2026-31602-linux-kernel-alsa-ctxfi-page-fault-in-ct-vm-map2026-06-01 https://junglewise.ai/threats/cve-2026-31599-linux-kernel-null-pointer-dereference-in-vidtv-driver2026-06-01 https://junglewise.ai/threats/cve-2026-31598-linux-kernel-ocfs2-deadlock-in-unlink-and-dio-end-io-write2026-06-01 https://junglewise.ai/threats/cve-2026-31597-linux-kernel-use-after-free-in-ocfs2-ocfs2-fault2026-06-01 https://junglewise.ai/threats/cve-2026-31596-linux-kernel-ocfs2-denial-of-service-in-ocfs2-group-extend2026-06-01 https://junglewise.ai/threats/cve-2026-31595-linux-kernel-race-condition-in-pci-endpoint-pci-epf-vntb2026-06-01 https://junglewise.ai/threats/cve-2026-31594-linux-kernel-duplicate-resource-teardown-in-pci-epf-vntb2026-06-01 https://junglewise.ai/threats/cve-2026-31590-linux-kernel-kvm-denial-of-service-in-sev-memory-pinning2026-06-01 https://junglewise.ai/threats/cve-2026-31588-linux-kernel-kvm-use-after-free-in-x86-mmio-emulation2026-06-01 https://junglewise.ai/threats/cve-2026-31587-linux-kernel-qualcomm-q6apm-use-after-free-in-asoc-component2026-06-01 https://junglewise.ai/threats/cve-2026-31586-linux-kernel-use-after-free-in-cgwb-release-workfn2026-06-01 https://junglewise.ai/threats/cve-2026-31585-linux-kernel-vidtv-state-corruption-in-vidtv-start-feed2026-06-01 https://junglewise.ai/threats/cve-2026-31583-linux-kernel-use-after-free-in-em28xx-media-driver2026-06-01 https://junglewise.ai/threats/cve-2026-31581-linux-kernel-alsa-6fire-use-after-free-on-disconnect2026-06-01 https://junglewise.ai/threats/cve-2026-31580-linux-kernel-bcache-use-after-free-in-cached-dev-free2026-06-01 https://junglewise.ai/threats/cve-2026-31578-linux-kernel-as102-usb-driver-use-after-free-in-as102-usb-probe2026-06-01 https://junglewise.ai/threats/cve-2026-31577-linux-kernel-nilfs2-null-pointer-dereference-in-nilfs-mdt-save-to2026-06-01 https://junglewise.ai/threats/cve-2026-31576-linux-kernel-hackrf-driver-use-after-free-in-hackrf-probe2026-06-01 https://junglewise.ai/threats/cve-2026-31574-linux-kernel-denial-of-service-in-clockevents2026-05-19 https://junglewise.ai/threats/cve-2026-31565-linux-kernel-rdma-irdma-deadlock-during-netdev-reset2026-07-14 https://junglewise.ai/threats/cve-2026-31563-linux-kernel-dos-in-macb-network-driver-via-invalid-irq-context2026-07-14 https://junglewise.ai/threats/cve-2026-31560-linux-kernel-null-pointer-dereference-in-spi-dw-dma2026-06-01 https://junglewise.ai/threats/cve-2026-31555-linux-kernel-stale-pointer-in-futex-lock-pi-retry-path2026-07-14 https://junglewise.ai/threats/cve-2026-31546-linux-kernel-null-pointer-dereference-in-bonding-debugfs2026-07-14 https://junglewise.ai/threats/cve-2026-5367-ovn-information-disclosure-via-crafted-dhcpv6-packets-in-ovn2026-06-01 https://junglewise.ai/threats/cve-2026-5265-red-hat-ovn-heap-over-read-in-icmp-error-response-generation2026-06-01 https://junglewise.ai/threats/cve-2026-41044-apache-activemq-code-injection-in-admin-web-console2026-06-30 https://junglewise.ai/threats/cve-2026-40466-apache-activemq-code-injection-via-http-discovery-transport2026-06-30 https://junglewise.ai/threats/cve-2026-21728-grafana-tempo-denial-of-service-via-large-query-limits2026-06-29 https://junglewise.ai/threats/cve-2026-1952-delta-electronics-as320t-denial-of-service-via-undocumented2026-05-11 https://junglewise.ai/threats/cve-2026-1951-delta-electronics-as320t-stack-based-buffer-overflow-in-directory2026-05-11 https://junglewise.ai/threats/cve-2026-1950-delta-electronics-as320t-stack-overflow-in-file-name-handling2026-05-11 https://junglewise.ai/threats/cve-2026-1949-delta-electronics-as320t-stack-buffer-overflow-in-web-service2026-05-11 https://junglewise.ai/threats/cve-2026-6947-d-link-dwm-222w-brute-force-protection-bypass2026-05-19 https://junglewise.ai/threats/cve-2026-41319-mailkit-starttls-response-injection-in-smtp-imap-and-pop3-streams2026-05-21 https://junglewise.ai/threats/cve-2026-41316-ruby-erb-arbitrary-code-execution-via-deserialization-guard2026-06-30 https://junglewise.ai/threats/cve-2026-33317-op-tee-out-of-bounds-read-and-write-in-pkcs-11-ta2026-06-05 https://junglewise.ai/threats/cve-2026-32952-azure-go-ntlmssp-denial-of-service-via-malformed-ntlm-challenge2026-05-21 https://junglewise.ai/threats/openclaw-gateway-incomplete-websocket-session-termination-after-token-16afd2dc2026-09-25 https://junglewise.ai/threats/openclaw-openshell-arbitrary-code-execution-via-mirror-mode-d60e5aaa2026-09-25 https://junglewise.ai/threats/openclaw-privilege-escalation-in-telegram-and-cron-configuration-aef610272026-09-25 https://junglewise.ai/threats/openclaw-slack-thread-context-sender-allowlist-bypass-dd6d2a702026-09-25 https://junglewise.ai/threats/openclaw-webhook-replay-detection-bypass-via-base64-re-encoding-4ed6c2c32026-09-25 https://junglewise.ai/threats/openclaw-zalo-webhook-replay-dedupe-key-insufficient-scope-e5be7a5f2026-09-25 https://junglewise.ai/threats/openclaw-authentication-bypass-in-remote-onboarding-f43725032026-09-25 https://junglewise.ai/threats/openclaw-callback-origin-mutation-in-plivo-voice-call-replay-05150f4d2026-09-25 https://junglewise.ai/threats/openclaw-csrf-in-http-operator-endpoints-via-trusted-proxy-mode-20075d522026-09-25 https://junglewise.ai/threats/openclaw-denial-of-service-in-line-webhook-handler-61e7ba042026-09-25 https://junglewise.ai/threats/openclaw-discord-component-interaction-group-dm-misclassification-22981f6c2026-09-25 https://junglewise.ai/threats/openclaw-discord-slash-commands-authorization-bypass-68c6c4922026-09-25 https://junglewise.ai/threats/openclaw-gateway-control-interface-information-disclosure-bc5d713f2026-09-25 https://junglewise.ai/threats/openclaw-gateway-privilege-escalation-via-chat-send-verbose-parameter-239283072026-09-25 https://junglewise.ai/threats/openclaw-incomplete-host-env-blocklist-allows-code-execution-via-b85b45c12026-09-25 https://junglewise.ai/threats/openclaw-information-disclosure-in-gateway-hello-snapshots-89e02c642026-09-25 https://junglewise.ai/threats/openclaw-node-scope-gate-bypass-leading-to-host-rce-ebe9c4282026-09-25 https://junglewise.ai/threats/openclaw-pending-pairing-request-cap-enforcement-bypass-376f2c882026-09-25 https://junglewise.ai/threats/openclaw-rate-limiting-bypass-via-fake-device-token-19e442722026-09-25 https://junglewise.ai/threats/openclaw-workspace-env-hooks-root-override-c6f1cd242026-09-25 https://junglewise.ai/threats/cve-2026-25775-senselive-x3050-missing-authentication-in-remote-management2026-06-16 https://junglewise.ai/threats/cve-2024-57726-simplehelp-privilege-escalation-via-missing-authorization-in-api2026-05-15 https://junglewise.ai/threats/cve-2024-57728-simplehelp-path-traversal-in-zip-file-upload2026-05-15 https://junglewise.ai/threats/cve-2024-7399-samsung-magicinfo-9-server-path-traversal2026-05-15 https://junglewise.ai/threats/cve-2025-29635-d-link-dir-823x-command-injection-in-set-prohibiting2026-05-15 https://junglewise.ai/threats/cve-2026-6732-gnome-libxml2-type-confusion-in-xmlparsereference2026-06-30 https://junglewise.ai/threats/cve-2026-41355-openclaw-openshell-arbitrary-code-execution-in-mirror-mode2026-09-25 https://junglewise.ai/threats/cve-2026-26210-ktransformers-unsafe-deserialization-in-balance-serve-zmq2026-07-14 https://junglewise.ai/threats/cve-2026-41321-cloudflare-has-ssrf-via-redirect-following-through-its-image2026-09-25 https://junglewise.ai/threats/cve-2026-39973-apktool-path-traversal-to-arbitrary-file-write2026-05-11 https://junglewise.ai/threats/cve-2026-33318-actual-has-privilege-escalation-via-change-password-endpoint-on2026-09-25 https://junglewise.ai/threats/cve-2026-6942-radareorg-radare2-mcp-os-command-injection-in-json-rpc-interface2026-06-04 https://junglewise.ai/threats/cve-2026-6376-spicejet-online-booking-system-missing-authentication-in-booking2026-06-16 https://junglewise.ai/threats/cve-2026-6375-spicejet-online-booking-system-authorization-bypass-in-booking-api2026-06-16 https://junglewise.ai/threats/cve-2026-28525-swupdate-integer-underflow-in-multipart-upload-parser2026-06-04 https://junglewise.ai/threats/cve-2025-62373-pipecat-remote-code-execution-by-pickle-deserialization-through2026-09-26 https://junglewise.ai/threats/cve-2026-25874-hugging-face-lerobot-insecure-deserialization-in-grpc2026-07-14 https://junglewise.ai/threats/cve-2026-6074-intrado-911-emergency-gateway-path-traversal-in-download-debuglog2026-06-04 https://junglewise.ai/threats/cve-2026-41246-project-contour-lua-code-injection-in-cookie-rewriting-feature2026-07-01 https://junglewise.ai/threats/cve-2026-41213-node-oauth-oauth2-server-brute-force-vulnerability-in-pkce-token2026-09-25 https://junglewise.ai/threats/cve-2026-41205-sqlalchemy-mako-path-traversal-in-templatelookup2026-05-20 https://junglewise.ai/threats/cve-2026-40886-argo-workflows-denial-of-service-via-malformed-pod-annotation2026-06-30 https://junglewise.ai/threats/openclaw-assistant-media-route-authorization-bypass-5cce6f2e2026-09-25 https://junglewise.ai/threats/cve-2026-6921-google-chrome-race-condition-in-gpu-sandbox-escape2026-05-27 https://junglewise.ai/threats/cve-2026-6920-google-chrome-out-of-bounds-read-in-gpu2026-05-26 https://junglewise.ai/threats/cve-2026-6919-google-chrome-use-after-free-in-devtools-sandbox-escape2026-05-26 https://junglewise.ai/threats/cve-2026-31533-linux-kernel-use-after-free-in-net-tls-encryption-error-path2026-07-14 https://junglewise.ai/threats/cve-2026-39087-ntfy-ssrf-in-web-push-endpoint-validation2026-07-04 https://junglewise.ai/threats/cve-2026-34003-x-org-x-server-out-of-bounds-memory-access-in-xkb-request2026-05-19 https://junglewise.ai/threats/cve-2026-34001-x-org-x-server-use-after-free-in-misynctriggerfence2026-05-19 https://junglewise.ai/threats/cve-2026-33999-x-org-x-server-integer-underflow-in-xkb-compatibility-map2026-05-19 https://junglewise.ai/threats/cve-2026-41322-astro-cache-poisoning-due-to-incorrect-error-handling-when-if2026-09-25 https://junglewise.ai/threats/openc3-cosmos-permissions-bypass-provides-user-access-to-unassigned-7bacf5792026-05-11 https://junglewise.ai/threats/cve-2026-42087-openc3-cosmos-sql-injection-in-questdb-time-series-database2026-05-29 https://junglewise.ai/threats/cve-2025-13763-opensc-libopensc-uninitialized-variables-in-card-detection2026-06-25 https://junglewise.ai/threats/cve-2026-31532-linux-kernel-use-after-free-in-can-raw-rcv2026-06-01 https://junglewise.ai/threats/china-nexus-threat-actors-use-covert-networks-of-compromised-soho-and-4edd96492026-05-14 https://junglewise.ai/threats/cve-2025-70994-yadea-t5-electric-bicycle2026-05-10 https://junglewise.ai/threats/cve-2026-6903-zurich-instruments-labone-path-traversal-in-web-server2026-05-19 https://junglewise.ai/threats/cve-2026-6887-borg-technology-corporation-borg-spm-2007-sql-injection2026-05-19 https://junglewise.ai/threats/cve-2026-6886-borg-technology-corporation-borg-spm-2007-authentication-bypass2026-05-19 https://junglewise.ai/threats/cve-2026-6885-borg-technology-borg-spm-2007-arbitrary-file-upload2026-05-19 https://junglewise.ai/threats/cve-2026-3960-h2o-ai-h2o-3-remote-code-execution-in-importsqltable-api2026-05-19 https://junglewise.ai/threats/cve-2026-41564-cryptx-prng-state-reuse-after-fork-in-crypt-pk-modules2026-05-14 https://junglewise.ai/threats/cve-2026-41040-growi-redos-denial-of-service-via-crafted-input-string2026-05-19 https://junglewise.ai/threats/cve-2025-10549-efficientlab-controlio-dll-hijacking-via-weak-folder-permissions2026-05-19 https://junglewise.ai/threats/uuid-library-missing-buffer-bounds-check-in-v3-v5-v6-e298efbd2026-09-25 https://junglewise.ai/threats/cve-2026-41989-gnupg-libgcrypt-heap-buffer-overflow-in-ecdh-decryption2026-07-14 https://junglewise.ai/threats/cve-2026-41988-uuidjs-uuid-missing-buffer-bounds-check-in-v3-v5-and-v6-methods2026-07-08 https://junglewise.ai/threats/cve-2026-3007-three-learning-koollab-lms-stored-xss-in-courselet-feature2026-05-11 https://junglewise.ai/threats/cve-2026-41196-luanti-lua-sandbox-escape-via-luajit-environment-manipulation2026-05-14 https://junglewise.ai/threats/cve-2026-41182-langchain-langsmith-sdk-sensitive-information-leak-in-streaming2026-09-25 https://junglewise.ai/threats/cve-2026-6874-ericc-ch-copilot-api-reverse-dns-reliance-in-header-handler2026-09-25 https://junglewise.ai/threats/cve-2026-5935-ibm-tssc-and-ts4500-imc-os-command-injection2026-05-18 https://junglewise.ai/threats/cve-2026-5926-ibm-verify-identity-access-use-of-weak-cryptographic-algorithms2026-05-14 https://junglewise.ai/threats/cve-2026-41179-rclone-unauthenticated-remote-code-execution-in-rc-operations2026-05-20 https://junglewise.ai/threats/cve-2026-41176-rclone-authentication-bypass-in-remote-control-options-set2026-06-30 https://junglewise.ai/threats/cve-2026-40062-ziosoft-ziostation2-path-traversal2026-05-14 https://junglewise.ai/threats/cve-2026-3621-ibm-websphere-application-server-liberty-identity-spoofing2026-05-14 https://junglewise.ai/threats/cve-2026-32679-japan-media-systems-liveon-meet-and-canon-plugin-dll-hijacking-in2026-05-18 https://junglewise.ai/threats/cve-2026-29198-rocket-chat-nosql-injection-in-oauth-token-handling2026-05-14 https://junglewise.ai/threats/cve-2026-1726-ibm-guardium-key-lifecycle-manager-privilege-escalation2026-06-11 https://junglewise.ai/threats/cve-2025-36074-ibm-security-verify-directory-unrestricted-file-upload2026-05-14 https://junglewise.ai/threats/cve-2026-42086-openc3-cosmos-self-xss-in-command-sender2026-09-26 https://junglewise.ai/threats/cve-2026-42085-openc3-cosmos-path-traversal-in-save-tool-config2026-05-29 https://junglewise.ai/threats/cve-2026-41455-wekan-ssrf-and-unauthorized-comment-modification-in-webhooks2026-05-26 https://junglewise.ai/threats/cve-2026-41454-wekan-missing-authorization-in-integration-rest-api2026-07-14 https://junglewise.ai/threats/cve-2026-42084-openc3-cosmos-unverified-password-change-via-session-token2026-05-29 https://junglewise.ai/threats/cve-2026-42075-evomap-evolver-path-traversal-in-fetch-command-via-out-flag2026-09-25 https://junglewise.ai/threats/cve-2026-42076-evomap-evolver-command-injection-via-execsync-in-extractllm2026-09-25 https://junglewise.ai/threats/cve-2026-42077-evomap-evolver-prototype-pollution-in-mailbox-store2026-09-25 https://junglewise.ai/threats/cve-2026-41134-microsoft-kiota-code-injection-in-generated-clients2026-07-21 https://junglewise.ai/threats/cve-2026-3837-frappe-framework-stored-xss-in-icon-and-color-fields2026-05-14 https://junglewise.ai/threats/cve-2026-41894-siyuan-path-traversal-via-double-url-encoding-in-export-endpoint2026-05-11 https://junglewise.ai/threats/cve-2026-6019-python-cpython-html-injection-in-http-cookies-morsel-js-output2026-05-18 https://junglewise.ai/threats/cve-2026-3673-frappe-framework-stored-xss-in-tag-pill-renderer2026-05-14 https://junglewise.ai/threats/cve-2026-41641-nocodb-plugin-collection-sql-sql-validation-bypass-in-update2026-09-25 https://junglewise.ai/threats/cve-2026-41135-free5gc-pcf-memory-leak-via-cors-middleware-registration-in-http2026-05-11 https://junglewise.ai/threats/cve-2026-40937-rustfs-missing-admin-authorization-on-notification-target2026-05-11 https://junglewise.ai/threats/cve-2026-34065-nimiq-primitives-node-crash-due-to-missing-interlink-validation2026-05-11 https://junglewise.ai/threats/cve-2026-41459-thexerteproject-xerte-online-toolkits-path-disclosure-in-setup2026-07-14 https://junglewise.ai/threats/cve-2026-34415-the-xerte-project-xerte-online-toolkits-rce-in-elfinder-connector2026-07-14 https://junglewise.ai/threats/cve-2026-34414-the-xerte-project-xerte-online-toolkits-path-traversal-in2026-07-14 https://junglewise.ai/threats/cve-2026-34413-the-xerte-project-xerte-online-toolkits-auth-bypass-in-elfinder2026-07-14 https://junglewise.ai/threats/cve-2026-28950-apple-ios-and-ipados-improper-data-redaction-in-notification2026-05-17 https://junglewise.ai/threats/cve-2026-33471-nimiq-block-has-skip-block-quorum-bypass-via-out-of-range-bitset2026-05-11 https://junglewise.ai/threats/uutils-coreutils-improper-handling-of-unicode-encoding-in-ln-utility-fde218eb2026-07-06 https://junglewise.ai/threats/uutils-coreutils-incorrect-authorization-in-id-utility-de18bc342026-07-06 https://junglewise.ai/threats/uutils-coreutils-incorrect-provision-of-specified-functionality-in-cut-b41ad7682026-07-06 https://junglewise.ai/threats/uutils-coreutils-ui-misrepresentation-in-id-utility-25791fb22026-07-06 https://junglewise.ai/threats/uutils-coreutils-bypass-of-preserve-root-protection-in-rm-utility-d3be33892026-07-06 https://junglewise.ai/threats/uutils-coreutils-data-corruption-in-comm-utility-via-lossy-utf-8-e8e71d052026-07-06 https://junglewise.ai/threats/uutils-coreutils-data-loss-in-comm-utility-via-non-regular-file-inputs-98d1a5f12026-07-06 https://junglewise.ai/threats/uutils-coreutils-environment-variable-evasion-in-printenv-93329b692026-07-06 https://junglewise.ai/threats/uutils-coreutils-improper-input-validation-in-kill-utility-ad3a966a2026-07-06 https://junglewise.ai/threats/uutils-coreutils-improper-link-resolution-in-mv-utility-ec2806322026-07-06 https://junglewise.ai/threats/uutils-coreutils-improper-preservation-of-permissions-in-mknod-7af331102026-07-06 https://junglewise.ai/threats/uutils-coreutils-incorrect-output-suppression-in-cut-utility-2407d4802026-07-06 https://junglewise.ai/threats/uutils-coreutils-incorrect-resource-resolution-in-cp-recursive-copy-98f4ec912026-07-06 https://junglewise.ai/threats/uutils-coreutils-path-traversal-bypass-in-rm-utility-9e90c1192026-07-06 https://junglewise.ai/threats/uutils-coreutils-toctou-race-condition-in-install-utility-0fe48ad32026-07-06 https://junglewise.ai/threats/uutils-coreutils-toctou-race-condition-in-install-utility-79034b8e2026-07-06 https://junglewise.ai/threats/uutils-coreutils-toctou-race-condition-in-mkdir-m-e85122c72026-07-06 https://junglewise.ai/threats/uutils-coreutils-toctou-race-condition-in-safe-traversal-module-5849001d2026-07-06 https://junglewise.ai/threats/uutils-coreutils-incorrect-exit-code-handling-in-chmod-19818ede2026-07-06 https://junglewise.ai/threats/uutils-coreutils-incorrect-exit-code-in-chown-and-chgrp-425aff422026-07-06 https://junglewise.ai/threats/uutils-coreutils-incorrect-permission-assignment-in-mkfifo-45a931ce2026-07-06 https://junglewise.ai/threats/uutils-coreutils-insecure-temporary-file-creation-in-mktemp-c5139ae32026-07-06 https://junglewise.ai/threats/uutils-coreutils-path-traversal-bypass-of-preserve-root-in-chmod-2e5fccae2026-07-06 https://junglewise.ai/threats/cve-2026-41240-dompurify-forbid-tags-bypassed-by-function-based-add-tags2026-09-25 https://junglewise.ai/threats/cve-2026-41239-dompurify-has-a-safe-for-templates-bypass-in-return-dom-mode2026-09-25 https://junglewise.ai/threats/cve-2026-41238-dompurify-prototype-pollution-to-xss-bypass-via-custom-element2026-09-25 https://junglewise.ai/threats/cve-2026-32885-ddev-has-zipslip-path-traversal-in-tar-and-zip-archive-extraction2026-05-11 https://junglewise.ai/threats/cve-2026-35548-guardsix-odbc-enrichment-plugins-ssrf-and-credential-reuse2026-05-14 https://junglewise.ai/threats/phpunit-argument-injection-via-newline-in-php-ini-values-forwarded-to-524cba7f2026-05-11 https://junglewise.ai/threats/engram-http-server-cors-wildcard-auth-off-by-default-enables-csrf-graph-2c1479292026-05-11 https://junglewise.ai/threats/nickcirv-engramx-csrf-and-prompt-injection-in-http-server-49ab8bb12026-09-25 https://junglewise.ai/threats/cve-2026-41166-openremote-has-improper-access-control-via-updateuserrealmroles2026-05-11 https://junglewise.ai/threats/saltcorn-data-tenant-user-role-is-used-for-tenant-creation-role-check-06a209822026-05-11 https://junglewise.ai/threats/saltcorn-tenant-privilege-escalation-via-role-context-mismatch-c3b447cf2026-09-25 https://junglewise.ai/threats/cve-2026-6862-rhboot-efivar-stack-overflow-in-libefiboot-device-path-parser2026-05-14 https://junglewise.ai/threats/cve-2026-6859-instructlab-arbitrary-code-execution-via-hardcoded-trust-remote2026-06-30 https://junglewise.ai/threats/cve-2026-6356-augmentt-web-application-privilege-escalation-via-parameter2026-05-14 https://junglewise.ai/threats/cve-2026-6355-augmentt-web-application-idor-in-customerid-parameter2026-05-14 https://junglewise.ai/threats/cve-2026-5749-fullstep-v5-authentication-bypass-in-registration-process2026-05-19 https://junglewise.ai/threats/cve-2026-41651-packagekit-privilege-escalation-via-toctou-race-condition-in-pk2026-06-30 https://junglewise.ai/threats/cve-2026-33611-powerdns-authoritative-server-database-corruption-via-rest-api2026-05-14 https://junglewise.ai/threats/cve-2026-31527-linux-kernel-use-after-free-in-platform-driver-core2026-06-01 https://junglewise.ai/threats/cve-2026-31521-linux-kernel-out-of-bounds-read-in-module-loader-simplify-symbols2026-07-14 https://junglewise.ai/threats/cve-2026-31518-linux-kernel-memory-leak-in-esp-over-tcp-with-async-crypto2026-07-14 https://junglewise.ai/threats/cve-2026-31515-linux-kernel-buffer-overflow-in-af-key-pfkey-send-migrate2026-07-14 https://junglewise.ai/threats/cve-2026-31511-linux-kernel-use-after-free-in-bluetooth-mgmt-monitor2026-05-17 https://junglewise.ai/threats/cve-2026-31508-linux-kernel-open-vswitch-use-after-free-in-netdev-teardown2026-07-14 https://junglewise.ai/threats/cve-2026-31507-linux-kernel-double-free-in-net-smc-via-splice-tee2026-07-14 https://junglewise.ai/threats/cve-2026-31504-linux-kernel-use-after-free-in-packet-release-via-fanout-race2026-07-14 https://junglewise.ai/threats/cve-2026-31503-linux-kernel-udp-wildcard-bind-conflict-bypass-in-hash22026-07-14 https://junglewise.ai/threats/cve-2026-31502-linux-kernel-team-driver-type-confusion-in-non-ethernet-ports2026-07-24 https://junglewise.ai/threats/cve-2026-31500-linux-kernel-intel-bluetooth-use-after-free-in-btintel-hw-error2026-06-01 https://junglewise.ai/threats/cve-2026-31499-linux-kernel-bluetooth-l2cap-deadlock-in-l2cap-conn-del2026-05-14 https://junglewise.ai/threats/cve-2026-31496-linux-kernel-information-leak-in-netfilter-nf-conntrack-expect2026-07-14 https://junglewise.ai/threats/cve-2026-31495-linux-kernel-undefined-behavior-in-netfilter-ctnetlink2026-07-14 https://junglewise.ai/threats/cve-2026-31494-linux-kernel-out-of-bounds-write-in-macb-network-driver2026-07-14 https://junglewise.ai/threats/cve-2026-31489-linux-kernel-double-put-in-meson-spicc-spi-driver2026-05-17 https://junglewise.ai/threats/cve-2026-31488-linux-kernel-amdgpu-use-after-free-in-dsc-validation2026-05-17 https://junglewise.ai/threats/cve-2026-31486-linux-kernel-race-condition-in-pmbus-regulator-operations2026-06-01 https://junglewise.ai/threats/cve-2026-31485-linux-kernel-use-after-free-in-fsl-lpspi-spi-driver2026-07-14 https://junglewise.ai/threats/cve-2026-31476-linux-kernel-ksmbd-denial-of-service-via-session-binding-failure2026-06-01 https://junglewise.ai/threats/cve-2026-31474-linux-kernel-use-after-free-in-can-isotp-isotp-sendmsg2026-06-30 https://junglewise.ai/threats/cve-2026-31469-linux-kernel-virtio-net-use-after-free-in-dst-ops2026-07-14 https://junglewise.ai/threats/cve-2026-31466-linux-kernel-race-condition-in-softleaf-to-folio-on-arm642026-07-14 https://junglewise.ai/threats/cve-2026-31458-linux-kernel-null-pointer-dereference-in-mm-damon-sysfs2026-06-05 https://junglewise.ai/threats/cve-2026-31457-linux-kernel-null-pointer-dereference-in-mm-damon-sysfs2026-06-05 https://junglewise.ai/threats/cve-2026-31456-linux-kernel-race-condition-in-mm-pagewalk-during-pud-split2026-06-05 https://junglewise.ai/threats/cve-2026-31455-linux-kernel-xfs-use-after-free-in-xfs-unmount-flush-inodes2026-06-05 https://junglewise.ai/threats/cve-2026-31452-linux-kernel-ext4-denial-of-service-in-inline-data-truncation2026-07-14 https://junglewise.ai/threats/cve-2026-31451-linux-kernel-ext4-denial-of-service-in-ext4-read-inline-folio2026-07-04 https://junglewise.ai/threats/cve-2026-31450-linux-kernel-ext4-null-pointer-dereference-in-jinode2026-07-14 https://junglewise.ai/threats/cve-2026-31449-linux-kernel-ext4-out-of-bounds-read-in-ext4-ext-correct-indexes2026-05-17 https://junglewise.ai/threats/cve-2026-31448-linux-kernel-infinite-loop-in-ext4-file-system-extent-mapping2026-07-14 https://junglewise.ai/threats/cve-2026-31447-linux-kernel-denial-of-service-in-ext4-bigalloc-mount-validation2026-07-14 https://junglewise.ai/threats/cve-2026-31446-linux-kernel-use-after-free-in-ext4-update-super-work2026-07-14 https://junglewise.ai/threats/cve-2026-31441-linux-kernel-memory-leak-in-idxd-dmaengine-workqueue-reset2026-07-14 https://junglewise.ai/threats/cve-2026-31440-linux-kernel-memory-leak-in-dmaengine-idxd-driver2026-05-17 https://junglewise.ai/threats/cve-2026-31439-linux-kernel-xilinx-xdma-regmap-init-error-handling-vulnerability2026-05-19 https://junglewise.ai/threats/cve-2026-31438-linux-kernel-denial-of-service-in-netfs-limit-iter2026-05-19 https://junglewise.ai/threats/cve-2026-31437-linux-kernel-null-pointer-dereference-in-netfs-unbuffered-write2026-05-19 https://junglewise.ai/threats/cve-2026-31436-linux-kernel-idxd-driver-null-pointer-dereference-in-llist-abort2026-05-19 https://junglewise.ai/threats/cve-2026-31435-linux-kernel-netfs-out-of-bounds-read-in-read-retry-c2026-05-19 https://junglewise.ai/threats/cve-2026-31434-linux-kernel-btrfs-memory-leak-in-space-info-sub-group2026-05-20 https://junglewise.ai/threats/cve-2026-31192-raindrop-io-bookmark-manager-insufficient-validation-of-extension2026-05-14 https://junglewise.ai/threats/cve-2026-0539-pcvisit-remotehost-privilege-escalation-via-insecure-service2026-05-19 https://junglewise.ai/threats/cve-2026-6857-apache-camel-camel-infinispan-rce-via-unsafe-deserialization2026-05-21 https://junglewise.ai/threats/cve-2026-6855-red-hat-instructlab-path-traversal-in-chat-session-handler2026-09-26 https://junglewise.ai/threats/cve-2026-6848-red-hat-quay-authentication-bypass-in-sensitive-operations-re2026-05-20 https://junglewise.ai/threats/cve-2026-6846-gnu-binutils-heap-buffer-overflow-in-xcoff-link-add-symbols2026-05-20 https://junglewise.ai/threats/cve-2026-6845-gnu-binutils-denial-of-service-in-readelf2026-05-20 https://junglewise.ai/threats/cve-2026-6844-gnu-binutils-denial-of-service-in-readelf2026-05-20 https://junglewise.ai/threats/cve-2026-6843-gnu-nano-format-string-vulnerability-in-statusline2026-05-20 https://junglewise.ai/threats/cve-2026-31433-linux-kernel-ksmbd-out-of-bounds-write-in-get-file-all-info2026-05-22 https://junglewise.ai/threats/cve-2026-31432-linux-kernel-ksmbd-out-of-bounds-write-in-query-info2026-05-21 https://junglewise.ai/threats/cve-2026-31431-linux-kernel-crypto-algif-aead-improper-memory-handling2026-09-24 https://junglewise.ai/threats/cve-2026-40542-apache-httpclient-authentication-bypass-in-scram-sha-2562026-06-30 https://junglewise.ai/threats/cve-2026-22754-spring-spring-security-authorization-bypass-in-intercept-url2026-06-30 https://junglewise.ai/threats/cve-2026-22747-vmware-spring-security-user-impersonation-in2026-06-30 https://junglewise.ai/threats/cve-2026-40451-deepl-chrome-extension-cross-site-scripting2026-06-16 https://junglewise.ai/threats/cve-2026-6392-tanium-threat-response-information-disclosure-in-configs2026-05-11 https://junglewise.ai/threats/cve-2026-41458-owntone-server-race-condition-in-daap-login-handler2026-07-14 https://junglewise.ai/threats/cve-2026-41457-owntone-server-sql-injection-in-daap-query-and-filter-parameters2026-07-14 https://junglewise.ai/threats/cve-2026-41144-nasa-f-prime-integer-overflow-and-arbitrary-file-write-in2026-05-21 https://junglewise.ai/threats/cve-2026-40575-oauth2-proxy-authentication-bypass-via-x-forwarded-uri-spoofing2026-07-21 https://junglewise.ai/threats/cve-2026-4821-github-enterprise-server-os-command-injection-in-management2026-06-10 https://junglewise.ai/threats/cve-2026-6832-nesquena-hermes-webui-arbitrary-file-deletion-in-session-api2026-06-04 https://junglewise.ai/threats/cve-2026-22751-spring-spring-security-toctou-race-condition-in2026-07-17 https://junglewise.ai/threats/cve-2026-40938-tekton-pipelines-argument-injection-in-git-resolver-revision2026-05-21 https://junglewise.ai/threats/cve-2026-40924-tekton-pipelines-dos-via-unbounded-memory-allocation-in-http2026-05-22 https://junglewise.ai/threats/cve-2026-40923-tekton-pipelines-path-traversal-in-volumemount-validation2026-05-22 https://junglewise.ai/threats/cve-2026-40906-electricsql-sql-injection-in-v1-shape-api-order-by-parameter2026-06-30 https://junglewise.ai/threats/cve-2026-40895-follow-redirects-sensitive-header-leak-in-cross-domain-redirects2026-09-25 https://junglewise.ai/threats/cve-2026-34314-oracle-financial-services-analytical-applications-infrastructure2026-05-11 https://junglewise.ai/threats/cve-2026-34282-oracle-java-se-and-graalvm-denial-of-service-in-networking2026-06-30 https://junglewise.ai/threats/cve-2026-33519-esri-portal-for-arcgis-incorrect-authorization-in-developer2026-05-18 https://junglewise.ai/threats/cve-2026-33518-esri-portal-for-arcgis-incorrect-privilege-assignment2026-05-18 https://junglewise.ai/threats/cve-2026-22016-oracle-java-se-jaxp-information-disclosure2026-06-30 https://junglewise.ai/threats/cve-2026-21999-oracle-database-server-information-disclosure-in-xml-database2026-07-08 https://junglewise.ai/threats/cve-2025-70420-genesys-latitude-sql-injection-in-backend-database2026-06-10 https://junglewise.ai/threats/cve-2026-41067-astro-xss-in-define-vars-via-incomplete-script-tag-sanitization2026-09-25 https://junglewise.ai/threats/cve-2026-41066-lxml-xxe-in-iterparse-and-etcompatxmlparser2026-06-06 https://junglewise.ai/threats/cve-2026-41264-flowise-csv-agent-prompt-injection-remote-code-execution2026-09-25 https://junglewise.ai/threats/cve-2026-40372-microsoft-asp-net-core-privilege-escalation-via-improper2026-06-27 https://junglewise.ai/threats/cve-2026-33813-go-x-image-webp-denial-of-service-on-32-bit-platforms2026-06-25 https://junglewise.ai/threats/cve-2026-33812-go-x-image-font-sfnt-denial-of-service-via-excessive-memory2026-05-14 https://junglewise.ai/threats/cve-2026-41197-brillig-heap-corruption-in-foreign-call-results-with-nested-tuple2026-05-11 https://junglewise.ai/threats/cve-2026-41456-bludit-cms-reflected-xss-in-search-plugin2026-07-14 https://junglewise.ai/threats/cve-2026-40488-openmage-lts-customer-file-upload-extension-blocklist-bypass2026-05-11 https://junglewise.ai/threats/cve-2026-39861-claude-code-sandbox-escape-via-symlink-following-allows-arbitrary2026-09-25 https://junglewise.ai/threats/cve-2026-40611-go-acme-lego-path-traversal-in-webroot-http-01-provider2026-06-30 https://junglewise.ai/threats/cve-2026-39386-neko-has-a-self-service-privilege-escalation-for-authenticated2026-05-11 https://junglewise.ai/threats/cve-2026-39320-signal-k-server-has-an-unauthenticated-regular-expression-denial2026-09-25 https://junglewise.ai/threats/cve-2026-40161-tekton-pipelines-credential-exfiltration-in-git-resolver-api-mode2026-05-21 https://junglewise.ai/threats/cve-2026-30452-textpattern-cms-broken-access-control-in-article-management2026-05-14 https://junglewise.ai/threats/cve-2026-25542-tekton-pipelines-regex-bypass-in-trusted-resources-verification2026-05-22 https://junglewise.ai/threats/cve-2025-41029-zeon-global-tech-zeon-academy-pro-sql-injection-in-continue2026-05-19 https://junglewise.ai/threats/cve-2026-40155-auth0-next-js-sdk-has-improper-proxy-cache-lookup2026-09-25 https://junglewise.ai/threats/cve-2026-35587-glances-has-ssrf-in-ip-plugin-via-public-api-leading-to2026-09-26 https://junglewise.ai/threats/cve-2026-3298-python-cpython-out-of-bounds-write-in-asyncio-sock-recvfrom-into2026-07-31 https://junglewise.ai/threats/cve-2026-31019-dolibarr-erp-crm-rce-via-blacklist-bypass-in-website-module2026-07-05 https://junglewise.ai/threats/cve-2026-31018-dolibarr-erp-crm-php-code-injection-in-website-module2026-07-05 https://junglewise.ai/threats/cve-2025-10354-semantic-mediawiki-reflected-xss-in-gefacetteerdzoeken-endpoint2026-05-19 https://junglewise.ai/threats/cve-2026-35570-openclaude-sandbox-bypass-via-early-exit-logic-flaw-allows-path2026-09-25 https://junglewise.ai/threats/cve-2026-33626-lmdeploy-has-server-side-request-forgery-ssrf-via-vision-language2026-09-26 https://junglewise.ai/threats/cve-2026-33031-nginx-ui-disabled-users-retain-full-api-access-through-previously2026-05-11 https://junglewise.ai/threats/cve-2026-32613-spinnaker-rce-via-expression-parsing-due-to-unrestricted-context2026-05-11 https://junglewise.ai/threats/cve-2026-32604-spinnaker-rce-when-using-gitrepo-artifact-types-due-to-improper2026-05-11 https://junglewise.ai/threats/cve-2026-25524-openmage-lts-phar-deserialization-leads-to-remote-code-execution2026-05-11 https://junglewise.ai/threats/cve-2026-6784-mozilla-firefox-and-thunderbird-memory-safety-bugs2026-06-30 https://junglewise.ai/threats/cve-2026-6754-mozilla-firefox-and-thunderbird-use-after-free-in-javascript2026-06-30 https://junglewise.ai/threats/cve-2026-6753-mozilla-firefox-and-thunderbird-out-of-bounds-write-in-webrtc2026-06-30 https://junglewise.ai/threats/cve-2026-6752-mozilla-firefox-and-thunderbird-incorrect-boundary-conditions-in2026-06-30 https://junglewise.ai/threats/cve-2026-6751-mozilla-firefox-and-thunderbird-uninitialized-memory-in-web-codecs2026-06-30 https://junglewise.ai/threats/cve-2026-6750-mozilla-firefox-and-thunderbird-privilege-escalation-in-webrender2026-06-30 https://junglewise.ai/threats/cve-2026-6749-mozilla-firefox-and-thunderbird-information-disclosure-in-canvas2d2026-06-30 https://junglewise.ai/threats/cve-2026-6748-mozilla-firefox-and-thunderbird-uninitialized-memory-in-web-codecs2026-06-30 https://junglewise.ai/threats/cve-2026-6747-mozilla-firefox-and-thunderbird-use-after-free-in-webrtc2026-06-30 https://junglewise.ai/threats/cve-2026-6746-mozilla-firefox-and-thunderbird-use-after-free-in-dom-component2026-06-30 https://junglewise.ai/threats/cve-2026-40520-freepbx-api-module-command-injection-in-initiategqlapiprocess2026-07-14 https://junglewise.ai/threats/cve-2026-32147-erlang-otp-path-traversal-in-ssh-sftpd-module2026-05-21 https://junglewise.ai/threats/cve-2026-3317-navigate-cms-reflected-xss-in-blog-endpoint2026-05-19 https://junglewise.ai/threats/cve-2025-13826-zervit-portable-http-server-denial-of-service-via-configuration2026-05-19 https://junglewise.ai/threats/cve-2026-31370-honor-e-app-information-leak-vulnerability2026-05-11 https://junglewise.ai/threats/cve-2026-31368-honor-aiassistant-privilege-bypass2026-05-11 https://junglewise.ai/threats/cve-2026-5965-newsoft-newsoftoa-os-command-injection2026-05-19 https://junglewise.ai/threats/cve-2026-6058-zyxel-wre6505-v2-improper-encoding-dos-in-cgi-program2026-07-08 https://junglewise.ai/threats/cve-2026-40244-openexr-integer-overflow-in-dwa-compressor2026-06-30 https://junglewise.ai/threats/cve-2026-22051-netapp-storagegrid-information-disclosure-via-arbitrary-metrics2026-07-08 https://junglewise.ai/threats/cve-2026-5928-gnu-c-library-glibc-buffer-under-read-in-ungetwc2026-07-14 https://junglewise.ai/threats/cve-2026-5450-gnu-glibc-heap-buffer-overflow-in-scanf-mc-specifier2026-07-14 https://junglewise.ai/threats/cve-2026-32311-reconurge-flowsint-command-injection-and-container-escape-in-org2026-05-21 https://junglewise.ai/threats/openclaw-webchat-media-path-traversal-in-tool-result-embedding-537627b42026-09-25 https://junglewise.ai/threats/cve-2026-3219-pypa-pip-interpretation-conflict-in-concatenated-archive-handling2026-09-26 https://junglewise.ai/threats/cve-2026-41445-kissfft-integer-overflow-in-kiss-fftndr-alloc2026-07-14 https://junglewise.ai/threats/cve-2026-35154-dell-powerprotect-data-domain-privilege-escalation-in-idrac2026-05-11 https://junglewise.ai/threats/cve-2026-30266-deepcool-deepcreative-insecure-permissions-in-service-binaries2026-07-05 https://junglewise.ai/threats/cve-2026-41245-junrar-path-traversal-in-localfolderextractor2026-06-30 https://junglewise.ai/threats/cve-2026-39918-vvveb-code-injection-in-installation-endpoint2026-07-14 https://junglewise.ai/threats/cve-2026-34429-givanz-vvveb-stored-xss-via-media-upload-and-rename-bypass2026-07-14 https://junglewise.ai/threats/cve-2026-34428-givanz-vvveb-ssrf-in-oembedproxy-action-of-editor-module2026-07-14 https://junglewise.ai/threats/cve-2026-34427-givanz-vvveb-privilege-escalation-in-admin-user-profile-save2026-07-14 https://junglewise.ai/threats/cve-2026-6369-canonical-livepatch-improper-access-control-in-livepatchd-sock2026-06-05 https://junglewise.ai/threats/cve-2026-5760-lmsys-sglang-rce-via-unsandboxed-jinja2-template-in-rerank2026-06-03 https://junglewise.ai/threats/cve-2026-33557-apache-kafka-authentication-bypass-via-improper-jwt-validation2026-06-30 https://junglewise.ai/threats/cve-2026-6634-usememos-memos-incorrect-privilege-assignment-in2026-07-21 https://junglewise.ai/threats/cve-2026-5958-gnu-sed-arbitrary-file-overwrite-via-toctou-race-in-symlink2026-05-19 https://junglewise.ai/threats/cve-2026-6654-mozilla-thin-vec-double-free-and-use-after-free-in-intoiter-and2026-06-30 https://junglewise.ai/threats/cve-2026-31430-linux-kernel-out-of-bounds-access-in-x-509-extension-parsing2026-05-21 https://junglewise.ai/threats/cve-2026-31429-linux-kernel-cross-cache-free-in-skb-kfree-head2026-05-20 https://junglewise.ai/threats/cve-2025-13480-fudo-security-fudo-enterprise-incorrect-authorization-in-api2026-05-11 https://junglewise.ai/threats/cve-2026-5967-teamt5-threatsonar-anti-ransomware-privilege-escalation-via-os2026-05-14 https://junglewise.ai/threats/cve-2026-39454-sky-co-skysea-client-view-and-skymec-it-manager-privilege2026-05-14 https://junglewise.ai/threats/cve-2026-5966-teamt5-threatsonar-anti-ransomware-arbitrary-file-deletion-via2026-05-14 https://junglewise.ai/threats/cve-2026-5964-digiwin-easyflow-net-sql-injection2026-05-12 https://junglewise.ai/threats/cve-2026-5963-digiwin-easyflow-net-sql-injection2026-05-12 https://junglewise.ai/threats/cve-2024-7083-wordpress-email-encoder-stored-xss-in-plugin-settings2026-05-19 https://junglewise.ai/threats/cve-2026-6606-agentscope-vulnerable-to-server-side-request-forgery2026-09-26 https://junglewise.ai/threats/cve-2026-6604-agentscope-vulnerable-to-server-side-request-forgery2026-09-26 https://junglewise.ai/threats/cve-2026-6605-agentscope-vulnerable-to-server-side-request-forgery2026-09-26 https://junglewise.ai/threats/cve-2026-6596-langflow-unrestricted-file-upload-in-api-endpoint2026-06-18 https://junglewise.ai/threats/cve-2026-6594-deep-merge-is-vulnerable-to-prototype-pollution-through-lack-of2026-09-25 https://junglewise.ai/threats/cve-2026-6587-vibrantlabsai-ragas-ssrf-in-collections-module2026-09-26 https://junglewise.ai/threats/cve-2023-27351-papercut-ng-mf-authentication-bypass-in-securityrequestfilter2026-05-15 https://junglewise.ai/threats/cve-2024-27199-jetbrains-teamcity-relative-path-traversal-in-admin-interface2026-05-15 https://junglewise.ai/threats/cve-2025-2749-kentico-xperience-path-traversal-and-rce-in-staging-sync-server2026-05-15 https://junglewise.ai/threats/cve-2025-32975-quest-kace-systems-management-appliance-authentication-bypass-in2026-05-15 https://junglewise.ai/threats/cve-2025-48700-synacor-zimbra-collaboration-suite-xss-in-classic-ui2026-05-15 https://junglewise.ai/threats/cve-2026-20122-cisco-catalyst-sd-wan-manager-arbitrary-file-overwrite-via-api2026-05-15 https://junglewise.ai/threats/cve-2026-20128-cisco-catalyst-sd-wan-manager-recoverable-password-storage-in-dca2026-05-15 https://junglewise.ai/threats/cve-2026-20133-cisco-catalyst-sd-wan-manager-information-disclosure2026-05-15 https://junglewise.ai/threats/cve-2026-41242-protobufjs-code-injection-in-protobuf-definitions2026-09-25 https://junglewise.ai/threats/cve-2026-40948-apache-airflow-providers-keycloak-missing-oauth-2-0-state-and2026-09-26 https://junglewise.ai/threats/cve-2026-25917-apache-airflow-remote-code-execution-via-crafted-xcom-payloads2026-09-26 https://junglewise.ai/threats/cve-2026-30912-apache-airflow-information-exposure-in-api-sql-stack-traces2026-06-05 https://junglewise.ai/threats/cve-2026-32228-apache-airflow-allows-users-with-asset-materialize-permissions-to2026-09-26 https://junglewise.ai/threats/cve-2026-32690-apache-airflow-information-exposure-in-json-dictionary-variables2026-06-05 https://junglewise.ai/threats/cve-2026-41253-iterm2-code-execution-via-ssh-conductor-protocol-impersonation2026-05-18 https://junglewise.ai/threats/cve-2026-41583-zcash-foundation-zebra-consensus-divergence-in-sighash-handling2026-05-12 https://junglewise.ai/threats/cve-2026-41584-zebra-has-rk-identity-point-panic-in-transaction-verification2026-05-11 https://junglewise.ai/threats/cve-2026-41241-pretalx-stored-xss-in-organizer-search-typeahead2026-09-26 https://junglewise.ai/threats/cve-2026-41426-pretalx-email-injection-in-mail-templates-via-unescaped2026-09-26 https://junglewise.ai/threats/cve-2026-41570-phpunit-has-argument-injection-via-newline-in-php-ini-values-that2026-05-11 https://junglewise.ai/threats/xoofx-zio-path-confinement-bypass-in-subfilesystem-2a5d196b2026-05-11 https://junglewise.ai/threats/cve-2026-41265-flowise-airtable-agent-code-injection-remote-code-execution2026-09-25 https://junglewise.ai/threats/cve-2026-40881-zcash-foundation-zebra-resource-exhaustion-in-addr-message2026-05-21 https://junglewise.ai/threats/cve-2026-40880-zebra-cached-mempool-verification-bypasses-consensus-rules-for2026-05-11 https://junglewise.ai/threats/cve-2026-40346-nocobase-has-ssrf-in-workflow-http-request-and-custom-request2026-09-25 https://junglewise.ai/threats/cve-2026-40323-sp1-v6-recursion-circuit-row-count-binding-gap2026-05-14 https://junglewise.ai/threats/cve-2026-44111-openclaw-qmd-memory-get-arbitrary-markdown-file-read2026-09-25 https://junglewise.ai/threats/openclaw-path-traversal-in-qmd-memory-get-08ca11482026-05-11 https://junglewise.ai/threats/cve-2026-41389-openclaw-webchat-media-path-traversal-in-tool-result-embedding2026-09-25 https://junglewise.ai/threats/cve-2026-44109-openclaw-feishu-authentication-bypass-in-webhook-and-card-action2026-09-25 https://junglewise.ai/threats/openclaw-authentication-bypass-in-feishu-webhook-and-card-action-af7876b62026-05-11 https://junglewise.ai/threats/openclaw-matrix-room-control-command-authorization-no-longer-trusts-dm-6767e5122026-05-11 https://junglewise.ai/threats/cve-2026-43585-openclaw-gateway-http-bearer-auth-validation-bypass-after2026-09-25 https://junglewise.ai/threats/openclaw-gateway-stale-bearer-token-after-secretref-rotation-f5425ee62026-05-11 https://junglewise.ai/threats/kimai-username-enumeration-via-timing-in-tokenauthenticator-92c135332026-05-11 https://junglewise.ai/threats/cve-2026-41496-praisonai-sql-injection-via-unvalidated-table-prefix-in-92026-05-11 https://junglewise.ai/threats/cve-2026-41497-praisonai-has-an-incomplete-fix-for-os-command-injection2026-09-26 https://junglewise.ai/threats/cve-2026-35603-claude-code-insecure-system-wide-configuration-loading-enables2026-09-25 https://junglewise.ai/threats/cve-2026-43576-openclaw-cdp-json-version-websocket-url-server-side-request2026-09-25 https://junglewise.ai/threats/openclaw-ssrf-pivot-in-cdp-websocket-url-cdae13982026-05-11 https://junglewise.ai/threats/cve-2026-42438-openclaw-authorization-bypass-in-host-media-attachment-reads2026-09-25 https://junglewise.ai/threats/cve-2026-43533-openclaw-qqbot-arbitrary-local-file-read-via-media-tags2026-09-25 https://junglewise.ai/threats/cve-2026-5720-miniupnp-project-miniupnpd-integer-underflow-in-soapaction-header2026-06-29 https://junglewise.ai/threats/cve-2026-40478-thymeleaf-expression-execution-bypass-leading-to-ssti2026-06-30 https://junglewise.ai/threats/cve-2026-40477-thymeleaf-security-bypass-in-expression-execution-mechanisms2026-06-30 https://junglewise.ai/threats/cve-2026-40476-webonyx-graphql-php-denial-of-service-via-quadratic-complexity2026-06-09 https://junglewise.ai/threats/cve-2026-29013-libcoap-out-of-bounds-read-in-oscore-cbor-unwrap-handling2026-06-02 https://junglewise.ai/threats/cve-2026-43530-openclaw-authorization-bypass-via-busybox-and-toybox-applets2026-09-25 https://junglewise.ai/threats/cve-2026-42433-openclaw-operator-write-message-tools-unauthorized-matrix-profile2026-09-25 https://junglewise.ai/threats/cve-2026-42434-openclaw-sandbox-escape-via-host-parameter-override-in-exec2026-09-25 https://junglewise.ai/threats/cve-2026-43580-openclaw-browser-press-type-navigation-guard-bypass2026-09-25 https://junglewise.ai/threats/openclaw-ssrf-via-incomplete-navigation-guards-in-browser-interactions-be9a652a2026-05-11 https://junglewise.ai/threats/cve-2026-43577-openclaw-browser-interaction-routes-bypass-cdp-origin-guards2026-09-25 https://junglewise.ai/threats/openclaw-unauthorized-file-read-via-cdp-navigation-pivot-bfdf05252026-05-11 https://junglewise.ai/threats/cve-2026-43569-openclaw-workspace-provider-auth-auto-enable-of-untrusted-plugins2026-09-25 https://junglewise.ai/threats/cve-2026-43573-openclaw-ssrf-policy-bypass-in-existing-session-browser-routes2026-09-25 https://junglewise.ai/threats/cve-2026-42439-openclaw-browser-tabs-action-ssrf-policy-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-43579-openclaw-nostr-profile-mutation-incorrect-authorization-in-http2026-09-25 https://junglewise.ai/threats/openclaw-incorrect-authorization-in-nostr-profile-mutation-routes-fc1c27512026-05-11 https://junglewise.ai/threats/cve-2026-43581-openclaw-sandbox-browser-cdp-relay-network-exposure2026-09-25 https://junglewise.ai/threats/openclaw-improper-access-control-in-sandbox-browser-cdp-relay-a101a6b92026-05-11 https://junglewise.ai/threats/cve-2026-43571-openclaw-untrusted-workspace-plugin-shadow-resolution-in-channel2026-09-25 https://junglewise.ai/threats/cve-2026-43567-openclaw-screen-record-path-traversal-bypass-in-workspace-guard2026-09-25 https://junglewise.ai/threats/cve-2026-43527-openclaw-browser-ssrf-default-allowed-private-network-navigation2026-09-25 https://junglewise.ai/threats/cve-2026-43582-openclaw-browser-ssrf-hostname-validation-bypass-via-dns2026-09-25 https://junglewise.ai/threats/openclaw-ssrf-via-dns-rebinding-in-hostname-validation-cad49e602026-05-11 https://junglewise.ai/threats/cve-2026-43526-openclaw-ssrf-in-qqbot-media-url-handling2026-09-24 https://junglewise.ai/threats/cve-2026-43531-openclaw-workspace-env-environment-variable-injection2026-09-25 https://junglewise.ai/threats/cve-2026-43532-openclaw-sandbox-media-normalization-bypass-in-discord-event2026-09-25 https://junglewise.ai/threats/cve-2026-43574-openclaw-approval-authorization-bypass-via-empty-approver-lists2026-09-25 https://junglewise.ai/threats/cve-2026-43534-openclaw-unsanitized-external-input-in-agent-hook-events2026-09-25 https://junglewise.ai/threats/cve-2026-43584-openclaw-exec-environment-denylist-bypass-via-interpreter-startup2026-09-25 https://junglewise.ai/threats/openclaw-incomplete-environment-variable-denylist-in-exec-policy-600fd8c12026-05-11 https://junglewise.ai/threats/cve-2026-42435-openclaw-shell-wrapper-detection-env-argv-assignment-injection2026-09-25 https://junglewise.ai/threats/cve-2026-43568-openclaw-privilege-escalation-in-memory-dreaming-gateway2026-09-25 https://junglewise.ai/threats/cve-2026-43572-openclaw-microsoft-teams-sso-invoke-handler-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-43583-openclaw-delivery-queue-recovery-context-loss-in-media-replay2026-09-25 https://junglewise.ai/threats/cve-2026-43578-openclaw-privilege-escalation-in-heartbeat-owner-downgrade2026-09-25 https://junglewise.ai/threats/openclaw-improper-privilege-management-in-heartbeat-owner-downgrade-dcf98a792026-05-11 https://junglewise.ai/threats/cve-2026-43566-openclaw-privilege-escalation-via-untrusted-webhook-wake-events2026-09-25 https://junglewise.ai/threats/cve-2026-42436-openclaw-browser-snapshot-and-screenshot-ssrf-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-43528-openclaw-config-get-redaction-bypass-through-alias-fields2026-09-25 https://junglewise.ai/threats/cve-2026-43535-openclaw-authorization-context-reuse-in-collect-mode-queue2026-09-25 https://junglewise.ai/threats/cve-2026-41279-flowise-unauthenticated-tts-endpoint-accepts-arbitrary-credential2026-09-25 https://junglewise.ai/threats/cve-2026-41278-flowise-public-chatflow-endpoints-return-unsanitized-flowdata2026-09-25 https://junglewise.ai/threats/cve-2026-41277-flowise-mass-assignment-in-documentstore-create-endpoint-leads-to2026-09-25 https://junglewise.ai/threats/cve-2026-40931-complete-bypass-of-patch-via-git-delivered-symlink-poisoning-in2026-09-25 https://junglewise.ai/threats/cve-2026-27197-sentry-improper-authentication-in-saml-sso-process2026-09-26 https://junglewise.ai/threats/cve-2026-40527-radare2-command-injection-via-dwarf-parameter-names2026-06-05 https://junglewise.ai/threats/cve-2026-40293-openfga-api-key-exposure-in-playground-endpoint2026-06-30 https://junglewise.ai/threats/cve-2026-33436-stirling-pdf-reflected-xss-in-file-upload-endpoints2026-05-14 https://junglewise.ai/threats/cve-2026-40066-anviz-cx2-lite-and-cx7-remote-code-execution-via-unverified2026-07-10 https://junglewise.ai/threats/cve-2026-31927-anviz-cx7-firmware-path-traversal-via-csv-upload2026-07-10 https://junglewise.ai/threats/cve-2026-43575-openclaw-sandbox-novnc-helper-route-exposed-session-credentials2026-09-25 https://junglewise.ai/threats/openclaw-missing-authentication-in-sandbox-novnc-helper-route-6e105e2b2026-05-11 https://junglewise.ai/threats/cve-2026-6437-aws-efs-csi-driver-argument-injection-in-volume-handling2026-06-01 https://junglewise.ai/threats/cve-2026-40525-volcengine-openviking-authentication-bypass-in-vikingbot-openapi2026-09-26 https://junglewise.ai/threats/cve-2026-5718-wordpress-drag-and-drop-multiple-file-upload-arbitrary-file-upload2026-05-27 https://junglewise.ai/threats/cve-2026-40518-bytedance-deerflow-path-traversal-in-bootstrap-mode-agent2026-06-05 https://junglewise.ai/threats/cve-2026-40516-hkuds-openharness-ssrf-in-web-fetch-and-web-search-tools2026-07-14 https://junglewise.ai/threats/cve-2026-40515-hkuds-openharness-permission-bypass-in-grep-and-glob-tools2026-07-14 https://junglewise.ai/threats/cve-2026-21733-imagination-technologies-graphics-ddk-improper-gpu-memory2026-06-26 https://junglewise.ai/threats/cve-2026-31317-craftql-vulnerable-to-server-side-request-forgery2026-05-11 https://junglewise.ai/threats/cve-2025-15625-sparx-systems-pro-cloud-server-sql-injection2026-06-02 https://junglewise.ai/threats/cve-2025-15624-sparx-systems-pro-cloud-server-plaintext-password-storage-in2026-06-02 https://junglewise.ai/threats/cve-2025-15623-sparx-systems-pro-cloud-server-plaintext-database-password2026-06-02 https://junglewise.ai/threats/cve-2026-40002-zte-red-magic-11-pro-improper-privilege-management-in-service2026-07-08 https://junglewise.ai/threats/cve-2026-5052-hashicorp-vault-ssrf-in-pki-engine-acme-validation2026-07-21 https://junglewise.ai/threats/cve-2026-5807-hashicorp-vault-denial-of-service-in-root-token-generation-and2026-07-21 https://junglewise.ai/threats/cve-2026-4525-hashicorp-vault-token-disclosure-in-auth-plugin-header-forwarding2026-07-21 https://junglewise.ai/threats/cve-2026-3605-hashicorp-vault-policy-bypass-in-kvv2-secrets-engine2026-06-30 https://junglewise.ai/threats/cve-2026-42259-saltcorn-open-redirect-in-login-via-backslash-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-41488-langchain-langchain-openai-ssrf-bypass-via-dns-rebinding-in-url2026-06-06 https://junglewise.ai/threats/plonky3-p3-symmetric-hash-collision-in-sponge-construction-38e5bae02026-05-11 https://junglewise.ai/threats/cve-2026-41478-saltcorn-sql-injection-via-unparameterized-sync-endpoints2026-09-25 https://junglewise.ai/threats/meridian-multiple-defense-in-depth-gaps-in-mapping-and-mediator-aaf8272f2026-05-11 https://junglewise.ai/threats/paperclip-cross-tenant-idor-in-agent-api-key-management-9d46d0742026-05-11 https://junglewise.ai/threats/paperclip-idor-in-agent-api-key-management-routes-b978dafc2026-09-25 https://junglewise.ai/threats/paperclip-stored-xss-in-markdownbody-via-javascript-urls-e076e8792026-09-25 https://junglewise.ai/threats/paperclip-stored-xss-in-markdownbody-via-url-transform-bypass-2e926c562026-05-11 https://junglewise.ai/threats/paperclip-approval-decision-attribution-spoofing-via-client-controlled-e49c0d0b2026-09-25 https://junglewise.ai/threats/paperclip-server-attribution-spoofing-in-approval-decisions-00462d5c2026-05-11 https://junglewise.ai/threats/paperclip-cross-tenant-agent-api-token-minting-authorization-bypass-880d0a892026-09-25 https://junglewise.ai/threats/paperclip-cross-tenant-agent-api-token-minting-in-agent-routes-d86d7ef52026-05-11 https://junglewise.ai/threats/paperclip-ai-os-command-injection-in-execution-workspace-cleanupcommand-f05af6d52026-05-11 https://junglewise.ai/threats/paperclip-os-command-injection-in-execution-workspace-cleanup-1e2442862026-09-25 https://junglewise.ai/threats/paperclip-codex-local-inherited-gmail-connector-trust-boundary-bypass-f5b6f70f2026-09-25 https://junglewise.ai/threats/paperclip-improper-access-control-in-codex-local-inherits-openai-gmail-185d94bc2026-05-11 https://junglewise.ai/threats/paperclip-missing-authentication-in-multiple-api-endpoints-d895abd02026-05-11 https://junglewise.ai/threats/paperclip-server-unauthenticated-access-to-api-endpoints-2922e3192026-09-25 https://junglewise.ai/threats/paperclip-arbitrary-code-execution-in-workspace-runtime-service-d872f5d02026-09-25 https://junglewise.ai/threats/paperclip-command-injection-in-workspace-runtime-service-0a6102112026-05-11 https://junglewise.ai/threats/cve-2026-41208-paperclip-privilege-escalation-via-agent-controlled2026-09-24 https://junglewise.ai/threats/paperclip-arbitrary-file-read-via-adapterconfig-in-claude-adapter-6421de812026-05-11 https://junglewise.ai/threats/paperclipai-paperclip-arbitrary-file-read-in-adapterconfig-54ed18762026-09-25 https://junglewise.ai/threats/cve-2026-41428-budibase-authentication-bypass-via-unanchored-regex-in-public2026-09-25 https://junglewise.ai/threats/cve-2026-41425-authlib-csrf-in-oauth-integrations-when-using-cache-storage2026-09-26 https://junglewise.ai/threats/cve-2026-6410-fastify-fastify-static-path-traversal-in-directory-listing2026-09-25 https://junglewise.ai/threats/cve-2026-6414-fastify-fastify-static-route-guard-bypass-via-encoded-path2026-09-25 https://junglewise.ai/threats/cve-2026-41113-sagredo-qmail-os-command-injection-in-qmail-remote2026-05-19 https://junglewise.ai/threats/cve-2026-40170-ngtcp2-stack-buffer-overflow-in-qlog-transport-parameters2026-05-21 https://junglewise.ai/threats/cve-2026-35469-moby-spdystream-denial-of-service-via-memory-amplification2026-06-30 https://junglewise.ai/threats/cve-2026-41276-flowise-resetpassword-authentication-bypass-vulnerability2026-09-25 https://junglewise.ai/threats/cve-2026-41274-flowise-cypher-injection-in-graphcypherqachain2026-09-25 https://junglewise.ai/threats/cve-2026-41275-flowise-password-reset-link-sent-over-unsecured-http2026-09-25 https://junglewise.ai/threats/cve-2026-41273-flowise-unauthenticated-oauth-2-0-access-token-disclosure-via2026-09-25 https://junglewise.ai/threats/cve-2026-41271-flowise-apichain-prompt-injection-ssrf-in-get-post-api-chains2026-09-25 https://junglewise.ai/threats/cve-2026-41272-flowise-ssrf-protection-bypass-toctou-default-insecure2026-09-25 https://junglewise.ai/threats/cve-2026-41270-flowise-ssrf-protection-bypass-via-unprotected-built-in-http2026-09-25 https://junglewise.ai/threats/cve-2026-41269-flowise-file-upload-validation-bypass-in-createattachment2026-09-25 https://junglewise.ai/threats/cve-2026-41268-flowise-parameter-override-bypass-remote-command-execution2026-09-25 https://junglewise.ai/threats/cve-2026-41266-flowise-sensitive-data-leak-in-public-chatbotconfig2026-09-25 https://junglewise.ai/threats/cve-2026-41267-flowise-improper-mass-assignment-in-account-registration-enables2026-09-25 https://junglewise.ai/threats/cve-2026-41137-flowise-code-injection-in-csvagent-leads-to-authenticated-rce2026-09-25 https://junglewise.ai/threats/cve-2026-41138-flowise-remote-code-execution-vulnerability-in-airtableagent-ts2026-09-25 https://junglewise.ai/threats/cve-2026-41324-basic-ftp-vulnerable-to-denial-of-service-via-unbounded-memory2026-09-25 https://junglewise.ai/threats/kyverno-apicall-credential-leak-via-serviceaccount-token-forwarding-c14bd03f2026-05-11 https://junglewise.ai/threats/cve-2026-41323-kyverno-serviceaccount-token-leaked-to-external-servers-via2026-05-11 https://junglewise.ai/threats/cve-2026-41068-kyverno-cross-namespace-read-bypasses-rbac-isolation-incomplete2026-05-11 https://junglewise.ai/threats/cve-2026-40308-joedolson-my-calendar-idor-and-dos-in-mcjs-action-ajax-endpoint2026-05-11 https://junglewise.ai/threats/cve-2026-40602-home-assistant-command-line-interface-handling-of-user-supplied2026-09-26 https://junglewise.ai/threats/cve-2026-41248-official-clerk-javascript-sdks-middleware-based-route-protection2026-09-25 https://junglewise.ai/threats/cve-2026-41175-statamic-unsafe-method-invocation-via-query-value-resolution2026-05-11 https://junglewise.ai/threats/cve-2026-41304-wwbn-avideo-rce-cause-by-clonesite-plugin2026-05-11 https://junglewise.ai/threats/cve-2026-41500-electerm-electerm-install-script-commandinjection-vulnerability2026-09-25 https://junglewise.ai/threats/flowise-execute-flow-ssrf-in-base-url-field-469ec8362026-05-11 https://junglewise.ai/threats/flowise-path-traversal-in-vector-store-basepath-a0c72c592026-05-11 https://junglewise.ai/threats/flowise-weak-default-session-secret-in-express-middleware-242a42fb2026-05-11 https://junglewise.ai/threats/flowiseai-flowise-weak-default-jwt-secrets-in-passport-middleware-383c38582026-05-11 https://junglewise.ai/threats/cve-2026-43529-openclaw-toctou-race-in-exec-script-preflight2026-09-25 https://junglewise.ai/threats/cve-2026-40933-flowise-flowise-authenticated-rce-in-mcp-adapters2026-09-25 https://junglewise.ai/threats/rustls-webpki-improper-certificate-validation-of-wildcard-name-f7fe9e022026-05-11 https://junglewise.ai/threats/cve-2026-41180-psitransfer-upload-patch-path-traversal-can-create-config-node2026-09-25 https://junglewise.ai/threats/cve-2026-41244-mojic-observable-timing-discrepancy-in-hmac-verification2026-09-25 https://junglewise.ai/threats/cve-2026-40324-chillicream-graphql-platform-utf8graphqlparser-stack-overflow-via2026-05-11 https://junglewise.ai/threats/cve-2026-40303-zrok-unauthenticated-dos-via-unbounded-memory-allocation-in2026-05-11 https://junglewise.ai/threats/cve-2026-40256-weblate-path-traversal-via-repository-boundary-check-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-40186-apostrophe-sanitize-html-allowedtags-bypass-in-textarea-and2026-09-25 https://junglewise.ai/threats/cve-2026-40173-dgraph-unauthenticated-debug-pprof-cmdline-discloses-admin-auth2026-05-11 https://junglewise.ai/threats/cve-2026-39857-apostrophecms-information-disclosure-via-choices-and-counts-query2026-09-25 https://junglewise.ai/threats/cve-2026-39845-weblate-ssrf-in-webhook-add-on-via-fetch-url2026-09-26 https://junglewise.ai/threats/cve-2026-39350-istio-authorizationpolicy-regex-injection-in-serviceaccounts2026-05-11 https://junglewise.ai/threats/cve-2026-39313-mcp-framework-unbounded-memory-allocation-in-readrequestbody2026-09-25 https://junglewise.ai/threats/cve-2026-35569-apostrophecms-stored-xss-in-seo-fields2026-09-25 https://junglewise.ai/threats/cve-2026-34393-weblate-privilege-escalation-in-user-api-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-34244-weblate-ssrf-in-project-level-machinery-configuration2026-05-11 https://junglewise.ai/threats/cve-2026-34242-weblate-arbitrary-file-read-via-symlink-in-zip-download2026-09-26 https://junglewise.ai/threats/cve-2026-33889-apostrophecms-stored-xss-in-color-field-css-custom-properties2026-09-25 https://junglewise.ai/threats/cve-2026-33888-apostrophecms-publicapiprojection-bypass-in-piece-type-rest-api2026-09-25 https://junglewise.ai/threats/cve-2026-33877-apostrophecms-user-enumeration-via-timing-side-channel-in2026-09-25 https://junglewise.ai/threats/cve-2026-33440-weblate-ssrf-via-redirect-bypass-in-screenshot-url-uploads2026-09-26 https://junglewise.ai/threats/cve-2026-33435-weblate-remote-code-execution-in-backup-restoration2026-09-26 https://junglewise.ai/threats/cve-2026-33220-weblate-path-traversal-in-javascript-localization-cdn-add-on2026-09-26 https://junglewise.ai/threats/cve-2026-33214-weblate-improper-access-control-in-translation-memory-api2026-09-26 https://junglewise.ai/threats/cve-2026-33212-weblate-improper-access-control-for-pending-tasks-in-api2026-05-11 https://junglewise.ai/threats/cve-2025-54502-amd-apcb-smm-driver-privilege-escalation-in-multiple-processors2026-06-30 https://junglewise.ai/threats/cve-2026-41082-ocaml-opam-path-traversal-in-install-field2026-06-15 https://junglewise.ai/threats/cve-2026-27820-ruby-zlib-buffer-overflow-in-zlib-gzipreader2026-06-09 https://junglewise.ai/threats/cve-2026-41080-libexpat-insufficient-entropy-for-hash-salt-in-xml-parsing2026-06-12 https://junglewise.ai/threats/cve-2026-5426-digital-knowledge-knowledgedeliver-hard-coded-machinekey-remote2026-05-26 https://junglewise.ai/threats/google-protobuf-php-denial-of-service-via-malicious-messages-485224ad2026-05-11 https://junglewise.ai/threats/cve-2026-31987-apache-airflow-jwt-token-appearing-in-logs2026-09-26 https://junglewise.ai/threats/cve-2025-54550-apache-airflow-rce-in-example-xcom-dag-documentation2026-09-26 https://junglewise.ai/threats/cve-2026-30778-apache-skywalking-sensitive-information-leak-in-debugging-config2026-05-11 https://junglewise.ai/threats/cve-2026-33804-fastify-fastify-middie-middleware-bypass-via-duplicate-slashes2026-09-25 https://junglewise.ai/threats/cve-2026-30459-daylight-studio-fuelcms-password-reset-poisoning-in-forgot2026-07-05 https://junglewise.ai/threats/cve-2026-6270-fastify-fastify-middie-middleware-bypass-in-child-plugin-scopes2026-09-25 https://junglewise.ai/threats/cve-2026-31843-goodoneuz-pay-uz-remote-code-execution-in-apicontroller2026-07-27 https://junglewise.ai/threats/cve-2026-41035-samba-rsync-use-after-free-in-receive-xattr2026-05-21 https://junglewise.ai/threats/cve-2026-3861-line-client-for-ios-denial-of-service-in-in-app-browser2026-07-08 https://junglewise.ai/threats/cve-2026-6351-openfind-mailgates-mailaudit-crlf-injection-file-disclosure2026-05-19 https://junglewise.ai/threats/cve-2026-6350-openfind-mailgates-and-mailaudit-stack-based-buffer-overflow2026-05-19 https://junglewise.ai/threats/cve-2026-6349-hgiga-isherlock-os-command-injection2026-05-19 https://junglewise.ai/threats/cve-2026-6348-simopro-technology-winmatrix-agent-missing-authentication2026-05-19 https://junglewise.ai/threats/cve-2026-40505-artifex-mupdf-ansi-injection-in-mutool-via-pdf-metadata2026-05-26 https://junglewise.ai/threats/cve-2026-40504-creolabs-gravity-heap-buffer-overflow-in-gravity-vm-exec2026-07-14 https://junglewise.ai/threats/cve-2026-40474-wger-has-broken-access-control-in-global-gym-configuration-update2026-05-11 https://junglewise.ai/threats/cve-2026-76226-renovate-remote-code-execution-in-bazel-module-and-bazelisk2026-09-25 https://junglewise.ai/threats/renovate-remote-code-execution-in-bazel-managers-cfd2c4f12026-05-11 https://junglewise.ai/threats/theopolis-uefi-firmware-parser-heap-out-of-bounds-write-in-tiano-eeb10ed12026-05-11 https://junglewise.ai/threats/theopolis-uefi-firmware-parser-stack-out-of-bounds-write-in-maketable-aa14e8a32026-05-11 https://junglewise.ai/threats/cve-2026-40594-pyload-session-cookie-security-downgrade-via-header-spoofing2026-09-26 https://junglewise.ai/threats/cve-2026-40959-luanti-lua-sandbox-escape-via-crafted-mod2026-05-19 https://junglewise.ai/threats/cve-2026-40503-hkuds-openharness-path-traversal-in-memory-show-command2026-07-14 https://junglewise.ai/threats/cve-2026-40502-hkuds-openharness-command-injection-in-gateway-handler2026-07-14 https://junglewise.ai/threats/cve-2026-41211-voidzero-dev-vite-plus-path-traversal-in-downloadpackagemanager2026-09-25 https://junglewise.ai/threats/cve-2026-41228-froxlor-has-local-file-inclusion-via-path-traversal-in-api-def2026-05-11 https://junglewise.ai/threats/cve-2026-41229-froxlor-has-a-php-code-injection-via-unescaped-single-quotes-in2026-05-11 https://junglewise.ai/threats/cve-2026-41230-froxlor-has-a-bind-zone-file-injection-via-unsanitized-dns-record2026-05-11 https://junglewise.ai/threats/cve-2026-41231-froxlor-has-incomplete-symlink-validation-in-datadump-add-allows2026-05-11 https://junglewise.ai/threats/cve-2026-5363-tp-link-archer-c7-inadequate-encryption-in-uhttpd-modules2026-05-22 https://junglewise.ai/threats/cve-2026-40316-owasp-blt-remote-code-execution-in-github-actions-workflow2026-05-21 https://junglewise.ai/threats/cve-2026-40192-python-pillow-denial-of-service-via-fits-gzip-decompression-bomb2026-06-30 https://junglewise.ai/threats/cve-2026-6388-argocd-image-updater-cross-namespace-privilege-escalation2026-06-30 https://junglewise.ai/threats/cve-2026-40500-processwire-cms-ssrf-in-add-module-from-url-feature2026-07-07 https://junglewise.ai/threats/cve-2026-6383-kubevirt-incorrect-rbac-evaluation-via-subresource-name-truncation2026-05-11 https://junglewise.ai/threats/cve-2026-40261-composer-command-injection-in-perforce-repository-handling2026-07-20 https://junglewise.ai/threats/cve-2026-40176-composer-command-injection-in-perforce-repository-handling2026-07-20 https://junglewise.ai/threats/cve-2026-6384-gimp-buffer-overflow-in-gif-readjeffsimage-function2026-06-30 https://junglewise.ai/threats/cve-2026-6364-google-chrome-out-of-bounds-read-in-skia2026-05-26 https://junglewise.ai/threats/cve-2026-6363-google-chrome-type-confusion-in-v82026-05-27 https://junglewise.ai/threats/cve-2026-6362-google-chrome-use-after-free-in-codecs2026-05-26 https://junglewise.ai/threats/cve-2026-6361-google-chrome-heap-buffer-overflow-in-pdfium2026-05-26 https://junglewise.ai/threats/cve-2026-6360-google-chrome-use-after-free-in-filesystem2026-05-26 https://junglewise.ai/threats/cve-2026-6358-google-chrome-for-android-use-after-free-in-xr2026-05-27 https://junglewise.ai/threats/cve-2026-6319-google-chrome-for-android-use-after-free-in-payments2026-05-27 https://junglewise.ai/threats/cve-2026-6318-google-chrome-use-after-free-in-codecs2026-05-27 https://junglewise.ai/threats/cve-2026-6317-google-chrome-use-after-free-in-cast2026-05-26 https://junglewise.ai/threats/cve-2026-6316-google-chrome-use-after-free-in-forms2026-05-27 https://junglewise.ai/threats/cve-2026-6315-google-chrome-use-after-free-in-permissions-on-android2026-05-26 https://junglewise.ai/threats/cve-2026-6314-google-chrome-out-of-bounds-write-in-gpu2026-05-26 https://junglewise.ai/threats/cve-2026-6312-insufficient-policy-enforcement-in-passwords-in-google-chrome2026-05-10 https://junglewise.ai/threats/cve-2026-6311-google-chrome-uninitialized-use-in-accessibility-sandbox-escape2026-05-27 https://junglewise.ai/threats/cve-2026-6310-google-chrome-use-after-free-in-dawn2026-05-27 https://junglewise.ai/threats/cve-2026-6309-google-chrome-use-after-free-in-viz2026-05-26 https://junglewise.ai/threats/cve-2026-6308-google-chrome-out-of-bounds-read-in-media2026-05-26 https://junglewise.ai/threats/cve-2026-6306-google-chrome-heap-buffer-overflow-in-pdfium2026-05-26 https://junglewise.ai/threats/cve-2026-6305-google-chrome-heap-buffer-overflow-in-pdfium2026-05-27 https://junglewise.ai/threats/cve-2026-6304-google-chrome-use-after-free-in-graphite2026-05-26 https://junglewise.ai/threats/cve-2026-6303-google-chrome-use-after-free-in-codecs2026-05-27 https://junglewise.ai/threats/cve-2026-6302-google-chrome-use-after-free-in-video2026-05-26 https://junglewise.ai/threats/cve-2026-6301-google-chrome-type-confusion-in-turbofan2026-05-26 https://junglewise.ai/threats/cve-2026-6300-google-chrome-use-after-free-in-css2026-05-26 https://junglewise.ai/threats/cve-2026-6299-google-chrome-use-after-free-in-prerender2026-05-26 https://junglewise.ai/threats/cve-2026-6298-google-chrome-heap-buffer-overflow-in-skia2026-05-27 https://junglewise.ai/threats/cve-2026-6297-google-chrome-use-after-free-in-proxy2026-05-27 https://junglewise.ai/threats/cve-2026-6296-google-chrome-heap-buffer-overflow-in-angle2026-05-26 https://junglewise.ai/threats/cve-2025-41118-grafana-pyroscope-information-disclosure-in-tencent-cos2026-06-30 https://junglewise.ai/threats/pocketmine-mp-denial-of-service-via-junk-properties-in-loginpacket-74188ad12026-05-11 https://junglewise.ai/threats/cve-2026-40882-openremote-has-xxe-in-velbus-asset-import2026-05-11 https://junglewise.ai/threats/cve-2026-41059-oauth2-proxy-has-an-authentication-bypass-via-fragment-confusion2026-05-11 https://junglewise.ai/threats/cve-2026-34632-adobe-photoshop-installer-privilege-escalation-via-uncontrolled2026-07-07 https://junglewise.ai/threats/cve-2026-5758-mafintosh-protocol-buffers-schema-prototype-pollution-in-parser2026-09-25 https://junglewise.ai/threats/cve-2026-6290-velociraptor-vulnerability-in-the-query-plugin-which-allows-access2026-05-11 https://junglewise.ai/threats/cve-2026-30625-upsonic-command-injection-in-mcp-task-creation2026-09-26 https://junglewise.ai/threats/cve-2026-20186-cisco-identity-services-engine-command-injection-and-privilege2026-06-29 https://junglewise.ai/threats/cve-2026-20180-cisco-identity-services-engine-remote-code-execution-and2026-07-08 https://junglewise.ai/threats/cve-2026-20170-cisco-webex-contact-center-xss-in-desktop-agent2026-07-01 https://junglewise.ai/threats/cve-2026-20148-cisco-ise-path-traversal-in-underlying-operating-system2026-07-08 https://junglewise.ai/threats/cve-2026-20147-cisco-ise-command-injection-in-underlying-operating-system2026-07-08 https://junglewise.ai/threats/cve-2026-20136-cisco-ise-command-injection-in-cli2026-07-02 https://junglewise.ai/threats/cve-2026-20132-cisco-identity-services-engine-xss-in-web-based-management2026-07-02 https://junglewise.ai/threats/cve-2026-30461-daylight-studio-fuelcms-command-injection-in-installer-controller2026-07-05 https://junglewise.ai/threats/cve-2024-53412-nietthijmen-shoppingcart-command-injection-in-connect-function2026-07-21 https://junglewise.ai/threats/cve-2026-33805-fastify-proxy-components-header-stripping-via-connection-header2026-09-25 https://junglewise.ai/threats/cve-2026-5598-bouncy-castle-bc-java-timing-channel-in-frodokem2026-06-19 https://junglewise.ai/threats/cve-2026-5588-bouncy-castle-bc-java-signature-bypass-in-compositeverifier2026-05-19 https://junglewise.ai/threats/cve-2026-3505-bouncy-castle-bc-java-resource-exhaustion-in-pgp-aead-processing2026-05-19 https://junglewise.ai/threats/cve-2026-33808-fastify-fastify-express-auth-bypass-via-url-normalization-gaps2026-09-25 https://junglewise.ai/threats/cve-2026-33807-fastify-fastify-express-middleware-bypass-in-child-plugin-scopes2026-09-25 https://junglewise.ai/threats/cve-2026-0636-bouncy-castle-bc-java-ldap-injection-in-ldapstorehelper2026-05-19 https://junglewise.ai/threats/cve-2025-14813-bouncy-castle-bc-java-risky-cryptography-in-g3413ctrblockcipher2026-06-30 https://junglewise.ai/threats/cve-2025-40899-nozomi-networks-guardian-and-cmc-stored-xss-in-assets-and-nodes2026-05-12 https://junglewise.ai/threats/cve-2025-40897-nozomi-networks-guardian-and-cmc-incorrect-authorization-in2026-05-12 https://junglewise.ai/threats/cve-2026-26291-growi-stored-cross-site-scripting2026-05-19 https://junglewise.ai/threats/cve-2026-6328-alibaba-xquic-protocol-manipulation-in-stream-frame-handler2026-05-19 https://junglewise.ai/threats/cve-2026-33806-fastify-schema-validation-bypass-via-malformed-content-type2026-06-30 https://junglewise.ai/threats/microsoft-nuget-client-insufficient-verification-of-data-authenticity-d33277352026-05-11 https://junglewise.ai/threats/cve-2026-41146-facil-io-and-iodine-infinite-loop-in-json-parser2026-06-09 https://junglewise.ai/threats/pyload-insufficient-session-expiration-after-permission-changes-b01d33812026-06-28 https://junglewise.ai/threats/cve-2026-41133-pyload-has-stale-session-privilege-after-role-permission-change2026-09-26 https://junglewise.ai/threats/opentofu-denial-of-service-in-tofu-init-via-malicious-dependencies-f7d4163e2026-05-11 https://junglewise.ai/threats/dnn-dotnetnuke-core-insecure-xml-processing-and-weak-cryptography-fd6489d42026-05-11 https://junglewise.ai/threats/imagemagick-memory-leak-in-png-encoder-during-mng-write-9f0f10a32026-05-11 https://junglewise.ai/threats/imagemagick-heap-buffer-overflow-in-magnify-operation-28f6c4092026-05-11 https://junglewise.ai/threats/imagemagick-stack-buffer-overflow-in-mng-encoder-8421fbc32026-05-11 https://junglewise.ai/threats/imagemagick-out-of-bounds-read-in-morphology-processing-546d5b752026-05-11 https://junglewise.ai/threats/imagemagick-heap-buffer-overflow-in-ftxt-encoder-f51f04512026-05-11 https://junglewise.ai/threats/cve-2026-41064-wwbn-avideo-has-an-incomplete-fix-for-command-injection2026-05-11 https://junglewise.ai/threats/novu-xss-sanitization-bypass-in-email-editor-8278b4152026-05-11 https://junglewise.ai/threats/novu-xss-sanitization-bypass-in-email-preview-5710ec562026-09-24 https://junglewise.ai/threats/novu-has-ssrf-via-conditions-filter-webhook-bypasses-validateurlssrf-b4886c212026-05-11 https://junglewise.ai/threats/novu-ssrf-in-conditions-filter-webhook-c8d485d72026-09-25 https://junglewise.ai/threats/cve-2026-41060-wwbn-avideo-has-a-ssrf-via-same-domain-hostname-with-alternate2026-05-11 https://junglewise.ai/threats/cve-2026-41058-wwbn-avideo-has-an-incomplete-fix-for-path-traversal2026-05-11 https://junglewise.ai/threats/cve-2026-41057-wwbn-avideo-has-a-cors-origin-reflection-bypass-via-plugin-api2026-05-11 https://junglewise.ai/threats/cve-2026-41056-wwbn-avideo-has-cors-origin-reflection-with-credentials-on2026-05-11 https://junglewise.ai/threats/cve-2026-40688-fortinet-fortiweb-out-of-bounds-write-in-cgi-daemon2026-07-24 https://junglewise.ai/threats/cve-2026-39399-nuget-nugetgallery-remote-code-execution-via-nuspec-metadata2026-07-24 https://junglewise.ai/threats/cve-2026-39387-boidcms-local-file-inclusion-and-rce-via-tpl-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-35589-hkuds-nanobot-cross-site-websocket-hijacking-in-whatsapp-bridge2026-07-24 https://junglewise.ai/threats/cve-2026-35034-jellyfin-denial-of-service-in-syncplay-group-creation2026-07-24 https://junglewise.ai/threats/cve-2026-35033-jellyfin-ffmpeg-argument-injection-arbitrary-file-read-in2026-07-24 https://junglewise.ai/threats/cve-2026-35032-jellyfin-privilege-escalation-via-ssrf-and-file-read-in-livetv2026-07-24 https://junglewise.ai/threats/cve-2026-35031-jellyfin-path-traversal-and-rce-in-subtitle-upload-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-34457-oauth2-proxy-authentication-bypass-via-health-check-user-agent2026-07-25 https://junglewise.ai/threats/cve-2026-34454-oauth2-proxy-insufficient-session-expiration-in-sign-in-page2026-07-25 https://junglewise.ai/threats/cve-2026-33414-podman-command-injection-in-hyperv-machine-backend2026-06-30 https://junglewise.ai/threats/cve-2026-33023-saitoha-libsixel-use-after-free-in-load-with-gdkpixbuf2026-07-25 https://junglewise.ai/threats/cve-2026-33021-saitoha-libsixel-use-after-free-in-sixel-encoder-encode-bytes2026-07-25 https://junglewise.ai/threats/cve-2026-27301-adobe-framemaker-heap-buffer-overflow-in-file-processing2026-07-25 https://junglewise.ai/threats/cve-2026-27300-adobe-framemaker-uninitialized-pointer-access-memory-disclosure2026-07-25 https://junglewise.ai/threats/cve-2026-27299-adobe-framemaker-improper-input-validation-in-file-parsing2026-07-25 https://junglewise.ai/threats/cve-2026-27298-adobe-framemaker-type-confusion-arbitrary-code-execution2026-07-25 https://junglewise.ai/threats/cve-2026-27297-adobe-framemaker-integer-underflow-arbitrary-code-execution2026-07-25 https://junglewise.ai/threats/cve-2026-27296-adobe-framemaker-integer-underflow-code-execution2026-07-25 https://junglewise.ai/threats/cve-2026-27295-adobe-framemaker-out-of-bounds-write-vulnerability2026-07-25 https://junglewise.ai/threats/cve-2026-27294-adobe-framemaker-out-of-bounds-read-in-file-parsing2026-07-25 https://junglewise.ai/threats/cve-2026-27293-adobe-framemaker-heap-overflow-in-file-parsing2026-07-25 https://junglewise.ai/threats/cve-2026-27292-adobe-framemaker-use-after-free-vulnerability2026-07-25 https://junglewise.ai/threats/cve-2026-27290-adobe-framemaker-untrusted-search-path-code-execution2026-07-25 https://junglewise.ai/threats/cve-2026-40944-oxia-s-tls-ca-certificate-chain-validation-fails-with-multi2026-05-11 https://junglewise.ai/threats/cve-2026-40943-oxia-affected-by-server-crash-via-race-condition-in-session2026-05-11 https://junglewise.ai/threats/cve-2026-40946-oxia-has-an-oidc-token-audience-validation-bypass-via2026-05-11 https://junglewise.ai/threats/cve-2026-40945-oxia-exposes-bearer-token-in-debug-log-messages-on-authentication2026-05-11 https://junglewise.ai/threats/cve-2026-40320-giskard-has-unsandboxed-jinja2-template-rendering-in2026-09-26 https://junglewise.ai/threats/cve-2026-40925-wwbn-avideo-has-csrf-in-configurationupdate-json-php-enables-full2026-05-11 https://junglewise.ai/threats/patrickhener-goshs-open-redirect-and-header-injection-in-redirect-31a66b522026-05-11 https://junglewise.ai/threats/cve-2026-40911-wwbn-avideo-yptsocket-websocket-broadcast-relay-leads-to2026-05-11 https://junglewise.ai/threats/cve-2026-40909-wwbn-avideo-has-a-path-traversal-in-locale-save-endpoint-enables2026-05-11 https://junglewise.ai/threats/cve-2026-40890-go-markdown-has-an-out-of-bounds-read-in-smartypantsrenderer2026-05-11 https://junglewise.ai/threats/cve-2026-40887-vendure-core-has-a-sql-injection-vulnerability2026-09-25 https://junglewise.ai/threats/cve-2026-4789-kyverno-ssrf-in-cel-http-library-functions2026-07-05 https://junglewise.ai/threats/cve-2026-40104-xwiki-s-rest-apis-can-list-all-pages-spaces-leading-to2026-05-11 https://junglewise.ai/threats/cve-2026-40091-authzed-spicedb-sensitive-information-leak-in-startup-logs2026-05-28 https://junglewise.ai/threats/cve-2026-40090-zarf-has-a-path-traversal-via-malicious-package-metadata-name2026-05-11 https://junglewise.ai/threats/cve-2026-39971-serendipity-has-a-host-header-injection-allows-smtp-header2026-05-11 https://junglewise.ai/threats/cve-2026-39963-serendipity-host-header-injection-in-serendipity-setcookie2026-05-11 https://junglewise.ai/threats/cve-2026-39884-flux159-mcp-server-kubernetes-argument-injection-in-port-forward2026-09-25 https://junglewise.ai/threats/cve-2026-39842-expression-injection-in-openremote2026-05-11 https://junglewise.ai/threats/cve-2026-40885-goshs-s-public-collaborator-feed-leaks-goshs-acl-credentials-and2026-05-11 https://junglewise.ai/threats/cve-2026-40883-goshs-has-csrf-in-state-changing-get-routes-enables-authenticated2026-05-11 https://junglewise.ai/threats/cve-2026-40884-goshs-has-an-empty-username-sftp-password-authentication-bypass2026-05-11 https://junglewise.ai/threats/cve-2026-40876-sftp-root-escape-via-prefix-based-path-validation-in-goshs2026-05-11 https://junglewise.ai/threats/cve-2026-40870-decidim-missing-authorization-in-comments-api2026-05-29 https://junglewise.ai/threats/cve-2026-40869-decidim-decidim-core-incorrect-privilege-assignment-in-amendments2026-05-29 https://junglewise.ai/threats/cve-2026-40291-chamilo-lms-privilege-escalation-in-api-user-role-modification2026-07-24 https://junglewise.ai/threats/cve-2026-39907-unisys-webperfect-image-suite-ntlmv2-hash-leak-in-wcf-soap2026-07-24 https://junglewise.ai/threats/cve-2026-39906-unisys-webperfect-image-suite-ntlmv2-hash-leakage-in-net-remoting2026-07-24 https://junglewise.ai/threats/cve-2026-35196-chamilo-lms-os-command-injection-in-gradebook-certificate-export2026-07-24 https://junglewise.ai/threats/cve-2026-34631-adobe-incopy-out-of-bounds-write2026-07-25 https://junglewise.ai/threats/cve-2026-34619-adobe-coldfusion-path-traversal-security-bypass2026-07-25 https://junglewise.ai/threats/cve-2026-34602-chamilo-lms-idor-in-course-enrollment-api2026-07-25 https://junglewise.ai/threats/cve-2026-34370-chamilo-lms-idor-in-notebook-module2026-07-25 https://junglewise.ai/threats/cve-2026-34213-docmost-improper-authorization-in-file-upload-api2026-07-25 https://junglewise.ai/threats/cve-2026-34212-docmost-stored-xss-in-attachment-urls2026-07-25 https://junglewise.ai/threats/cve-2026-33193-docmost-stored-xss-via-mime-type-spoofing2026-07-25 https://junglewise.ai/threats/cve-2026-33146-docmost-authorization-bypass-in-public-search-endpoint2026-07-25 https://junglewise.ai/threats/cve-2026-33020-saitoha-libsixel-heap-overflow-in-sixel-frame-convert-to-rgb8882026-07-25 https://junglewise.ai/threats/cve-2026-33019-saitoha-libsixel-integer-overflow-in-img2sixel-crop-handling2026-07-25 https://junglewise.ai/threats/cve-2026-33018-saitoha-libsixel-use-after-free-in-load-gif2026-07-25 https://junglewise.ai/threats/cve-2026-27308-adobe-coldfusion-uncontrolled-resource-consumption2026-07-25 https://junglewise.ai/threats/cve-2026-27307-adobe-coldfusion-uncontrolled-resource-consumption2026-07-25 https://junglewise.ai/threats/cve-2026-27306-adobe-coldfusion-improper-input-validation-code-execution2026-07-25 https://junglewise.ai/threats/cve-2026-27305-adobe-coldfusion-path-traversal-arbitrary-file-read2026-07-25 https://junglewise.ai/threats/cve-2026-27304-adobe-coldfusion-arbitrary-code-execution-via-improper-input2026-07-25 https://junglewise.ai/threats/cve-2026-27282-adobe-coldfusion-security-feature-bypass-via-improper-input2026-07-25 https://junglewise.ai/threats/cve-2025-15565-nexi-xpay-wordpress-plugin-missing-authorization-in-redirect2026-07-25 https://junglewise.ai/threats/cve-2026-34161-chamilo-lms-stored-xss-in-social-post-attachments2026-07-25 https://junglewise.ai/threats/cve-2026-34160-chamilo-lms-unauthenticated-ssrf-in-pens-plugin2026-07-25 https://junglewise.ai/threats/cve-2026-33715-chamilo-lms-ssrf-and-open-email-relay-in-install-ajax-php2026-07-25 https://junglewise.ai/threats/cve-2026-33714-chamilo-lms-sql-injection-in-statistics-ajax-endpoint2026-07-25 https://junglewise.ai/threats/cve-2026-27287-adobe-incopy-out-of-bounds-read-in-file-parsing2026-07-25 https://junglewise.ai/threats/cve-2026-25133-october-cms-stored-xss-in-svg-sanitization-logic2026-07-25 https://junglewise.ai/threats/cve-2026-25125-october-cms-information-disclosure-in-ini-settings-parser2026-07-25 https://junglewise.ai/threats/cve-2026-24893-openitcockpit-command-injection-in-host-address-macro-expansion2026-07-25 https://junglewise.ai/threats/cve-2026-40683-openstack-keystone-incorrect-ldap-user-status-handling2026-09-26 https://junglewise.ai/threats/cve-2026-34630-adobe-bridge-heap-overflow-in-file-processing2026-07-25 https://junglewise.ai/threats/cve-2026-34618-adobe-illustrator-out-of-bounds-write-in-file-processing2026-07-25 https://junglewise.ai/threats/cve-2026-27313-adobe-bridge-heap-overflow-in-file-processing2026-07-25 https://junglewise.ai/threats/cve-2026-27312-adobe-bridge-heap-buffer-overflow-in-file-processing2026-07-25 https://junglewise.ai/threats/cve-2026-27311-adobe-bridge-heap-overflow-in-file-processing2026-07-25 https://junglewise.ai/threats/cve-2026-27310-adobe-bridge-heap-buffer-overflow-in-file-processing2026-07-20 https://junglewise.ai/threats/cve-2026-27289-adobe-photoshop-out-of-bounds-read-in-file-parsing2026-06-01 https://junglewise.ai/threats/cve-2026-27222-adobe-bridge-divide-by-zero-in-file-processing2026-07-20 https://junglewise.ai/threats/cve-2026-40868-kyverno-apicall-servicecall-implicit-bearer-token-injection-leaks2026-05-11 https://junglewise.ai/threats/kyverno-ssrf-in-apicall-feature-leading-to-multi-tenant-breach-0b4e80882026-05-11 https://junglewise.ai/threats/kyverno-ssrf-in-apicall-via-variable-substitution-6ae5ddc62026-05-10 https://junglewise.ai/threats/emilstenstrom-justhtml-multiple-sanitization-bypasses-c3dbbb242026-05-10 https://junglewise.ai/threats/cve-2026-22692-october-cms-october-rain-twig-sandbox-bypass-via-collection2026-05-10 https://junglewise.ai/threats/cve-2026-40255-adonisjs-http-server-has-an-open-redirect-vulnerability2026-09-25 https://junglewise.ai/threats/cve-2026-40248-free5gc-udr-improper-path-validation-allows-unauthenticated2026-05-11 https://junglewise.ai/threats/cve-2026-40247-free5gc-udr-improper-path-validation-allows-unauthenticated2026-05-11 https://junglewise.ai/threats/cve-2026-40246-free5gc-udr-improper-path-validation-allows-unauthenticated2026-05-11 https://junglewise.ai/threats/cve-2026-40245-free5gc-udr-information-disclosure-in-nudr-dr-service2026-05-11 https://junglewise.ai/threats/cve-2026-34625-adobe-experience-manager-dom-based-xss2026-07-25 https://junglewise.ai/threats/cve-2026-34624-adobe-experience-manager-dom-based-xss2026-07-25 https://junglewise.ai/threats/cve-2026-34623-adobe-experience-manager-dom-based-xss2026-07-25 https://junglewise.ai/threats/cve-2026-40312-imagemagick-off-by-one-error-in-msl-decoder2026-05-10 https://junglewise.ai/threats/cve-2026-40311-imagemagick-heap-use-after-free-in-xmp-profile-processing2026-05-10 https://junglewise.ai/threats/cve-2026-40310-imagemagick-heap-out-of-bounds-write-in-jp2-encoder2026-05-10 https://junglewise.ai/threats/cve-2026-40183-imagemagick-heap-buffer-overflow-in-jxl-encoder2026-05-10 https://junglewise.ai/threats/cve-2026-38527-webkul-krayin-crm-ssrf-in-webhook-creation2026-05-11 https://junglewise.ai/threats/cve-2026-38529-webkul-krayin-crm-bola-in-usercontroller-password-reset2026-05-11 https://junglewise.ai/threats/cve-2026-38530-webkul-krayin-crm-bola-in-leadcontroller2026-05-11 https://junglewise.ai/threats/cve-2026-38532-webkul-krayin-crm-bola-in-personcontroller2026-05-11 https://junglewise.ai/threats/cve-2026-5756-data-recognition-corporation-cos-unauthenticated-configuration2026-07-24 https://junglewise.ai/threats/cve-2026-5754-radware-alteon-reflected-xss-in-returnto-parameter2026-07-20 https://junglewise.ai/threats/cve-2026-5752-cohere-terrarium-sandbox-escape-via-javascript-prototype-chain2026-07-24 https://junglewise.ai/threats/cve-2026-34629-adobe-indesign-heap-overflow-in-file-processing2026-07-25 https://junglewise.ai/threats/cve-2026-34628-adobe-indesign-heap-overflow-in-file-parsing2026-07-25 https://junglewise.ai/threats/cve-2026-34627-adobe-indesign-heap-overflow-in-file-parsing2026-07-25 https://junglewise.ai/threats/cve-2026-34617-adobe-connect-privilege-escalation-via-cross-site-scripting2026-07-25 https://junglewise.ai/threats/cve-2026-34615-adobe-connect-deserialization-of-untrusted-data2026-07-25 https://junglewise.ai/threats/cve-2026-34614-adobe-connect-reflected-cross-site-scripting2026-07-25 https://junglewise.ai/threats/cve-2026-33829-microsoft-windows-snipping-tool-information-disclosure-via-ms2026-07-25 https://junglewise.ai/threats/cve-2026-33827-microsoft-windows-tcp-ip-race-condition-remote-code-execution2026-07-25 https://junglewise.ai/threats/cve-2026-33826-microsoft-windows-active-directory-improper-input-validation2026-07-25 https://junglewise.ai/threats/cve-2026-33825-microsoft-defender-privilege-escalation-in-antimalware-platform2026-07-25 https://junglewise.ai/threats/cve-2026-33824-microsoft-windows-double-free-in-ike-extension2026-09-24 https://junglewise.ai/threats/cve-2026-33822-microsoft-office-word-out-of-bounds-read2026-07-25 https://junglewise.ai/threats/cve-2026-33120-microsoft-sql-server-remote-code-execution-via-untrusted-pointer2026-07-25 https://junglewise.ai/threats/cve-2026-33116-microsoft-net-infinite-loop-in-xmldecryptiontransform2026-06-30 https://junglewise.ai/threats/cve-2026-33115-microsoft-office-word-use-after-free-code-execution2026-07-25 https://junglewise.ai/threats/cve-2026-33114-microsoft-office-word-untrusted-pointer-dereference2026-07-25 https://junglewise.ai/threats/cve-2026-33104-microsoft-windows-win32k-race-condition-privilege-escalation2026-07-25 https://junglewise.ai/threats/cve-2026-33103-microsoft-dynamics-365-improper-access-control-in-on-premises2026-07-25 https://junglewise.ai/threats/cve-2026-33101-microsoft-windows-print-spooler-privilege-escalation2026-07-25 https://junglewise.ai/threats/cve-2026-33100-microsoft-windows-afd-for-winsock-use-after-free-privilege2026-07-25 https://junglewise.ai/threats/cve-2026-33099-microsoft-windows-use-after-free-in-ancillary-function-driver-for2026-07-25 https://junglewise.ai/threats/cve-2026-33098-microsoft-windows-privilege-escalation-in-container-isolation-fs2026-07-25 https://junglewise.ai/threats/cve-2026-33096-microsoft-windows-http-sys-out-of-bounds-read-denial-of-service2026-07-25 https://junglewise.ai/threats/cve-2026-33095-microsoft-office-word-use-after-free-code-execution2026-07-25 https://junglewise.ai/threats/cve-2026-32226-microsoft-net-framework-race-condition-denial-of-service2026-07-25 https://junglewise.ai/threats/cve-2026-32225-microsoft-windows-shell-protection-mechanism-failure2026-07-25 https://junglewise.ai/threats/cve-2026-32224-microsoft-windows-server-update-service-use-after-free-privilege2026-07-25 https://junglewise.ai/threats/cve-2026-32223-microsoft-windows-usb-print-driver-heap-overflow-privilege2026-05-26 https://junglewise.ai/threats/cve-2026-32222-microsoft-windows-win32k-privilege-escalation-in-icomp2026-07-25 https://junglewise.ai/threats/cve-2026-32221-microsoft-graphics-component-heap-overflow-code-execution2026-07-25 https://junglewise.ai/threats/cve-2026-32220-microsoft-windows-vbs-enclave-security-feature-bypass2026-07-25 https://junglewise.ai/threats/cve-2026-32203-microsoft-net-and-visual-studio-stack-overflow-denial-of-service2026-07-28 https://junglewise.ai/threats/cve-2026-32202-microsoft-windows-shell-protection-mechanism-failure-spoofing2026-05-26 https://junglewise.ai/threats/cve-2026-32201-microsoft-sharepoint-server-improper-input-validation-spoofing2026-05-28 https://junglewise.ai/threats/cve-2026-32181-microsoft-windows-dos-in-connected-user-experiences-and-telemetry2026-05-26 https://junglewise.ai/threats/cve-2026-32178-microsoft-net-smtp-command-injection-in-mailaddress-parsing2026-06-30 https://junglewise.ai/threats/cve-2026-32157-use-after-free-in-remote-desktop-client-allows-an-unauthorized2026-09-26 https://junglewise.ai/threats/cve-2026-32154-microsoft-desktop-window-manager-use-after-free-privilege2026-06-01 https://junglewise.ai/threats/cve-2026-32152-microsoft-windows-desktop-window-manager-use-after-free-privilege2026-06-01 https://junglewise.ai/threats/cve-2026-32077-microsoft-windows-upnp-device-host-untrusted-pointer-dereference2026-05-26 https://junglewise.ai/threats/cve-2026-26174-concurrent-execution-using-shared-resource-with-improper2026-09-26 https://junglewise.ai/threats/cve-2026-26171-microsoft-net-denial-of-service-via-xml-entity-expansion2026-06-30 https://junglewise.ai/threats/cve-2026-26151-microsoft-windows-remote-desktop-spoofing-via-insufficient-ui2026-05-26 https://junglewise.ai/threats/cve-2026-23666-microsoft-net-framework-denial-of-service-via-race-condition2026-06-30 https://junglewise.ai/threats/cve-2026-5713-python-cpython-out-of-bounds-read-write-in-remote-debugging2026-06-10 https://junglewise.ai/threats/cve-2026-39813-fortinet-fortisandbox-privilege-escalation-in-jrpc-api2026-06-18 https://junglewise.ai/threats/cve-2026-39808-fortinet-fortisandbox-os-command-injection-in-api-endpoint2026-07-16 https://junglewise.ai/threats/cve-2026-22155-fortinet-fortisoar-cleartext-transmission-of-sensitive2026-07-08 https://junglewise.ai/threats/cve-2026-21742-fortinet-fortisoar-cleartext-password-disclosure-in-api-responses2026-07-08 https://junglewise.ai/threats/cve-2025-65134-manikandan580-school-management-system-xss-in-contact-us-php2026-05-11 https://junglewise.ai/threats/cve-2025-61624-fortinet-multiple-products-path-traversal-in-cli2026-05-12 https://junglewise.ai/threats/cve-2025-53847-fortinet-fortios-missing-authentication-in-capwap-daemon2026-05-12 https://junglewise.ai/threats/cve-2026-37980-keycloak-stored-xss-in-organization-selection-login-page2026-06-02 https://junglewise.ai/threats/cve-2025-69893-trezor-hardware-wallets-side-channel-information-leak-in-bip-392026-07-05 https://junglewise.ai/threats/cve-2025-61260-openai-codex-cli-code-execution-via-project-local-configuration2026-09-25 https://junglewise.ai/threats/cve-2025-13822-samanhappy-mcphub-authentication-bypass-in-api-endpoints2026-09-25 https://junglewise.ai/threats/cve-2026-2332-eclipse-jetty-http-request-smuggling-in-chunk-extension-parsing2026-06-30 https://junglewise.ai/threats/cve-2026-24069-kiuwan-sast-improper-authorization-for-disabled-sso-accounts2026-05-19 https://junglewise.ai/threats/cve-2026-33929-apache-pdfbox-path-traversal-in-extractembeddedfiles-example2026-05-11 https://junglewise.ai/threats/cve-2025-40745-siemens-multiple-products-improper-certificate-validation-in2026-06-29 https://junglewise.ai/threats/cve-2026-34257-sap-netweaver-as-abap-open-redirect2026-06-03 https://junglewise.ai/threats/follow-redirects-information-exposure-via-custom-headers-in-redirects-6b46ceb42026-05-10 https://junglewise.ai/threats/cve-2026-40606-mitmproxy-ldap-injection-in-ldap-proxy-authentication2026-09-26 https://junglewise.ai/threats/fat-free-crm-bola-in-email-dropbox-064835992026-05-10 https://junglewise.ai/threats/kimai-api-token-hash-leak-in-invoice-twig-templates-59c496562026-05-10 https://junglewise.ai/threats/kimai-open-redirect-in-saml-acs-handler-b36b6ecb2026-05-10 https://junglewise.ai/threats/cve-2026-40164-jqlang-jq-denial-of-service-via-predictable-murmurhash3-seed2026-06-30 https://junglewise.ai/threats/cve-2026-27674-sap-netweaver-as-java-code-injection-in-web-dynpro-java2026-06-03 https://junglewise.ai/threats/cve-2026-40879-nest-affected-by-dos-via-recursive-handledata-in-jsonsocket-tcp2026-09-25 https://junglewise.ai/threats/aionda-mcp-ssh-ssh-scp-option-injection-allowing-local-rce-fb6123b22026-09-25 https://junglewise.ai/threats/aiondadotcom-mcp-ssh-local-rce-via-ssh-option-injection-ad43b8dc2026-05-10 https://junglewise.ai/threats/cve-2026-40481-in-monetr-unauthenticated-stripe-webhook-reads-attacker-sized2026-05-11 https://junglewise.ai/threats/cve-2026-40576-excel-mcp-server-has-a-path-traversal-issue2026-09-26 https://junglewise.ai/threats/cve-2009-0238-microsoft-excel-remote-code-execution-via-malformed-object2026-05-15 https://junglewise.ai/threats/cve-2026-39979-jqlang-jq-out-of-bounds-read-in-jv-parse-sized2026-06-30 https://junglewise.ai/threats/cve-2026-4786-python-cpython-command-injection-bypass-in-webbrowser-module2026-06-30 https://junglewise.ai/threats/cve-2026-40169-imagemagick-heap-overflow-in-yaml-and-json-encoders2026-05-10 https://junglewise.ai/threats/cve-2026-34238-imagemagick-heap-buffer-overflow-in-despeckle-operation2026-05-11 https://junglewise.ai/threats/cve-2026-33947-jqlang-jq-uncontrolled-recursion-in-path-functions2026-05-10 https://junglewise.ai/threats/cve-2026-33908-imagemagick-uncontrolled-recursion-in-destroyxmltree-function2026-06-30 https://junglewise.ai/threats/cve-2026-33905-imagemagick-out-of-bounds-read-in-sample-operation2026-05-10 https://junglewise.ai/threats/cve-2026-33902-imagemagick-stack-overflow-in-fx-expression-parser2026-05-10 https://junglewise.ai/threats/cve-2026-22566-ubiquiti-unifi-play-improper-access-control-in-wifi-credential2026-05-10 https://junglewise.ai/threats/cve-2026-22565-ubiquiti-unifi-play-improper-input-validation-in-audio-devices2026-05-10 https://junglewise.ai/threats/cve-2026-22564-ubiquiti-unifi-play-improper-access-control-in-poweramp-and-audio2026-05-10 https://junglewise.ai/threats/cve-2026-22563-ubiquiti-unifi-play-command-injection-in-poweramp-and-audio-port2026-05-10 https://junglewise.ai/threats/cve-2026-22562-ubiquiti-unifi-play-path-traversal-in-firmware2026-05-10 https://junglewise.ai/threats/cve-2026-6219-aandrew-me-ytdownloader-command-injection-in-compressor-feature2026-05-10 https://junglewise.ai/threats/cve-2026-6218-aandrew-me-ytdownloader-xss-in-error-details-panel2026-05-10 https://junglewise.ai/threats/cve-2026-6216-dbgate-cross-site-scripting-in-svg-icon-string-handler2026-09-25 https://junglewise.ai/threats/cve-2026-33901-imagemagick-heap-buffer-overflow-in-mvg-decoder2026-06-30 https://junglewise.ai/threats/cve-2026-33900-imagemagick-integer-overflow-in-viff-encoder2026-05-11 https://junglewise.ai/threats/cve-2026-33899-imagemagick-heap-buffer-overflow-in-xml-parsing2026-05-11 https://junglewise.ai/threats/cve-2026-33740-espocrm-idor-in-email-importeml-endpoint2026-05-10 https://junglewise.ai/threats/cve-2026-33659-espocrm-ssrf-via-dns-rebinding-in-attachment-fromimageurl2026-05-10 https://junglewise.ai/threats/cve-2026-32272-craft-cms-commerce-sql-injection-in-product-and-variant-queries2026-05-10 https://junglewise.ai/threats/cve-2026-32271-craft-cms-commerce-sql-injection-and-rce-in-totalrevenue-widget2026-05-10 https://junglewise.ai/threats/cve-2026-31280-parani-m10-intercom-buffer-overflow-in-bluetooth-rfcomm-service2026-05-10 https://junglewise.ai/threats/cve-2026-26460-vtiger-crm-html-injection-in-dashboard-module2026-05-10 https://junglewise.ai/threats/cve-2025-70936-vtiger-crm-reflected-xss-in-mailmanager-module2026-05-10 https://junglewise.ai/threats/cve-2025-51414-phpgurukul-online-course-registration-arbitrary-file-upload-in-my2026-05-10 https://junglewise.ai/threats/cve-2026-6215-dbgate-ssrf-in-rest-graphql-component2026-05-10 https://junglewise.ai/threats/cve-2026-6202-code-projects-easy-blog-site-sql-injection-in-post-php2026-05-10 https://junglewise.ai/threats/cve-2026-6201-codeastro-online-job-portal-improper-access-control-in-job-delete2026-05-10 https://junglewise.ai/threats/cve-2026-33657-espocrm-stored-html-injection-in-email-notifications2026-05-10 https://junglewise.ai/threats/cve-2026-33534-espocrm-ssrf-via-internal-host-validation-bypass-in-attachment2026-05-10 https://junglewise.ai/threats/cve-2026-32605-nimiq-core-rs-albatross-denial-of-service-via-off-by-one-error2026-05-10 https://junglewise.ai/threats/cve-2026-32270-craft-cms-craft-commerce-information-disclosure-in2026-05-10 https://junglewise.ai/threats/cve-2026-31048-irmen-pyro3-remote-code-execution-via-pickle-deserialization2026-05-10 https://junglewise.ai/threats/cve-2026-40262-note-mark-has-stored-xss-via-unrestricted-asset-upload2026-05-11 https://junglewise.ai/threats/cve-2026-40193-foxcpp-maddy-mail-server-ldap-filter-injection-in-auth-ldap2026-05-11 https://junglewise.ai/threats/cve-2026-6200-tenda-f456-stack-buffer-overflow-in-formwebtypelibrary2026-05-10 https://junglewise.ai/threats/cve-2026-6199-tenda-f456-stack-overflow-in-fromqossetting2026-05-10 https://junglewise.ai/threats/cve-2026-6198-tenda-f456-stack-buffer-overflow-in-fromnatstaticsetting2026-05-10 https://junglewise.ai/threats/cve-2026-6197-tenda-f456-stack-overflow-in-formwrlsafeset2026-05-10 https://junglewise.ai/threats/cve-2026-40044-pachno-php-deserialization-in-filecache-component2026-05-10 https://junglewise.ai/threats/cve-2026-40043-pachno-authentication-bypass-in-runswitchuser2026-05-10 https://junglewise.ai/threats/cve-2026-40042-pachno-xml-external-entity-injection-in-textparser2026-05-10 https://junglewise.ai/threats/cve-2026-40041-pachno-csrf-in-state-changing-endpoints2026-05-10 https://junglewise.ai/threats/cve-2026-40040-pachno-unrestricted-file-upload-in-uploadfile-endpoint2026-05-10 https://junglewise.ai/threats/cve-2026-40039-pachno-open-redirection-via-return-to-parameter2026-05-10 https://junglewise.ai/threats/cve-2026-40038-pachno-stored-cross-site-scripting-via-multiple-parameters2026-05-10 https://junglewise.ai/threats/cve-2026-29955-cloudark-kubeplus-command-injection-in-kubeconfiggenerator2026-05-10 https://junglewise.ai/threats/cve-2026-6196-tenda-f456-stack-based-buffer-overflow-in-fromexecommand2026-05-10 https://junglewise.ai/threats/cve-2026-6195-totolink-a7100ru-command-injection-in-setpasswordcfg2026-05-10 https://junglewise.ai/threats/cve-2026-6194-totolink-a3002mu-stack-overflow-in-formwlansetup2026-05-10 https://junglewise.ai/threats/cve-2026-6100-python-cpython-use-after-free-in-decompression-modules2026-06-30 https://junglewise.ai/threats/cve-2026-32316-jqlang-jq-heap-buffer-overflow-in-string-processing-functions2026-05-10 https://junglewise.ai/threats/cve-2026-28291-steveukx-simple-git-command-injection-via-option-parsing-bypass2026-09-25 https://junglewise.ai/threats/cve-2025-3756-abb-multiple-products-denial-of-service-in-iec-61850-stack2026-05-19 https://junglewise.ai/threats/cve-2026-6193-phpgurukul-daily-expense-tracking-system-sql-injection-in-register2026-05-10 https://junglewise.ai/threats/cve-2026-6192-uclouvain-openjpeg-integer-overflow-in-opj-pi-initialise-encode2026-05-21 https://junglewise.ai/threats/cve-2026-6191-itsourcecode-construction-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-6190-itsourcecode-construction-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-6189-sourcecodester-pharmacy-sales-and-inventory-system-sql-injection2026-05-10 https://junglewise.ai/threats/cve-2026-39940-churchcrm-open-redirect-via-linkback-parameter2026-05-10 https://junglewise.ai/threats/cve-2026-36952-sourcecodester-online-thesis-archiving-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-36950-sourcecodester-online-thesis-archiving-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-36948-sourcecodester-online-thesis-archiving-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-33555-haproxy-request-smuggling-via-http-3-standalone-fin2026-06-29 https://junglewise.ai/threats/cve-2026-23891-decidim-stored-xss-in-user-name-field2026-05-11 https://junglewise.ai/threats/cve-2026-35582-emissary-has-an-os-command-injection-via-unvalidated-in-file2026-05-11 https://junglewise.ai/threats/cve-2026-34069-nimiq-nimiq-consensus-panic-in-requestmacrochain-handler2026-05-11 https://junglewise.ai/threats/cve-2026-6231-mongodb-c-driver-improper-input-validation-in-bson-validate2026-05-10 https://junglewise.ai/threats/cve-2026-6188-sourcecodester-pharmacy-sales-and-inventory-system-sql-injection2026-05-10 https://junglewise.ai/threats/cve-2026-6187-sourcecodester-pharmacy-sales-and-inventory-system-sql-injection2026-05-10 https://junglewise.ai/threats/cve-2026-6186-utt-hiper-1200gw-buffer-overflow-in-formnatstaticmap2026-05-10 https://junglewise.ai/threats/cve-2026-6184-code-projects-simple-content-management-system-stored-xss-in-news2026-05-10 https://junglewise.ai/threats/cve-2026-36938-sourcecodester-online-resort-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-36937-sourcecodester-online-resort-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-34188-artica-pandora-fms-os-command-injection-in-event-response2026-05-10 https://junglewise.ai/threats/cve-2026-34186-artica-pandora-fms-sql-injection-in-custom-fields2026-05-10 https://junglewise.ai/threats/cve-2026-30813-artica-pandora-fms-sql-injection-in-module-search2026-05-10 https://junglewise.ai/threats/cve-2026-30812-artica-pandora-fms-stored-xss-in-event-comments2026-05-10 https://junglewise.ai/threats/cve-2026-30811-artica-pandora-fms-sensitive-information-exposure-in2026-05-10 https://junglewise.ai/threats/cve-2026-30809-artica-pandora-fms-os-command-injection-in-webservermoduledebug2026-05-10 https://junglewise.ai/threats/cve-2026-30806-artica-pandora-fms-os-command-injection-in-network-report2026-05-10 https://junglewise.ai/threats/cve-2026-30804-artica-pandora-fms-remote-code-execution-via-unrestricted-file2026-05-10 https://junglewise.ai/threats/cve-2025-69627-nitro-pdf-pro-use-after-free-in-maildoc-javascript-method2026-07-05 https://junglewise.ai/threats/cve-2025-69624-nitro-pdf-pro-null-pointer-dereference-in-app-alert-javascript2026-07-05 https://junglewise.ai/threats/cve-2025-66769-nitro-pdf-pro-null-pointer-dereference-in-xfa-processing2026-05-10 https://junglewise.ai/threats/cve-2025-63743-grokability-snipe-it-stored-xss-in-user-profile-fields2026-07-05 https://junglewise.ai/threats/cve-2025-31991-hcl-devops-velocity-improper-rate-limiting-in-login2026-07-07 https://junglewise.ai/threats/cve-2026-6183-code-projects-simple-content-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-6182-code-projects-simple-content-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-36945-sourcecodester-computer-and-mobile-repair-shop-management-system2026-05-10 https://junglewise.ai/threats/cve-2026-36944-sourcecodester-computer-and-mobile-repair-shop-management-system2026-05-10 https://junglewise.ai/threats/cve-2026-36943-sourcecodester-computer-and-mobile-repair-shop-management-system2026-05-10 https://junglewise.ai/threats/cve-2026-36942-sourcecodester-online-resort-management-system-v1-0-is-vulnerable2026-05-10 https://junglewise.ai/threats/cve-2026-36941-sourcecodester-online-resort-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-33858-apache-airflow-insecure-deserialization-in-xcom-api2026-09-26 https://junglewise.ai/threats/cve-2026-31283-totara-lms-email-bombing-via-forgot-password-api2026-05-10 https://junglewise.ai/threats/cve-2026-31282-totara-lms-access-control-bypass-in-login-page2026-05-10 https://junglewise.ai/threats/cve-2026-31281-totara-learning-html-injection-in-messaging-client2026-05-10 https://junglewise.ai/threats/cve-2026-30999-ffmpeg-heap-buffer-overflow-in-av-bprint-finalize2026-05-10 https://junglewise.ai/threats/cve-2026-30998-ffmpeg-zmqsend-improper-resource-deallocation2026-05-10 https://junglewise.ai/threats/cve-2026-30997-ffmpeg-out-of-bounds-read-in-read-global-param2026-05-10 https://junglewise.ai/threats/cve-2026-29628-tinyobjloader-stack-overflow-in-experimental-loadmtl2026-05-10 https://junglewise.ai/threats/cve-2026-1462-keras-tfsmlayer-arbitrary-code-execution-via-safe-mode-bypass2026-09-26 https://junglewise.ai/threats/cve-2025-66236-apache-airflow-sensitive-information-disclosure-in-task-logs2026-09-26 https://junglewise.ai/threats/cve-2026-36947-sourcecodester-computer-and-mobile-repair-shop-management-system2026-05-10 https://junglewise.ai/threats/cve-2026-36946-sourcecodester-computer-and-mobile-repair-shop-management-system2026-05-10 https://junglewise.ai/threats/cve-2026-31428-linux-kernel-information-leak-in-netfilter-nfnetlink-log2026-05-20 https://junglewise.ai/threats/cve-2026-31427-linux-kernel-uninitialized-memory-use-in-netfilter-nf-conntrack2026-05-20 https://junglewise.ai/threats/cve-2026-31426-linux-kernel-use-after-free-in-acpi-ec-setup2026-05-20 https://junglewise.ai/threats/cve-2026-31425-linux-kernel-null-pointer-dereference-in-rds-infiniband2026-05-20 https://junglewise.ai/threats/cve-2026-31424-linux-kernel-null-pointer-dereference-in-netfilter-x-tables2026-05-20 https://junglewise.ai/threats/cve-2026-31423-linux-kernel-divide-by-zero-in-hfsc-network-scheduler2026-05-20 https://junglewise.ai/threats/cve-2026-31422-linux-kernel-null-pointer-dereference-in-net-sched-cls-flow2026-05-20 https://junglewise.ai/threats/cve-2026-31421-linux-kernel-null-pointer-dereference-in-net-sched-cls-fw2026-05-20 https://junglewise.ai/threats/cve-2026-31420-linux-kernel-denial-of-service-in-bridge-mrp-via-zero-test2026-05-20 https://junglewise.ai/threats/cve-2026-31419-linux-kernel-use-after-free-in-network-bonding-broadcast2026-05-20 https://junglewise.ai/threats/cve-2026-31418-linux-kernel-netfilter-resource-leak-in-ipset-mtype-del2026-05-20 https://junglewise.ai/threats/cve-2026-31417-linux-kernel-integer-overflow-in-x-25-packet-accumulation2026-05-20 https://junglewise.ai/threats/cve-2026-31416-linux-kernel-netfilter-incorrect-header-size-accounting-in2026-05-20 https://junglewise.ai/threats/cve-2026-31415-linux-kernel-integer-overflow-in-ip6-datagram-send-ctl2026-05-20 https://junglewise.ai/threats/cve-2026-31414-linux-kernel-netfilter-unsafe-memory-access-in-nf-conntrack2026-05-20 https://junglewise.ai/threats/cve-2026-36923-sourcecodester-cab-management-system-sql-injection-in-view2026-05-10 https://junglewise.ai/threats/cve-2026-36922-sourcecodester-cab-management-system-sql-injection-in-view2026-05-10 https://junglewise.ai/threats/cve-2026-36920-sourcecodester-online-reviewer-system-sql-injection-in-questions2026-05-10 https://junglewise.ai/threats/cve-2026-36919-sourcecodester-online-reviewer-system-sql-injection-in-exam2026-05-10 https://junglewise.ai/threats/cve-2026-36874-sourcecodester-basic-library-system-sql-injection-in-load-student2026-05-10 https://junglewise.ai/threats/cve-2026-36873-sourcecodester-basic-library-system-sql-injection-in-load-admin2026-05-10 https://junglewise.ai/threats/cve-2026-36872-sourcecodester-basic-library-system-sql-injection-in-load-book2026-05-10 https://junglewise.ai/threats/cve-2026-34476-apache-skywalking-mcp-ssrf-via-sw-url-header2026-07-21 https://junglewise.ai/threats/librenms-remote-code-execution-in-binary-locations-config-372856792026-05-11 https://junglewise.ai/threats/cve-2026-6204-librenms-remote-code-execution-in-binary-locations-config2026-05-11 https://junglewise.ai/threats/cve-2026-2728-librenms-authenticated-xss-in-showconfig-page2026-05-18 https://junglewise.ai/threats/cve-2026-35565-apache-storm-ui-stored-xss-in-topology-metadata2026-05-11 https://junglewise.ai/threats/cve-2026-35337-apache-storm-remote-code-execution-via-unsafe-deserialization-in2026-05-11 https://junglewise.ai/threats/cve-2025-15632-1panel-dev-maxkb-stored-xss-in-mdpreview-component2026-05-10 https://junglewise.ai/threats/cve-2026-4810-google-agent-development-kit-code-injection-and-missing2026-05-11 https://junglewise.ai/threats/cve-2026-0234-palo-alto-networks-cortex-xsoar-signature-bypass-in-microsoft2026-07-07 https://junglewise.ai/threats/cve-2026-0233-palo-alto-networks-adem-improper-certificate-validation-on-windows2026-07-07 https://junglewise.ai/threats/cve-2026-0232-palo-alto-networks-cortex-xdr-agent-protection-bypass-on-windows2026-07-07 https://junglewise.ai/threats/cve-2026-6168-totolink-a7000r-stack-overflow-in-setwifieasyguestcfg2026-05-10 https://junglewise.ai/threats/cve-2026-6167-code-projects-faculty-management-system-sql-injection-in-subject2026-05-10 https://junglewise.ai/threats/cve-2026-6166-code-projects-vehicle-showroom-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-5936-foxit-pdf-services-api-ssrf-via-crafted-url2026-07-07 https://junglewise.ai/threats/cve-2026-5085-solstice-solstice-session-predictable-session-id-generation2026-05-10 https://junglewise.ai/threats/cve-2026-40436-zte-zxedm-iems-password-reset-vulnerability-in-cloud-ems-portal2026-05-10 https://junglewise.ai/threats/cve-2026-3830-wbw-product-filter-for-woocommerce-sql-injection2026-05-10 https://junglewise.ai/threats/cve-2026-34866-huawei-harmonyos-out-of-bounds-write-in-web-module2026-05-10 https://junglewise.ai/threats/cve-2026-34865-huawei-harmonyos-out-of-bounds-write-in-web-module2026-05-10 https://junglewise.ai/threats/cve-2025-15441-10web-form-maker-sql-injection-in-mysql-mapping2026-05-10 https://junglewise.ai/threats/cve-2026-6165-code-projects-vehicle-showroom-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-6164-code-projects-lost-and-found-thing-management-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-6163-code-projects-lost-and-found-thing-management-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-40447-samsung-escargot-integer-overflow-in-javascript-engine2026-06-02 https://junglewise.ai/threats/cve-2026-21014-samsung-camera-improper-access-control-in-location-data-access2026-05-10 https://junglewise.ai/threats/cve-2026-21013-samsung-galaxy-wearable-incorrect-default-permissions2026-05-10 https://junglewise.ai/threats/cve-2026-21012-samsung-aodmanager-file-creation-with-system-privileges2026-05-10 https://junglewise.ai/threats/cve-2026-21011-samsung-android-bluetooth-privilege-escalation-in-maintenance2026-05-10 https://junglewise.ai/threats/cve-2026-21010-samsung-retail-mode-improper-input-validation2026-05-10 https://junglewise.ai/threats/cve-2026-21009-samsung-android-app-pinning-bypass-in-recents2026-05-10 https://junglewise.ai/threats/cve-2026-21008-samsung-s-share-sensitive-information-disclosure2026-05-10 https://junglewise.ai/threats/cve-2026-21007-samsung-device-care-knox-guard-bypass2026-05-10 https://junglewise.ai/threats/cve-2026-21006-samsung-dex-improper-access-control-in-notifications2026-05-10 https://junglewise.ai/threats/cve-2026-6162-phpgurukul-company-visitor-management-system-xss-in-bwdates2026-05-10 https://junglewise.ai/threats/cve-2026-6161-code-projects-simple-chatbox-sql-injection-in-insert-php2026-05-10 https://junglewise.ai/threats/cve-2026-6160-code-projects-simple-chatbox-information-disclosure-via-exposed2026-05-10 https://junglewise.ai/threats/cve-2026-6159-code-projects-simple-chatbox-stored-xss-in-insert-php2026-05-10 https://junglewise.ai/threats/cve-2026-6158-totolink-n300rh-os-command-injection-in-setupgradeuboot2026-05-10 https://junglewise.ai/threats/cve-2026-40446-samsung-escargot-type-confusion-in-javascript-engine2026-06-02 https://junglewise.ai/threats/cve-2026-35553-dynabook-bluetooth-acpi-drivers-stack-overflow-in-tosrfec-sys-and2026-05-10 https://junglewise.ai/threats/cve-2026-34864-huawei-harmonyos-memory-corruption-in-application-read-module2026-05-10 https://junglewise.ai/threats/cve-2026-34863-huawei-harmonyos-out-of-bounds-write-in-file-system2026-05-10 https://junglewise.ai/threats/cve-2026-34862-huawei-harmonyos-race-condition-in-power-consumption-statistics2026-05-10 https://junglewise.ai/threats/cve-2026-34861-huawei-harmonyos-race-condition-in-thermal-management-module2026-05-10 https://junglewise.ai/threats/cve-2026-34859-huawei-harmonyos-and-emui-use-after-free-in-kernel-module2026-05-10 https://junglewise.ai/threats/cve-2026-34858-huawei-harmonyos-use-after-free-in-communication-module2026-05-10 https://junglewise.ai/threats/cve-2026-34857-huawei-harmonyos-use-after-free-in-communication-module2026-05-10 https://junglewise.ai/threats/cve-2026-34855-huawei-harmonyos-and-emui-out-of-bounds-write-in-kernel-module2026-05-10 https://junglewise.ai/threats/cve-2026-34854-huawei-harmonyos-and-emui-use-after-free-in-kernel-module2026-05-10 https://junglewise.ai/threats/cve-2026-34849-huawei-harmonyos-uaf-in-screen-management-module2026-05-10 https://junglewise.ai/threats/cve-2026-25209-samsung-escargot-out-of-bounds-read-in-javascript-engine2026-05-10 https://junglewise.ai/threats/cve-2026-25208-samsung-escargot-integer-overflow-in-javascript-engine2026-05-10 https://junglewise.ai/threats/cve-2026-25207-samsung-escargot-out-of-bounds-write2026-05-10 https://junglewise.ai/threats/cve-2026-25206-samsung-escargot-out-of-bounds-read-in-javascript-engine2026-05-10 https://junglewise.ai/threats/cve-2026-25205-samsung-escargot-heap-buffer-overflow2026-05-10 https://junglewise.ai/threats/cve-2026-21003-samsung-android-improper-input-validation-in-network-restrictions2026-05-10 https://junglewise.ai/threats/cve-2026-6157-totolink-a800r-buffer-overflow-in-setappeasywizardconfig2026-05-10 https://junglewise.ai/threats/cve-2026-6156-totolink-a7100ru-command-injection-in-setipqosrules2026-05-10 https://junglewise.ai/threats/cve-2026-6155-totolink-a7100ru-command-injection-in-setwancfg2026-05-10 https://junglewise.ai/threats/cve-2026-6154-totolink-a7100ru-os-command-injection-in-setwizardcfg2026-05-10 https://junglewise.ai/threats/cve-2026-6153-code-projects-vehicle-showroom-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-34867-huawei-harmonyos-double-free-in-multi-mode-input-system2026-05-10 https://junglewise.ai/threats/cve-2026-34860-huawei-harmonyos-improper-access-control-in-memo-module2026-05-10 https://junglewise.ai/threats/cve-2026-34856-huawei-harmonyos-use-after-free-in-communication-module2026-05-10 https://junglewise.ai/threats/cve-2026-34853-huawei-harmonyos-and-emui-permission-bypass-in-lbs-module2026-05-10 https://junglewise.ai/threats/cve-2026-34852-huawei-harmonyos-stack-overflow-in-media-platform2026-05-10 https://junglewise.ai/threats/cve-2026-34851-huawei-harmonyos-race-condition-in-event-notification-module2026-05-10 https://junglewise.ai/threats/cve-2026-34850-huawei-harmonyos-race-condition-in-notification-service2026-05-10 https://junglewise.ai/threats/cve-2026-28553-huawei-harmonyos-and-emui-improper-permission-control-in-theme2026-05-10 https://junglewise.ai/threats/cve-2026-6179-fpt-software-nightwolf-penetration-testing-platform-stored-xss2026-07-07 https://junglewise.ai/threats/cve-2026-6152-code-projects-vehicle-showroom-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-6151-code-projects-vehicle-showroom-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-6150-code-projects-simple-laundry-system-xss-in-checkupdatestatus-php2026-05-10 https://junglewise.ai/threats/cve-2026-6149-code-projects-vehicle-showroom-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-6148-code-projects-vehicle-showroom-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-6143-farion1231-cc-switch-permissive-cors-policy-in-proxyserver2026-05-10 https://junglewise.ai/threats/cve-2026-6142-tushar-2223-hotel-management-system-sql-injection-in-roomdelete2026-05-10 https://junglewise.ai/threats/cve-2026-6141-danielmiessler-personal-ai-infrastructure-os-command-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-6140-totolink-a7100ru-command-injection-in-uploadfirmwarefile2026-05-10 https://junglewise.ai/threats/cve-2026-6139-totolink-a7100ru-command-injection-in-uploadopenvpncert2026-05-10 https://junglewise.ai/threats/cve-2026-25204-samsung-escargot-deserialization-vulnerability-in-javascript2026-06-02 https://junglewise.ai/threats/cve-2026-6138-totolink-a7100ru-os-command-injection-in-cstecgi-cgi2026-05-10 https://junglewise.ai/threats/cve-2026-6137-tenda-f451-stack-buffer-overflow-in-fromadvsetwan2026-05-10 https://junglewise.ai/threats/cve-2026-6136-tenda-f451-stack-based-buffer-overflow-in-frml7imform2026-05-10 https://junglewise.ai/threats/cve-2026-6135-tenda-f451-stack-overflow-in-setipbind2026-05-10 https://junglewise.ai/threats/cve-2012-1854-microsoft-visual-basic-for-applications-insecure-library-loading2026-05-15 https://junglewise.ai/threats/cve-2020-9715-adobe-acrobat-use-after-free-in-pdf-parsing2026-05-15 https://junglewise.ai/threats/cve-2023-21529-microsoft-exchange-server-deserialization-remote-code-execution2026-05-15 https://junglewise.ai/threats/cve-2023-36424-microsoft-windows-privilege-escalation-in-common-log-file-system2026-05-15 https://junglewise.ai/threats/cve-2025-60710-microsoft-windows-privilege-escalation-in-host-process-for2026-05-15 https://junglewise.ai/threats/cve-2026-21643-fortinet-forticlient-ems-sql-injection2026-05-15 https://junglewise.ai/threats/cve-2026-6134-tenda-f451-stack-buffer-overflow-in-qossetting2026-05-10 https://junglewise.ai/threats/cve-2026-6133-tenda-f451-stack-overflow-in-fromsafeurlfilter2026-05-10 https://junglewise.ai/threats/cve-2026-6132-totolink-a7100ru-command-injection-in-setledcfg2026-05-10 https://junglewise.ai/threats/cve-2026-6131-totolink-a7100ru-command-injection-in-settraceroutecfg2026-05-10 https://junglewise.ai/threats/cve-2026-6130-chatboxai-chatbox-os-command-injection-in-mcp-server-management2026-05-10 https://junglewise.ai/threats/cve-2026-6129-zhayujie-chatgpt-on-wechat-authentication-bypass-in-cowagent2026-05-10 https://junglewise.ai/threats/cve-2026-40396-varnish-cache-workspace-overflow-denial-of-service-in-http-12026-05-10 https://junglewise.ai/threats/cve-2026-40395-varnish-enterprise-denial-of-service-in-vmod-headerplus2026-05-10 https://junglewise.ai/threats/cve-2026-40394-varnish-cache-workspace-overflow-denial-of-service-in-http-22026-05-10 https://junglewise.ai/threats/cve-2026-40393-mesa-3d-graphics-library-out-of-bounds-memory-access-in-webgpu2026-07-13 https://junglewise.ai/threats/cve-2026-40386-libexif-integer-underflow-in-fuji-and-olympus-makernote-decoding2026-05-10 https://junglewise.ai/threats/cve-2026-40385-libexif-integer-overflow-in-nikon-makernote-handling2026-05-10 https://junglewise.ai/threats/cve-2019-25713-myt-pm-sql-injection-in-charge-group-total-parameter2026-05-10 https://junglewise.ai/threats/cve-2019-25712-nsasoft-blueauditor-buffer-overflow-in-registration-key-field2026-05-10 https://junglewise.ai/threats/cve-2019-25711-nsasoft-spotftp-password-recover-denial-of-service-in-name-field2026-05-10 https://junglewise.ai/threats/cve-2019-25710-dolibarr-erp-crm-sql-injection-in-admin-dict-php2026-05-11 https://junglewise.ai/threats/cve-2019-25709-codefuture-cf-image-hosting-script-unauthorized-database-access2026-05-10 https://junglewise.ai/threats/cve-2019-25708-heatmiser-wifi-thermostat-csrf-in-networksetup-htm2026-05-10 https://junglewise.ai/threats/cve-2019-25707-ebrigade-erp-sql-injection-in-pdf-php2026-05-10 https://junglewise.ai/threats/cve-2019-25706-across-dr-810-unauthenticated-file-disclosure-in-rom-0-backup2026-05-10 https://junglewise.ai/threats/cve-2019-25705-interference-security-echo-mirage-stack-buffer-overflow-in-rules2026-05-10 https://junglewise.ai/threats/cve-2019-25703-impresscms-sql-injection-in-admin-php-bid-parameter2026-05-10 https://junglewise.ai/threats/cve-2019-25701-ether-software-easy-video-to-ipod-converter-buffer-overflow-in2026-05-10 https://junglewise.ai/threats/cve-2019-25699-gurkan-uzunca-newsbull-haber-script-sql-injection-in-search2026-05-10 https://junglewise.ai/threats/cve-2019-25697-victoralagwu-cmssite-sql-injection-in-category-php2026-05-10 https://junglewise.ai/threats/cve-2019-25695-r-project-r-buffer-overflow-in-gui-preferences-language-field2026-06-30 https://junglewise.ai/threats/cve-2019-25693-montala-resourcespace-sql-injection-in-collection-edit-php2026-05-10 https://junglewise.ai/threats/cve-2019-25691-faleemi-desktop-software-buffer-overflow-in-system-setup2026-05-10 https://junglewise.ai/threats/cve-2019-25689-socusoft-html5-video-player-buffer-overflow-in-registration2026-05-10 https://junglewise.ai/threats/cve-2018-25258-the-r-project-rgui-buffer-overflow-in-gui-preferences-dialog2026-05-10 https://junglewise.ai/threats/cve-2018-25257-adianti-framework-sql-injection-in-systemprofileform2026-05-10 https://junglewise.ai/threats/cve-2017-20239-dynalon-mdwiki-xss-via-location-hash-parameter2026-05-10 https://junglewise.ai/threats/cve-2026-6126-zhayujie-chatgpt-on-wechat-missing-authentication-in-cowagent2026-05-10 https://junglewise.ai/threats/cve-2026-6125-dromara-warm-flow-spel-injection-in-workflow-definition-handler2026-05-11 https://junglewise.ai/threats/cve-2026-6124-tenda-f451-stack-overflow-in-fromsafemacfilter2026-05-10 https://junglewise.ai/threats/cve-2026-6123-tenda-f451-stack-based-buffer-overflow-in-fromaddressnat2026-05-10 https://junglewise.ai/threats/cve-2026-6122-tenda-f451-stack-based-buffer-overflow-in-httpd2026-05-10 https://junglewise.ai/threats/cve-2026-6121-tenda-f451-stack-overflow-in-wrlclientset2026-05-10 https://junglewise.ai/threats/cve-2026-6120-tenda-f451-stack-buffer-overflow-in-fromdhcplistclient2026-05-10 https://junglewise.ai/threats/cve-2026-6119-astrbotdevs-astrbot-ssrf-in-api-endpoint2026-05-10 https://junglewise.ai/threats/cve-2026-31413-linux-kernel-out-of-bounds-access-in-bpf-verifier2026-05-20 https://junglewise.ai/threats/cve-2026-6118-astrbotdevs-astrbot-command-injection-in-mcp-endpoint2026-05-10 https://junglewise.ai/threats/cve-2026-6117-astrbotdevs-astrbot-code-injection-via-plugin-upload2026-05-10 https://junglewise.ai/threats/cve-2026-6116-totolink-a7100ru-command-injection-in-setdiagnosiscfg2026-05-10 https://junglewise.ai/threats/cve-2026-6115-totolink-a7100ru-command-injection-in-cstecgi-cgi2026-05-10 https://junglewise.ai/threats/cve-2026-6114-totolink-a7100ru-os-command-injection-in-setnetworkcfg2026-05-10 https://junglewise.ai/threats/cve-2026-6113-totolink-a7100ru-os-command-injection-in-cstecgi-cgi2026-05-10 https://junglewise.ai/threats/cve-2026-6112-totolink-a7100ru-os-command-injection-in-setradvdcfg2026-05-10 https://junglewise.ai/threats/cve-2026-6111-foundationagents-metagpt-ssrf-in-decode-image2026-05-10 https://junglewise.ai/threats/cve-2026-6110-foundationagents-metagpt-code-injection-in-tree-of-thought-solver2026-05-10 https://junglewise.ai/threats/cve-2026-1116-parisneo-lollms-xss-in-applollmsmessage-from-dict-method2026-05-10 https://junglewise.ai/threats/cve-2026-6109-foundationagents-metagpt-rce-via-csrf-in-mineflayer-http-api2026-05-10 https://junglewise.ai/threats/cve-2026-6108-1panel-dev-maxkb-os-command-injection-in-mcp-node2026-05-10 https://junglewise.ai/threats/cve-2026-6107-1panel-dev-maxkb-stored-xss-in-chatheadersmiddleware2026-05-10 https://junglewise.ai/threats/cve-2026-6106-1panel-dev-maxkb-stored-xss-in-public-chat-interface2026-05-10 https://junglewise.ai/threats/cve-2026-6105-perfree-go-fastdfs-web-improper-authorization-in-doinstall2026-05-10 https://junglewise.ai/threats/cve-2026-31845-rukovoditel-crm-reflected-xss-in-zadarma-telephony-api2026-05-19 https://junglewise.ai/threats/cve-2026-32146-gleam-compiler-path-traversal-in-git-dependency-handling2026-05-21 https://junglewise.ai/threats/cve-2026-23900-phoca-maps-stored-xss-in-map-and-icon-rendering-logic2026-05-10 https://junglewise.ai/threats/cve-2026-5809-wordpress-wpforo-forum-arbitrary-file-deletion2026-05-10 https://junglewise.ai/threats/cve-2026-34621-adobe-acrobat-and-reader-prototype-pollution-in-javascript-engine2026-05-15 https://junglewise.ai/threats/cve-2026-5226-optimole-wordpress-plugin-reflected-xss-via-url-paths2026-05-10 https://junglewise.ai/threats/cve-2026-5217-optimole-wordpress-plugin-stored-xss-in-rest-endpoint2026-05-10 https://junglewise.ai/threats/cve-2026-5207-lifterlms-sql-injection-in-order-parameter2026-05-10 https://junglewise.ai/threats/cve-2026-5144-buddypress-groupblog-privilege-escalation-in-group-blog-settings2026-05-10 https://junglewise.ai/threats/cve-2026-4979-ayecode-userswp-ssrf-in-process-image-crop2026-05-10 https://junglewise.ai/threats/cve-2026-4895-greenshift-animation-and-page-builder-blocks-stored-xss2026-05-10 https://junglewise.ai/threats/cve-2026-3498-blockart-blocks-wordpress-plugin-stored-xss-in-clientid-attribute2026-05-10 https://junglewise.ai/threats/cve-2026-3371-themeum-tutor-lms-idor-in-save-course-content-order2026-05-10 https://junglewise.ai/threats/cve-2026-3358-themeum-tutor-lms-unauthorized-private-course-enrollment2026-05-10 https://junglewise.ai/threats/cve-2026-5496-labcenter-electronics-proteus-type-confusion-in-pdsprj-parsing2026-05-10 https://junglewise.ai/threats/cve-2026-5495-labcenter-electronics-proteus-out-of-bounds-write-in-pdsprj2026-05-10 https://junglewise.ai/threats/cve-2026-5494-labcenter-electronics-proteus-out-of-bounds-write-in-pdsprj2026-05-10 https://junglewise.ai/threats/cve-2026-5493-labcenter-electronics-proteus-out-of-bounds-write-in-pdsprj2026-05-10 https://junglewise.ai/threats/cve-2026-5059-aws-mcp-server-command-injection-in-allowed-commands-list2026-09-26 https://junglewise.ai/threats/cve-2026-5058-aws-aws-mcp-server-command-injection-remote-code-execution2026-05-10 https://junglewise.ai/threats/cve-2026-5055-nomachine-privilege-escalation-in-device-server2026-05-10 https://junglewise.ai/threats/cve-2026-5054-nomachine-local-privilege-escalation-via-improper-path-validation2026-05-10 https://junglewise.ai/threats/cve-2026-5053-nomachine-arbitrary-file-deletion-via-environment-variables2026-05-10 https://junglewise.ai/threats/cve-2026-4158-keepassxc-privilege-escalation-via-openssl-configuration-path2026-05-10 https://junglewise.ai/threats/cve-2026-4157-chargepoint-home-flex-command-injection-in-revssh-service2026-05-10 https://junglewise.ai/threats/cve-2026-4156-chargepoint-home-flex-stack-overflow-in-ocpp-getpreq2026-05-10 https://junglewise.ai/threats/cve-2026-4155-chargepoint-home-flex-sensitive-information-disclosure-in-genpw2026-05-10 https://junglewise.ai/threats/cve-2026-4154-gimp-xpm-file-parsing-integer-overflow2026-06-30 https://junglewise.ai/threats/cve-2026-4153-gimp-psp-file-parsing-heap-based-buffer-overflow2026-06-30 https://junglewise.ai/threats/cve-2026-4152-gimp-jp2-file-parsing-heap-based-buffer-overflow2026-06-30 https://junglewise.ai/threats/cve-2026-4151-gimp-ani-file-parsing-integer-overflow2026-06-30 https://junglewise.ai/threats/cve-2026-4150-gimp-psd-file-parsing-integer-overflow2026-06-30 https://junglewise.ai/threats/cve-2026-4149-sonos-era-300-smb-out-of-bounds-access-remote-code-execution2026-05-10 https://junglewise.ai/threats/cve-2026-40354-flatpak-xdg-desktop-portal-symlink-attack-in-trash-portal2026-05-10 https://junglewise.ai/threats/cve-2026-3691-openclaw-client-pkce-verifier-information-disclosure-in-macos2026-09-25 https://junglewise.ai/threats/cve-2026-3690-openclaw-authentication-bypass-in-canvas-endpoints2026-09-25 https://junglewise.ai/threats/cve-2026-3689-openclaw-path-traversal-in-canvas-gateway2026-09-25 https://junglewise.ai/threats/cve-2026-40199-net-cidr-lite-ip-acl-bypass-via-ipv4-mapped-ipv6-mishandling2026-05-10 https://junglewise.ai/threats/cve-2026-40198-net-cidr-lite-ip-acl-bypass-via-improper-ipv6-validation2026-05-10 https://junglewise.ai/threats/cve-2026-33119-microsoft-edge-ui-misrepresentation-spoofing-vulnerability2026-05-10 https://junglewise.ai/threats/cve-2026-33118-microsoft-edge-ui-misrepresentation-spoofing-vulnerability2026-06-19 https://junglewise.ai/threats/daptin-path-traversal-and-zip-slip-in-cloudstore-file-upload-e6e697e72026-05-10 https://junglewise.ai/threats/unhead-streaming-ssr-streamkey-script-injection-7d041c562026-09-25 https://junglewise.ai/threats/unjs-unhead-script-injection-in-streaming-ssr-streamkey-9d1000b22026-05-10 https://junglewise.ai/threats/danielgatis-rembg-ssrf-and-cors-misconfiguration-in-http-server-1965b1682026-05-10 https://junglewise.ai/threats/geonode-ssrf-in-service-registration-endpoint-c6775bae2026-06-08 https://junglewise.ai/threats/cve-2026-5724-temporal-server-missing-authentication-in-grpc-streaming2026-07-08 https://junglewise.ai/threats/cve-2026-40252-fastgpt-idor-in-chat-and-team-initialization-endpoints2026-05-10 https://junglewise.ai/threats/cve-2026-40242-arcane-ssrf-in-template-fetch-endpoint2026-05-10 https://junglewise.ai/threats/cve-2026-40194-phpseclib-timing-discrepancy-in-ssh2-hmac-verification2026-05-10 https://junglewise.ai/threats/cve-2026-40191-craigjbass-clearancekit-authorization-bypass-in-endpoint-security2026-05-10 https://junglewise.ai/threats/cve-2026-41679-paperclip-vulnerable-to-unauthenticated-remote-code-execution-via2026-09-25 https://junglewise.ai/threats/cve-2026-40299-next-intl-has-an-open-redirect-vulnerability2026-09-25 https://junglewise.ai/threats/cve-2026-40258-gramps-webapi-zip-slip-path-traversal-in-media-archive-import2026-09-26 https://junglewise.ai/threats/n8n-mcp-missing-authentication-in-http-transport-5b2c50682026-09-25 https://junglewise.ai/threats/n8n-mcp-missing-authentication-in-http-transport-endpoints-58e3d0482026-05-10 https://junglewise.ai/threats/cve-2026-40260-pypdf-manipulated-xmp-metadata-entity-declarations-can-exhaust2026-09-26 https://junglewise.ai/threats/cve-2026-40321-dotnetnuke-core-has-stored-cross-site-scripting-xss-via-svg2026-05-11 https://junglewise.ai/threats/basic-ftp-crlf-injection-via-incomplete-validation-c29673862026-09-25 https://junglewise.ai/threats/patrickjuchli-basic-ftp-crlf-injection-in-login-and-mkd-commands-c5b4efc22026-05-10 https://junglewise.ai/threats/cve-2026-40109-flux-notification-controller-improper-authentication-in-gcr2026-05-10 https://junglewise.ai/threats/cve-2026-40190-langchain-langsmith-sdk-prototype-pollution-in-createanonymizer2026-09-25 https://junglewise.ai/threats/cve-2026-40189-patrickhener-goshs-authorization-bypass-in-state-changing-routes2026-05-11 https://junglewise.ai/threats/cve-2026-40188-patrickhener-goshs-path-traversal-in-sftp-rename-command2026-05-10 https://junglewise.ai/threats/cve-2026-40185-mauriceboe-trek-missing-authorization-in-immich-photo-routes2026-05-10 https://junglewise.ai/threats/cve-2026-40184-mauriceboe-trek-missing-authentication-for-uploaded-photos2026-05-10 https://junglewise.ai/threats/cve-2026-40180-quarkiverse-quarkus-openapi-generator-path-traversal-in2026-05-21 https://junglewise.ai/threats/cve-2026-40178-ajenti-2fa-authentication-bypass-in-ajenti-plugin-core2026-09-26 https://junglewise.ai/threats/cve-2026-40177-ajenti-plugin-core-password-bypass-when-2fa-is-enabled2026-09-26 https://junglewise.ai/threats/cve-2026-40175-axios-header-injection-via-prototype-pollution-gadget2026-09-25 https://junglewise.ai/threats/cve-2026-40168-gitroom-postiz-ssrf-via-redirect-bypass-in-stream-endpoint2026-05-10 https://junglewise.ai/threats/cve-2026-39922-geonode-ssrf-in-service-registration-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-39921-geonode-ssrf-in-document-upload-via-doc-url-parameter2026-07-14 https://junglewise.ai/threats/cve-2026-32252-chartbrew-authorization-bypass-in-template-generation-api2026-05-10 https://junglewise.ai/threats/cve-2026-30232-chartbrew-ssrf-in-api-data-connection2026-05-10 https://junglewise.ai/threats/cve-2026-40093-nimiq-nimiq-blockchain-missing-upper-bound-on-block-timestamps2026-05-10 https://junglewise.ai/threats/xrootd-path-traversal-in-directory-listing-7cbc77632026-05-10 https://junglewise.ai/threats/lin-snow-ech0-stored-xss-via-svg-upload-and-content-type-bypass-70c0cc9e2026-05-10 https://junglewise.ai/threats/lin-snow-ech0-ssrf-via-dns-resolution-bypass-in-webhooks-5b02482e2026-05-10 https://junglewise.ai/threats/lin-snow-ech0-missing-authorization-in-system-log-endpoints-77516f8c2026-05-10 https://junglewise.ai/threats/lin-snow-ech0-scope-bypass-in-put-user-endpoint-64820ae32026-05-10 https://junglewise.ai/threats/redaxo-reflected-xss-in-backend-packages-api-9ebf14f62026-05-10 https://junglewise.ai/threats/redaxo-cms-reflected-xss-in-backend-metainfo-api-7d05c1382026-05-10 https://junglewise.ai/threats/lin-snow-ech0-missing-authorization-in-dashboard-log-endpoints-46070e382026-06-02 https://junglewise.ai/threats/lin-snow-ech0-authorization-bypass-in-privileged-endpoints-56fe438e2026-06-02 https://junglewise.ai/threats/astral-uv-arbitrary-file-deletion-via-record-path-traversal-5a8fbf072026-05-10 https://junglewise.ai/threats/cve-2026-40289-praisonai-browser-server-session-hijacking-via-unauthenticated2026-09-26 https://junglewise.ai/threats/cve-2026-40288-mervinpraison-praisonai-rce-via-job-workflow-yaml2026-05-11 https://junglewise.ai/threats/cve-2026-40287-praisonai-remote-code-execution-via-automatic-tools-py-import2026-09-26 https://junglewise.ai/threats/cve-2026-40318-siyuan-publish-reader-path-traversal-delete-via2026-05-11 https://junglewise.ai/threats/cve-2026-40259-siyuan-publish-reader-can-arbitrarily-delete-attribute-view-files2026-05-11 https://junglewise.ai/threats/cve-2026-40315-praisonai-sql-injection-in-sqliteconversationstore-table-prefix2026-05-11 https://junglewise.ai/threats/saltcorn-saltcorn-data-sql-injection-in-jsexprtosql-literal-handler-bdaf86bc2026-05-10 https://junglewise.ai/threats/saltcorn-sql-injection-in-jsexprtosql-literal-handler-42fad4522026-09-25 https://junglewise.ai/threats/cve-2026-40114-praisonai-ssrf-in-jobs-api-webhook-url2026-09-26 https://junglewise.ai/threats/mervinpraison-praisonai-cross-origin-agent-execution-in-agui-endpoint-09843e162026-05-10 https://junglewise.ai/threats/cve-2026-40148-praisonai-decompression-bomb-in-recipe-registry-extraction2026-09-26 https://junglewise.ai/threats/cve-2026-40154-mervinpraison-praisonai-remote-code-execution-via-untrusted2026-09-26 https://junglewise.ai/threats/mervinpraison-praisonai-unapproved-shell-command-execution-in-chainlit-69d5a2bc2026-05-10 https://junglewise.ai/threats/cve-2026-40152-mervinpraison-praisonaiagents-path-traversal-in-list-files-tool2026-09-26 https://junglewise.ai/threats/cve-2026-40153-mervinpraison-praisonaiagents-environment-variable-exfiltration2026-05-10 https://junglewise.ai/threats/cve-2026-40151-praisonai-agentos-unauthenticated-information-disclosure-in-api2026-09-26 https://junglewise.ai/threats/cve-2026-40149-praisonai-unauthenticated-allowlist-manipulation-in-tool-approval2026-09-26 https://junglewise.ai/threats/cve-2026-40150-mervinpraison-praisonaiagents-ssrf-and-local-file-read-in-web2026-09-26 https://junglewise.ai/threats/cve-2026-40117-mervinpraison-praisonaiagents-arbitrary-file-read-in-read-skill2026-09-26 https://junglewise.ai/threats/cve-2026-40115-praisonai-has-unrestricted-upload-size-in-wsgi-recipe-registry2026-09-26 https://junglewise.ai/threats/cve-2026-40116-praisonai-unauthenticated-websocket-proxy-in-call-module2026-09-26 https://junglewise.ai/threats/cve-2026-40113-praisonai-argument-injection-in-cloud-run-deployment2026-09-26 https://junglewise.ai/threats/cve-2026-40112-mervinpraison-praisonai-stored-xss-in-flask-api-output2026-09-26 https://junglewise.ai/threats/cve-2026-40111-mervinpraison-praisonaiagents-os-command-injection-in-memory2026-05-10 https://junglewise.ai/threats/cve-2026-40107-siyuan-ntlm-hash-theft-via-mermaid-diagram-rendering2026-05-10 https://junglewise.ai/threats/cve-2026-34177-canonical-lxd-vm-restriction-bypass-in2026-05-10 https://junglewise.ai/threats/cve-2026-34178-canonical-lxd-project-restriction-bypass-via-crafted-backup2026-05-10 https://junglewise.ai/threats/cve-2026-34179-canonical-lxd-privilege-escalation-via-certificate-type2026-05-10 https://junglewise.ai/threats/emilstenstrom-justhtml-multiple-xss-and-sanitization-bypasses-f2abebf12026-05-11 https://junglewise.ai/threats/cve-2026-3446-python-cpython-insufficient-verification-in-base64-decoding2026-05-10 https://junglewise.ai/threats/cve-2026-33737-chamilo-lms-xml-external-entity-injection-in-multiple-components2026-05-10 https://junglewise.ai/threats/cve-2026-33736-chamilo-lms-authorization-bypass-in-user-api2026-05-10 https://junglewise.ai/threats/cve-2026-33710-chamilo-lms-predictable-rest-api-key-generation2026-05-10 https://junglewise.ai/threats/cve-2026-33708-chamilo-lms-information-disclosure-in-rest-api2026-05-10 https://junglewise.ai/threats/cve-2026-33707-chamilo-lms-weak-password-recovery-mechanism-in-login-lib-php2026-05-10 https://junglewise.ai/threats/cve-2026-33706-chamilo-lms-privilege-escalation-in-rest-api2026-05-10 https://junglewise.ai/threats/cve-2026-33705-chamilo-lms-information-disclosure-in-twig-templates2026-05-10 https://junglewise.ai/threats/cve-2026-33704-chamilo-lms-remote-code-execution-via-bigupload-endpoint2026-05-10 https://junglewise.ai/threats/cve-2026-33703-chamilo-lms-idor-in-social-network-personal-data-endpoint2026-05-10 https://junglewise.ai/threats/cve-2026-33702-chamilo-lms-idor-in-learning-path-progress-saving-endpoint2026-05-10 https://junglewise.ai/threats/cve-2026-33698-chamilo-lms-unauthenticated-rce-in-main-install-directory2026-05-10 https://junglewise.ai/threats/cve-2026-33618-chamilo-lms-eval-injection-in-platformconfigurationcontroller2026-05-10 https://junglewise.ai/threats/cve-2026-27460-tandoor-recipes-denial-of-service-via-zip-bomb-in-recipe-import2026-05-10 https://junglewise.ai/threats/cve-2026-5483-red-hat-openshift-ai-token-disclosure-in-odh-dashboard2026-06-30 https://junglewise.ai/threats/cve-2026-40163-saltcorn-path-traversal-in-mobile-sync-endpoints2026-09-25 https://junglewise.ai/threats/cve-2026-40162-bugsink-authenticated-arbitrary-file-write-in-artifact-bundle2026-09-26 https://junglewise.ai/threats/cve-2026-33141-chamilo-lms-idor-in-rest-api-stats-endpoint2026-05-10 https://junglewise.ai/threats/cve-2026-32932-chamilo-lms-open-redirect-in-session-course-edit-page2026-05-10 https://junglewise.ai/threats/cve-2026-32931-chamilo-lms-unrestricted-file-upload-in-exercise-sound-upload2026-05-10 https://junglewise.ai/threats/cve-2026-32930-chamilo-lms-idor-in-gradebook-evaluation-edit-page2026-05-10 https://junglewise.ai/threats/cve-2026-32894-chamilo-lms-idor-in-gradebook-result-view-page2026-05-10 https://junglewise.ai/threats/cve-2026-32893-chamilo-lms-reflected-xss-in-exercise-question-list-admin-panel2026-05-10 https://junglewise.ai/threats/cve-2026-32892-chamilo-lms-os-command-injection-in-file-move-function2026-05-10 https://junglewise.ai/threats/cve-2026-31941-chamilo-lms-ssrf-in-social-wall-feature2026-05-10 https://junglewise.ai/threats/cve-2026-31940-chamilo-lms-session-fixation-in-aicc-hacp-php2026-05-10 https://junglewise.ai/threats/cve-2026-31939-chamilo-lms-path-traversal-in-savescores-php2026-05-10 https://junglewise.ai/threats/cve-2026-1502-python-cpython-crlf-injection-in-http-client-proxy-tunnel-headers2026-06-04 https://junglewise.ai/threats/cve-2025-66447-chamilo-lms-open-redirect-in-login-component2026-05-10 https://junglewise.ai/threats/cve-2026-40077-henrygd-beszel-idor-in-hub-api-endpoints2026-05-10 https://junglewise.ai/threats/cve-2026-40200-musl-libc-stack-corruption-in-qsort2026-05-10 https://junglewise.ai/threats/cve-2026-40160-mervinpraison-praisonaiagents-ssrf-in-web-crawl-tool2026-09-26 https://junglewise.ai/threats/cve-2026-40159-mervinpraison-praisonai-sensitive-information-exposure-in-mcp2026-09-26 https://junglewise.ai/threats/cve-2026-40158-praisonai-python-sandbox-escape-via-type-getattribute2026-09-26 https://junglewise.ai/threats/cve-2026-40157-mervinpraison-praisonai-path-traversal-in-recipe-cli2026-09-26 https://junglewise.ai/threats/cve-2026-40156-praisonai-arbitrary-code-execution-via-automatic-tools-py-loading2026-09-26 https://junglewise.ai/threats/cve-2026-40103-vikunja-authorization-bypass-in-scoped-api-tokens2026-05-11 https://junglewise.ai/threats/cve-2026-40100-labring-fastgpt-ssrf-in-mcptools-runtool-endpoint2026-05-10 https://junglewise.ai/threats/cve-2026-40097-smallstep-step-ca-index-out-of-bounds-panic-in-tpm-attestation2026-05-10 https://junglewise.ai/threats/cve-2026-40086-danielgatis-rembg-path-traversal-in-http-server-custom-model2026-09-26 https://junglewise.ai/threats/cve-2026-40074-svelte-sveltekit-denial-of-service-in-redirect-function2026-09-25 https://junglewise.ai/threats/cve-2026-40073-svelte-sveltekit-body-size-limit-bypass-in-adapter-node2026-09-25 https://junglewise.ai/threats/cve-2026-35670-openclaw-webhook-reply-rebinding-in-synology-chat2026-09-25 https://junglewise.ai/threats/cve-2026-35669-openclaw-privilege-escalation-in-gateway-plugin-http-routes2026-09-25 https://junglewise.ai/threats/cve-2026-35668-openclaw-path-traversal-in-sandbox-enforcement2026-09-25 https://junglewise.ai/threats/cve-2026-35667-openclaw-improper-process-termination-in-stop-chat-command2026-09-25 https://junglewise.ai/threats/cve-2026-35666-openclaw-allowlist-bypass-in-system-run-approvals2026-09-25 https://junglewise.ai/threats/cve-2026-35665-openclaw-denial-of-service-in-feishu-webhook-handler2026-09-25 https://junglewise.ai/threats/cve-2026-35664-openclaw-auth-bypass-in-feishu-raw-card-send-surface2026-09-25 https://junglewise.ai/threats/cve-2026-35663-openclaw-privilege-escalation-in-gateway-backend-reconnect2026-09-25 https://junglewise.ai/threats/cve-2026-35662-openclaw-missing-authorization-in-subagent-send-action2026-09-25 https://junglewise.ai/threats/cve-2026-35661-openclaw-authorization-bypass-in-telegram-callback-query-handling2026-09-25 https://junglewise.ai/threats/cve-2026-35660-openclaw-insufficient-access-control-in-gateway-agent-reset2026-09-25 https://junglewise.ai/threats/cve-2026-35659-openclaw-service-discovery-routing-manipulation-via-bonjour-and2026-09-25 https://junglewise.ai/threats/cve-2026-35658-openclaw-filesystem-boundary-bypass-in-image-tool2026-09-25 https://junglewise.ai/threats/cve-2026-35657-openclaw-authorization-bypass-in-http-session-history-route2026-09-25 https://junglewise.ai/threats/cve-2026-35656-openclaw-authentication-bypass-via-x-forwarded-for-spoofing2026-09-25 https://junglewise.ai/threats/cve-2026-35655-openclaw-identity-spoofing-in-acp-permission-resolution2026-09-25 https://junglewise.ai/threats/cve-2026-35654-openclaw-authorization-bypass-in-microsoft-teams-feedback-invokes2026-09-25 https://junglewise.ai/threats/cve-2026-35653-openclaw-incorrect-authorization-in-post-reset-profile2026-09-25 https://junglewise.ai/threats/cve-2026-35652-openclaw-authorization-bypass-in-interactive-callback-dispatch2026-09-25 https://junglewise.ai/threats/cve-2026-35651-openclaw-ansi-escape-sequence-injection-in-approval-prompts2026-09-25 https://junglewise.ai/threats/cve-2026-35650-openclaw-environment-variable-override-bypass-in-gateway-and-node2026-09-25 https://junglewise.ai/threats/cve-2026-35649-openclaw-authorization-bypass-via-empty-allowlist-reconciliation2026-09-25 https://junglewise.ai/threats/cve-2026-35648-openclaw-policy-bypass-via-unvalidated-queued-node-actions2026-09-25 https://junglewise.ai/threats/cve-2026-35647-openclaw-access-control-bypass-in-direct-message-verification2026-09-25 https://junglewise.ai/threats/cve-2026-35643-openclaw-webview-javascriptinterface-command-injection-in-canvas2026-09-25 https://junglewise.ai/threats/cve-2026-35641-openclaw-arbitrary-code-execution-in-local-plugin-installation2026-09-25 https://junglewise.ai/threats/cve-2026-35621-openclaw-privilege-escalation-in-allowlist-command2026-09-25 https://junglewise.ai/threats/cve-2026-35620-openclaw-missing-authorization-in-send-and-allowlist-chat2026-09-25 https://junglewise.ai/threats/cve-2026-35619-openclaw-authorization-bypass-in-http-models-endpoint2026-09-25 https://junglewise.ai/threats/cve-2026-35602-vikunja-file-size-limit-bypass-in-import-endpoint2026-05-10 https://junglewise.ai/threats/cve-2026-35601-vikunja-crlf-injection-in-caldav-output-generator2026-05-10 https://junglewise.ai/threats/cve-2026-35600-vikunja-markdown-injection-in-email-notifications2026-05-10 https://junglewise.ai/threats/cve-2026-35599-vikunja-algorithmic-complexity-dos-in-repeating-task-handler2026-05-10 https://junglewise.ai/threats/cve-2026-35598-vikunja-missing-authorization-in-caldav-task-retrieval2026-05-10 https://junglewise.ai/threats/cve-2026-35597-vikunja-totp-account-lockout-bypass-via-database-rollback2026-05-10 https://junglewise.ai/threats/cve-2026-35596-vikunja-incorrect-authorization-via-sql-operator-precedence-in2026-07-21 https://junglewise.ai/threats/cve-2026-35595-vikunja-privilege-escalation-via-project-reparenting2026-05-10 https://junglewise.ai/threats/cve-2026-22560-rocket-chat-open-redirect-in-saml-slo-endpoint2026-05-10 https://junglewise.ai/threats/cve-2026-40228-systemd-systemd-journald-ansi-escape-sequence-injection-in-wall2026-05-10 https://junglewise.ai/threats/cve-2026-40227-systemd-denial-of-service-via-malformed-ipc-api-call2026-05-10 https://junglewise.ai/threats/cve-2026-40226-systemd-nspawn-container-escape-via-crafted-config-file2026-05-10 https://junglewise.ai/threats/cve-2026-40225-systemd-udev-local-root-execution-via-malicious-hardware-devices2026-05-10 https://junglewise.ai/threats/cve-2026-40224-systemd-systemd-machined-local-privilege-escalation-via-varlink2026-05-10 https://junglewise.ai/threats/cve-2026-40223-systemd-denial-of-service-via-assertion-failure-in-system-units2026-05-10 https://junglewise.ai/threats/cve-2026-40023-apache-log4cxx-improper-neutralization-in-xmllayout2026-05-10 https://junglewise.ai/threats/cve-2026-40021-apache-log4net-log-suppression-in-xmllayout2026-05-11 https://junglewise.ai/threats/cve-2026-35594-vikunja-insufficient-session-expiration-in-link-share2026-05-10 https://junglewise.ai/threats/cve-2026-34727-vikunja-totp-two-factor-authentication-bypass-in-oidc-callback2026-05-10 https://junglewise.ai/threats/cve-2026-34481-apache-log4j-invalid-json-generation-in-jsontemplatelayout2026-07-11 https://junglewise.ai/threats/cve-2026-34480-apache-log4j-core-invalid-xml-output-in-xmllayout2026-09-25 https://junglewise.ai/threats/cve-2026-34479-apache-log4j-1-to-log4j-2-bridge-malformed-xml-output-in2026-05-10 https://junglewise.ai/threats/cve-2026-34478-apache-log4j-core-log-injection-in-rfc5424layout2026-05-10 https://junglewise.ai/threats/cve-2026-34477-apache-log4j-core-improper-certificate-validation-in-network2026-05-10 https://junglewise.ai/threats/cve-2026-29043-hdfgroup-hdf5-heap-buffer-overflow-in-h5t-ref-mem-setnull2026-05-10 https://junglewise.ai/threats/cve-2026-29002-couchcms-privilege-escalation-via-f-k-levels-list-parameter2026-07-14 https://junglewise.ai/threats/cve-2026-23781-bmc-control-m-mft-hardcoded-credentials-in-debug-interface2026-05-10 https://junglewise.ai/threats/vite-vitejs-plugin-rsc-denial-of-service-in-react-server-components-2c7b66ca2026-05-10 https://junglewise.ai/threats/vitejs-plugin-rsc-denial-of-service-with-react-server-components-d98230f72026-09-25 https://junglewise.ai/threats/vercel-next-js-denial-of-service-in-server-components-0362abec2026-09-25 https://junglewise.ai/threats/vercel-next-js-denial-of-service-in-server-components-88bfc9cf2026-05-10 https://junglewise.ai/threats/cve-2026-35206-helm-path-traversal-via-chart-yaml-name-dot-segment2026-05-10 https://junglewise.ai/threats/cve-2026-35186-bytecode-alliance-wasmtime-out-of-bounds-access-in-winch-compiler2026-05-10 https://junglewise.ai/threats/berriai-litellm-sandbox-escape-in-custom-code-guardrail-36511d642026-05-11 https://junglewise.ai/threats/litellm-sandbox-escape-in-custom-code-guardrail-2499f58c2026-09-26 https://junglewise.ai/threats/cve-2026-34987-bytecode-alliance-wasmtime-sandbox-escape-in-winch-compiler2026-05-10 https://junglewise.ai/threats/cve-2026-36236-sourcecodester-engineers-online-portal-sql-injection-in-update2026-05-10 https://junglewise.ai/threats/cve-2026-36235-itsourcecode-online-student-enrollment-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-36234-itsourcecode-online-student-enrollment-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-36233-itsourcecode-online-student-enrollment-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-36232-itsourcecode-online-student-enrollment-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-31262-altenar-sportsbook-software-platform-reflected-xss-in-url2026-05-10 https://junglewise.ai/threats/cve-2026-29861-keerti1924-php-mysql-user-login-system-sql-injection-in-login-php2026-05-10 https://junglewise.ai/threats/cve-2026-23782-bmc-control-m-mft-information-disclosure-in-api-management2026-05-10 https://junglewise.ai/threats/cve-2026-23780-bmc-control-m-mft-sql-injection-in-mft-api-debug-interface2026-05-10 https://junglewise.ai/threats/cve-2025-44560-owntone-owntone-server-stack-buffer-overflow-via-infinite2026-05-10 https://junglewise.ai/threats/cve-2026-6069-nasm-stack-buffer-overflow-in-disasm-function2026-05-10 https://junglewise.ai/threats/cve-2026-6068-nasm-heap-use-after-free-in-response-file-processing2026-05-19 https://junglewise.ai/threats/cve-2026-6067-nasm-heap-buffer-overflow-in-obj-directive2026-05-10 https://junglewise.ai/threats/cve-2026-40217-berriai-litellm-remote-code-execution-in-guardrails-component2026-06-30 https://junglewise.ai/threats/cve-2026-33092-acronis-true-image-local-privilege-escalation-via-environment2026-05-19 https://junglewise.ai/threats/cve-2025-5804-case-themes-case-theme-user-local-file-inclusion2026-05-10 https://junglewise.ai/threats/cve-2025-58920-zootemplate-cerato-reflected-xss2026-05-10 https://junglewise.ai/threats/cve-2025-58913-cactusthemes-videopro-local-file-inclusion2026-05-10 https://junglewise.ai/threats/cve-2026-5774-canonical-juju-race-condition-in-api-server-usertokens-map2026-05-11 https://junglewise.ai/threats/cve-2026-5412-canonical-juju-improper-authorization-in-controller-facade2026-05-10 https://junglewise.ai/threats/cve-2026-5777-e-gate-atom-3x-projector-missing-authentication-for-adb-service2026-05-19 https://junglewise.ai/threats/cve-2026-39304-apache-activemq-dos-via-memory-exhaustion-in-nio-ssl-transport2026-06-30 https://junglewise.ai/threats/cve-2026-31412-linux-kernel-integer-overflow-in-usb-mass-storage-gadget2026-05-20 https://junglewise.ai/threats/cve-2026-6057-falkordb-browser-path-traversal-in-file-upload-api2026-05-19 https://junglewise.ai/threats/cve-2026-4162-gravity-forms-gravity-smtp-missing-authorization-in-plugin2026-05-10 https://junglewise.ai/threats/cve-2021-47961-synology-ssl-vpn-client-plaintext-storage-of-pin-code2026-05-29 https://junglewise.ai/threats/cve-2021-47960-synology-ssl-vpn-client-information-disclosure-via-local-http2026-05-29 https://junglewise.ai/threats/cve-2026-6042-musl-libc-denial-of-service-in-iconv-gb18030-decoder2026-05-10 https://junglewise.ai/threats/cve-2026-6038-code-projects-vehicle-showroom-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-6037-code-projects-vehicle-showroom-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-6036-code-projects-vehicle-showroom-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-33457-checkmk-livestatus-injection-in-prediction-graph-page2026-05-10 https://junglewise.ai/threats/cve-2026-33456-checkmk-livestatus-injection-in-notification-test-mode2026-05-10 https://junglewise.ai/threats/cve-2026-33455-checkmk-livestatus-injection-in-monitoring-quicksearch2026-05-10 https://junglewise.ai/threats/cve-2026-6035-code-projects-vehicle-showroom-management-system-xss-in2026-05-10 https://junglewise.ai/threats/cve-2026-6034-code-projects-vehicle-showroom-management-system-xss-in2026-05-10 https://junglewise.ai/threats/cve-2026-6033-codeastro-online-classroom-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-6032-code-projects-simple-laundry-system-xss-in-checkcheckout-php2026-05-10 https://junglewise.ai/threats/cve-2026-6031-code-projects-simple-it-discussion-forum-sql-injection-in-add2026-05-10 https://junglewise.ai/threats/cve-2026-5525-notepad-stack-buffer-overflow-in-file-drop-handler2026-06-05 https://junglewise.ai/threats/cve-2026-40212-openstack-skyline-dom-based-xss-in-console-log-viewer2026-05-10 https://junglewise.ai/threats/cve-2026-22750-vmware-spring-cloud-gateway-ignored-ssl-bundle-configuration2026-06-05 https://junglewise.ai/threats/cve-2026-6030-itsourcecode-construction-management-system-sql-injection-in-del12026-05-10 https://junglewise.ai/threats/cve-2026-6029-totolink-a7100ru-os-command-injection-in-setvpnaccountcfg2026-05-10 https://junglewise.ai/threats/cve-2026-6028-totolink-a7100ru-command-injection-in-cstecgi-cgi2026-05-10 https://junglewise.ai/threats/cve-2026-6027-totolink-a7100ru-command-injection-in-seturlfilterrules2026-05-10 https://junglewise.ai/threats/cve-2026-6026-totolink-a7100ru-os-command-injection-in-cstecgi-cgi2026-05-10 https://junglewise.ai/threats/cve-2026-4432-yith-woocommerce-wishlist-idor-in-save-title-ajax-handler2026-05-10 https://junglewise.ai/threats/cve-2026-28704-jpcert-cc-emocheck-insecure-dll-loading2026-06-08 https://junglewise.ai/threats/cve-2026-1115-parisneo-lollms-stored-xss-in-social-feature2026-09-26 https://junglewise.ai/threats/cve-2025-14545-yandex-market-yml-wordpress-plugin-rce-in-feed-generation2026-05-10 https://junglewise.ai/threats/cve-2026-6025-totolink-a7100ru-command-injection-in-setsyslogcfg2026-05-10 https://junglewise.ai/threats/cve-2026-6024-tenda-i6-auth-bypass-via-path-traversal-in-http-handler2026-05-10 https://junglewise.ai/threats/cve-2026-6016-tenda-ac9-stack-overflow-in-wizardhandle-decodepwd2026-05-10 https://junglewise.ai/threats/cve-2026-6015-tenda-ac9-stack-based-buffer-overflow-in-quickindex2026-05-10 https://junglewise.ai/threats/cve-2026-5477-wolfssl-wolfcrypt-integer-overflow-in-cmac-implementation2026-05-10 https://junglewise.ai/threats/cve-2026-6014-d-link-dir-513-buffer-overflow-in-formadvancesetup2026-05-10 https://junglewise.ai/threats/cve-2026-6013-d-link-dir-513-buffer-overflow-in-formsetroute2026-05-10 https://junglewise.ai/threats/cve-2026-6012-d-link-dir-513-buffer-overflow-in-formsetpassword2026-05-10 https://junglewise.ai/threats/cve-2026-6011-openclaw-ssrf-in-web-fetch-tool2026-09-25 https://junglewise.ai/threats/cve-2026-4482-rapid7-insight-agent-incorrect-permission-assignment-in-ssl2026-06-08 https://junglewise.ai/threats/cve-2026-6010-codeastro-online-classroom-sql-injection-in-takeassessment2-php2026-05-10 https://junglewise.ai/threats/cve-2026-6007-itsourcecode-construction-management-system-sql-injection-in-del2026-05-10 https://junglewise.ai/threats/cve-2026-6006-code-projects-patient-record-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-6005-code-projects-patient-record-management-system-sql-injection-in2026-05-10 https://junglewise.ai/threats/cve-2026-5501-wolfssl-improper-certificate-validation-in-openssl-compatibility2026-05-10 https://junglewise.ai/threats/cve-2026-5500-wolfssl-improper-input-validation-in-wc-pkcs72026-05-10 https://junglewise.ai/threats/cve-2026-5479-wolfssl-improper-authentication-tag-validation-in-chacha202026-05-10 https://junglewise.ai/threats/cve-2026-5466-wolfssl-improper-signature-verification-in-eccsi-wc2026-05-10 https://junglewise.ai/threats/cve-2026-5188-wolfssl-integer-underflow-in-x-509-san-extension-parsing2026-05-10 https://junglewise.ai/threats/cve-2026-2305-addfunc-head-footer-code-stored-xss-via-post-meta2026-05-10 https://junglewise.ai/threats/cve-2026-6004-code-projects-simple-it-discussion-forum-sql-injection-in-delete2026-05-10 https://junglewise.ai/threats/cve-2026-6003-code-projects-simple-it-discussion-forum-xss-in-admin-user-php2026-05-10 https://junglewise.ai/threats/cve-2026-6000-code-projects-online-library-management-system-information2026-05-10 https://junglewise.ai/threats/cve-2026-5999-jeecgboot-improper-authorization-in-sysannouncementcontroller2026-05-10 https://junglewise.ai/threats/cve-2026-33551-openstack-keystone-authorization-bypass-in-ec2-credential2026-09-26 https://junglewise.ai/threats/cve-2026-5998-zhayujie-cowagent-path-traversal-in-memory-content-api2026-05-10 https://junglewise.ai/threats/cve-2026-5997-totolink-a7100ru-command-injection-in-setloginpasswordcfg2026-05-10 https://junglewise.ai/threats/cve-2026-5996-totolink-a7100ru-command-injection-in-cstecgi-cgi2026-05-10 https://junglewise.ai/threats/cve-2026-4977-userswp-wordpress-plugin-improper-access-control-in-upload-file2026-05-10 https://junglewise.ai/threats/cve-2026-4664-cusrev-customer-reviews-for-woocommerce-authentication-bypass-in2026-05-10 https://junglewise.ai/threats/cve-2026-4351-perfmatters-wordpress-plugin-arbitrary-file-overwrite-via-path2026-05-10 https://junglewise.ai/threats/cve-2026-4305-royal-wordpress-backup-restore-plugin-reflected-xss-in-wpr-pending2026-05-10 https://junglewise.ai/threats/cve-2026-4057-wordpress-download-manager-missing-authorization-in2026-05-10 https://junglewise.ai/threats/cve-2026-3360-themeum-tutor-lms-idor-in-pay-incomplete-order-function2026-05-10 https://junglewise.ai/threats/cve-2026-2712-wp-optimize-unauthorized-access-in-heartbeat-handler2026-05-10 https://junglewise.ai/threats/cve-2026-25203-samsung-magicinfo-9-server-local-privilege-escalation2026-05-10 https://junglewise.ai/threats/cve-2026-1924-aruba-hispeed-cache-csrf-in-ahsc-ajax-reset-options2026-05-10 https://junglewise.ai/threats/cve-2026-1263-webling-wordpress-plugin-stored-xss-in-admin-functions2026-05-10 https://junglewise.ai/threats/cve-2026-5995-totolink-a7100ru-os-command-injection-in-cstecgi-cgi2026-05-10 https://junglewise.ai/threats/cve-2026-5994-totolink-a7100ru-command-injection-in-settelnetcfg2026-05-10 https://junglewise.ai/threats/cve-2026-5993-totolink-a7100ru-command-injection-in-setwifiguestcfg2026-05-10 https://junglewise.ai/threats/cve-2026-5986-zod-jsvideourlparser-redos-in-gettime-function2026-09-25 https://junglewise.ai/threats/openclaw-authentication-bypass-in-canvas-gateway-b765b4e42026-05-10 https://junglewise.ai/threats/openclaw-canvas-local-direct-authentication-bypass-ea38d6042026-09-25 https://junglewise.ai/threats/openclaw-cite-expansion-authorization-bypass-e0fe54af2026-09-25 https://junglewise.ai/threats/openclaw-denial-of-service-in-feishu-webhook-parsing-c568f8da2026-05-10 https://junglewise.ai/threats/openclaw-feishu-webhook-denial-of-service-in-request-parsing-1b47d48d2026-09-25 https://junglewise.ai/threats/openclaw-gateway-privilege-escalation-in-device-pair-approve-d3d58d3e2026-09-25 https://junglewise.ai/threats/openclaw-incorrect-authorization-order-in-tlon-cite-expansion-d8818bfd2026-05-10 https://junglewise.ai/threats/openclaw-incorrect-behavior-order-in-nostr-inbound-dm-handling-82cc84532026-05-10 https://junglewise.ai/threats/openclaw-missing-rate-limiting-in-telegram-webhook-authentication-c92de1aa2026-05-11 https://junglewise.ai/threats/openclaw-path-collision-improper-authorization-in-synology-chat-webhook-40e863fc2026-09-25 https://junglewise.ai/threats/openclaw-privilege-escalation-in-device-pair-approve-6045e0ed2026-05-10 https://junglewise.ai/threats/openclaw-privilege-escalation-in-gateway-plugin-deletesession-131a404d2026-05-11 https://junglewise.ai/threats/openclaw-privilege-escalation-in-gateway-plugin-deletesession-90b98bd32026-09-25 https://junglewise.ai/threats/openclaw-rate-limit-bypass-in-synology-chat-webhook-validation-dd633b6e2026-05-10 https://junglewise.ai/threats/openclaw-resource-exhaustion-in-nostr-inbound-dm-handling-6f449b042026-09-25 https://junglewise.ai/threats/openclaw-resource-exhaustion-in-voice-call-webhook-handling-14261a842026-05-10 https://junglewise.ai/threats/openclaw-resource-exhaustion-in-voice-call-webhook-handling-b35256fe2026-09-25 https://junglewise.ai/threats/openclaw-ssrf-in-multiple-channel-extensions-360953ae2026-05-10 https://junglewise.ai/threats/openclaw-ssrf-via-unguarded-configured-base-urls-in-channel-extensions-a8b2a9c82026-09-25 https://junglewise.ai/threats/openclaw-symlink-traversal-in-agents-create-and-agents-update-5578cef52026-05-11 https://junglewise.ai/threats/openclaw-symlink-traversal-in-agents-create-update-via-identity-md-7e7693742026-09-25 https://junglewise.ai/threats/openclaw-synology-chat-authorization-bypass-via-webhook-path-collision-8493d96d2026-05-10 https://junglewise.ai/threats/openclaw-telegram-webhook-missing-rate-limiting-enables-brute-force-5146a5022026-09-25 https://junglewise.ai/threats/openclaw-unbounded-memory-allocation-in-http-error-handling-2bede33a2026-09-25 https://junglewise.ai/threats/openclaw-unbounded-memory-allocation-in-remote-media-error-handling-234093122026-05-10 https://junglewise.ai/threats/openclaw-webhook-token-pre-auth-rate-limit-bypass-59350dd72026-09-25 https://junglewise.ai/threats/openclaw-authorization-bypass-in-google-chat-group-policy-enforcement-44f379302026-05-11 https://junglewise.ai/threats/openclaw-authorization-bypass-in-nextcloud-talk-integration-07fd63092026-05-11 https://junglewise.ai/threats/openclaw-bluebubbles-webhook-missing-rate-limiting-enables-brute-force-bebcdef22026-09-25 https://junglewise.ai/threats/openclaw-google-chat-authorization-bypass-via-group-policy-rebinding-f4894ead2026-09-25 https://junglewise.ai/threats/openclaw-google-chat-webhook-authentication-bypass-6dc82cf92026-09-25 https://junglewise.ai/threats/openclaw-missing-rate-limiting-in-bluebubbles-webhook-auth-12656f7c2026-05-11 https://junglewise.ai/threats/openclaw-nextcloud-talk-room-authorization-bypass-via-name-collision-6290db8a2026-09-25 https://junglewise.ai/threats/openclaw-plivo-v2-replay-protection-bypass-via-query-parameter-46b13e412026-09-25 https://junglewise.ai/threats/openclaw-replay-protection-bypass-in-plivo-v2-signature-verification-dfd41efc2026-05-10 https://junglewise.ai/threats/cve-2026-5992-tenda-f451-stack-overflow-in-fromp2plistfilter2026-05-10 https://junglewise.ai/threats/cve-2026-5991-tenda-f451-stack-overflow-in-formwrlextraset2026-05-10 https://junglewise.ai/threats/cve-2026-5990-tenda-f451-stack-buffer-overflow-in-fromsafeemailfilter2026-05-10 https://junglewise.ai/threats/cve-2026-5989-tenda-f451-stack-based-buffer-overflow-in-routestatic2026-05-10 https://junglewise.ai/threats/cve-2026-5460-wolfssl-heap-use-after-free-in-tls-1-3-pqc-hybrid-keyshare2026-05-10 https://junglewise.ai/threats/cve-2026-5448-wolfssl-heap-overflow-in-x-509-date-parsing-compatibility-layer2026-05-10 https://junglewise.ai/threats/cve-2026-5393-wolfssl-out-of-bounds-read-in-dual-algorithm-certificateverify2026-05-10 https://junglewise.ai/threats/cve-2026-5392-wolfssl-heap-out-of-bounds-read-in-pkcs7-parsing2026-05-10 https://junglewise.ai/threats/cve-2026-5263-wolfssl-improper-x-509-nameconstraints-enforcement-in-wolfcrypt2026-07-02 https://junglewise.ai/threats/cve-2026-39848-10ij-dockyard-csrf-and-missing-authentication-in-container2026-07-08 https://junglewise.ai/threats/cve-2026-33788-juniper-junos-os-evolved-auth-bypass-in-flexible-pic2026-07-08 https://junglewise.ai/threats/cve-2026-33784-juniper-networks-jsi-vlwc-use-of-default-password2026-07-08 https://junglewise.ai/threats/cve-2026-33774-juniper-networks-junos-os-firewall-filter-bypass-in-pfe-on-mx2026-07-08 https://junglewise.ai/threats/cve-2026-33771-juniper-networks-ctp-os-weak-password-requirements-in-password2026-07-08 https://junglewise.ai/threats/cve-2026-21915-juniper-networks-jsi-vlwc-privilege-escalation-in-cli2026-07-08 https://junglewise.ai/threats/cve-2026-21904-juniper-networks-junos-space-xss-in-list-filter-field2026-07-08 https://junglewise.ai/threats/cve-2025-13914-juniper-networks-apstra-mitm-vulnerability-in-ssh-implementation2026-07-08 https://junglewise.ai/threats/cve-2026-34483-apache-tomcat-improper-output-escaping-in-jsonaccesslogvalve2026-05-10 https://junglewise.ai/threats/cve-2026-34487-apache-tomcat-sensitive-information-disclosure-in-clustering2026-06-18 https://junglewise.ai/threats/cve-2026-34500-apache-tomcat-improper-authentication-in-client-cert-using-ffm2026-05-20 https://junglewise.ai/threats/cve-2026-5972-foundationagents-metagpt-os-command-injection-in-terminal-run2026-05-10 https://junglewise.ai/threats/cve-2026-5973-foundationagents-metagpt-os-command-injection-in-get-mime-type2026-05-10 https://junglewise.ai/threats/cve-2026-5974-foundationagents-metagpt-os-command-injection-in-bash-tool2026-09-26 https://junglewise.ai/threats/cve-2026-24880-apache-tomcat-http-request-smuggling-via-invalid-chunk-extension2026-05-20 https://junglewise.ai/threats/cve-2026-25854-apache-tomcat-open-redirect-in-loadbalancerdrainingvalve2026-05-10 https://junglewise.ai/threats/cve-2026-29129-apache-tomcat-cipher-preference-order-not-preserved2026-05-20 https://junglewise.ai/threats/cve-2026-29145-apache-tomcat-improper-authentication-in-client-cert-validation2026-05-20 https://junglewise.ai/threats/cve-2026-32990-apache-tomcat-improper-input-validation2026-05-11 https://junglewise.ai/threats/cve-2026-41915-openclaw-git-dir-environment-variable-injection-in-exec2026-09-25 https://junglewise.ai/threats/cve-2026-40069-sgbett-bsv-sdk-improper-check-for-unusual-conditions-in-arc2026-05-13 https://junglewise.ai/threats/cve-2026-40070-sgbett-bsv-ruby-sdk-signature-verification-bypass-in-acquire2026-05-13 https://junglewise.ai/threats/cve-2026-39315-unhead-hasdangerousprotocol-bypass-via-padded-html-entities2026-09-25 https://junglewise.ai/threats/cve-2026-35195-bytecode-alliance-wasmtime-out-of-bounds-write-in-string2026-05-10 https://junglewise.ai/threats/cve-2026-34988-bytecode-alliance-wasmtime-data-leakage-in-pooling-allocator2026-05-10 https://junglewise.ai/threats/cve-2026-34983-bytecode-alliance-wasmtime-use-after-free-in-linker-cloning2026-06-08 https://junglewise.ai/threats/cve-2026-34946-wasmtime-has-host-panic-when-winch-compiler-executes-table-fill2026-05-11 https://junglewise.ai/threats/cve-2026-34943-wasmtime-has-a-possible-panic-when-lifting-flags-component-value2026-05-11 https://junglewise.ai/threats/cve-2026-34941-wasmtime-heap-oob-read-in-component-model-utf-16-to-latin1-utf162026-05-11 https://junglewise.ai/threats/cve-2026-5194-wolfssl-improper-certificate-validation-in-ecdsa-signature2026-05-23 https://junglewise.ai/threats/cve-2026-40089-sonicverse-radio-audio-streaming-stack-ssrf-in-dashboard-api2026-06-02 https://junglewise.ai/threats/cve-2026-34734-hdfgroup-hdf5-heap-use-after-free-in-h5dump-utility2026-06-30 https://junglewise.ai/threats/cve-2026-34486-apache-tomcat-encryption-bypass-in-encryptinterceptor2026-08-04 https://junglewise.ai/threats/cve-2026-29146-apache-tomcat-padding-oracle-vulnerability-in-encryptinterceptor2026-06-30 https://junglewise.ai/threats/cve-2026-39912-v2board-and-xboard-authentication-token-exposure-in2026-07-14 https://junglewise.ai/threats/cve-2026-34971-bytecode-alliance-wasmtime-sandbox-escape-in-cranelift-backend-on2026-06-30 https://junglewise.ai/threats/cve-2026-5971-foundationagents-metagpt-eval-injection-in-actionnode2026-09-26 https://junglewise.ai/threats/cve-2026-34020-apache-openmeetings-information-exposure-in-rest-login-endpoint2026-05-10 https://junglewise.ai/threats/cve-2026-40046-apache-activemq-integer-overflow-in-mqtt-control-packet2026-05-10 https://junglewise.ai/threats/cve-2026-33005-apache-openmeetings-insufficient-privilege-checks-in2026-05-10 https://junglewise.ai/threats/cve-2026-33266-apache-openmeetings-hard-coded-cryptographic-key-in-remember-me2026-05-10 https://junglewise.ai/threats/cve-2026-40072-apeworx-web3-py-ssrf-in-ccip-read-offchainlookup2026-09-26 https://junglewise.ai/threats/cve-2026-39983-patrickjuchli-basic-ftp-ftp-command-injection-via-crlf-sequences2026-09-25 https://junglewise.ai/threats/cve-2026-39981-josh-xt-agixt-path-traversal-in-safe-join-function2026-09-26 https://junglewise.ai/threats/cve-2026-39961-aiven-operator-cross-namespace-secret-exfiltration-in2026-05-14 https://junglewise.ai/threats/cve-2026-39911-hashgraph-guardian-arbitrary-code-execution-in-custom-logic2026-07-14 https://junglewise.ai/threats/cve-2026-1584-gnutls-null-pointer-dereference-in-psk-binder-verification2026-06-30 https://junglewise.ai/threats/cve-2026-42420-openclaw-base64-decoding-improper-size-validation2026-09-25 https://junglewise.ai/threats/cve-2026-42428-openclaw-missing-integrity-verification-in-clawhub-package2026-09-25 https://junglewise.ai/threats/openclaw-host-exec-environment-variable-injection-e307fb582026-09-25 https://junglewise.ai/threats/cve-2026-42430-openclaw-ssrf-bypass-in-playwright-redirect-handling2026-09-25 https://junglewise.ai/threats/cve-2026-41912-openclaw-has-browser-ssrf-policy-bypass-via-interaction-triggered2026-09-25 https://junglewise.ai/threats/cve-2026-42426-openclaw-node-pair-approve-privilege-escalation-in-operator-write2026-09-25 https://junglewise.ai/threats/cve-2026-41911-openclaw-feishu-docx-upload-file-upload-image-bypasses-workspace2026-09-25 https://junglewise.ai/threats/cve-2026-41914-openclaw-qq-bot-extension-missing-ssrf-protection-on-all-media2026-09-25 https://junglewise.ai/threats/cve-2026-42421-openclaw-existing-ws-sessions-survive-shared-gateway-token2026-09-25 https://junglewise.ai/threats/cve-2026-41913-openclaw-rate-limit-bypass-in-shared-secret-authentication2026-09-24 https://junglewise.ai/threats/cve-2026-41910-openclaw-authorization-bypass-in-cross-channel-allowlist-writes2026-09-25 https://junglewise.ai/threats/cve-2026-41916-openclaw-resolvedauth-closure-becomes-stale-after-config-reload2026-09-25 https://junglewise.ai/threats/cve-2026-42431-openclaw-node-invoke-authorization-bypass-in-browser-proxy2026-09-25 https://junglewise.ai/threats/cve-2026-42422-openclaw-device-token-rotate-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-42424-openclaw-shared-reply-media-path-traversal-local-file2026-09-25 https://junglewise.ai/threats/cve-2026-42423-openclaw-strictinlineeval-approval-bypass-via-timeout-fallback2026-09-25 https://junglewise.ai/threats/cve-2026-39976-laravel-passport-authentication-bypass-in-tokenguard2026-06-02 https://junglewise.ai/threats/cve-2026-39962-misp-ldap-injection-in-apacheauthenticate2026-06-22 https://junglewise.ai/threats/cve-2026-35041-fast-jwt-redos-in-regexp-claim-validation-leading-to-cpu2026-09-25 https://junglewise.ai/threats/cve-2026-35040-nearform-fast-jwt-non-deterministic-validation-in-claim-matcher2026-09-25 https://junglewise.ai/threats/cve-2026-4878-libcap-privilege-escalation-via-toctou-race-condition-in-cap-set2026-05-19 https://junglewise.ai/threats/cve-2026-35205-helm-signature-verification-bypass-for-plugins-missing-provenance2026-06-30 https://junglewise.ai/threats/cve-2026-35204-helm-path-traversal-in-plugin-metadata-version-field2026-06-30 https://junglewise.ai/threats/cve-2025-70365-kiamo-stored-xss-in-administrative-interfaces2026-07-05 https://junglewise.ai/threats/cve-2025-70364-kiamo-php-code-injection-in-administrative-scripting-tool2026-07-05 https://junglewise.ai/threats/cve-2026-4116-sonicwall-sma1000-series-totp-authentication-bypass-via-unicode2026-05-14 https://junglewise.ai/threats/cve-2026-4114-improper-handling-of-unicode-encoding-in-sonicwall-sma1000-series2026-05-10 https://junglewise.ai/threats/cve-2026-4113-sonicwall-sma-1000-series-credential-enumeration-via-response2026-05-14 https://junglewise.ai/threats/cve-2026-4112-improper-neutralization-of-special-elements-used-in-an-sql-command2026-05-10 https://junglewise.ai/threats/cve-2026-34757-libpng-use-after-free-in-chunk-setter-functions2026-05-14 https://junglewise.ai/threats/cve-2025-62718-axios-hostname-normalization-proxy-bypass-and-ssrf2026-09-25 https://junglewise.ai/threats/cve-2026-42427-openclaw-hgrcpath-cargo-build-rustc-wrapper-rustc-wrapper-and2026-09-25 https://junglewise.ai/threats/openclaw-trust-boundary-violation-in-wake-hooks-8292ab682026-09-25 https://junglewise.ai/threats/openclaw-trust-boundary-violation-in-event-handling-8586cfdf2026-09-25 https://junglewise.ai/threats/cve-2026-4660-hashicorp-go-getter-arbitrary-file-read-via-argument-injection-in2026-06-30 https://junglewise.ai/threats/cve-2025-57735-apache-airflow-insufficient-session-expiration-in-jwt-logout2026-09-26 https://junglewise.ai/threats/cve-2025-62188-apache-dolphinscheduler-sensitive-information-disclosure-in2026-05-10 https://junglewise.ai/threats/cve-2026-34538-apache-airflow-authorization-bypass-in-dagrun-wait-endpoint2026-06-05 https://junglewise.ai/threats/cve-2026-5842-decolua-9router-authorization-bypass-in-administrative-api2026-09-25 https://junglewise.ai/threats/cve-2026-5837-phpgurukul-news-portal-project-sql-injection-in-news-details-php2026-07-24 https://junglewise.ai/threats/cve-2026-5836-code-projects-online-shoe-store-cross-site-scripting-in-admin2026-07-24 https://junglewise.ai/threats/cve-2026-5835-code-projects-online-shoe-store-xss-in-admin-football-php2026-07-24 https://junglewise.ai/threats/cve-2026-5834-code-projects-online-shoe-store-xss-in-admin-running-php2026-07-24 https://junglewise.ai/threats/cve-2026-5833-awwaiid-mcp-server-taskwarrior-command-injection-in2026-09-25 https://junglewise.ai/threats/cve-2026-5357-wordpress-download-manager-stored-xss-in-wpdm-members-shortcode2026-07-24 https://junglewise.ai/threats/cve-2026-4429-photoweblog-osm-openstreetmap-stored-xss-in-osm-map-v3-shortcode2026-07-24 https://junglewise.ai/threats/cve-2026-4124-wordpress-ziggeo-missing-authorization-in-wp-ajax-ziggeo-ajax2026-07-24 https://junglewise.ai/threats/cve-2026-3574-uxdexperts-experto-dashboard-for-woocommerce-stored-xss-in2026-07-24 https://junglewise.ai/threats/cve-2026-3568-mstore-api-idor-in-update-user-profile2026-07-24 https://junglewise.ai/threats/cve-2026-5832-atototo-api-lab-mcp-ssrf-in-http-interface2026-09-25 https://junglewise.ai/threats/cve-2026-5831-agions-taskflow-ai-os-command-injection-in-terminal-execute2026-09-25 https://junglewise.ai/threats/cve-2026-5830-tenda-ac15-stack-buffer-overflow-in-systoolchangepwd2026-07-24 https://junglewise.ai/threats/cve-2026-5829-code-projects-simple-it-discussion-forum-sql-injection-in-content2026-07-24 https://junglewise.ai/threats/cve-2026-5828-code-projects-simple-it-discussion-forum-sql-injection-in2026-07-24 https://junglewise.ai/threats/cve-2026-4326-webilia-vertex-addons-for-elementor-missing-authorization-in2026-07-24 https://junglewise.ai/threats/cve-2026-5827-code-projects-simple-it-discussion-forum-sql-injection-in-question2026-07-24 https://junglewise.ai/threats/cve-2026-5826-code-projects-simple-it-discussion-forum-xss-in-edit-category-php2026-07-24 https://junglewise.ai/threats/cve-2026-5825-code-projects-simple-laundry-system-xss-in-delmemberinfo-php2026-07-24 https://junglewise.ai/threats/openclaw-fetchwithssrfguard-request-body-replay-vulnerability-3e0ba7a12026-09-25 https://junglewise.ai/threats/openclaw-request-body-replay-in-fetchwithssrfguard-6f5be9842026-05-10 https://junglewise.ai/threats/ryandfir-unfurl-denial-of-service-via-unbounded-zlib-decompression-94ce53f12026-05-10 https://junglewise.ai/threats/cve-2026-5824-code-projects-simple-laundry-system-sql-injection-in2026-07-24 https://junglewise.ai/threats/cve-2026-5823-itsourcecode-construction-management-system-sql-injection-in2026-07-24 https://junglewise.ai/threats/cve-2026-5815-d-link-dir-645-stack-buffer-overflow-in-hedwig-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-5814-phpgurukul-online-course-registration-sql-injection-in-check2026-07-24 https://junglewise.ai/threats/cve-2026-5813-phpgurukul-online-course-registration-sql-injection-in-check2026-07-24 https://junglewise.ai/threats/cve-2026-5812-sourcecodester-pharmacy-product-management-system-business-logic2026-07-24 https://junglewise.ai/threats/cve-2026-5811-sourcecodester-online-food-ordering-system-business-logic-error-in2026-07-24 https://junglewise.ai/threats/cve-2026-5173-gitlab-ce-ee-unauthorized-method-invocation-via-websockets2026-07-24 https://junglewise.ai/threats/cve-2026-4916-gitlab-improper-authorization-in-custom-role-member-management2026-07-24 https://junglewise.ai/threats/cve-2026-4332-gitlab-enterprise-edition-xss-in-analytics-dashboards2026-07-24 https://junglewise.ai/threats/cve-2026-3438-sonatype-nexus-repository-reflected-xss2026-07-25 https://junglewise.ai/threats/cve-2026-3199-sonatype-nexus-repository-rce-in-task-management-component2026-07-25 https://junglewise.ai/threats/cve-2026-2619-gitlab-enterprise-edition-incorrect-authorization-in-vulnerability2026-07-20 https://junglewise.ai/threats/cve-2026-2104-gitlab-ce-ee-authorization-bypass-in-csv-export2026-07-25 https://junglewise.ai/threats/cve-2026-1752-gitlab-enterprise-edition-improper-authorization-in-environments2026-07-25 https://junglewise.ai/threats/cve-2026-1516-gitlab-enterprise-edition-code-injection-in-code-quality-reports2026-07-25 https://junglewise.ai/threats/cve-2026-1101-gitlab-enterprise-edition-denial-of-service-in-graphql-sbom-api2026-07-25 https://junglewise.ai/threats/cve-2026-1092-gitlab-ce-ee-denial-of-service-in-terraform-state-lock-api2026-07-25 https://junglewise.ai/threats/cve-2025-9484-gitlab-enterprise-edition-information-disclosure-in-graphql-api2026-07-25 https://junglewise.ai/threats/cve-2025-12664-gitlab-ce-ee-denial-of-service-in-graphql-api2026-07-25 https://junglewise.ai/threats/cve-2026-5919-google-chrome-same-origin-policy-bypass-in-websockets2026-07-24 https://junglewise.ai/threats/cve-2026-5918-google-chrome-inappropriate-implementation-in-navigation2026-07-24 https://junglewise.ai/threats/cve-2026-5915-google-chrome-out-of-bounds-memory-write-in-webml2026-07-24 https://junglewise.ai/threats/cve-2026-5914-google-chrome-type-confusion-in-css2026-07-24 https://junglewise.ai/threats/cve-2026-5913-google-chrome-out-of-bounds-read-in-blink2026-07-24 https://junglewise.ai/threats/cve-2026-5912-google-chrome-integer-overflow-in-webrtc2026-07-24 https://junglewise.ai/threats/cve-2026-5911-google-chrome-policy-bypass-in-serviceworkers2026-07-24 https://junglewise.ai/threats/cve-2026-5910-google-chrome-integer-overflow-in-media2026-07-24 https://junglewise.ai/threats/cve-2026-5909-google-chrome-integer-overflow-in-media2026-07-24 https://junglewise.ai/threats/cve-2026-5908-google-chrome-integer-overflow-in-media2026-07-24 https://junglewise.ai/threats/cve-2026-5907-google-chrome-out-of-bounds-read-in-media2026-07-24 https://junglewise.ai/threats/cve-2026-5906-google-chrome-for-android-omnibox-spoofing2026-07-24 https://junglewise.ai/threats/cve-2026-5905-google-chrome-domain-spoofing-in-permissions-ui2026-07-24 https://junglewise.ai/threats/cve-2026-5903-google-chrome-policy-bypass-in-iframesandbox2026-07-24 https://junglewise.ai/threats/cve-2026-5902-google-chrome-race-condition-in-media-component2026-07-24 https://junglewise.ai/threats/cve-2026-5901-google-chrome-policy-bypass-in-devtools2026-07-24 https://junglewise.ai/threats/cve-2026-5900-google-chrome-policy-bypass-in-downloads2026-07-24 https://junglewise.ai/threats/cve-2026-5899-google-chrome-uxss-in-history-navigation2026-07-24 https://junglewise.ai/threats/cve-2026-5898-google-chrome-for-ios-ui-spoofing-in-omnibox2026-07-24 https://junglewise.ai/threats/cve-2026-5897-google-chrome-ui-spoofing-in-downloads2026-07-24 https://junglewise.ai/threats/cve-2026-5896-google-chrome-policy-bypass-in-audio2026-07-24 https://junglewise.ai/threats/cve-2026-5895-google-chrome-for-ios-address-bar-spoofing-in-omnibox2026-07-24 https://junglewise.ai/threats/cve-2026-5894-google-chrome-navigation-restriction-bypass-in-pdf2026-07-24 https://junglewise.ai/threats/cve-2026-5893-google-chrome-race-condition-in-v8-engine2026-07-24 https://junglewise.ai/threats/cve-2026-5892-google-chrome-insufficient-policy-enforcement-in-pwas2026-07-24 https://junglewise.ai/threats/cve-2026-5891-google-chrome-ui-spoofing-via-insufficient-policy-enforcement2026-07-24 https://junglewise.ai/threats/cve-2026-5890-google-chrome-race-condition-in-webcodecs2026-06-02 https://junglewise.ai/threats/cve-2026-5889-google-chrome-cryptographic-flaw-in-pdfium2026-07-20 https://junglewise.ai/threats/cve-2026-5888-google-chrome-uninitialized-use-in-webcodecs2026-07-24 https://junglewise.ai/threats/cve-2026-5887-google-chrome-download-restriction-bypass-in-downloads2026-07-24 https://junglewise.ai/threats/cve-2026-5886-google-chrome-webaudio-out-of-bounds-read-on-macos2026-07-24 https://junglewise.ai/threats/cve-2026-5885-google-chrome-improper-input-validation-in-webml2026-07-24 https://junglewise.ai/threats/cve-2026-5884-google-chrome-improper-input-validation-in-media2026-07-24 https://junglewise.ai/threats/cve-2026-5883-google-chrome-use-after-free-in-media2026-06-02 https://junglewise.ai/threats/cve-2026-5882-google-chrome-ui-spoofing-in-fullscreen2026-07-24 https://junglewise.ai/threats/cve-2026-5881-google-chrome-policy-bypass-in-localnetworkaccess2026-07-24 https://junglewise.ai/threats/cve-2026-5880-google-chrome-url-spoofing-in-browser-ui2026-07-24 https://junglewise.ai/threats/cve-2026-5879-google-chrome-angle-insufficient-input-validation-on-mac2026-05-26 https://junglewise.ai/threats/cve-2026-5878-google-chrome-ui-spoofing-in-blink2026-07-24 https://junglewise.ai/threats/cve-2026-5877-google-chrome-use-after-free-in-navigation2026-07-24 https://junglewise.ai/threats/cve-2026-5876-google-chrome-side-channel-information-leakage-in-navigation2026-07-24 https://junglewise.ai/threats/cve-2026-5875-google-chrome-policy-bypass-in-blink-engine2026-07-24 https://junglewise.ai/threats/cve-2026-5874-google-chrome-use-after-free-in-privateai2026-07-24 https://junglewise.ai/threats/cve-2026-5873-google-chrome-out-of-bounds-read-and-write-in-v82026-07-24 https://junglewise.ai/threats/cve-2026-5872-google-chrome-use-after-free-in-blink2026-07-24 https://junglewise.ai/threats/cve-2026-5871-google-chrome-type-confusion-in-v82026-07-24 https://junglewise.ai/threats/cve-2026-5870-google-chrome-integer-overflow-in-skia2026-07-20 https://junglewise.ai/threats/cve-2026-5869-google-chrome-heap-buffer-overflow-in-webml2026-07-24 https://junglewise.ai/threats/cve-2026-5868-google-chrome-heap-buffer-overflow-in-angle2026-07-24 https://junglewise.ai/threats/cve-2026-5867-google-chrome-heap-buffer-overflow-in-webml2026-05-26 https://junglewise.ai/threats/cve-2026-5866-google-chrome-use-after-free-in-media2026-07-24 https://junglewise.ai/threats/cve-2026-5865-google-chrome-type-confusion-in-v82026-05-26 https://junglewise.ai/threats/cve-2026-5864-google-chrome-heap-buffer-overflow-in-webaudio2026-07-24 https://junglewise.ai/threats/cve-2026-5863-google-chrome-v8-inappropriate-implementation-code-execution2026-07-24 https://junglewise.ai/threats/cve-2026-5862-google-chrome-v8-inappropriate-implementation-code-execution2026-07-24 https://junglewise.ai/threats/cve-2026-5861-google-chrome-use-after-free-in-v82026-07-24 https://junglewise.ai/threats/cve-2026-5860-google-chrome-use-after-free-in-webrtc2026-05-26 https://junglewise.ai/threats/cve-2026-5859-google-chrome-integer-overflow-in-webml2026-07-24 https://junglewise.ai/threats/cve-2026-5858-google-chrome-heap-buffer-overflow-in-webml2026-07-24 https://junglewise.ai/threats/cve-2026-5810-sourcecodester-sales-and-inventory-system-xss-in-delete-php2026-07-24 https://junglewise.ai/threats/cve-2026-5808-openstatushq-openstatus-dom-based-xss-in-onboarding-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-5806-code-projects-easy-blog-site-cross-site-scripting-in-posts-update2026-07-24 https://junglewise.ai/threats/cve-2026-5711-post-blocks-tools-stored-xss-in-posts-slider-block2026-07-24 https://junglewise.ai/threats/cve-2026-40037-openclaw-request-body-replay-in-fetchwithssrfguard2026-09-25 https://junglewise.ai/threats/cve-2026-40036-ryandfir-unfurl-denial-of-service-via-unbounded-zlib2026-09-26 https://junglewise.ai/threats/cve-2026-40035-ryandfir-unfurl-flask-debug-mode-enabled-by-default2026-07-24 https://junglewise.ai/threats/cve-2026-40032-tclahr-uac-command-injection-in-placeholder-substitution2026-07-24 https://junglewise.ai/threats/cve-2026-40031-ufrisk-memprocfs-library-hijacking-in-multiple-components2026-07-24 https://junglewise.ai/threats/cve-2026-40030-khyrenz-parseusbs-os-command-injection-via-volume-path-argument2026-07-24 https://junglewise.ai/threats/cve-2026-40029-khyrenz-parseusbs-os-command-injection-in-parseusbs-py2026-07-24 https://junglewise.ai/threats/cve-2026-40028-yamato-security-hayabusa-xss-in-html-report-output2026-07-24 https://junglewise.ai/threats/cve-2026-40027-abrignoni-aleapp-path-traversal-in-nq-vault-py-artifact-parser2026-07-24 https://junglewise.ai/threats/cve-2026-40026-sleuth-kit-out-of-bounds-read-in-iso9660-susp-parser2026-07-24 https://junglewise.ai/threats/cve-2026-40025-sleuth-kit-out-of-bounds-read-in-apfs-keybag-parser2026-07-25 https://junglewise.ai/threats/cve-2026-40024-the-sleuth-kit-path-traversal-in-tsk-recover2026-07-25 https://junglewise.ai/threats/cve-2026-39901-monetr-improper-authorization-in-transaction-update-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-40088-mervinpraison-praisonai-os-command-injection-in-execute-command2026-09-26 https://junglewise.ai/threats/cve-2026-40087-langchain-incomplete-f-string-validation-in-prompt-templates2026-09-26 https://junglewise.ai/threats/cve-2026-39987-marimo-pre-auth-remote-code-execution-via-terminal-websocket2026-09-26 https://junglewise.ai/threats/pretext-algorithmic-complexity-denial-of-service-in-text-analysis-45a0879e2026-09-25 https://junglewise.ai/threats/cve-2026-5805-code-projects-easy-blog-site-sql-injection-in-contact-us-php2026-07-24 https://junglewise.ai/threats/cve-2026-5803-bigsk1-openai-realtime-ui-ssrf-in-api-proxy-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-5451-hupe13-extensions-for-leaflet-map-stored-xss-in-elevation-track2026-07-24 https://junglewise.ai/threats/cve-2026-5436-mw-wp-form-arbitrary-file-move-in-file-upload-component2026-07-24 https://junglewise.ai/threats/cve-2026-39892-pyca-cryptography-buffer-overflow-in-buffer-accepting-apis2026-09-26 https://junglewise.ai/threats/cve-2026-39891-mervinpraison-praisonai-template-injection-in-agent-tools2026-07-24 https://junglewise.ai/threats/cve-2026-39890-mervinpraison-praisonai-rce-via-yaml-deserialization-in2026-09-26 https://junglewise.ai/threats/cve-2026-39889-mervinpraison-praisonai-authentication-bypass-in-a2u-event-stream2026-09-26 https://junglewise.ai/threats/cve-2026-39888-praisonai-sandbox-escape-via-frame-traversal-in-execute-code2026-09-26 https://junglewise.ai/threats/cve-2026-39885-frontmcp-ssrf-and-local-file-read-in-mcp-from-openapi2026-09-25 https://junglewise.ai/threats/cve-2026-39883-opentelemetry-opentelemetry-go-untrusted-search-path-in-host-id2026-06-30 https://junglewise.ai/threats/cve-2026-39882-opentelemetry-go-memory-exhaustion-in-otlp-http-exporters2026-07-24 https://junglewise.ai/threats/cve-2026-39881-vim-command-injection-in-netbeans-interface2026-07-24 https://junglewise.ai/threats/cve-2026-39860-nix-symlink-following-vulnerability-in-build-output-registration2026-07-24 https://junglewise.ai/threats/cve-2026-39844-zauberzeug-nicegui-path-traversal-in-file-upload-on-windows2026-07-24 https://junglewise.ai/threats/cve-2026-39429-kcp-dev-kcp-authentication-bypass-in-cache-server2026-07-24 https://junglewise.ai/threats/cve-2026-39416-ail-framework-stored-xss-in-modal-item-preview2026-07-24 https://junglewise.ai/threats/cve-2026-39415-frappe-lms-client-side-quiz-score-manipulation2026-07-24 https://junglewise.ai/threats/cve-2026-39414-minio-denial-of-service-via-memory-exhaustion-in-s3-select-csv2026-07-24 https://junglewise.ai/threats/cve-2026-5802-idachev-mcp-javadc-os-command-injection-in-http-interface2026-07-24 https://junglewise.ai/threats/cve-2026-39880-remnawave-backend-race-condition-in-hwid-device-registration2026-07-24 https://junglewise.ai/threats/cve-2026-39864-kamailio-out-of-bounds-read-in-auth-module2026-07-24 https://junglewise.ai/threats/cve-2026-39863-kamailio-out-of-bounds-access-in-core-tcp-processing2026-07-24 https://junglewise.ai/threats/cve-2026-39862-shopify-tophat-remote-code-execution-via-command-injection2026-07-24 https://junglewise.ai/threats/cve-2026-39859-liquidjs-path-traversal-in-renderfile-and-parsefile2026-09-25 https://junglewise.ai/threats/cve-2026-39413-hkuds-lightrag-jwt-algorithm-confusion-in-api-auth2026-09-26 https://junglewise.ai/threats/cve-2026-39412-liquidjs-information-disclosure-via-sort-natural-filter-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-39411-lobehub-authentication-bypass-via-forgeable-x-lobe-chat-auth2026-09-25 https://junglewise.ai/threats/cve-2026-39362-inventree-ssrf-in-remote-image-download-feature2026-07-24 https://junglewise.ai/threats/cve-2026-35525-liquidjs-root-restriction-bypass-via-symlinks-in-template-tags2026-09-25 https://junglewise.ai/threats/cve-2026-35479-inventree-improper-authorization-for-plugin-installation-via-api2026-07-24 https://junglewise.ai/threats/cve-2026-35478-inventree-authorization-bypass-in-api-token-generation2026-07-24 https://junglewise.ai/threats/cve-2026-35477-inventree-ssti-in-part-name-format-naming-template2026-07-24 https://junglewise.ai/threats/cve-2026-35476-inventree-privilege-escalation-in-user-account-api-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-23869-meta-react-server-components-denial-of-service-in-server2026-09-25 https://junglewise.ai/threats/cve-2026-39974-n8n-mcp-authenticated-ssrf-via-instance-url-header2026-09-25 https://junglewise.ai/threats/cve-2026-39851-saleor-user-enumeration-in-requestemailchange-mutation2026-07-24 https://junglewise.ai/threats/cve-2026-35455-immich-stored-xss-in-360-degree-panorama-viewer2026-07-24 https://junglewise.ai/threats/cve-2026-35446-aces-loris-path-traversal-in-filesdownloadhandler2026-07-24 https://junglewise.ai/threats/cve-2026-35407-saleor-authorization-bypass-in-email-change-workflow2026-07-24 https://junglewise.ai/threats/cve-2026-35403-aces-loris-cross-site-scripting-in-survey-accounts-module2026-07-24 https://junglewise.ai/threats/cve-2026-35401-saleor-resource-exhaustion-via-graphql-query-aliasing2026-07-24 https://junglewise.ai/threats/cve-2026-35400-aces-loris-incorrect-input-validation-in-publication-module2026-07-24 https://junglewise.ai/threats/cve-2026-35169-aces-loris-xss-and-arbitrary-file-download-in-help-editor2026-07-24 https://junglewise.ai/threats/cve-2026-35165-aces-loris-authorization-bypass-in-document-repository2026-07-24 https://junglewise.ai/threats/cve-2026-34985-aces-loris-authorization-bypass-in-media-module2026-07-24 https://junglewise.ai/threats/cve-2026-34837-zammad-missing-authorization-in-ai-assistance-text-tools2026-07-25 https://junglewise.ai/threats/cve-2026-34782-zammad-missing-authorization-in-ai-assistance-text-tools2026-07-25 https://junglewise.ai/threats/cve-2026-34724-zammad-server-side-template-injection-in-ai-agent2026-07-25 https://junglewise.ai/threats/cve-2026-34723-zammad-improper-access-control-in-getting-started-controller2026-07-25 https://junglewise.ai/threats/cve-2026-34722-zammad-missing-authorization-in-ticket-creation-endpoint2026-07-25 https://junglewise.ai/threats/cve-2026-34721-zammad-csrf-in-oauth-callback-endpoints2026-07-25 https://junglewise.ai/threats/cve-2026-34720-zammad-origin-validation-error-in-sso-mechanism2026-07-25 https://junglewise.ai/threats/cve-2026-34719-zammad-ssrf-in-webhook-model2026-07-25 https://junglewise.ai/threats/cve-2026-34718-zammad-html-sanitizer-xss-in-ticket-articles2026-07-25 https://junglewise.ai/threats/cve-2026-34392-aces-loris-path-traversal-in-static-file-router2026-07-25 https://junglewise.ai/threats/cve-2026-34248-zammad-improper-access-control-in-ticket-detail-view2026-07-25 https://junglewise.ai/threats/cve-2026-34166-liquidjs-denial-of-service-via-memory-limit-bypass-in-replace2026-09-25 https://junglewise.ai/threats/cve-2026-33350-aces-loris-sql-injection-in-mri-feedback-popup2026-07-25 https://junglewise.ai/threats/cve-2026-30818-tp-link-archer-ax53-os-command-injection-in-dnsmasq2026-07-25 https://junglewise.ai/threats/cve-2026-30817-tp-link-archer-ax53-arbitrary-file-read-in-openvpn-module2026-07-25 https://junglewise.ai/threats/cve-2026-30816-tp-link-archer-ax53-arbitrary-file-read-in-openvpn-module2026-07-25 https://junglewise.ai/threats/cve-2026-30815-tp-link-archer-ax53-os-command-injection-in-openvpn-module2026-07-25 https://junglewise.ai/threats/cve-2026-30814-tp-link-archer-ax53-stack-overflow-in-tmpserver2026-07-25 https://junglewise.ai/threats/cve-2026-2942-prosolution-wp-client-arbitrary-file-upload-in-prosol2026-07-25 https://junglewise.ai/threats/cve-2026-27806-fleet-orbit-local-privilege-escalation-via-tcl-injection-in2026-07-25 https://junglewise.ai/threats/cve-2026-20709-intel-pentium-and-celeron-processors-use-of-default-cryptographic2026-07-25 https://junglewise.ai/threats/cve-2026-0814-vsourz1td-advanced-contact-form-7-db-missing-authorization2026-07-25 https://junglewise.ai/threats/cve-2026-0811-vsourz1td-advanced-contact-form-7-db-csrf-in-vsz-cf7-save-setting2026-07-25 https://junglewise.ai/threats/cve-2025-50673-d-link-di-8003-buffer-overflow-in-webgl-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50672-d-link-di-8003-buffer-overflow-in-yyxz-dlink-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50671-d-link-di-8003-buffer-overflow-in-xwgl-ref-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50670-d-link-di-8003-buffer-overflow-in-xwgl-bwr-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50669-d-link-di-8003-buffer-overflow-in-wan-ping-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50668-d-link-di-8003-buffer-overflow-in-web-list-opt-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50667-d-link-di-8003-buffer-overflow-in-wan-line-detection-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50666-d-link-di-8003-buffer-overflow-in-web-post-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50665-d-link-di-8003-buffer-overflow-in-web-keyword-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50664-d-link-di-8003-buffer-overflow-in-user-group-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50663-d-link-di-8003-buffer-overflow-in-usb-paswd-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50662-d-link-di-8003-buffer-overflow-in-url-group-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50661-d-link-di-8003-stack-buffer-overflow-in-url-rule-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50660-d-link-di-8003-buffer-overflow-in-url-member-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50659-d-link-di-8003-buffer-overflow-in-user-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50657-d-link-di-8003-buffer-overflow-in-trace-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50655-d-link-di-8003-buffer-overflow-in-thd-group-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50654-d-link-di-8003-buffer-overflow-in-thd-member-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50653-d-link-di-8003-buffer-overflow-in-time-group-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50652-d-link-di-8003-buffer-overflow-in-saveparm-usb-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50650-d-link-di-8003-buffer-overflow-in-router-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50649-d-link-di-8003-buffer-overflow-in-shut-set-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50648-d-link-di-8003-buffer-overflow-in-tggl-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50647-d-link-di-8003-buffer-overflow-in-qos-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50646-d-link-di-8003-buffer-overflow-in-qos-type-asp-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50645-d-link-di-8003-buffer-overflow-in-pppoe-list-opt-asp2026-07-25 https://junglewise.ai/threats/cve-2025-50644-d-link-di-8003-buffer-overflow-in-qj-asp2026-07-25 https://junglewise.ai/threats/cve-2025-30650-juniper-networks-junos-os-privilege-escalation-in-linux-based2026-07-25 https://junglewise.ai/threats/cve-2026-33756-saleor-resource-exhaustion-via-unbounded-graphql-query-batching2026-07-25 https://junglewise.ai/threats/cve-2026-33466-elastic-logstash-path-traversal-in-geoip-downloader2026-07-25 https://junglewise.ai/threats/cve-2026-33459-elastic-kibana-denial-of-service-in-automatic-import-feature2026-07-25 https://junglewise.ai/threats/cve-2026-33458-elastic-kibana-ssrf-in-one-workflow2026-07-25 https://junglewise.ai/threats/cve-2026-32591-red-hat-quay-ssrf-in-proxy-cache-configuration2026-05-20 https://junglewise.ai/threats/cve-2026-32590-red-hat-quay-remote-code-execution-via-pickle-deserialization-in2026-05-20 https://junglewise.ai/threats/cve-2026-32589-red-hat-quay-idor-in-blobupload-process2026-05-20 https://junglewise.ai/threats/cve-2025-52222-d-link-di-series-routers-buffer-overflow-in-radius-asp2026-07-25 https://junglewise.ai/threats/cve-2025-52221-tenda-ac6-buffer-overflow-in-formsetcfm2026-07-25 https://junglewise.ai/threats/cve-2025-45059-d-link-di-8300-buffer-overflow-in-tgfile-htm-function2026-07-25 https://junglewise.ai/threats/cve-2025-45058-d-link-di-8300-buffer-overflow-in-jingx-asp-function2026-07-25 https://junglewise.ai/threats/cve-2025-45057-d-link-di-8300-buffer-overflow-in-ip-position-asp2026-07-25 https://junglewise.ai/threats/cve-2026-4837-rapid7-insight-agent-eval-injection-in-linux-beaconing-logic2026-06-02 https://junglewise.ai/threats/cve-2026-4498-elastic-kibana-privilege-abuse-in-fleet-plugin-debug-routes2026-07-25 https://junglewise.ai/threats/cve-2026-33461-elastic-kibana-incorrect-authorization-in-fleet-component2026-07-25 https://junglewise.ai/threats/cve-2026-33460-elastic-kibana-incorrect-authorization-in-fleet-enrollment2026-07-25 https://junglewise.ai/threats/cve-2026-31017-frappe-erpnext-and-frappe-framework-ssrf-in-print-format-pdf2026-07-05 https://junglewise.ai/threats/cve-2026-30080-openairinterface-amf-integrity-protection-bypass-in-security-mode2026-07-25 https://junglewise.ai/threats/cve-2026-30075-openairinterface-ausf-buffer-overflow-in-uplinknastransport2026-07-25 https://junglewise.ai/threats/cve-2026-2377-red-hat-mirror-registry-ssrf-in-log-export-feature2026-05-20 https://junglewise.ai/threats/cve-2025-57175-siklu-etherhaul-8010-static-root-password2026-06-02 https://junglewise.ai/threats/cve-2025-14243-red-hat-openshift-mirror-registry-username-enumeration-via-error2026-07-25 https://junglewise.ai/threats/cve-2023-46945-qd-today-qd-ssrf-in-ocr-verification-code-function2026-07-25 https://junglewise.ai/threats/cve-2026-33753-trail-of-bits-rfc3161-client-authorization-bypass-in-signature2026-09-26 https://junglewise.ai/threats/cve-2026-33229-xwiki-platform-sandbox-bypass-in-velocity-scripting-api2026-07-25 https://junglewise.ai/threats/cve-2026-31040-sepinetam-stata-mcp-code-injection-via-stata-do-file-shell-escape2026-09-26 https://junglewise.ai/threats/eclipse-jetty-privilege-escalation-in-jaspiauthenticator-0b1324cb2026-05-10 https://junglewise.ai/threats/cve-2026-39865-axios-denial-of-service-via-http-2-session-state-corruption2026-09-25 https://junglewise.ai/threats/cve-2026-39410-hono-cookie-prefix-bypass-via-name-normalization-in-getcookie2026-09-25 https://junglewise.ai/threats/cve-2026-39409-hono-authorization-bypass-in-iprestriction-middleware2026-09-25 https://junglewise.ai/threats/cve-2026-39408-hono-path-traversal-in-tossg-during-static-site-generation2026-09-25 https://junglewise.ai/threats/cve-2026-39407-hono-auth-bypass-via-repeated-slashes-in-servestatic2026-09-25 https://junglewise.ai/threats/cve-2026-39406-hono-node-server-middleware-bypass-in-servestatic2026-09-25 https://junglewise.ai/threats/cve-2026-39394-ci4-cms-erp-ci4ms-crlf-injection-in-install-controller2026-07-24 https://junglewise.ai/threats/cve-2026-39393-ci4-cms-erp-ci4ms-authentication-bypass-in-installation-wizard2026-07-24 https://junglewise.ai/threats/cve-2026-39392-ci4-cms-erp-ci4ms-stored-xss-in-pages-module2026-07-24 https://junglewise.ai/threats/cve-2026-39391-ci4-cms-erp-ci4ms-stored-xss-in-usercontroller-blacklist-note2026-07-20 https://junglewise.ai/threats/cve-2026-39390-ci4-cms-erp-ci4ms-stored-xss-in-google-maps-iframe-setting2026-07-24 https://junglewise.ai/threats/cve-2026-39389-ci4-cms-erp-ci4ms-authorization-bypass-in-fileeditor2026-07-24 https://junglewise.ai/threats/cve-2026-5795-eclipse-jetty-privilege-escalation-in-jaspiauthenticator-via2026-06-30 https://junglewise.ai/threats/cve-2026-35023-wimi-teamwork-on-premises-idor-in-preview-php2026-06-02 https://junglewise.ai/threats/cve-2026-31411-linux-kernel-null-pointer-dereference-in-atm-sigd-send2026-05-20 https://junglewise.ai/threats/cve-2026-2509-softaculous-pagelayer-stored-xss-in-button-widget2026-07-25 https://junglewise.ai/threats/cve-2025-58713-red-hat-process-automation-manager-privilege-escalation-in2026-07-24 https://junglewise.ai/threats/cve-2025-57854-red-hat-openshift-update-service-privilege-escalation-in-osus2026-07-24 https://junglewise.ai/threats/cve-2025-57853-red-hat-web-terminal-privilege-escalation-in-container-images2026-07-24 https://junglewise.ai/threats/cve-2025-57851-red-hat-multicluster-engine-for-kubernetes-privilege-escalation2026-07-24 https://junglewise.ai/threats/cve-2025-57847-red-hat-ansible-automation-platform-privilege-escalation-in2026-07-21 https://junglewise.ai/threats/cve-2025-14816-mitsubishi-electric-multiple-products-cleartext-storage-in-gui2026-07-24 https://junglewise.ai/threats/cve-2025-14815-mitsubishi-electric-genesis64-and-iconics-suite-cleartext-storage2026-07-24 https://junglewise.ai/threats/cve-2026-5600-rami-io-pretix-data-isolation-breach-in-check-in-api2026-07-24 https://junglewise.ai/threats/cve-2026-5302-coolercontrol-coolercontrold-cors-misconfiguration2026-07-24 https://junglewise.ai/threats/cve-2026-5301-coolercontrol-coolercontrol-ui-stored-xss-in-log-viewer2026-07-24 https://junglewise.ai/threats/cve-2026-5300-coolercontrol-coolercontrold-missing-authentication-in-api-router2026-07-24 https://junglewise.ai/threats/cve-2026-28261-dell-ecs-and-objectscale-sensitive-information-disclosure-in-logs2026-07-24 https://junglewise.ai/threats/cve-2026-27102-dell-powerscale-onefs-privilege-escalation-via-incorrect2026-07-24 https://junglewise.ai/threats/cve-2026-24511-dell-powerscale-onefs-sensitive-information-disclosure-in-error2026-07-24 https://junglewise.ai/threats/cve-2026-5208-coolercontrol-coolercontrold-command-injection-in-alerts2026-07-24 https://junglewise.ai/threats/cve-2026-3396-woocommerce-ajax-product-filter-sql-injection-in-post-author2026-07-24 https://junglewise.ai/threats/cve-2026-3243-advanced-members-for-acf-arbitrary-file-deletion-in-create-crop2026-07-24 https://junglewise.ai/threats/cve-2026-2481-beaver-builder-page-builder-stored-xss-in-settings-js-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-28264-dell-powerprotect-agent-service-incorrect-permission-assignment2026-06-02 https://junglewise.ai/threats/cve-2026-1865-wpeverest-user-registration-membership-sql-injection-in-membership2026-07-24 https://junglewise.ai/threats/cve-2026-1673-pluginus-net-bear-bulk-editor-csrf-in-woobe-delete-tax-term2026-07-24 https://junglewise.ai/threats/cve-2026-1672-pluginus-net-bear-bulk-editor-csrf-in-woobe-redraw-table-row2026-07-16 https://junglewise.ai/threats/cve-2026-4303-osamaesh-wp-visitor-statistics-stored-xss-in-wsm-showdaystatsgraph2026-07-20 https://junglewise.ai/threats/cve-2026-4300-robo-gallery-stored-xss-in-loading-label-setting2026-07-24 https://junglewise.ai/threats/cve-2026-4073-pdfl-io-wordpress-plugin-stored-xss-in-pdflio-shortcode2026-07-24 https://junglewise.ai/threats/cve-2026-4025-lcweb-projects-privatecontent-free-stored-xss-in-pc-login-form2026-07-24 https://junglewise.ai/threats/cve-2026-39716-ckthemes-flipmart-missing-authorization-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39715-anytrack-affiliate-link-manager-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39714-g5theme-g5plus-april-missing-authorization-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39713-mailercloud-mailercloud-wordpress-plugin-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39712-tagdiv-composer-content-injection-in-td-composer2026-07-24 https://junglewise.ai/threats/cve-2026-39711-stmcan-rt-theme-18-extensions-sensitive-data-exposure2026-07-24 https://junglewise.ai/threats/cve-2026-39710-stmcan-rt-theme-18-extensions-csrf2026-07-24 https://junglewise.ai/threats/cve-2026-39709-thetechtribe-the-tribal-sensitive-data-exposure2026-07-24 https://junglewise.ai/threats/cve-2026-39708-uicore-uicore-elements-stored-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39707-zealousweb-accept-paypal-payments-using-contact-form-7-missing2026-07-24 https://junglewise.ai/threats/cve-2026-39706-netro-systems-make-my-trivia-missing-authorization-in-wordpress2026-07-24 https://junglewise.ai/threats/cve-2026-39705-mulika-team-mipl-wc-multisite-sync-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39704-nfusionsolutions-precious-metals-automated-product-pricing-pro2026-07-24 https://junglewise.ai/threats/cve-2026-39703-wpbits-wpbits-addons-for-elementor-stored-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39702-wealcoder-animation-addons-for-elementor-dom-based-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39701-andrew-shopwp-missing-authorization-in-wpshopify-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39700-wpxpo-wowoptin-missing-authorization-in-optin-component2026-07-24 https://junglewise.ai/threats/cve-2026-39699-massiveshift-ai-workflow-automation-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39698-publisherdesk-the-publisher-desk-ads-txt-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39697-hbss-technologies-maio-broken-access-control-in-wordpress2026-07-24 https://junglewise.ai/threats/cve-2026-39696-elfsight-whatsapp-chat-cc-dom-based-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39695-podigee-wordpress-plugin-ssrf2026-07-24 https://junglewise.ai/threats/cve-2026-39694-nsquared-simply-schedule-appointments-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39693-fesomia-fsm-custom-featured-image-caption-dom-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39692-tagdiv-composer-stored-xss-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39691-adastracrypto-cryptocurrency-donation-box-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39690-paul-bearne-author-avatars-list-block-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39689-eshipper-eshipper-commerce-missing-authorization-in-wordpress2026-07-24 https://junglewise.ai/threats/cve-2026-39688-glowlogix-wp-frontend-profile-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39687-rapid-car-check-vehicle-data-missing-authorization-in-wordpress2026-07-24 https://junglewise.ai/threats/cve-2026-39686-bannersky-bsk-pdf-manager-sensitive-information-disclosure2026-07-24 https://junglewise.ai/threats/cve-2026-39685-lvaudore-the-moneytizer-missing-authorization-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39684-untheme-organicfood-local-file-inclusion2026-07-24 https://junglewise.ai/threats/cve-2026-39683-chief-gnome-garden-gnome-package-dom-based-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39682-arjan-pronk-linkpizza-manager-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39681-apustheme-homeo-local-file-inclusion2026-07-24 https://junglewise.ai/threats/cve-2026-39680-mwp-development-diet-calorie-calculator-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39679-apustheme-freeio-local-file-inclusion-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39678-dotonpaper-pinpoint-booking-system-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39677-creatives-planet-emphires-local-file-inclusion-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39676-shahjada-download-manager-missing-authorization-in-access-control2026-07-20 https://junglewise.ai/threats/cve-2026-39675-webmuehle-court-reservation-missing-authorization-in-wordpress2026-07-24 https://junglewise.ai/threats/cve-2026-39674-manoj-kumar-mk-google-directions-dom-based-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39673-shrikantkale-izooto-missing-authorization-in-izooto-web-push2026-07-24 https://junglewise.ai/threats/cve-2026-39672-shiptime-discounted-shipping-rates-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39671-dotstore-extra-fees-plugin-for-woocommerce-csrf2026-07-24 https://junglewise.ai/threats/cve-2026-39670-brecht-visual-link-preview-ssrf-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39669-nitropack-wordpress-plugin-missing-authorization-in-access2026-07-24 https://junglewise.ai/threats/cve-2026-39668-g5theme-book-previewer-for-woocommerce-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39667-jongmyoung-kim-korea-sns-dom-based-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39666-telepathy-hello-bar-popup-builder-dom-based-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39665-vladimir-prelovac-seo-friendly-images-dom-based-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39664-leadrebel-leadrebel-missing-authorization-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39663-themetechmount-truebooker-broken-access-control-in-appointment2026-07-24 https://junglewise.ai/threats/cve-2026-39662-prowcplugins-product-price-by-formula-for-woocommerce-missing2026-07-24 https://junglewise.ai/threats/cve-2026-39658-coding-panda-panda-pods-repeater-field-missing-authorization2026-07-20 https://junglewise.ai/threats/cve-2026-39657-leadlovers-forms-broken-access-control-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39656-razorpay-razorpay-for-woocommerce-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39654-ashish-ajani-wp-simple-html-sitemap-dom-based-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39653-deepen-bajracharya-video-conferencing-with-zoom-missing2026-07-24 https://junglewise.ai/threats/cve-2026-39652-igms-igms-direct-booking-missing-authorization-in-wordpress2026-07-24 https://junglewise.ai/threats/cve-2026-39651-totalsuite-total-poll-lite-missing-authorization-in-access2026-07-24 https://junglewise.ai/threats/cve-2026-39650-unitech-web-unitechpay-missing-authorization-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39649-themebeez-royale-news-missing-authorization-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39648-themebeez-cream-blog-missing-authorization-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39647-sonaar-mp3-audio-player-ssrf-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39646-bozdoz-leaflet-map-stored-xss-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39645-global-payments-globalpayments-woocommerce-ssrf2026-07-24 https://junglewise.ai/threats/cve-2026-39644-roxnor-wp-ultimate-review-missing-authorization-in-access-control2026-07-24 https://junglewise.ai/threats/cve-2026-39643-payment-plugins-paypal-woocommerce-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39641-skywarrior-blackfyre-csrf-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39640-mndpsingh287-theme-editor-csrf-and-code-injection2026-07-24 https://junglewise.ai/threats/cve-2026-39639-redpixelstudios-rps-include-content-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39638-themeum-qubely-stored-xss-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39637-spabrice-mogi-missing-authorization-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39636-livemesh-livemesh-addons-for-elementor-stored-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39635-themegoods-grand-magazine-csrf-in-wordpress-theme2026-07-20 https://junglewise.ai/threats/cve-2026-39634-themegoods-grand-portfolio-csrf-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39633-themegoods-grand-car-rental-csrf-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39632-themegoods-grand-blog-csrf-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39631-ronik-unlimitedwp-wpschoolpress-missing-authorization-in-access2026-07-24 https://junglewise.ai/threats/cve-2026-39630-getty-images-wordpress-plugin-ssrf2026-07-24 https://junglewise.ai/threats/cve-2026-39629-kutethemes-uminex-xss-and-content-injection2026-07-24 https://junglewise.ai/threats/cve-2026-39628-kutethemes-dukamarket-xss-and-content-injection2026-07-24 https://junglewise.ai/threats/cve-2026-39627-wp-royal-ashe-missing-authorization-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39626-kutethemes-armania-xss-and-content-injection2026-07-24 https://junglewise.ai/threats/cve-2026-39625-kutethemes-techone-cross-site-scripting-and-content-injection2026-07-24 https://junglewise.ai/threats/cve-2026-39624-kutethemes-biolife-arbitrary-shortcode-execution-via-missing2026-07-24 https://junglewise.ai/threats/cve-2026-39623-kutethemes-biolife-local-file-inclusion-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39622-acme-themes-education-base-missing-authorization-in-wordpress2026-07-24 https://junglewise.ai/threats/cve-2026-39621-spicethemes-spicepress-csrf-leading-to-web-shell-upload2026-07-24 https://junglewise.ai/threats/cve-2026-39620-priyanshumittal-appointment-csrf-to-arbitrary-file-upload2026-07-24 https://junglewise.ai/threats/cve-2026-39619-priyanshumittal-busiprof-csrf-to-web-shell-upload2026-07-24 https://junglewise.ai/threats/cve-2026-39618-themearile-newsexo-csrf-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39617-priyanshumittal-bluestreet-csrf-to-arbitrary-plugin-installation2026-07-24 https://junglewise.ai/threats/cve-2026-39616-dfactory-download-attachments-idor-in-download-attachments2026-07-24 https://junglewise.ai/threats/cve-2026-39615-shahjada-download-manager-stored-xss-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39614-ilghera-jw-player-for-wordpress-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39613-kutethemes-boutique-local-file-inclusion-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39612-kutethemes-kuteshop-missing-authorization-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39611-kutethemes-kuteshop-local-file-inclusion2026-07-24 https://junglewise.ai/threats/cve-2026-39610-pankaj-kumar-wpxmas-snow-missing-authorization-in-wordpress2026-07-24 https://junglewise.ai/threats/cve-2026-39609-wava-co-wava-payment-missing-authorization-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39608-ipospays-ipospays-gateways-wc-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39607-wpbens-filter-plus-missing-authorization-in-access-control2026-07-24 https://junglewise.ai/threats/cve-2026-39606-foysal-imran-bizreview-missing-authorization-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39605-obadiah-super-custom-login-missing-authorization-in-access2026-07-24 https://junglewise.ai/threats/cve-2026-39604-zookatron-mybooktable-bookstore-stored-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39603-themegoods-grand-photography-csrf-in-wordpress-theme2026-07-20 https://junglewise.ai/threats/cve-2026-39602-rustaurius-order-tracking-missing-authorization-in-order-tracking2026-07-24 https://junglewise.ai/threats/cve-2026-39592-andy-ha-depart-missing-authorization-in-woocommerce-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39588-nmerii-nm-gift-registry-and-wishlist-lite-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39586-ateeq-rafeeq-repairbuddy-sensitive-data-exposure2026-07-24 https://junglewise.ai/threats/cve-2026-39585-arraytics-booktics-missing-authorization-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39575-ronald-huereca-custom-query-blocks-dom-based-xss-in-post-type2026-07-24 https://junglewise.ai/threats/cve-2026-39572-magepeople-bus-ticket-booking-sensitive-data-exposure2026-07-24 https://junglewise.ai/threats/cve-2026-39571-themefic-instantio-sensitive-data-exposure2026-07-24 https://junglewise.ai/threats/cve-2026-39570-aa-web-servant-12-step-meeting-list-sensitive-data-exposure2026-07-24 https://junglewise.ai/threats/cve-2026-39569-aa-web-servant-12-step-meeting-list-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39566-designinvento-directorypress-sensitive-information-disclosure2026-07-24 https://junglewise.ai/threats/cve-2026-39565-magepeople-wptravelly-missing-authorization-in-tour-booking2026-07-20 https://junglewise.ai/threats/cve-2026-39564-sunshine-photo-cart-sensitive-data-exposure2026-07-24 https://junglewise.ai/threats/cve-2026-39563-illid-share-this-image-missing-authorization-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39562-boldgrid-sprout-invoices-missing-authorization-in-client2026-07-24 https://junglewise.ai/threats/cve-2026-39561-wp-chill-revive-so-missing-authorization-in-access-control2026-07-24 https://junglewise.ai/threats/cve-2026-39544-themestek-labtechco-local-file-inclusion-in-wordpress-theme2026-07-24 https://junglewise.ai/threats/cve-2026-39543-themefic-tourfic-missing-authorization-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39542-doofinder-doofinder-for-woocommerce-sensitive-data-exposure2026-07-24 https://junglewise.ai/threats/cve-2026-39541-themefic-hydra-booking-stored-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39538-mikado-themes-mikado-core-local-file-inclusion2026-07-24 https://junglewise.ai/threats/cve-2026-39536-wp-chill-rsvp-and-event-management-sensitive-data-exposure2026-07-24 https://junglewise.ai/threats/cve-2026-39535-fullworks-display-eventbrite-events-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39528-wp-delicious-wordpress-plugin-broken-access-control2026-07-24 https://junglewise.ai/threats/cve-2026-39526-wpstream-wpstream-authorization-bypass-in-access-control2026-07-24 https://junglewise.ai/threats/cve-2026-39521-nelio-software-nelio-content-ssrf-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39520-wedevs-wedocs-missing-authorization-in-access-control-levels2026-07-24 https://junglewise.ai/threats/cve-2026-39517-a-wp-life-blog-filter-dom-based-xss-in-blog-filter2026-07-24 https://junglewise.ai/threats/cve-2026-39516-posimyth-nexter-blocks-sensitive-data-exposure-in-wordpress2026-07-24 https://junglewise.ai/threats/cve-2026-39510-wp-chill-image-photo-gallery-final-tiles-grid-idor-in-access2026-07-24 https://junglewise.ai/threats/cve-2026-39509-wpwax-directorist-missing-authorization-in-access-control2026-07-24 https://junglewise.ai/threats/cve-2026-39508-josh-kohlbach-advanced-coupons-for-woocommerce-dom-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39506-jordy-meow-ai-engine-pro-missing-authorization-in-wordpress2026-07-24 https://junglewise.ai/threats/cve-2026-39505-craig-hewitt-seriously-simple-podcasting-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39504-instawp-instawp-connect-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39501-realmag777-fox-woocommerce-currency-switcher-missing2026-07-24 https://junglewise.ai/threats/cve-2026-39500-themesflat-addons-for-elementor-stored-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39497-realmag777-fox-woocommerce-currency-switcher-sql-injection2026-07-24 https://junglewise.ai/threats/cve-2026-39496-yaycommerce-yaymail-blind-sql-injection2026-07-24 https://junglewise.ai/threats/cve-2026-39495-nsquared-simply-schedule-appointments-sql-injection2026-07-24 https://junglewise.ai/threats/cve-2026-39488-surecart-surecart-missing-authorization-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39487-ameliabooking-amelia-blind-sql-injection2026-07-24 https://junglewise.ai/threats/cve-2026-39486-wp-chill-download-monitor-sql-injection2026-07-24 https://junglewise.ai/threats/cve-2026-39485-embedplus-youtube-embed-plus-missing-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-39484-john-darrel-hide-my-wp-ghost-open-redirect2026-07-24 https://junglewise.ai/threats/cve-2026-39483-hidekazu-ishikawa-vk-all-in-one-expansion-unit-stored-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39482-publishpress-post-expirator-dom-based-xss2026-07-24 https://junglewise.ai/threats/cve-2026-39479-brainstorm-force-ottokit-blind-sql-injection-in-suretriggers2026-07-24 https://junglewise.ai/threats/cve-2026-39477-brainstorm-force-cartflows-missing-authorization-in-wordpress2026-07-20 https://junglewise.ai/threats/cve-2026-39476-syed-balkhi-user-feedback-missing-authorization-in-userfeedback2026-07-24 https://junglewise.ai/threats/cve-2026-39475-syed-balkhi-user-feedback-blind-sql-injection2026-07-24 https://junglewise.ai/threats/cve-2026-39473-par-thernstrom-simple-history-sensitive-data-exposure2026-07-24 https://junglewise.ai/threats/cve-2026-39469-softaculous-pagelayer-sensitive-data-exposure-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-39466-wpmu-dev-broken-link-checker-blind-sql-injection2026-07-24 https://junglewise.ai/threats/cve-2026-39464-seedprod-coming-soon-page-ssrf-in-wordpress-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-33088-six-apart-movable-type-sql-injection-in-listing-framework2026-07-25 https://junglewise.ai/threats/cve-2026-25776-six-apart-movable-type-code-injection-in-listing-framework2026-07-25 https://junglewise.ai/threats/cve-2026-1396-magic-plugins-magic-conversation-for-gravity-forms-stored-xss-in2026-07-25 https://junglewise.ai/threats/cve-2026-4655-bdthemes-element-pack-addons-for-elementor-stored-xss-in-svg-image2026-07-25 https://junglewise.ai/threats/cve-2026-4654-awesome-support-wordpress-plugin-idor-in-wpas-get-ticket-replies2026-07-25 https://junglewise.ai/threats/cve-2026-4483-moxa-mxgeneralio-insufficient-access-control-in-ioctl2026-07-24 https://junglewise.ai/threats/cve-2026-4330-blog2social-social-media-auto-post-scheduler-authorization-bypass2026-07-24 https://junglewise.ai/threats/cve-2026-5508-wowpress-wordpress-plugin-stored-xss-in-wowpress-shortcode2026-07-24 https://junglewise.ai/threats/cve-2026-5506-wordpress-wavr-stored-xss-in-wave-shortcode2026-07-24 https://junglewise.ai/threats/cve-2026-5169-udamadu-inquiry-form-to-posts-or-pages-stored-xss-in-form-header2026-07-24 https://junglewise.ai/threats/cve-2026-5167-masteriyo-lms-auth-bypass-in-stripe-webhook-handler2026-07-24 https://junglewise.ai/threats/cve-2026-4871-pstruik-sports-club-management-stored-xss-in-scm-member-data2026-07-24 https://junglewise.ai/threats/cve-2026-4808-devapps-gerador-de-certificados-arbitrary-file-upload-in2026-07-20 https://junglewise.ai/threats/cve-2026-4338-automattic-activitypub-information-disclosure-of-draft-posts2026-07-24 https://junglewise.ai/threats/cve-2026-4141-wordpress-quran-translations-csrf-in-quran-playlist-options2026-07-24 https://junglewise.ai/threats/cve-2026-3781-wordpress-attendance-manager-sql-injection-in-attmgr-off-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-3618-bestwebsoft-columns-stored-xss-in-print-clmns-shortcode2026-07-24 https://junglewise.ai/threats/cve-2026-3594-riaxe-product-customizer-sensitive-information-exposure-in-rest2026-07-24 https://junglewise.ai/threats/cve-2026-3535-mlfactory-dsgvo-google-web-fonts-gdpr-arbitrary-file-upload2026-07-24 https://junglewise.ai/threats/cve-2026-3480-burlingtonbytes-wp-blockade-missing-authorization-in-render2026-07-25 https://junglewise.ai/threats/cve-2026-3477-pz-frontend-manager-missing-authorization-in-pzfm-user-request2026-07-25 https://junglewise.ai/threats/cve-2026-3142-wordpress-pinterest-site-verification-stored-xss-in-post-var2026-07-25 https://junglewise.ai/threats/cve-2026-2838-idealwebdesignlk-whole-enquiry-cart-for-woocommerce-stored-xss2026-07-25 https://junglewise.ai/threats/cve-2025-1794-johanaarstein-am-lottieplayer-stored-xss-via-svg-upload2026-07-25 https://junglewise.ai/threats/cve-2026-5083-berov-ado-sessions-predictable-session-id-generation2026-07-24 https://junglewise.ai/threats/cve-2026-5082-tokuhirom-amon2-plugin-web-csrfdefender-predictable-prng-in2026-07-24 https://junglewise.ai/threats/cve-2026-3311-posimyth-the-plus-addons-for-elementor-stored-xss-in-progress-bar2026-07-25 https://junglewise.ai/threats/cve-2026-33273-icz-corporation-matcha-invoice-unrestricted-file-upload2026-07-25 https://junglewise.ai/threats/cve-2026-27787-icz-corporation-matcha-sns-cross-site-scripting2026-07-25 https://junglewise.ai/threats/cve-2026-24913-icz-corporation-matcha-invoice-sql-injection2026-07-25 https://junglewise.ai/threats/cve-2026-4785-latepoint-calendar-booking-stored-xss-in-latepoint-resources2026-07-25 https://junglewise.ai/threats/cve-2026-4341-bdthemes-prime-slider-stored-xss-in-mount-widget2026-07-25 https://junglewise.ai/threats/cve-2026-4333-thimpress-learnpress-stored-xss-in-learn-press-courses-shortcode2026-07-24 https://junglewise.ai/threats/cve-2026-4299-mainwp-child-reports-missing-authorization-in-heartbeat-received2026-07-24 https://junglewise.ai/threats/cve-2026-4003-felixmartinez-users-manager-pn-privilege-escalation-via-user-meta2026-07-24 https://junglewise.ai/threats/cve-2026-3646-eniture-technology-ltl-freight-quotes-missing-authorization-in2026-07-24 https://junglewise.ai/threats/cve-2026-3600-investi-wordpress-plugin-stored-xss-in-investi-announcements2026-07-24 https://junglewise.ai/threats/cve-2026-3513-realmag777-tableon-stored-xss-in-tableon-button-shortcode2026-07-24 https://junglewise.ai/threats/cve-2026-3239-wpchill-strong-testimonials-stored-xss-in-testimonial-view2026-07-25 https://junglewise.ai/threats/cve-2026-4379-lightpress-lightbox-stored-xss-in-gallery-shortcode2026-07-25 https://junglewise.ai/threats/cve-2026-2988-blubrry-powerpress-stored-xss-via-shortcodes2026-07-25 https://junglewise.ai/threats/cve-2026-5726-delta-electronics-asda-soft-stack-based-buffer-overflow2026-07-24 https://junglewise.ai/threats/cve-2026-1163-parisneo-lollms-insufficient-session-expiration-after-password2026-09-26 https://junglewise.ai/threats/cve-2026-3499-adtribes-product-feed-pro-for-woocommerce-csrf-in-ajax-functions2026-07-24 https://junglewise.ai/threats/cve-2026-3296-wpeverest-everest-forms-php-object-injection-in-form-entry2026-07-25 https://junglewise.ai/threats/cve-2026-33810-google-go-crypto-x509-improper-dns-constraint-validation2026-06-30 https://junglewise.ai/threats/cve-2026-32289-go-html-template-xss-in-js-template-literals2026-07-25 https://junglewise.ai/threats/cve-2026-32288-go-archive-tar-unbounded-memory-allocation-in-sparse-map-parsing2026-07-25 https://junglewise.ai/threats/cve-2026-32283-google-go-crypto-tls-denial-of-service-via-tls-1-3-key-update2026-06-30 https://junglewise.ai/threats/cve-2026-32282-go-standard-library-symlink-traversal-in-root-chmod-on-linux2026-07-25 https://junglewise.ai/threats/cve-2026-32281-google-go-crypto-x509-denial-of-service-in-certificate-validation2026-07-25 https://junglewise.ai/threats/cve-2026-32280-google-go-denial-of-service-in-crypto-x509-certificate-chain2026-06-30 https://junglewise.ai/threats/cve-2026-27144-google-go-toolchain-memory-corruption-in-cmd-compile2026-07-25 https://junglewise.ai/threats/cve-2026-27143-go-toolchain-memory-corruption-in-cmd-compile-loop-induction2026-07-25 https://junglewise.ai/threats/cve-2026-27140-google-go-arbitrary-code-execution-via-malicious-swig-file-names2026-06-30 https://junglewise.ai/threats/cve-2025-14732-elementor-website-builder-stored-xss-in-widget-parameters2026-07-25 https://junglewise.ai/threats/cve-2026-4788-ibm-tivoli-netcool-impact-sensitive-information-disclosure-in-log2026-07-24 https://junglewise.ai/threats/cve-2026-3357-ibm-langflow-desktop-remote-code-execution-in-faiss-component2026-07-25 https://junglewise.ai/threats/cve-2026-1346-ibm-verify-identity-access-privilege-escalation-to-root2026-07-25 https://junglewise.ai/threats/cve-2026-1343-ibm-verify-identity-access-ssrf-in-reverse-proxy2026-07-25 https://junglewise.ai/threats/cve-2026-40071-pyload-ng-improper-authorization-in-webui-json-endpoints2026-05-10 https://junglewise.ai/threats/cve-2026-39398-openclaw-claude-bridge-sandbox-bypass-via-misconfigured-allowed2026-09-25 https://junglewise.ai/threats/cve-2026-5747-amazon-firecracker-out-of-bounds-write-in-virtio-pci-transport2026-06-01 https://junglewise.ai/threats/cve-2026-4406-gravity-forms-reflected-xss-in-gform-get-config-ajax-action2026-07-25 https://junglewise.ai/threats/cve-2026-4401-wpchill-download-monitor-csrf-in-download-path-handlers2026-07-25 https://junglewise.ai/threats/cve-2026-4394-gravity-forms-stored-xss-in-credit-card-field2026-07-25 https://junglewise.ai/threats/cve-2026-2263-wpmu-dev-hustle-missing-authorization-in-ajax-conversion-tracking2026-07-25 https://junglewise.ai/threats/cve-2026-1342-ibm-verify-identity-access-local-script-execution2026-07-25 https://junglewise.ai/threats/cve-2026-39324-rack-rack-session-auth-bypass-and-deserialization-in-session2026-05-13 https://junglewise.ai/threats/skilleton-improper-input-handling-in-repository-path-processing-015e28d52026-09-25 https://junglewise.ai/threats/cve-2026-39321-parse-community-parse-server-timing-side-channel-in-login2026-09-25 https://junglewise.ai/threats/cve-2026-35613-coursevault-preview-path-traversal-in-resolvesafe-utility2026-09-25 https://junglewise.ai/threats/cve-2026-35611-sporkmonger-addressable-redos-in-uri-templates2026-05-13 https://junglewise.ai/threats/cve-2026-35592-pyload-ng-path-traversal-in-untar-extraction2026-09-26 https://junglewise.ai/threats/cve-2026-35586-pyload-ng-authorization-bypass-in-ssl-configuration2026-09-26 https://junglewise.ai/threats/cve-2026-1340-ivanti-endpoint-manager-mobile-code-injection2026-05-15 https://junglewise.ai/threats/cve-2026-39936-wikimedia-mediawiki-score-extension-stored-xss-in-popups2026-07-21 https://junglewise.ai/threats/cve-2026-39935-wikimedia-mediawiki-campaignevents-xss-in-special-eventdetails2026-07-21 https://junglewise.ai/threats/cve-2025-20628-ping-identity-pingidm-access-control-vulnerability-in-remote2026-07-25 https://junglewise.ai/threats/cve-2026-4065-nextendweb-smart-slider-3-missing-authorization-in-ajax-actions2026-07-24 https://junglewise.ai/threats/cve-2026-39937-wikimedia-mediawiki-centralauth-sensitive-information-leak-during2026-07-21 https://junglewise.ai/threats/cve-2026-39934-wikimedia-mediawiki-growthexperiments-infinite-loop-in2026-07-21 https://junglewise.ai/threats/cve-2026-39933-wikimedia-mediawiki-globalwatchlist-extension-multiple-xss2026-07-21 https://junglewise.ai/threats/cve-2026-39847-emmett-path-traversal-in-rsgi-static-handler2026-09-26 https://junglewise.ai/threats/cve-2026-39846-siyuan-remote-code-execution-via-stored-xss-in-table-captions2026-07-20 https://junglewise.ai/threats/cve-2026-35568-model-context-protocol-java-sdk-dns-rebinding-in-mcp-core2026-07-24 https://junglewise.ai/threats/cve-2026-35406-containers-aardvark-dns-infinite-loop-via-malformed-tcp-dns-query2026-07-24 https://junglewise.ai/threats/cve-2026-34781-electron-denial-of-service-in-clipboard-readimage2026-09-25 https://junglewise.ai/threats/cve-2026-34765-electron-incorrect-window-scoping-in-window-open2026-09-25 https://junglewise.ai/threats/cve-2026-34582-botan-tls-1-3-client-authentication-bypass2026-06-30 https://junglewise.ai/threats/cve-2026-34580-botan-certificate-validation-bypass-in-certificate-store2026-06-30 https://junglewise.ai/threats/cve-2026-34371-librechat-path-traversal-in-execute-code-artifact-persistence2026-07-25 https://junglewise.ai/threats/cve-2026-34079-flatpak-arbitrary-file-deletion-via-ld-so-cache-path-traversal2026-07-25 https://junglewise.ai/threats/cve-2026-34078-flatpak-sandbox-escape-via-symlink-following-in-sandbox-expose2026-06-30 https://junglewise.ai/threats/cve-2026-31790-openssl-uninitialized-memory-disclosure-in-rsasve-key2026-07-25 https://junglewise.ai/threats/cve-2026-31789-openssl-heap-buffer-overflow-in-buf2hex-conversion2026-07-25 https://junglewise.ai/threats/cve-2026-28390-openssl-null-pointer-dereference-in-cms-envelopeddata-processing2026-07-25 https://junglewise.ai/threats/cve-2026-28389-openssl-null-pointer-dereference-in-cms-envelopeddata-processing2026-07-25 https://junglewise.ai/threats/cve-2026-28388-openssl-null-pointer-dereference-in-delta-crl-processing2026-07-25 https://junglewise.ai/threats/cve-2026-28387-openssl-use-after-free-in-dane-tlsa-based-authentication2026-07-25 https://junglewise.ai/threats/cve-2026-28386-openssl-aes-cfb128-out-of-bounds-read-on-avx-512-systems2026-07-25 https://junglewise.ai/threats/cve-2026-39401-jhuckaby-cronicle-missing-authorization-in-job-output-parser2026-07-20 https://junglewise.ai/threats/cve-2026-39400-cronicle-stored-xss-in-job-output-fields2026-07-24 https://junglewise.ai/threats/cve-2026-39397-delmaredigital-payload-puck-authorization-bypass-in-crud2026-09-25 https://junglewise.ai/threats/cve-2026-35533-jdx-mise-trust-check-bypass-in-local-configuration-files2026-07-24 https://junglewise.ai/threats/cve-2026-34080-flatpak-xdg-dbus-proxy-policy-parser-bypass-in-eavesdrop2026-07-25 https://junglewise.ai/threats/cve-2026-34045-podman-desktop-dos-and-information-disclosure-in-webview-server2026-06-30 https://junglewise.ai/threats/cve-2026-33439-openidentityplatform-openam-java-deserialization-rce-in-jato2026-07-25 https://junglewise.ai/threats/cve-2026-32712-open-source-point-of-sale-stored-xss-in-daily-sales-table2026-07-25 https://junglewise.ai/threats/cve-2026-29181-opentelemetry-opentelemetry-go-resource-exhaustion-in-baggage2026-06-30 https://junglewise.ai/threats/cve-2026-27949-makeplane-plane-information-exposure-in-authentication-flow2026-07-25 https://junglewise.ai/threats/project-monai-monai-insecure-deserialization-in-algo-from-pickle-be7307932026-07-31 https://junglewise.ai/threats/cve-2026-5741-suvarchal-docker-mcp-server-os-command-injection-in-http-interface2026-07-24 https://junglewise.ai/threats/cve-2026-5739-powerjob-groovy-code-injection-in-openapi-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-39841-wikimedia-mediawiki-cargo-extension-stored-xss-in-list-fields2026-07-24 https://junglewise.ai/threats/cve-2026-39840-wikimedia-mediawiki-cargo-extension-xss-and-css-injection2026-07-25 https://junglewise.ai/threats/cve-2026-39839-wikimedia-mediawiki-cargo-extension-stored-xss-in-map-format2026-07-24 https://junglewise.ai/threats/cve-2026-39838-wikimedia-mediawiki-proofreadpage-extension-xss-via-css-injection2026-07-21 https://junglewise.ai/threats/cve-2026-39837-wikimedia-mediawiki-cargo-extension-stored-xss-in-dynamic-table2026-07-24 https://junglewise.ai/threats/cve-2026-39395-sigstore-cosign-validation-bypass-in-verify-blob-attestation2026-07-24 https://junglewise.ai/threats/cve-2026-39382-dbt-labs-dbt-core-command-injection-in-github-actions-workflow2026-07-24 https://junglewise.ai/threats/cve-2026-39381-parse-community-parse-server-information-exposure-in-sessions-me2026-09-25 https://junglewise.ai/threats/cve-2026-39380-open-source-point-of-sale-stored-xss-in-stock-locations2026-07-24 https://junglewise.ai/threats/cve-2026-39376-kagisearch-fastfeedparser-uncontrolled-recursion-in-meta-refresh2026-09-26 https://junglewise.ai/threats/cve-2026-39374-makeplane-plane-idor-in-issuebulkupdatedateendpoint2026-07-24 https://junglewise.ai/threats/cve-2026-39373-latchset-jwcrypto-denial-of-service-via-memory-exhaustion-in-jwe2026-09-26 https://junglewise.ai/threats/cve-2026-39371-redwoodjs-redwoodsdk-csrf-in-server-functions-via-get-requests2026-09-25 https://junglewise.ai/threats/cve-2026-39370-wwbn-avideo-ssrf-and-response-exfiltration-in-avideoencoder2026-07-24 https://junglewise.ai/threats/cve-2026-39369-wwbn-avideo-path-traversal-in-avideoencoderreceiveimage-json-php2026-07-24 https://junglewise.ai/threats/cve-2026-39368-wwbn-avideo-stored-ssrf-in-live-restream-log-callback2026-07-24 https://junglewise.ai/threats/cve-2026-39367-wwbn-avideo-stored-xss-in-epg-program-titles2026-07-24 https://junglewise.ai/threats/cve-2026-39366-wwbn-avideo-transaction-replay-in-paypal-ipn-handler2026-07-24 https://junglewise.ai/threats/cve-2026-39365-vite-path-traversal-in-optimized-dependency-map-handling2026-09-25 https://junglewise.ai/threats/cve-2026-39364-vite-information-disclosure-via-query-parameter-manipulation-in2026-09-25 https://junglewise.ai/threats/cve-2026-39363-vite-arbitrary-file-read-via-dev-server-websocket2026-09-25 https://junglewise.ai/threats/cve-2026-39361-openobserve-ssrf-bypass-via-ipv6-bracket-notation-in-enrichment2026-07-24 https://junglewise.ai/threats/cve-2026-39356-drizzle-orm-sql-injection-in-escapename-implementation2026-09-25 https://junglewise.ai/threats/cve-2026-39322-polarnl-polarlearn-authentication-bypass-for-banned-accounts2026-07-24 https://junglewise.ai/threats/cve-2026-32864-ni-labview-out-of-bounds-read-in-mgcore-sh-25-3-aligned-free2026-07-25 https://junglewise.ai/threats/cve-2026-32863-ni-labview-out-of-bounds-read-in-sentry-transaction-context-set2026-07-25 https://junglewise.ai/threats/cve-2026-32862-ni-labview-out-of-bounds-write-in-resfilefactory-initresourcemgr2026-07-25 https://junglewise.ai/threats/cve-2026-32861-ni-labview-out-of-bounds-write-in-lvclass-file-parsing2026-07-25 https://junglewise.ai/threats/cve-2026-32860-ni-labview-out-of-bounds-write-in-lvlib-file-parsing2026-07-25 https://junglewise.ai/threats/cve-2025-69515-jxl-android-infotainment-gps-spoofing-in-gnss-receiver-module2026-07-05 https://junglewise.ai/threats/cve-2025-56015-genieacs-improper-access-control-in-nbi-api2026-09-25 https://junglewise.ai/threats/cve-2025-14859-semtech-lr11xx-secure-boot-bypass-via-cryptographic-hash2026-07-25 https://junglewise.ai/threats/cve-2025-14858-semtech-lr11xx-information-disclosure-in-firmware-validation2026-07-25 https://junglewise.ai/threats/cve-2025-14857-semtech-lora-lr11xxx-improper-access-control-in-spi-memory-write2026-07-25 https://junglewise.ai/threats/cve-2026-5762-wikimedia-foundation-mediawiki-reportincident-extension-denial-of2026-07-21 https://junglewise.ai/threats/cve-2026-5736-powerjob-sql-injection-and-rce-in-detailplus-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-39360-rustfs-missing-authorization-in-multipart-uploadpartcopy2026-07-24 https://junglewise.ai/threats/cve-2026-39355-mgeurts-genealogy-broken-access-control-in-teamcontroller2026-07-24 https://junglewise.ai/threats/cve-2026-39354-erudika-scoold-authorization-bypass-in-question-creation2026-07-24 https://junglewise.ai/threats/cve-2026-39351-frappe-unrestricted-doctype-access-via-api-exploit2026-07-24 https://junglewise.ai/threats/cve-2026-39349-orangehrm-inadequate-encryption-strength-in-sensitive-fields2026-07-24 https://junglewise.ai/threats/cve-2026-39348-orangehrm-missing-authorization-in-attachment-download-handlers2026-07-24 https://junglewise.ai/threats/cve-2026-39347-orangehrm-improper-authorization-in-self-appraisal-submissions2026-07-24 https://junglewise.ai/threats/cve-2026-39346-orangehrm-open-source-access-control-bypass-in-disabled-modules2026-07-24 https://junglewise.ai/threats/cve-2026-39345-orangehrm-path-traversal-in-email-template-loader2026-07-24 https://junglewise.ai/threats/cve-2026-22711-wikimedia-mediawiki-wikilove-extension-stored-xss-in-system2026-07-21 https://junglewise.ai/threats/cve-2025-71058-dual-dhcp-dns-server-dns-cache-poisoning-via-improper-txid2026-07-25 https://junglewise.ai/threats/cve-2025-70844-kantorge-yaffa-stored-xss-in-add-account-group-function2026-05-10 https://junglewise.ai/threats/cve-2026-39344-churchcrm-reflected-xss-in-login-page-username-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-39343-churchcrm-sql-injection-in-editeventtypes-php2026-07-24 https://junglewise.ai/threats/cve-2026-39342-churchcrm-sql-injection-in-queryview-php-searchwhat-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-39341-churchcrm-sql-injection-in-confirmreportemail-php2026-07-24 https://junglewise.ai/threats/cve-2026-24156-nvidia-dali-deserialization-of-untrusted-data2026-07-09 https://junglewise.ai/threats/cve-2026-22682-hkuds-openharness-improper-access-control-in-built-in-file-tools2026-07-14 https://junglewise.ai/threats/cve-2026-22680-volcengine-openviking-missing-authorization-in-task-polling2026-09-26 https://junglewise.ai/threats/cve-2026-40045-openclaw-android-accepted-cleartext-remote-gateway-endpoints-and2026-09-25 https://junglewise.ai/threats/cve-2026-41407-openclaw-timing-side-channel-in-shared-secret-comparison2026-09-25 https://junglewise.ai/threats/cve-2026-41354-openclaw-insufficient-replay-dedupe-key-scoping-in-zalo-webhooks2026-09-25 https://junglewise.ai/threats/cve-2026-41360-openclaw-pnpm-dlx-approval-binding-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-41339-openclaw-information-disclosure-in-gateway-connect-snapshots2026-09-25 https://junglewise.ai/threats/cve-2026-41295-openclaw-untrusted-workspace-channel-shadows-could-execute-during2026-09-25 https://junglewise.ai/threats/cve-2026-41298-openclaw-read-scoped-identity-bearing-http-clients-could-kill2026-09-25 https://junglewise.ai/threats/cve-2026-41398-openclaw-ios-a2ui-bridge-trusted-generic-local-network-pages-for2026-09-25 https://junglewise.ai/threats/openclaw-qq-bot-arbitrary-local-file-read-via-structured-payloads-068e42ff2026-09-25 https://junglewise.ai/threats/cve-2026-41383-openclaw-openshell-mirror-mode-could-delete-arbitrary-remote2026-09-25 https://junglewise.ai/threats/cve-2026-41346-openclaw-pairing-request-limit-enforcement-flaw-in-multi-account2026-09-25 https://junglewise.ai/threats/cve-2026-41301-openclaw-forged-nostr-dms-could-create-pairing-state-before2026-09-25 https://junglewise.ai/threats/cve-2026-41392-openclaw-shell-init-file-options-allowlist-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-41359-openclaw-gateway-privilege-escalation-in-operator-write2026-09-25 https://junglewise.ai/threats/cve-2026-41350-openclaw-session-status-authorization-bypass-in-unsandboxed2026-09-25 https://junglewise.ai/threats/cve-2026-41379-openclaw-gateway-operator-write-can-reach-admin-class-talk-voice2026-09-25 https://junglewise.ai/threats/cve-2026-41384-openclaw-cli-backend-environment-variable-injection-via-workspace2026-09-25 https://junglewise.ai/threats/cve-2026-41297-openclaw-marketplace-plugin-download-follows-redirects-without2026-09-25 https://junglewise.ai/threats/cve-2026-41408-openclaw-tlon-media-download-resource-exhaustion2026-09-25 https://junglewise.ai/threats/cve-2026-41375-openclaw-phone-arm-phone-disarm-bypasses-operator-admin-scope2026-09-25 https://junglewise.ai/threats/cve-2026-34148-fedify-unbounded-redirect-following-resource-exhaustion-in2026-09-25 https://junglewise.ai/threats/cve-2026-4631-red-hat-cockpit-os-command-injection-in-remote-login-feature2026-06-27 https://junglewise.ai/threats/cve-2026-35585-file-browser-os-command-injection-in-hook-system2026-06-09 https://junglewise.ai/threats/cve-2026-23696-windmill-labs-windmill-sql-injection-in-folder-ownership2026-07-14 https://junglewise.ai/threats/cve-2025-14821-libssh-insecure-default-configuration-on-windows2026-06-25 https://junglewise.ai/threats/cve-2026-4931-marginal-protocol-v1-unsafe-downcast-in-smart-contracts2026-05-22 https://junglewise.ai/threats/cve-2026-33816-jackc-pgx-memory-safety-vulnerability-in-pgproto32026-05-21 https://junglewise.ai/threats/cve-2026-33815-jackc-pgx-memory-safety-vulnerability-in-pgproto32026-06-26 https://junglewise.ai/threats/cve-2026-30460-daylight-studio-fuelcms-authenticated-rce-in-blocks-module2026-07-05 https://junglewise.ai/threats/cve-2026-3902-django-asgi-header-spoofing-via-underscore-hyphen-conflation2026-09-26 https://junglewise.ai/threats/cve-2026-4277-django-missing-authorization-in-genericinlinemodeladmin2026-09-26 https://junglewise.ai/threats/cve-2026-4292-django-privilege-abuse-in-modeladmin-list-editable2026-09-26 https://junglewise.ai/threats/cve-2026-33033-django-dos-in-multipartparser-via-crafted-multipart-uploads2026-09-26 https://junglewise.ai/threats/cve-2026-33034-django-memory-limit-bypass-in-asgi-requests2026-09-26 https://junglewise.ai/threats/cve-2026-33865-mlflow-stored-xss-via-unsafe-yaml-parsing-in-mlmodel-artifacts2026-09-26 https://junglewise.ai/threats/cve-2026-33866-mlflow-authorization-bypass-in-model-artifact-download-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-35554-apache-kafka-kafka-clients-race-condition-in-kafka-producer2026-05-10 https://junglewise.ai/threats/cve-2026-4740-open-cluster-management-privilege-escalation-in-certificate2026-06-30 https://junglewise.ai/threats/cve-2026-24660-libraw-heap-buffer-overflow-in-x3f-load-huffman2026-06-30 https://junglewise.ai/threats/cve-2026-21413-libraw-heap-buffer-overflow-in-lossless-jpeg-load-raw2026-06-30 https://junglewise.ai/threats/cve-2026-20911-libraw-heap-buffer-overflow-in-hufftable-initval2026-06-30 https://junglewise.ai/threats/cve-2026-20889-libraw-heap-buffer-overflow-in-x3f-thumb-loader2026-06-30 https://junglewise.ai/threats/cve-2026-5735-mozilla-firefox-and-thunderbird-memory-safety-bugs2026-06-30 https://junglewise.ai/threats/cve-2026-5734-mozilla-firefox-and-thunderbird-memory-safety-bugs2026-06-30 https://junglewise.ai/threats/cve-2026-5733-mozilla-firefox-and-thunderbird-out-of-bounds-write-in-webgpu2026-06-30 https://junglewise.ai/threats/cve-2026-5732-mozilla-firefox-and-thunderbird-integer-overflow-in-graphics-text2026-06-30 https://junglewise.ai/threats/cve-2026-5731-mozilla-firefox-and-thunderbird-memory-safety-bugs2026-06-30 https://junglewise.ai/threats/cve-2026-32144-erlang-otp-auth-bypass-in-ocsp-responder-validation2026-06-30 https://junglewise.ai/threats/cve-2026-28808-erlang-otp-incorrect-authorization-in-inets-mod-auth2026-06-30 https://junglewise.ai/threats/cve-2026-22666-dolibarr-erp-crm-remote-code-execution-in-dol-eval-standard2026-07-14 https://junglewise.ai/threats/cve-2026-1114-parisneo-lollms-privilege-escalation-via-weak-jwt-secret-key2026-09-26 https://junglewise.ai/threats/cve-2026-34197-apache-activemq-code-injection-in-jolokia-jmx-http-bridge2026-06-30 https://junglewise.ai/threats/cve-2026-28810-erlang-otp-dns-cache-poisoning-in-inet-res-module2026-07-24 https://junglewise.ai/threats/cve-2026-20432-mediatek-chipset-out-of-bounds-write-in-modem2026-07-25 https://junglewise.ai/threats/cve-2026-20431-mediatek-chipset-denial-of-service-in-modem2026-07-25 https://junglewise.ai/threats/cve-2026-5719-itsourcecode-construction-management-system-sql-injection-in2026-07-24 https://junglewise.ai/threats/cve-2025-13044-ibm-concert-arbitrary-file-overwrite-via-predictable-temporary2026-07-25 https://junglewise.ai/threats/cve-2026-5705-code-projects-online-hotel-booking-cross-site-scripting-in-booknow2026-07-24 https://junglewise.ai/threats/cve-2026-5692-totolink-a7100ru-command-injection-in-setgamespeedcfg2026-07-24 https://junglewise.ai/threats/cve-2026-5691-totolink-a7100ru-command-injection-in-setfirewalltype2026-07-24 https://junglewise.ai/threats/cve-2026-5690-totolink-a7100ru-os-command-injection-in-setremotecfg2026-07-24 https://junglewise.ai/threats/cve-2026-5689-totolink-a7100ru-command-injection-in-setntpcfg2026-07-24 https://junglewise.ai/threats/cve-2026-5688-totolink-a7100ru-os-command-injection-in-setddnscfg2026-07-24 https://junglewise.ai/threats/cve-2026-5709-aws-research-and-engineering-studio-command-injection-in2026-07-24 https://junglewise.ai/threats/cve-2026-5708-aws-research-and-engineering-studio-privilege-escalation-in2026-07-24 https://junglewise.ai/threats/cve-2026-5707-aws-research-and-engineering-studio-os-command-injection-in2026-07-24 https://junglewise.ai/threats/cve-2026-5687-tenda-cx12l-stack-overflow-in-goform-natstaticsetting2026-07-24 https://junglewise.ai/threats/cve-2026-5686-tenda-cx12l-stack-buffer-overflow-in-goform-routestatic2026-07-24 https://junglewise.ai/threats/cve-2026-5685-tenda-cx12l-stack-buffer-overflow-in-fromaddressnat2026-07-24 https://junglewise.ai/threats/cve-2026-5684-tenda-cx12l-stack-overflow-in-fromwebexcptypemanfilter2026-07-24 https://junglewise.ai/threats/cve-2026-35475-labredescefetrj-wegia-open-redirect-in-backup-php2026-07-24 https://junglewise.ai/threats/cve-2026-35474-labredescefetrj-wegia-open-redirect-in-atualizacao-php2026-07-24 https://junglewise.ai/threats/cve-2026-35473-labredescefetrj-wegia-open-redirect-in-control-php2026-07-24 https://junglewise.ai/threats/cve-2026-35471-patrickhener-goshs-path-traversal-in-deletefile2026-07-24 https://junglewise.ai/threats/cve-2026-35454-coder-code-extension-marketplace-zip-slip-path-traversal2026-07-24 https://junglewise.ai/threats/cve-2026-35452-wwbn-avideo-information-disclosure-in-clonesite-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-35450-wwbn-avideo-missing-authentication-in-ffmpeg-api-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-35449-wwbn-avideo-information-disclosure-in-install-test-php2026-07-24 https://junglewise.ai/threats/cve-2026-35448-wwbn-avideo-missing-authorization-in-blockonomicsypt-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-35444-libsdl-org-sdl-image-out-of-bounds-read-in-xcf-loader2026-07-24 https://junglewise.ai/threats/cve-2026-35442-directus-sensitive-information-disclosure-via-aggregate-queries2026-09-25 https://junglewise.ai/threats/cve-2026-35441-directus-resource-exhaustion-via-graphql-alias-amplification2026-09-25 https://junglewise.ai/threats/cve-2026-35413-directus-graphql-introspection-bypass-in-system-endpoint2026-09-25 https://junglewise.ai/threats/cve-2026-35412-directus-authorization-bypass-in-tus-resumable-upload-endpoint2026-09-25 https://junglewise.ai/threats/cve-2026-35411-directus-open-redirect-in-2fa-setup-page2026-09-25 https://junglewise.ai/threats/cve-2026-35410-directus-open-redirect-in-login-redirection-logic2026-09-25 https://junglewise.ai/threats/cve-2026-35409-directus-ssrf-protection-bypass-in-file-import2026-09-25 https://junglewise.ai/threats/cve-2026-35408-directus-account-takeover-via-missing-coop-header-in-sso-login2026-09-25 https://junglewise.ai/threats/cve-2026-35404-open-edx-platform-open-redirect-in-survey-views2026-07-24 https://junglewise.ai/threats/cve-2026-22675-ocs-inventory-ng-server-stored-xss-via-user-agent-header2026-05-26 https://junglewise.ai/threats/cve-2026-33817-etcd-io-bbolt-index-out-of-range-in-bucket-stats2026-05-10 https://junglewise.ai/threats/cve-2026-5683-tenda-cx12l-stack-buffer-overflow-in-goform-p2plistfilter2026-07-24 https://junglewise.ai/threats/cve-2026-35472-labredescefetrj-wegia-open-redirect-in-control-php2026-07-24 https://junglewise.ai/threats/cve-2026-35399-labredescefetrj-wegia-stored-xss-in-backup-filenames2026-07-24 https://junglewise.ai/threats/cve-2026-35398-labredescefetrj-wegia-open-redirect-in-control-php2026-07-24 https://junglewise.ai/threats/cve-2026-35396-labredescefetrj-wegia-open-redirect-in-control-php2026-07-24 https://junglewise.ai/threats/cve-2026-35395-labredescefetrj-wegia-sql-injection-in-despachodao-php2026-07-24 https://junglewise.ai/threats/cve-2026-35394-mobile-next-mobile-mcp-arbitrary-android-intent-execution-in2026-09-25 https://junglewise.ai/threats/cve-2026-35393-patrickhener-goshs-path-traversal-in-post-multipart-upload2026-07-24 https://junglewise.ai/threats/cve-2026-35392-patrickhener-goshs-path-traversal-in-put-upload-handler2026-07-24 https://junglewise.ai/threats/cve-2026-35391-bulwark-webmail-ip-address-spoofing-in-getclientip2026-07-24 https://junglewise.ai/threats/cve-2026-35390-bulwark-webmail-cross-site-scripting-via-csp-misconfiguration2026-07-24 https://junglewise.ai/threats/cve-2026-35389-bulwark-webmail-improper-certificate-validation-in-s-mime2026-07-24 https://junglewise.ai/threats/cve-2026-35213-hapijs-hapi-content-redos-in-http-header-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-35208-lichess-lila-html-injection-in-streamer-titles2026-07-24 https://junglewise.ai/threats/cve-2026-34972-openfga-improper-policy-enforcement-in-batchcheck2026-07-24 https://junglewise.ai/threats/cve-2025-54601-samsung-exynos-wi-fi-driver-double-free-via-race-condition2026-07-25 https://junglewise.ai/threats/cve-2026-5682-meesho-online-shopping-app-risky-cryptography-in-com-meesho-supply2026-07-24 https://junglewise.ai/threats/cve-2026-5681-itsourcecode-construction-management-system-sql-injection-in2026-07-24 https://junglewise.ai/threats/cve-2026-5679-totolink-a3300r-os-command-injection-in-vsettr069cfg2026-07-24 https://junglewise.ai/threats/cve-2026-35459-pyload-ssrf-via-http-redirect-bypass-in-basedownloader2026-09-26 https://junglewise.ai/threats/cve-2026-35203-zlmediakit-heap-buffer-overflow-in-vp9-rtp-payload-parser2026-07-24 https://junglewise.ai/threats/cve-2026-35201-davidfstr-rdiscount-out-of-bounds-read-in-markdown-parsing2026-07-24 https://junglewise.ai/threats/cve-2026-35200-parse-server-stored-xss-via-content-type-mismatch-in-file-uploads2026-09-25 https://junglewise.ai/threats/cve-2026-35199-microsoft-symcrypt-heap-overflow-in-symcryptxmsssign2026-07-24 https://junglewise.ai/threats/cve-2026-35197-mattieb-dye-code-injection-in-template-expressions2026-07-24 https://junglewise.ai/threats/cve-2026-35187-pyload-ssrf-and-local-file-disclosure-in-parse-urls-api2026-09-26 https://junglewise.ai/threats/cve-2026-35185-haxtheweb-haxiam-sensitive-information-disclosure-in-server2026-07-24 https://junglewise.ai/threats/cve-2026-35184-ecclesiacrm-sql-injection-in-queryview-php2026-07-24 https://junglewise.ai/threats/cve-2026-35183-ajax30-brave-cms-idor-in-article-image-deletion2026-07-24 https://junglewise.ai/threats/cve-2026-35182-ajax30-brave-cms-privilege-escalation-in-update-role-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-35181-wwbn-avideo-csrf-in-player-skin-configuration2026-07-24 https://junglewise.ai/threats/cve-2026-35180-wwbn-avideo-csrf-logo-overwrite-in-site-customization-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-35179-wwbn-avideo-missing-authorization-in-socialmediapublisher-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-35178-forceworkbench-workbench-remote-code-execution-in-timezone2026-07-24 https://junglewise.ai/threats/cve-2026-35176-trabucayre-openfpgaloader-heap-buffer-overflow-in-pofparser2026-07-20 https://junglewise.ai/threats/cve-2026-35172-distribution-stale-blob-access-resurrection-in-redis-cache2026-06-30 https://junglewise.ai/threats/cve-2026-35170-trabucayre-openfpgaloader-heap-buffer-overflow-in-bitparser2026-07-20 https://junglewise.ai/threats/cve-2026-35022-anthropic-claude-code-os-command-injection-in-authentication2026-05-29 https://junglewise.ai/threats/cve-2026-35021-anthropic-claude-code-os-command-injection-in-prompt-editor2026-05-29 https://junglewise.ai/threats/cve-2026-35020-anthropic-claude-code-cli-os-command-injection-in-command-lookup2026-05-29 https://junglewise.ai/threats/cve-2025-57834-samsung-exynos-processors-and-modems-denial-of-service-via2026-07-20 https://junglewise.ai/threats/cve-2025-54602-samsung-exynos-wi-fi-driver-use-after-free-via-race-condition2026-07-25 https://junglewise.ai/threats/cve-2025-54328-samsung-exynos-stack-buffer-overflow-in-sms-rp-data-parsing2026-07-25 https://junglewise.ai/threats/cve-2026-5678-totolink-a7100ru-os-command-injection-in-cstecgi-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-5677-totolink-a7100ru-command-injection-in-cstecgi-cgi2026-07-20 https://junglewise.ai/threats/cve-2026-5676-totolink-a8000r-authentication-bypass-in-cstecgi-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-0049-google-android-resource-exhaustion-in-localimageresolver2026-07-25 https://junglewise.ai/threats/cve-2025-58349-samsung-exynos-modem-denial-of-service-in-l2-component2026-07-25 https://junglewise.ai/threats/cve-2025-54324-samsung-exynos-modem-denial-of-service-in-nas-layer2026-07-20 https://junglewise.ai/threats/cve-2025-48651-google-android-strongbox-improper-input-validation-in2026-05-27 https://junglewise.ai/threats/cve-2026-5675-itsourcecode-construction-management-system-sql-injection-in2026-07-24 https://junglewise.ai/threats/cve-2026-5672-code-projects-simple-it-discussion-forum-sql-injection-in-edit2026-07-24 https://junglewise.ai/threats/cve-2026-5671-cyber-iii-student-management-system-xss-in-class-schedule-deletion2026-07-24 https://junglewise.ai/threats/cve-2026-35470-devcode-it-openstamanager-sql-injection-in-confronta-righe-php2026-07-24 https://junglewise.ai/threats/cve-2026-35209-unjs-defu-prototype-pollution-in-defaults-merging2026-09-25 https://junglewise.ai/threats/cve-2026-35175-ajenti-authorization-bypass-in-package-installation2026-09-26 https://junglewise.ai/threats/cve-2026-35174-xenocrat-chyrp-lite-path-traversal-in-administration-console2026-07-24 https://junglewise.ai/threats/cve-2026-35173-chyrp-lite-idor-and-mass-assignment-in-post-model2026-07-24 https://junglewise.ai/threats/cve-2026-35171-kedro-remote-code-execution-via-logging-configuration2026-09-26 https://junglewise.ai/threats/cve-2026-30613-aziot-1-node-smart-switch-information-disclosure-via-uart2026-07-05 https://junglewise.ai/threats/cve-2026-35526-strawberry-graphql-denial-of-service-via-unbounded-websocket2026-09-26 https://junglewise.ai/threats/cve-2026-35523-strawberry-graphql-authentication-bypass-in-legacy-websocket2026-06-08 https://junglewise.ai/threats/cve-2026-35490-dgtlmoon-changedetection-io-authentication-bypass-via-decorator2026-09-26 https://junglewise.ai/threats/cve-2026-35515-nestjs-core-improperly-neutralizes-special-elements-in-output2026-09-25 https://junglewise.ai/threats/cve-2025-64181-openexr-use-of-uninitialized-memory-in-generic-unpack2026-09-26 https://junglewise.ai/threats/cve-2026-35030-berriai-litellm-authentication-bypass-via-oidc-cache-key2026-09-26 https://junglewise.ai/threats/cve-2026-35029-berriai-litellm-incorrect-authorization-in-config-update-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-34986-go-jose-denial-of-service-via-panic-in-jwe-decryption2026-06-30 https://junglewise.ai/threats/cve-2026-34977-zeecka-aperisolve-os-command-injection-in-jpseek-analyzer2026-06-23 https://junglewise.ai/threats/cve-2026-31313-feehi-cms-stored-xss-in-article-content-module2026-07-05 https://junglewise.ai/threats/cve-2026-34982-vim-modeline-sandbox-bypass-in-multiple-options2026-06-30 https://junglewise.ai/threats/cve-2026-34756-vllm-denial-of-service-via-unbounded-n-parameter-in-openai-api2026-09-26 https://junglewise.ai/threats/cve-2026-34755-vllm-denial-of-service-via-unbounded-video-frame-processing2026-09-26 https://junglewise.ai/threats/cve-2026-34589-openexr-heap-out-of-bounds-write-in-dwa-lossy-decoder2026-09-26 https://junglewise.ai/threats/cve-2026-34588-openexr-integer-overflow-in-piz-decoder-leads-to-oob-read-and2026-09-26 https://junglewise.ai/threats/cve-2026-34444-scoder-lupa-arbitrary-code-execution-via-attribute-filter-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-34379-academysoftwarefoundation-openexr-misaligned-write-in-dwa-decoder2026-06-30 https://junglewise.ai/threats/cve-2026-37977-keycloak-cors-header-injection-in-uma-token-endpoint2026-07-15 https://junglewise.ai/threats/cve-2026-5636-phpgurukul-online-shopping-portal-sql-injection-in-cancelorder-php2026-07-24 https://junglewise.ai/threats/cve-2026-5635-phpgurukul-online-shopping-portal-sql-injection-in-categorywise2026-07-24 https://junglewise.ai/threats/cve-2026-5634-projectworlds-car-rental-project-sql-injection-in-book-car-php2026-07-24 https://junglewise.ai/threats/cve-2026-5633-assafelovic-gpt-researcher-ssrf-in-ws-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-31410-linux-kernel-ksmbd-denial-of-service-in-fs-object-id-information2026-05-20 https://junglewise.ai/threats/cve-2026-31409-linux-kernel-ksmbd-state-exhaustion-in-smb2-session-setup2026-05-20 https://junglewise.ai/threats/cve-2026-31408-linux-kernel-use-after-free-in-bluetooth-sco-sco-recv-frame2026-05-20 https://junglewise.ai/threats/cve-2026-31407-linux-kernel-out-of-bounds-access-in-netfilter-conntrack2026-05-20 https://junglewise.ai/threats/cve-2026-31406-linux-kernel-use-after-free-in-xfrm-nat-keepalive-net-fini2026-05-20 https://junglewise.ai/threats/cve-2026-31405-linux-kernel-out-of-bounds-access-in-dvb-net-ule-extension2026-05-20 https://junglewise.ai/threats/cve-2026-5632-assafelovic-gpt-researcher-missing-authentication-in-rest-api-and2026-07-24 https://junglewise.ai/threats/cve-2026-5631-assafelovic-gpt-researcher-rce-in-websocket-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-5630-assafelovic-gpt-researcher-xss-in-report-api2026-07-24 https://junglewise.ai/threats/cve-2026-5629-belkin-f9k1015-stack-based-buffer-overflow-in-formsetfirewall2026-07-24 https://junglewise.ai/threats/cve-2026-5628-belkin-f9k1015-stack-overflow-in-formsetsystemsettings2026-07-24 https://junglewise.ai/threats/cve-2026-5625-assafelovic-gpt-researcher-xss-in-websocket-interface2026-07-24 https://junglewise.ai/threats/cve-2026-5624-projectsend-csrf-in-file-upload-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-5623-hcengineering-huly-platform-ssrf-in-import-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-5622-hcengineering-huly-platform-hard-coded-cryptographic-key-in-jwt2026-07-24 https://junglewise.ai/threats/cve-2026-5621-chrischinchilla-vale-mcp-os-command-injection-in-http-interface2026-07-24 https://junglewise.ai/threats/cve-2026-5620-itsourcecode-construction-management-system-sql-injection-in2026-07-24 https://junglewise.ai/threats/cve-2026-5619-braffolk-mcp-summarization-functions-os-command-injection-in2026-07-24 https://junglewise.ai/threats/cve-2026-5618-kalcaddle-kodbox-ssrf-in-sharemake-sharecheck2026-07-24 https://junglewise.ai/threats/cve-2026-5616-jeecgboot-missing-authentication-in-ai-chat-module2026-07-24 https://junglewise.ai/threats/cve-2026-5615-givanz-vvvebjs-cross-site-scripting-in-upload-php2026-07-24 https://junglewise.ai/threats/cve-2026-5614-belkin-f9k1015-stack-buffer-overflow-in-formsetpassword2026-07-24 https://junglewise.ai/threats/cve-2026-5613-belkin-f9k1015-stack-based-buffer-overflow-in-formreboot2026-07-24 https://junglewise.ai/threats/cve-2026-5612-belkin-f9k1015-stack-buffer-overflow-in-formwlencrypt2026-07-24 https://junglewise.ai/threats/cve-2026-5611-belkin-f9k1015-stack-based-buffer-overflow-in-formcrossbandswitch2026-07-24 https://junglewise.ai/threats/cve-2026-5610-belkin-f9k1015-stack-based-buffer-overflow-in-formwisp5g2026-07-24 https://junglewise.ai/threats/cve-2026-5609-tenda-i12-stack-overflow-in-formwrlssidset2026-07-24 https://junglewise.ai/threats/cve-2026-5608-belkin-f9k1122-stack-based-buffer-overflow-in-formwlansetup2026-07-24 https://junglewise.ai/threats/cve-2026-5607-imprvhub-mcp-browser-agent-ssrf-in-url-parameter-handler2026-07-24 https://junglewise.ai/threats/cve-2026-5606-phpgurukul-online-shopping-portal-sql-injection-in-order-details2026-07-24 https://junglewise.ai/threats/cve-2026-5605-tenda-ch22-stack-buffer-overflow-in-formwrlextraset2026-07-24 https://junglewise.ai/threats/cve-2026-5604-tenda-ch22-stack-overflow-in-formcertlocalprecreate2026-07-24 https://junglewise.ai/threats/cve-2026-5603-elgentos-magento2-dev-mcp-os-command-injection-in2026-09-25 https://junglewise.ai/threats/cve-2026-5602-nor2-io-heim-mcp-os-command-injection-in-registertools2026-09-25 https://junglewise.ai/threats/cve-2026-5601-acrel-electrical-prepaid-cloud-platform-information-disclosure-in2026-07-24 https://junglewise.ai/threats/cve-2026-5597-griptape-ai-griptape-path-traversal-in-computertool2026-07-24 https://junglewise.ai/threats/cve-2026-4272-honeywell-handheld-scanners-missing-authentication-in-base-station2026-07-24 https://junglewise.ai/threats/cve-2026-35679-zcash-zcashd-improper-verification-of-sprout-proofs2026-05-19 https://junglewise.ai/threats/cve-2026-5596-griptape-ai-griptape-sql-injection-in-sqltool2026-07-24 https://junglewise.ai/threats/cve-2019-25704-kados-r10-greenbee-sql-injection-in-multiple-parameters2026-07-25 https://junglewise.ai/threats/cve-2019-25702-kados-r10-greenbee-sql-injection-in-multiple-parameters2026-07-25 https://junglewise.ai/threats/cve-2019-25700-kados-r10-greenbee-sql-injection-in-multiple-parameters2026-07-25 https://junglewise.ai/threats/cve-2019-25698-kados-r10-greenbee-sql-injection-in-multiple-parameters2026-07-25 https://junglewise.ai/threats/cve-2019-25696-kados-r10-greenbee-sql-injection-in-language-tag-parameter2026-07-25 https://junglewise.ai/threats/cve-2019-25694-kados-r10-greenbee-sql-injection-in-user2reset-parameter2026-07-25 https://junglewise.ai/threats/cve-2019-25692-kados-r10-greenbee-sql-injection-in-id-to-modify-parameter2026-07-25 https://junglewise.ai/threats/cve-2019-25690-kados-r10-greenbee-sql-injection-in-multiple-parameters2026-07-25 https://junglewise.ai/threats/cve-2019-25688-kados-greenbee-sql-injection-in-menu-lev1-parameter2026-07-25 https://junglewise.ai/threats/cve-2019-25687-wisdom-pegasus-cms-remote-code-execution-in-extra-fields-plugin2026-07-25 https://junglewise.ai/threats/cve-2019-25686-coreftp-core-ftp-server-denial-of-service-in-pbsz-command2026-07-25 https://junglewise.ai/threats/cve-2019-25684-opendocman-sql-injection-in-search-php2026-07-25 https://junglewise.ai/threats/cve-2019-25683-filezilla-client-denial-of-service-in-local-search-functionality2026-07-25 https://junglewise.ai/threats/cve-2019-25682-victoralagwu-cmssite-csrf-in-users-php2026-07-25 https://junglewise.ai/threats/cve-2019-25681-xlight-ftp-server-seh-overwrite-in-virtual-server-configuration2026-07-25 https://junglewise.ai/threats/cve-2019-25680-phpscriptsmall-advance-gift-shop-pro-script-sql-injection-in2026-07-25 https://junglewise.ai/threats/cve-2019-25679-realterm-realterm-serial-terminal-seh-buffer-overflow-in-echo2026-07-25 https://junglewise.ai/threats/cve-2019-25678-c4g-basic-laboratory-information-system-sql-injection-in-users2026-07-25 https://junglewise.ai/threats/cve-2019-25677-rarlab-winrar-denial-of-service-via-malformed-language-file2026-07-25 https://junglewise.ai/threats/cve-2019-25676-phpscriptsmall-ask-expert-script-xss-and-sql-injection2026-07-25 https://junglewise.ai/threats/cve-2019-25675-arca-solutions-edirectory-sql-injection-and-auth-bypass2026-07-25 https://junglewise.ai/threats/cve-2019-25674-victoralagwu-cmssite-sql-injection-in-post-php2026-07-25 https://junglewise.ai/threats/cve-2019-25673-unisharp-laravel-file-manager-arbitrary-file-upload-in-upload2026-07-25 https://junglewise.ai/threats/cve-2019-25672-piluscart-sql-injection-in-send-parameter2026-07-25 https://junglewise.ai/threats/cve-2019-25671-va-max-remote-code-execution-in-changeip-php2026-07-25 https://junglewise.ai/threats/cve-2019-25670-river-past-video-cleaner-seh-buffer-overflow-in-lame-enc-dll2026-07-25 https://junglewise.ai/threats/cve-2019-25669-qdpm-sql-injection-in-search-by-extrafields-parameter2026-07-25 https://junglewise.ai/threats/cve-2019-25668-phpscriptsmall-news-website-script-sql-injection-in-news-id2026-07-25 https://junglewise.ai/threats/cve-2019-25667-iarsn-taskinfo-buffer-overflow-in-registration-dialog2026-07-25 https://junglewise.ai/threats/cve-2019-25666-nsauditor-spotauditor-buffer-overflow-in-base64-password-decoder2026-07-25 https://junglewise.ai/threats/cve-2019-25665-river-past-ringtone-converter-buffer-overflow-in-activation2026-07-25 https://junglewise.ai/threats/cve-2019-25664-suitecrm-sql-injection-in-users-module-record-parameter2026-07-25 https://junglewise.ai/threats/cve-2019-25663-suitecrm-sql-injection-in-emails-module-via-parenttab-parameter2026-07-25 https://junglewise.ai/threats/cve-2019-25662-resourcespace-sql-injection-in-watched-searches-php2026-07-25 https://junglewise.ai/threats/cve-2019-25661-lizardsystems-remote-process-explorer-buffer-overflow-in-add2026-07-25 https://junglewise.ai/threats/cve-2019-25660-hainsoft-lanhelper-buffer-overflow-in-form-send-message2026-07-25 https://junglewise.ai/threats/cve-2019-25659-xlinesoft-asprunner-professional-buffer-overflow-in-project-name2026-07-25 https://junglewise.ai/threats/cve-2019-25658-amac-mac-address-change-local-buffer-overflow-in-registration2026-07-25 https://junglewise.ai/threats/cve-2019-25657-anyburn-anyburn-x86-denial-of-service-in-image-conversion2026-07-25 https://junglewise.ai/threats/cve-2019-25656-r-project-r-i386-buffer-overflow-in-gui-preferences-dialog2026-07-25 https://junglewise.ai/threats/cve-2018-25256-ks-soft-ip-tools-buffer-overflow-in-snmp-scanner2026-07-25 https://junglewise.ai/threats/cve-2026-5595-griptape-ai-griptape-path-traversal-in-filemanagertool2026-07-24 https://junglewise.ai/threats/cve-2026-5594-premai-io-premsql-code-injection-in-followup-worker2026-07-24 https://junglewise.ai/threats/cve-2026-5587-wbbeyourself-mac-sql-sql-injection-in-refiner-agent2026-07-24 https://junglewise.ai/threats/cve-2026-5586-zhongyu09-openchatbi-sql-injection-in-multi-stage-text2sql2026-05-20 https://junglewise.ai/threats/cve-2026-5585-tencent-ai-infra-guard-information-disclosure-in-task-detail2026-07-24 https://junglewise.ai/threats/cve-2026-5584-fosowl-agenticseek-code-injection-in-pyinterpreter-execute2026-07-24 https://junglewise.ai/threats/cve-2026-5583-phpgurukul-online-shopping-portal-sql-injection-in-my-profile-php2026-07-24 https://junglewise.ai/threats/cve-2026-5580-codeastro-online-classroom-sql-injection-in-addvideos-php2026-07-24 https://junglewise.ai/threats/cve-2026-5579-codeastro-online-classroom-sql-injection-in2026-07-24 https://junglewise.ai/threats/cve-2026-5578-codeastro-online-classroom-sql-injection-in-deleteid-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-5577-song-li-cross-browser-sql-injection-in-details-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-5576-sourcecodester-record-management-system-unrestricted-upload-in2026-07-24 https://junglewise.ai/threats/cve-2026-5575-sourcecodester-record-management-system-sql-injection-in-login-and2026-07-24 https://junglewise.ai/threats/cve-2026-5574-technostrobe-hi-led-wr120-g2-unauthenticated-file-deletion-in2026-07-24 https://junglewise.ai/threats/cve-2026-5573-technostrobe-hi-led-wr120-g2-unauthenticated-file-upload-in-fs2026-07-24 https://junglewise.ai/threats/cve-2026-5572-technostrobe-hi-led-wr120-g2-csrf-in-web-interface2026-07-24 https://junglewise.ai/threats/cve-2026-5571-technostrobe-hi-led-wr120-g2-unauthenticated-information2026-07-24 https://junglewise.ai/threats/cve-2026-5570-technostrobe-hi-led-wr120-g2-auth-bypass-in-logincb2026-07-24 https://junglewise.ai/threats/cve-2026-5569-technostrobe-hi-led-wr120-g2-broken-access-control-in-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-5599-pretix-venueless-improper-isolation-allows-cross-world-user2026-07-20 https://junglewise.ai/threats/cve-2026-5568-akaunting-cross-site-scripting-in-invoice-billing-component2026-07-24 https://junglewise.ai/threats/cve-2026-5567-tenda-m3-buffer-overflow-in-setadvpolicydata2026-07-24 https://junglewise.ai/threats/cve-2026-5566-utt-hiper-1250gw-buffer-overflow-in-formnatstaticmap2026-07-24 https://junglewise.ai/threats/cve-2026-5565-code-projects-simple-laundry-system-sql-injection-in-delmemberinfo2026-07-24 https://junglewise.ai/threats/cve-2026-5564-code-projects-simple-laundry-system-sql-injection-in-searchguest2026-07-24 https://junglewise.ai/threats/cve-2026-5563-autohomecorp-frostmourne-sql-injection-in-alarm-preview2026-07-24 https://junglewise.ai/threats/cve-2026-5562-provectus-kafka-ui-code-injection-in-smartfilters-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-5561-campcodes-complete-pos-management-and-inventory-system-rce-via2026-07-24 https://junglewise.ai/threats/cve-2026-5560-phpgurukul-online-shopping-portal-sql-injection-in-payment-method2026-07-24 https://junglewise.ai/threats/cve-2026-5559-antaresmugisho-pyblade-ssti-and-rce-in-ast-validation2026-09-26 https://junglewise.ai/threats/cve-2026-5558-phpgurukul-online-shopping-portal-sql-injection-in-pending-orders2026-07-24 https://junglewise.ai/threats/cve-2026-5557-badlogic-pi-mono-authentication-bypass-in-pi-mom-slack-bot2026-07-24 https://junglewise.ai/threats/cve-2026-5556-badlogic-pi-mono-code-injection-in-discoverandloadextensions2026-07-24 https://junglewise.ai/threats/cve-2026-5555-code-projects-concert-ticket-reservation-system-sql-injection-in2026-07-24 https://junglewise.ai/threats/cve-2026-5554-code-projects-concert-ticket-reservation-system-sql-injection-in2026-07-24 https://junglewise.ai/threats/cve-2026-5553-itsourcecode-online-cellphone-system-sql-injection-in-available2026-07-24 https://junglewise.ai/threats/cve-2026-5552-phpgurukul-online-shopping-portal-sql-injection-in-sub-category2026-07-24 https://junglewise.ai/threats/cve-2026-5551-itsourcecode-free-hotel-reservation-system-sql-injection-in-login2026-07-24 https://junglewise.ai/threats/cve-2026-5550-tenda-ac10-stack-buffer-overflow-in-fromsystoolchangepwd2026-07-24 https://junglewise.ai/threats/cve-2026-5549-tenda-ac10-hard-coded-rsa-private-key-in-webroot2026-07-24 https://junglewise.ai/threats/cve-2026-5548-tenda-ac10-stack-overflow-in-fromsystoolchangepwd2026-07-24 https://junglewise.ai/threats/cve-2026-5547-tenda-ac10-os-command-injection-in-formaddmacfilterrule2026-07-24 https://junglewise.ai/threats/cve-2026-5546-campcodes-online-learning-management-system-unrestricted-upload-in2026-07-24 https://junglewise.ai/threats/cve-2026-5544-utt-hiper-1250gw-stack-overflow-in-goform-formremotecontrol2026-07-24 https://junglewise.ai/threats/cve-2026-5543-phpgurukul-user-management-system-sql-injection-in-yesterday-reg2026-07-24 https://junglewise.ai/threats/cve-2026-5542-code-projects-simple-laundry-system-xss-in-modstaffinfo-php2026-07-24 https://junglewise.ai/threats/cve-2026-5541-code-projects-simple-laundry-system-xss-in-modmemberinfo-php2026-07-24 https://junglewise.ai/threats/cve-2026-5540-code-projects-simple-laundry-system-sql-injection-in-modifymember2026-07-24 https://junglewise.ai/threats/cve-2026-5590-zephyr-rtos-null-pointer-dereference-in-tcp-stack2026-07-08 https://junglewise.ai/threats/cve-2026-5539-code-projects-simple-laundry-system-xss-in-modifymember-php2026-07-24 https://junglewise.ai/threats/cve-2026-5538-qingdaou-onlinejudge-ssrf-in-judge-server-heartbeat2026-07-24 https://junglewise.ai/threats/cve-2026-5537-halex-coursesel-sql-injection-in-check-sel2026-07-24 https://junglewise.ai/threats/cve-2026-5536-fedml-ai-fedml-insecure-deserialization-in-grpc-server2026-07-24 https://junglewise.ai/threats/cve-2026-5535-fedml-ai-fedml-path-traversal-in-mqtt-message-handler2026-07-24 https://junglewise.ai/threats/cve-2026-5534-itsourcecode-online-enrollment-system-sql-injection-in-userid2026-07-24 https://junglewise.ai/threats/cve-2026-5533-badlogic-pi-mono-cross-site-scripting-in-svg-artifact-handler2026-07-24 https://junglewise.ai/threats/cve-2026-5532-scrapegraphai-scrapegraph-ai-os-command-injection-in2026-07-24 https://junglewise.ai/threats/cve-2026-5531-sourcecodester-student-result-management-system-cleartext-storage2026-07-24 https://junglewise.ai/threats/cve-2026-5530-ollama-ssrf-in-model-pull-api2026-07-07 https://junglewise.ai/threats/cve-2026-5529-dromara-lamp-cloud-improper-authorization-in-defusercontroller2026-07-24 https://junglewise.ai/threats/cve-2026-5528-moussaabbadla-code-screenshot-mcp-os-command-injection-in-http2026-07-24 https://junglewise.ai/threats/cve-2026-5527-tenda-4g03-pro-hard-coded-cryptographic-key-in-ecdsa-handler2026-07-24 https://junglewise.ai/threats/cve-2026-5526-tenda-4g03-pro-improper-access-control-in-httpd2026-07-24 https://junglewise.ai/threats/cve-2016-20054-nodcms-nodcms-csrf-in-administrative-endpoints2026-07-20 https://junglewise.ai/threats/cve-2018-25255-10-strike-lanstate-buffer-overflow-in-lsm-map-parsing2026-07-20 https://junglewise.ai/threats/cve-2018-25254-nico-ftp-seh-buffer-overflow-in-ftp-response-handling2026-07-25 https://junglewise.ai/threats/cve-2018-25253-compuphase-termite-buffer-overflow-in-user-interface-language2026-07-25 https://junglewise.ai/threats/cve-2018-25252-solarwinds-ftp-voyager-buffer-overflow-in-site-profile-ip-field2026-07-25 https://junglewise.ai/threats/cve-2018-25251-snes9k-buffer-overflow-in-netplay-socket-port-number2026-07-25 https://junglewise.ai/threats/cve-2018-25250-mybb-last-user-s-threads-in-profile-plugin-persistent-xss2026-07-25 https://junglewise.ai/threats/cve-2018-25248-mybb-downloads-plugin-persistent-xss-in-download-title2026-07-20 https://junglewise.ai/threats/cve-2016-20060-hotspot-shield-unquoted-service-path-privilege-escalation-in2026-07-20 https://junglewise.ai/threats/cve-2016-20050-foundstone-netschedscan-buffer-overflow-in-hostname-ip-field2026-07-20 https://junglewise.ai/threats/cve-2026-3666-wordpress-wpforo-forum-arbitrary-file-deletion-via-path-traversal2026-07-24 https://junglewise.ai/threats/cve-2026-3309-properfraction-profilepress-arbitrary-shortcode-execution-in2026-07-25 https://junglewise.ai/threats/cve-2026-2936-wp-buy-visitor-traffic-real-time-statistics-stored-xss-in-page2026-07-25 https://junglewise.ai/threats/cve-2026-1233-mementor-text-to-speech-for-wp-hardcoded-credentials-in-telemetry2026-07-21 https://junglewise.ai/threats/cve-2026-0626-wpfunnels-stored-xss-in-wpf-optin-form-shortcode2026-07-25 https://junglewise.ai/threats/cve-2025-14938-purethemes-listeo-core-unauthenticated-media-upload-in-ajax2026-07-25 https://junglewise.ai/threats/cve-2026-5425-trustindex-widgets-for-social-photo-feed-stored-xss-in-feed-data2026-07-24 https://junglewise.ai/threats/cve-2026-3445-properfraction-profilepress-payment-bypass-in-process-checkout2026-07-21 https://junglewise.ai/threats/cve-2026-2826-stellarwp-kadence-blocks-authorization-bypass-in-process-pattern2026-07-21 https://junglewise.ai/threats/cve-2026-2437-wp-travel-engine-stored-xss-in-wte-trip-tax-shortcode2026-07-25 https://junglewise.ai/threats/cve-2026-4896-wclovers-wcfm-frontend-manager-idor-in-ajax-actions2026-07-21 https://junglewise.ai/threats/cve-2026-2600-roxnor-elementskit-stored-xss-in-simple-tab-widget2026-07-25 https://junglewise.ai/threats/cve-2026-0738-gn-themes-shortcodes-ultimate-stored-xss-in-su-carousel-shortcode2026-07-25 https://junglewise.ai/threats/cve-2026-0737-gn-themes-shortcodes-ultimate-stored-xss-in-su-lightbox-shortcode2026-07-25 https://junglewise.ai/threats/cve-2026-0664-wp-royal-royal-addons-for-elementor-stored-xss-in-button-text2026-07-25 https://junglewise.ai/threats/cve-2026-0552-wordpress-simple-shopping-cart-stored-xss-in-wpsc-display-product2026-07-25 https://junglewise.ai/threats/cve-2025-15064-ultimate-member-wordpress-plugin-stored-xss-in-user-description2026-07-25 https://junglewise.ai/threats/cve-2025-13368-xpro-addons-for-elementor-stored-xss-in-pricing-widget2026-07-25 https://junglewise.ai/threats/cve-2026-35405-libp2p-rendezvous-memory-exhaustion-via-unlimited-namespace2026-06-09 https://junglewise.ai/threats/directus-unauthenticated-denial-of-service-via-graphql-alias-a0cc9ef02026-09-25 https://junglewise.ai/threats/cve-2026-39943-directus-sensitive-fields-exposed-in-revision-history2026-09-25 https://junglewise.ai/threats/cve-2026-39942-directus-path-traversal-and-broken-access-control-in-file2026-09-25 https://junglewise.ai/threats/stablelib-stablelib-cbor-stack-exhaustion-denial-of-service-f1d720a52026-09-25 https://junglewise.ai/threats/stablelib-stablelib-cbor-prototype-poisoning-in-cbor-decoding-0e390e652026-09-25 https://junglewise.ai/threats/cve-2026-2949-xpro-addons-for-elementor-stored-xss-in-icon-box-widget2026-07-25 https://junglewise.ai/threats/cve-2026-2924-jegstudio-gutenverse-stored-xss-in-imageload-parameter2026-07-25 https://junglewise.ai/threats/cve-2026-3571-genetech-pie-register-unauthorized-data-modification-in-pie-main2026-07-24 https://junglewise.ai/threats/cve-2026-35616-fortinet-forticlientems-improper-access-control-in-api2026-07-24 https://junglewise.ai/threats/cve-2026-34780-electron-context-isolation-bypass-via-videoframe-transfer2026-09-25 https://junglewise.ai/threats/cve-2026-34955-mervinpraison-praisonai-sandbox-escape-in-subprocesssandbox2026-07-24 https://junglewise.ai/threats/cve-2026-34779-electron-applescript-injection-in-app-movetoapplicationsfolder-on2026-09-25 https://junglewise.ai/threats/cve-2026-34778-electron-spoofing-vulnerability-in-executejavascript-ipc-channel2026-09-25 https://junglewise.ai/threats/cve-2026-34777-electron-origin-validation-error-in-permission-request-handler2026-09-25 https://junglewise.ai/threats/cve-2026-34776-electron-out-of-bounds-read-in-second-instance-ipc-on-macos-and2026-09-25 https://junglewise.ai/threats/cve-2026-34775-electron-improper-isolation-of-node-js-integration-in-workers2026-09-25 https://junglewise.ai/threats/cve-2026-34774-electron-use-after-free-in-offscreen-child-window-paint-callback2026-09-25 https://junglewise.ai/threats/cve-2026-34773-electron-registry-key-path-injection-in-app2026-09-25 https://junglewise.ai/threats/cve-2026-34772-electron-use-after-free-in-download-save-dialog-callback2026-09-25 https://junglewise.ai/threats/cve-2026-34771-electron-use-after-free-in-permission-request-handling2026-09-25 https://junglewise.ai/threats/cve-2026-34770-electron-use-after-free-in-powermonitor-module2026-09-25 https://junglewise.ai/threats/cve-2026-34769-electron-argument-injection-via-undocumented-commandlineswitches2026-09-25 https://junglewise.ai/threats/cve-2026-34768-electron-unquoted-search-path-in-app-setloginitemsettings-on2026-09-25 https://junglewise.ai/threats/cve-2026-34767-electron-http-response-header-injection-in-custom-protocol2026-09-25 https://junglewise.ai/threats/cve-2026-34766-electron-missing-authorization-in-select-usb-device-callback2026-09-25 https://junglewise.ai/threats/cve-2026-35468-nimiq-core-rs-albatross-denial-of-service-via-history-index-panic2026-07-24 https://junglewise.ai/threats/cve-2026-34954-mervinpraison-praisonai-ssrf-in-filetools-download-file2026-09-26 https://junglewise.ai/threats/cve-2026-34953-mervinpraison-praisonai-authentication-bypass-in-oauthmanager2026-09-26 https://junglewise.ai/threats/cve-2026-34952-mervinpraison-praisonai-missing-authentication-in-websocket2026-09-26 https://junglewise.ai/threats/cve-2026-34939-mervinpraison-praisonai-redos-in-mcptoolindex-search-tools2026-09-26 https://junglewise.ai/threats/cve-2026-34938-mervinpraison-praisonai-sandbox-escape-in-execute-code2026-09-26 https://junglewise.ai/threats/cve-2026-34937-mervinpraison-praisonai-os-command-injection-in-run-python2026-07-25 https://junglewise.ai/threats/cve-2026-34936-mervinpraison-praisonai-ssrf-in-passthrough-functions2026-07-25 https://junglewise.ai/threats/cve-2026-34935-mervinpraison-praisonai-os-command-injection-in-mcphandler2026-09-26 https://junglewise.ai/threats/cve-2026-34934-mervinpraison-praisonai-sql-injection-in-get-all-user-threads2026-09-26 https://junglewise.ai/threats/cve-2026-34933-avahi-reachable-assertion-in-avahi-daemon-via-d-bus-flags2026-07-25 https://junglewise.ai/threats/cve-2026-34824-mesop-dev-mesop-uncontrolled-resource-consumption-in-websocket2026-09-26 https://junglewise.ai/threats/cve-2026-34788-emlog-sql-injection-in-tag-model-updatetagname2026-07-25 https://junglewise.ai/threats/cve-2026-34787-emlog-local-file-inclusion-in-admin-plugin-php2026-07-25 https://junglewise.ai/threats/cve-2026-34612-kestra-sql-injection-in-flow-search-leads-to-rce2026-07-25 https://junglewise.ai/threats/cve-2026-34607-emlog-path-traversal-in-emunzip-function2026-07-25 https://junglewise.ai/threats/cve-2026-34229-emlog-stored-xss-in-comment-module-via-uri-scheme-bypass2026-07-25 https://junglewise.ai/threats/cve-2026-34228-emlog-csrf-and-arbitrary-file-write-in-backend-upgrade-interface2026-07-25 https://junglewise.ai/threats/cve-2026-34061-nimiq-core-rs-albatross-interlink-verification-bypass-in-election2026-07-25 https://junglewise.ai/threats/cve-2026-34052-jupyterhub-lti-authenticator-denial-of-service-via-unbounded2026-09-26 https://junglewise.ai/threats/cve-2026-33184-nimiq-core-rs-albatross-integer-underflow-in-discovery-handler2026-07-25 https://junglewise.ai/threats/cve-2021-4477-hirschmann-hilcos-firewall-bypass-in-ipv6-ipsec-deployments2026-07-25 https://junglewise.ai/threats/cve-2026-35044-bentoml-ssti-in-dockerfile-generation2026-06-08 https://junglewise.ai/threats/cve-2026-34990-openprinting-cups-privilege-escalation-via-local-admin-token2026-07-24 https://junglewise.ai/threats/cve-2026-34980-openprinting-cups-remote-code-execution-in-shared-postscript2026-07-24 https://junglewise.ai/threats/cve-2026-34979-openprinting-cups-heap-buffer-overflow-in-cups-scheduler2026-07-24 https://junglewise.ai/threats/cve-2026-34978-openprinting-cups-path-traversal-in-rss-notifier2026-07-20 https://junglewise.ai/threats/cve-2026-34947-discourse-information-disclosure-in-public-invite-pages2026-07-24 https://junglewise.ai/threats/cve-2026-33709-jupyter-jupyterhub-open-redirect-vulnerability2026-09-26 https://junglewise.ai/threats/cve-2026-33175-jupyterhub-oauthenticator-authentication-bypass-in2026-07-25 https://junglewise.ai/threats/cve-2026-28797-infiniflow-ragflow-ssti-in-agent-workflow-components2026-07-25 https://junglewise.ai/threats/cve-2026-27885-piwigo-sql-injection-in-activity-list-api2026-07-25 https://junglewise.ai/threats/cve-2026-27834-piwigo-sql-injection-in-pwg-users-getlist-api2026-07-25 https://junglewise.ai/threats/cve-2026-27833-piwigo-missing-authorization-in-pwg-history-search-api2026-07-25 https://junglewise.ai/threats/cve-2026-27634-piwigo-sql-injection-in-date-filter-parameters2026-07-25 https://junglewise.ai/threats/cve-2026-27481-discourse-authorization-bypass-in-staff-only-tags2026-07-25 https://junglewise.ai/threats/cve-2026-27456-util-linux-mount-toctou-race-condition-in-loop-device-setup2026-07-25 https://junglewise.ai/threats/cve-2026-27447-openprinting-cups-authorization-bypass-in-cupsd-via-case2026-07-25 https://junglewise.ai/threats/cve-2026-35043-bentoml-command-injection-in-cloud-deployment-setup-script2026-09-26 https://junglewise.ai/threats/cve-2026-35042-fast-jwt-crit-header-validation-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-34764-electron-use-after-free-in-offscreen-shared-texture-release2026-09-25 https://junglewise.ai/threats/cve-2026-34753-vllm-ssrf-in-download-bytes-from-url-batch-runner2026-09-26 https://junglewise.ai/threats/cve-2026-34217-sandboxjs-sandbox-escape-via-prop-object-leak-in-new-handler2026-09-25 https://junglewise.ai/threats/cve-2026-34211-sandboxjs-stack-overflow-via-deeply-nested-expressions2026-09-25 https://junglewise.ai/threats/cve-2026-34208-nyariv-sandboxjs-sandbox-integrity-escape-via-constructor-bypass2026-09-25 https://junglewise.ai/threats/openclaw-gemini-oauth-pkce-verifier-exposure-in-state-parameter-1e0f07f52026-09-25 https://junglewise.ai/threats/cve-2026-5485-amazon-athena-odbc-driver-os-command-injection-in-linux2026-07-24 https://junglewise.ai/threats/cve-2026-35562-amazon-athena-odbc-driver-denial-of-service-in-parsing-components2026-07-24 https://junglewise.ai/threats/cve-2026-35561-amazon-athena-odbc-driver-insufficient-authentication-controls2026-07-24 https://junglewise.ai/threats/cve-2026-35560-amazon-athena-odbc-driver-improper-certificate-validation-in-idp2026-07-24 https://junglewise.ai/threats/cve-2026-35559-amazon-athena-odbc-driver-out-of-bounds-write-in-query-processing2026-07-24 https://junglewise.ai/threats/cve-2026-35558-amazon-athena-odbc-driver-command-injection-in-authentication2026-07-24 https://junglewise.ai/threats/cve-2026-34511-openclaw-pkce-verifier-exposure-in-gemini-oauth-flow2026-09-25 https://junglewise.ai/threats/cve-2026-32662-gardyn-cloud-api-active-debug-code-in-development-endpoints2026-07-25 https://junglewise.ai/threats/cve-2026-32646-gardyn-cloud-api-missing-authentication-in-administrative2026-07-25 https://junglewise.ai/threats/cve-2026-28767-gardyn-cloud-api-missing-authentication-in-administrative2026-07-25 https://junglewise.ai/threats/cve-2026-28766-gardyn-cloud-api-missing-authentication-in-user-account-endpoint2026-07-25 https://junglewise.ai/threats/cve-2026-26058-zulip-server-path-traversal-in-data-import-utility2026-07-25 https://junglewise.ai/threats/cve-2026-25742-zulip-missing-authorization-for-anonymous-access-to-attachments2026-07-25 https://junglewise.ai/threats/cve-2026-25197-gardyn-cloud-api-authorization-bypass-via-id-modification2026-07-25 https://junglewise.ai/threats/cve-2026-22665-prompts-chat-identity-confusion-via-case-sensitive-username2026-05-26 https://junglewise.ai/threats/cve-2026-22664-prompts-chat-ssrf-and-credential-leak-in-fal-ai-polling2026-05-26 https://junglewise.ai/threats/cve-2026-22663-prompts-chat-authorization-bypass-in-api-endpoints-and-metadata2026-07-14 https://junglewise.ai/threats/cve-2026-22662-prompts-chat-blind-ssrf-in-wiro-media-generator2026-07-14 https://junglewise.ai/threats/cve-2026-22661-prompts-chat-path-traversal-in-skill-file-handling2026-05-26 https://junglewise.ai/threats/cve-2025-10681-gardyn-home-kit-hardcoded-storage-credentials-in-mobile-app-and2026-07-25 https://junglewise.ai/threats/cve-2022-4987-hirschmann-industrial-hivision-untrusted-search-path-in-external2026-07-25 https://junglewise.ai/threats/cve-2020-37216-hirschmann-hios-denial-of-service-in-ethernet-ip-stack2026-07-25 https://junglewise.ai/threats/cve-2026-5484-bookstack-improper-access-control-in-chapter-export-handler2026-07-20 https://junglewise.ai/threats/cve-2026-28798-icewhaletech-zimaos-ssrf-in-proxy-endpoint2026-07-25 https://junglewise.ai/threats/cve-2026-25726-cloudreve-weak-prng-in-security-secret-generation2026-07-25 https://junglewise.ai/threats/cve-2026-3184-util-linux-login-access-control-bypass-via-hostname2026-07-21 https://junglewise.ai/threats/cve-2026-2625-red-hat-rust-rpm-sequoia-denial-of-service-via-crafted-rpm-file2026-07-25 https://junglewise.ai/threats/cve-2026-5476-nasa-cfs-integer-overflow-in-cfe-tbl-validatecodecloadsize2026-07-24 https://junglewise.ai/threats/cve-2026-5475-nasa-cfs-memory-corruption-in-ccsds-header-size-handler2026-07-24 https://junglewise.ai/threats/cve-2026-32186-microsoft-bing-ssrf-and-elevation-of-privilege2026-07-25 https://junglewise.ai/threats/cve-2026-0545-mlflow-authentication-bypass-in-fastapi-job-endpoints2026-09-26 https://junglewise.ai/threats/cve-2026-5474-nasa-cfs-heap-buffer-overflow-in-ccsds-packet-header-handler2026-07-24 https://junglewise.ai/threats/cve-2026-5473-nasa-cfs-deserialization-in-ground-system-pickle-module2026-07-24 https://junglewise.ai/threats/cve-2026-28373-stackfield-desktop-app-path-traversal-in-decryption-functionality2026-06-02 https://junglewise.ai/threats/cve-2026-5472-projectsandprograms-school-management-system-unrestricted-upload2026-07-24 https://junglewise.ai/threats/cve-2026-5471-investory-toy-planet-trouble-app-hard-coded-key-in-assets2026-07-24 https://junglewise.ai/threats/cve-2026-5470-mixelpixx-google-research-mcp-ssrf-in-extractcontent2026-07-24 https://junglewise.ai/threats/cve-2026-35216-budibase-os-command-injection-in-bash-automation-step2026-09-25 https://junglewise.ai/threats/cve-2026-35214-budibase-path-traversal-in-plugin-upload-endpoint2026-09-25 https://junglewise.ai/threats/cve-2026-31818-budibase-ssrf-in-rest-datasource-connector2026-09-25 https://junglewise.ai/threats/cve-2026-31404-linux-kernel-nfsd-null-pointer-dereference-in-export-put2026-05-20 https://junglewise.ai/threats/cve-2026-31403-linux-kernel-nfsd-use-after-free-in-proc-fs-nfs-exports2026-05-20 https://junglewise.ai/threats/cve-2026-31402-linux-kernel-nfsd-heap-overflow-in-nfsv4-0-lock-replay-cache2026-05-20 https://junglewise.ai/threats/cve-2026-31401-linux-kernel-buffer-overflow-in-hid-bpf-hid-hw-request2026-05-20 https://junglewise.ai/threats/cve-2026-31400-linux-kernel-memory-leak-in-sunrpc-cache-release2026-05-20 https://junglewise.ai/threats/cve-2026-31399-linux-kernel-use-after-free-in-nvdimm-bus-asynchronous2026-05-20 https://junglewise.ai/threats/cve-2026-31398-linux-kernel-incorrect-pte-restoration-in-mm-rmap2026-05-20 https://junglewise.ai/threats/cve-2026-31397-linux-kernel-null-pointer-dereference-in-move-pages-huge-pmd2026-05-20 https://junglewise.ai/threats/cve-2026-31396-linux-kernel-macb-use-after-free-in-ptp-clock-access2026-05-20 https://junglewise.ai/threats/cve-2026-31395-linux-kernel-bnxt-en-out-of-bounds-access-in-async-event-handler2026-05-20 https://junglewise.ai/threats/cve-2026-31394-linux-kernel-null-pointer-dereference-in-mac802112026-05-20 https://junglewise.ai/threats/cve-2026-31393-linux-kernel-out-of-bounds-read-in-bluetooth-l2cap2026-07-25 https://junglewise.ai/threats/cve-2026-31392-linux-kernel-smb-client-session-reuse-with-kerberos-username2026-07-21 https://junglewise.ai/threats/cve-2026-31391-linux-kernel-resource-leak-in-atmel-sha204a-driver2026-07-14 https://junglewise.ai/threats/cve-2026-31390-linux-kernel-memory-leak-in-intel-xe-drm-driver2026-05-26 https://junglewise.ai/threats/cve-2026-31389-linux-kernel-use-after-free-in-spi-controller-registration2026-05-20 https://junglewise.ai/threats/cve-2026-27124-fastmcp-confused-deputy-vulnerability-in-oauthproxy-callback2026-07-25 https://junglewise.ai/threats/cve-2026-25118-immich-credential-disclosure-in-shared-album-authentication2026-07-25 https://junglewise.ai/threats/cve-2026-25044-budibase-command-injection-in-bash-automation-step2026-09-25 https://junglewise.ai/threats/cve-2026-25043-budibase-rate-limiting-bypass-in-password-reset-endpoint2026-07-25 https://junglewise.ai/threats/cve-2026-23475-linux-kernel-null-pointer-dereference-in-spi-statistics2026-05-20 https://junglewise.ai/threats/cve-2026-23474-linux-kernel-buffer-overflow-in-redboot-partition-table-parser2026-05-26 https://junglewise.ai/threats/cve-2026-23472-linux-kernel-infinite-loop-in-serial-core-handle-tx2026-05-26 https://junglewise.ai/threats/cve-2026-23470-linux-kernel-deadlock-in-drm-imagination-soft-reset-sequence2026-05-26 https://junglewise.ai/threats/cve-2026-23469-linux-kernel-race-condition-in-drm-imagination-gpu-driver2026-05-26 https://junglewise.ai/threats/cve-2026-23468-linux-kernel-amdgpu-resource-exhaustion-in-bo-list-creation2026-05-17 https://junglewise.ai/threats/cve-2026-23467-linux-kernel-null-pointer-dereference-in-drm-i915-dmc2026-05-26 https://junglewise.ai/threats/cve-2026-23466-linux-kernel-intel-xe-driver-improper-ggtt-mmio-access-protection2026-05-20 https://junglewise.ai/threats/cve-2026-23465-linux-kernel-btrfs-data-loss-in-tree-log-dentry-logging2026-05-20 https://junglewise.ai/threats/cve-2026-23464-linux-kernel-microchip-mpfs-memory-leak-in-mpfs-sys-controller2026-05-20 https://junglewise.ai/threats/cve-2026-23463-linux-kernel-race-condition-in-nxp-qman-qman-destroy-fq2026-05-20 https://junglewise.ai/threats/cve-2026-23462-linux-kernel-use-after-free-in-bluetooth-hidp2026-05-20 https://junglewise.ai/threats/cve-2026-23461-linux-kernel-use-after-free-in-bluetooth-l2cap2026-05-20 https://junglewise.ai/threats/cve-2026-23460-linux-kernel-null-pointer-dereference-in-net-rose-protocol2026-05-26 https://junglewise.ai/threats/cve-2026-23459-linux-kernel-memory-corruption-in-ip-tunnel-statistics-handling2026-05-26 https://junglewise.ai/threats/cve-2026-23458-linux-kernel-netfilter-use-after-free-in-ctnetlink-dump-exp-ct2026-05-26 https://junglewise.ai/threats/cve-2026-23457-linux-kernel-netfilter-sip-truncation-in-sip-help-tcp2026-05-26 https://junglewise.ai/threats/cve-2026-23456-linux-kernel-netfilter-out-of-bounds-read-in-nf-conntrack-h3232026-05-26 https://junglewise.ai/threats/cve-2026-23455-linux-kernel-out-of-bounds-read-in-netfilter-nf-conntrack-h3232026-05-26 https://junglewise.ai/threats/cve-2026-23454-linux-kernel-mana-driver-use-after-free-in-mana-hwc-destroy2026-05-26 https://junglewise.ai/threats/cve-2026-23453-linux-kernel-ti-icssg-pru-ethernet-memory-leak-in-xdp-drop2026-05-26 https://junglewise.ai/threats/cve-2026-23452-linux-kernel-race-condition-in-pm-runtime-device-removal2026-05-26 https://junglewise.ai/threats/cve-2026-23451-linux-kernel-infinite-loop-in-bond-header-parse2026-05-21 https://junglewise.ai/threats/cve-2026-23450-linux-kernel-use-after-free-in-smc-tcp-syn-recv-sock2026-05-21 https://junglewise.ai/threats/cve-2026-23449-linux-kernel-double-free-in-teql-network-scheduler2026-05-21 https://junglewise.ai/threats/cve-2026-23448-linux-kernel-out-of-bounds-read-in-cdc-ncm-usb-driver2026-05-21 https://junglewise.ai/threats/cve-2026-23447-linux-linux-kernel-out-of-bounds-read-in-cdc-ncm-rx-verify-ndp322026-07-24 https://junglewise.ai/threats/cve-2026-23446-linux-kernel-deadlock-in-aqc111-usb-ethernet-driver2026-07-14 https://junglewise.ai/threats/cve-2026-23445-linux-kernel-igc-page-fault-in-xdp-tx-timestamps-handling2026-07-24 https://junglewise.ai/threats/cve-2026-23444-linux-kernel-memory-leak-in-mac80211-wi-fi-stack2026-06-01 https://junglewise.ai/threats/cve-2026-23443-linux-kernel-use-after-free-in-acpi-processor-driver2026-07-24 https://junglewise.ai/threats/cve-2026-23442-linux-kernel-null-pointer-dereference-in-ipv6-srv6-paths2026-06-01 https://junglewise.ai/threats/cve-2026-23441-linux-kernel-mlx5e-race-condition-in-ipsec-aso-context2026-07-24 https://junglewise.ai/threats/cve-2026-23440-linux-kernel-mlx5e-race-condition-in-ipsec-esn-update2026-07-24 https://junglewise.ai/threats/cve-2026-23439-linux-kernel-null-pointer-dereference-in-udp-tunnel2026-07-14 https://junglewise.ai/threats/cve-2026-23438-linux-kernel-marvell-mvpp2-null-pointer-dereference-in-buffer2026-07-14 https://junglewise.ai/threats/cve-2026-23437-linux-kernel-race-condition-in-net-shaper-hierarchy-access2026-07-24 https://junglewise.ai/threats/cve-2026-23436-linux-kernel-race-condition-in-net-shaper-hierarchy-creation2026-07-24 https://junglewise.ai/threats/cve-2026-23435-linux-kernel-null-pointer-dereference-in-x86-pmu-nmi-handler2026-07-21 https://junglewise.ai/threats/cve-2026-23434-linux-kernel-race-condition-in-mtd-rawnand-driver2026-07-14 https://junglewise.ai/threats/cve-2026-23433-linux-kernel-null-pointer-dereference-in-arm-mpam-bandwidth2026-07-24 https://junglewise.ai/threats/cve-2026-23432-linux-kernel-use-after-free-in-mshv-map-user-memory2026-07-24 https://junglewise.ai/threats/cve-2026-23431-linux-kernel-amlogic-spisg-memory-leak-in-aml-spisg-probe2026-07-24 https://junglewise.ai/threats/cve-2026-23430-linux-kernel-memory-leak-in-vmwgfx-kms-surface-dirty-tracker2026-07-24 https://junglewise.ai/threats/cve-2026-23429-linux-kernel-use-after-free-in-iommu-sva-unbind-device2026-07-24 https://junglewise.ai/threats/cve-2025-68153-canonical-juju-incorrect-authorization-in-resource-handler2026-07-24 https://junglewise.ai/threats/cve-2025-68152-canonical-juju-incorrect-authorization-in-debug-log-endpoint2026-07-24 https://junglewise.ai/threats/cve-2025-64340-prefecthq-fastmcp-command-injection-in-cli-install-on-windows2026-09-26 https://junglewise.ai/threats/cve-2026-5469-casbin-casdoor-ssrf-in-webhook-url-handler2026-07-24 https://junglewise.ai/threats/cve-2026-26477-dokuwiki-denial-of-service-via-directory-traversal-in-media2026-07-24 https://junglewise.ai/threats/cve-2025-59711-kovai-biztalk360-directory-traversal-in-upload-mechanism2026-07-24 https://junglewise.ai/threats/cve-2025-59710-kovai-biztalk360-remote-code-execution-via-arbitrary-dll-loading2026-07-24 https://junglewise.ai/threats/cve-2025-59709-kovai-biztalk360-directory-traversal-and-arbitrary-file-read2026-07-24 https://junglewise.ai/threats/cve-2026-5468-casbin-casdoor-cross-site-scripting-in-dangerouslysetinnerhtml2026-07-24 https://junglewise.ai/threats/cve-2026-28736-mattermost-focalboard-authorization-bypass-in-file-uploads2026-07-24 https://junglewise.ai/threats/cve-2026-25773-mattermost-focalboard-sql-injection-in-category-reorder-api2026-07-24 https://junglewise.ai/threats/cve-2026-23426-linux-kernel-logicvc-drm-device-node-reference-leak2026-07-24 https://junglewise.ai/threats/cve-2026-23425-linux-kernel-kvm-arm64-state-corruption-in-pkvm-id-register2026-07-21 https://junglewise.ai/threats/cve-2026-23424-linux-kernel-amdxdna-buffer-overflow-in-command-payload2026-07-24 https://junglewise.ai/threats/cve-2026-23423-linux-kernel-btrfs-memory-leak-in-btrfs-uring-read-extent2026-07-24 https://junglewise.ai/threats/cve-2026-23422-linux-kernel-dpaa2-switch-interrupt-storm-in-irq-handler2026-07-14 https://junglewise.ai/threats/cve-2026-23421-linux-kernel-memory-leak-in-drm-xe-configfs2026-07-24 https://junglewise.ai/threats/cve-2026-23420-linux-kernel-improper-locking-in-ti-wlcore-wi-fi-driver2026-07-24 https://junglewise.ai/threats/cve-2026-23419-linux-kernel-circular-locking-dependency-in-net-rds2026-07-24 https://junglewise.ai/threats/cve-2026-23418-linux-kernel-intel-xe-driver-memory-leak-in-reg-sr2026-07-24 https://junglewise.ai/threats/cve-2026-27655-zohocorp-manageengine-exchange-reporter-plus-stored-xss-in2026-07-20 https://junglewise.ai/threats/cve-2026-5467-casbin-casdoor-open-redirect-in-oauth-authorization-request2026-07-24 https://junglewise.ai/threats/cve-2026-4108-zohocorp-manageengine-exchange-reporter-plus-stored-xss-in-reports2026-07-24 https://junglewise.ai/threats/cve-2026-4107-zohocorp-manageengine-exchange-reporter-plus-stored-xss-in-reports2026-07-24 https://junglewise.ai/threats/cve-2026-3880-zohocorp-manageengine-exchange-reporter-plus-stored-xss-in-reports2026-07-24 https://junglewise.ai/threats/cve-2026-3879-zohocorp-manageengine-exchange-reporter-plus-stored-xss-in2026-07-24 https://junglewise.ai/threats/cve-2026-28703-zohocorp-manageengine-exchange-reporter-plus-stored-xss-in2026-07-24 https://junglewise.ai/threats/cve-2026-28756-zohocorp-manageengine-exchange-reporter-plus-stored-xss-in2026-07-24 https://junglewise.ai/threats/cve-2026-28754-zohocorp-manageengine-exchange-reporter-plus-stored-xss-in2026-07-24 https://junglewise.ai/threats/cve-2026-5462-wahoo-fitness-systm-app-hard-coded-cryptographic-key-in2026-07-24 https://junglewise.ai/threats/cve-2026-4350-perfmatters-arbitrary-file-deletion-via-path-traversal-in-pmcs2026-07-21 https://junglewise.ai/threats/cve-2025-7024-airbus-tetra-connectivity-server-privilege-escalation-via2026-05-27 https://junglewise.ai/threats/cve-2026-5458-noelse-individuals-pro-app-hard-coded-key-in-buildconfig2026-07-24 https://junglewise.ai/threats/cve-2026-5457-propertyguru-agentnet-singapore-hard-coded-keys-in-android-app2026-07-24 https://junglewise.ai/threats/cve-2026-5456-align-technology-my-invisalign-app-hard-coded-key-in-buildconfig2026-07-24 https://junglewise.ai/threats/cve-2026-5455-dialogue-app-hard-coded-cryptographic-key-in-config-json2026-07-24 https://junglewise.ai/threats/cve-2026-5463-danmcinerney-pymetasploit3-command-injection-in-run-module-with2026-09-26 https://junglewise.ai/threats/cve-2026-5454-grid-organiser-app-hard-coded-cryptographic-key-in-app-json2026-07-24 https://junglewise.ai/threats/cve-2026-5453-rico-so-vantagem-pra-investir-app-hard-coded-key-in2026-07-24 https://junglewise.ai/threats/cve-2026-35549-mariadb-server-denial-of-service-in-caching-sha2-password-plugin2026-06-02 https://junglewise.ai/threats/cve-2026-35545-roundcube-webmail-remote-image-blocking-bypass-in-svg-content2026-07-24 https://junglewise.ai/threats/cve-2026-35544-roundcube-webmail-css-sanitization-bypass-in-html-email2026-07-24 https://junglewise.ai/threats/cve-2026-35543-roundcube-webmail-remote-image-blocking-bypass-in-svg-content2026-07-24 https://junglewise.ai/threats/cve-2026-35542-roundcube-webmail-remote-image-blocking-bypass-in-body-element2026-07-24 https://junglewise.ai/threats/cve-2026-35541-roundcube-webmail-type-confusion-in-password-plugin2026-07-24 https://junglewise.ai/threats/cve-2026-35540-roundcube-webmail-ssrf-via-insufficient-css-sanitization2026-07-24 https://junglewise.ai/threats/cve-2026-35539-roundcube-webmail-xss-in-html-attachment-preview2026-07-24 https://junglewise.ai/threats/cve-2026-35538-roundcube-webmail-imap-injection-in-mail-search2026-07-24 https://junglewise.ai/threats/cve-2026-5452-ucc-campusconnect-app-hard-coded-cryptographic-key-in-buildconfig2026-07-24 https://junglewise.ai/threats/cve-2026-35537-roundcube-webmail-unsafe-deserialization-in-session-handler2026-07-24 https://junglewise.ai/threats/cve-2026-35536-tornado-cookie-attribute-injection-in-requesthandler-set-cookie2026-09-26 https://junglewise.ai/threats/cve-2026-35039-fast-jwt-cachekeybuilder-collision-identity-mixup2026-09-25 https://junglewise.ai/threats/cve-2026-35167-kedro-path-traversal-in-versioned-dataset-loading2026-09-26 https://junglewise.ai/threats/cve-2026-41382-openclaw-discord-voice-ingress-authorization-can-be-bypassed-via2026-09-25 https://junglewise.ai/threats/cve-2026-41341-openclaw-discord-component-interaction-misclassifies-group-dm-as2026-09-25 https://junglewise.ai/threats/cve-2026-41300-openclaw-endpoint-persists-after-trust-decline-leaking-gateway2026-09-25 https://junglewise.ai/threats/cve-2026-41403-openclaw-access-control-bypass-in-diffs-viewer-via-request2026-09-25 https://junglewise.ai/threats/cve-2026-41348-openclaw-discord-slash-commands-bypass-group-dm-channel-allowlist2026-09-25 https://junglewise.ai/threats/cve-2026-41393-openclaw-macos-tailnet-dns-spoofing-credential-exfiltration2026-09-25 https://junglewise.ai/threats/cve-2026-41340-openclaw-auth-boundary-bypass-in-telegram-legacy-allowfrom2026-09-25 https://junglewise.ai/threats/cve-2026-41388-openclaw-tlon-startup-migration-rehydrates-empty-array2026-09-25 https://junglewise.ai/threats/cve-2026-41386-openclaw-bootstrap-setup-codes-privilege-escalation-during2026-09-25 https://junglewise.ai/threats/cve-2026-41353-openclaw-node-browser-proxy-allowprofiles-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-41381-openclaw-discord-voice-manager-bypasses-channel-level-member2026-09-25 https://junglewise.ai/threats/cve-2026-35535-sudo-privilege-escalation-via-fail-open-privilege-drop-in-mailer2026-06-02 https://junglewise.ai/threats/cve-2026-28815-apple-swift-crypto-out-of-bounds-read-in-x-wing-hpke2026-07-24 https://junglewise.ai/threats/cve-2026-41331-openclaw-telegram-audio-preflight-transcription-enables-resource2026-09-25 https://junglewise.ai/threats/cve-2026-41378-openclaw-privilege-escalation-via-unrestricted-node-event2026-09-25 https://junglewise.ai/threats/cve-2026-41296-openclaw-sandbox-escape-via-toctou-race-in-remote-fs-bridge2026-09-25 https://junglewise.ai/threats/cve-2026-41400-openclaw-denial-of-service-in-voice-call-websocket-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-41356-openclaw-gateway-credential-rotation-websocket-session2026-09-25 https://junglewise.ai/threats/cve-2026-41333-openclaw-fake-devicetoken-bypasses-shared-auth-rate-limiting2026-09-25 https://junglewise.ai/threats/cve-2026-41404-openclaw-incomplete-scope-clearing-fix-allows-operator-admin2026-09-25 https://junglewise.ai/threats/cve-2026-41349-openclaw-authorization-bypass-via-config-patch2026-09-25 https://junglewise.ai/threats/cve-2026-41335-openclaw-gateway-control-interface-information-disclosure2026-09-25 https://junglewise.ai/threats/cve-2026-41338-openclaw-sandbox-file-operations-toctou-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-41334-openclaw-image-decompression-bomb-in-pixel-limit-guard2026-09-25 https://junglewise.ai/threats/cve-2026-41373-openclaw-compiler-binary-substitution-via-environment-variable2026-09-25 https://junglewise.ai/threats/cve-2026-41352-openclaw-node-scope-gate-bypass-leading-to-rce2026-09-25 https://junglewise.ai/threats/cve-2026-41351-openclaw-replay-detection-bypass-in-telnyx-webhook-signatures2026-09-25 https://junglewise.ai/threats/cve-2026-41330-openclaw-host-exec-environment-overrides-miss-proxy-tls-docker2026-09-25 https://junglewise.ai/threats/cve-2026-41374-openclaw-discord-audio-transcription-before-member-authorization2026-09-25 https://junglewise.ai/threats/cve-2026-41347-openclaw-http-operator-endpoints-lack-browser-origin-validation2026-09-25 https://junglewise.ai/threats/cve-2026-41405-openclaw-ms-teams-webhook-unauthenticated-resource-exhaustion2026-09-25 https://junglewise.ai/threats/cve-2026-41345-openclaw-authorization-header-leak-in-cross-origin-media2026-09-25 https://junglewise.ai/threats/cve-2026-41397-openclaw-sandbox-escape-via-unrestricted-file-sync-and-symlink2026-09-25 https://junglewise.ai/threats/cve-2026-41396-openclaw-workspace-env-override-of-plugin-trust-root2026-09-25 https://junglewise.ai/threats/cve-2026-35508-milesmcc-shynet-stored-xss-in-urldisplay-and-iconify-filters2026-07-24 https://junglewise.ai/threats/cve-2026-35507-milesmcc-shynet-host-header-injection-in-password-reset-flow2026-07-24 https://junglewise.ai/threats/cve-2026-33107-microsoft-azure-databricks-ssrf-privilege-escalation2026-07-24 https://junglewise.ai/threats/cve-2026-33105-microsoft-azure-kubernetes-service-improper-authorization2026-07-24 https://junglewise.ai/threats/cve-2026-32213-microsoft-azure-ai-foundry-privilege-escalation2026-07-24 https://junglewise.ai/threats/cve-2026-32211-microsoft-azure-mcp-server-missing-authentication-in-azure-web2026-07-24 https://junglewise.ai/threats/cve-2026-32173-microsoft-azure-sre-agent-improper-authentication-in-signalr-hub2026-07-24 https://junglewise.ai/threats/cve-2026-26135-microsoft-azure-custom-locations-resource-provider-ssrf-privilege2026-07-24 https://junglewise.ai/threats/cve-2022-4986-hirschmann-eaglesdv-denial-of-service-in-tls-session-establishment2026-06-02 https://junglewise.ai/threats/openclaw-approval-bypass-via-environment-variable-normalization-93210ece2026-05-10 https://junglewise.ai/threats/openclaw-environment-variable-normalization-approval-bypass-298f425b2026-09-25 https://junglewise.ai/threats/openclaw-preflight-validation-bypass-in-script-execution-9829b68a2026-09-25 https://junglewise.ai/threats/cve-2026-41377-openclaw-fail-open-in-plugin-installation-security-scan2026-09-25 https://junglewise.ai/threats/cve-2026-41302-openclaw-ssrf-via-unguarded-fetch-in-marketplace-plugin-download2026-09-25 https://junglewise.ai/threats/cve-2026-35467-cert-cc-cveclient-insufficient-protection-of-credentials-in2026-06-03 https://junglewise.ai/threats/cve-2026-35466-cert-cc-cveclient-xss-in-cveinterface-js2026-06-03 https://junglewise.ai/threats/cve-2026-30252-interzen-zenshare-suite-reflected-xss-in-login-php2026-07-24 https://junglewise.ai/threats/cve-2026-30251-interzen-zenshare-suite-xss-in-login-newpwd-php2026-07-24 https://junglewise.ai/threats/cve-2025-15620-hirschmann-hios-switch-platform-denial-of-service-in-web2026-06-05 https://junglewise.ai/threats/cve-2024-14033-hirschmann-eaglesdv-and-hilcos-denial-of-service-in-tls-and-web2026-07-24 https://junglewise.ai/threats/cve-2026-41357-openclaw-unsanitized-environment-variable-leakage-in-ssh-sandbox2026-09-25 https://junglewise.ai/threats/cve-2026-41343-openclaw-line-webhook-handler-denial-of-service-via-insufficient2026-09-25 https://junglewise.ai/threats/cve-2026-41376-openclaw-thread-root-and-reply-context-allowlist-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-41336-openclaw-arbitrary-code-execution-via-workspace-env-override2026-09-25 https://junglewise.ai/threats/cve-2026-41406-openclaw-sender-allowlist-bypass-via-thread-history-and-quoted2026-09-25 https://junglewise.ai/threats/cve-2026-41329-openclaw-heartbeat-context-inheritance-bypasses-sandbox-via2026-09-25 https://junglewise.ai/threats/cve-2026-41402-openclaw-webhook-replay-cache-cross-target-scope-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-41385-openclaw-nostr-privatekey-config-redaction-bypass-leaks-signing2026-09-25 https://junglewise.ai/threats/cve-2026-41391-openclaw-environment-variable-bypass-in-package-index-handling2026-09-25 https://junglewise.ai/threats/cve-2026-41337-openclaw-plivo-callback-origin-mutation-in-voice-call-replay2026-09-25 https://junglewise.ai/threats/cve-2026-41394-openclaw-unauthenticated-plugin-auth-routes-privilege-escalation2026-09-25 https://junglewise.ai/threats/cve-2026-34950-nearform-fast-jwt-algorithm-confusion-via-whitespace-prefixed-rsa2026-09-25 https://junglewise.ai/threats/cve-2026-5420-shinrays-games-goods-triple-app-hard-coded-cryptographic-key2026-07-24 https://junglewise.ai/threats/cve-2026-35383-bentley-systems-itwin-platform-sensitive-information-disclosure2026-07-24 https://junglewise.ai/threats/cve-2026-35053-oneuptime-missing-authentication-in-worker-manualapi-workflow2026-07-24 https://junglewise.ai/threats/cve-2026-34932-hoppscotch-stored-xss-in-mock-server-responses2026-07-24 https://junglewise.ai/threats/cve-2026-34931-hoppscotch-open-redirect-and-token-exfiltration-in-device-login2026-07-24 https://junglewise.ai/threats/cve-2026-34848-hoppscotch-stored-xss-in-team-member-overflow-tooltip2026-07-24 https://junglewise.ai/threats/cve-2026-34847-hoppscotch-open-redirect-in-enter-page2026-07-24 https://junglewise.ai/threats/cve-2026-34840-oneuptime-saml-sso-authentication-bypass-via-identity-injection2026-07-24 https://junglewise.ai/threats/cve-2026-34838-intermesh-group-office-insecure-deserialization-in2026-07-24 https://junglewise.ai/threats/cve-2026-34834-bulwark-webmail-authentication-bypass-in-verifyidentity2026-07-24 https://junglewise.ai/threats/cve-2026-34833-bulwark-webmail-plaintext-password-exposure-in-auth-session-api2026-07-24 https://junglewise.ai/threats/cve-2026-34832-erudika-scoold-idor-in-feedback-deletion2026-07-24 https://junglewise.ai/threats/cve-2026-34825-nocobase-sql-injection-in-workflow-sql-node2026-09-25 https://junglewise.ai/threats/cve-2026-34762-ella-networks-ella-core-audit-log-falsification-in-subscriber-api2026-07-24 https://junglewise.ai/threats/cve-2026-34761-ella-networks-ella-core-null-pointer-dereference-in-ngap-handover2026-07-24 https://junglewise.ai/threats/cve-2026-34760-vllm-project-vllm-improper-input-validation-in-audio-downmixing2026-09-26 https://junglewise.ai/threats/cve-2024-14034-hirschmann-hieos-auth-bypass-in-http-management-module2026-07-24 https://junglewise.ai/threats/cve-2023-7343-hirschmann-industrial-hivision-arbitrary-code-execution-in-project2026-07-24 https://junglewise.ai/threats/cve-2026-5429-aws-kiro-ide-arbitrary-code-execution-in-kiro-agent-webview2026-07-24 https://junglewise.ai/threats/cve-2026-5418-appsmith-ssrf-in-webclientutils-via-improper-host-validation2026-07-24 https://junglewise.ai/threats/cve-2026-5417-dataease-sqlbot-ssrf-in-elasticsearch-handler2026-07-24 https://junglewise.ai/threats/cve-2026-34759-oneuptime-missing-authorization-in-notification-api-endpoints2026-07-24 https://junglewise.ai/threats/cve-2026-34758-oneuptime-missing-authentication-in-notification-and-phone-number2026-07-24 https://junglewise.ai/threats/cve-2026-34752-haraka-denial-of-service-via-proto-email-header2026-09-25 https://junglewise.ai/threats/cve-2026-34745-shaneisrael-fireshare-path-traversal-in-public-upload-api2026-07-24 https://junglewise.ai/threats/cve-2026-34743-tukaani-xz-utils-heap-buffer-overflow-in-lzma-index-append2026-07-22 https://junglewise.ai/threats/cve-2026-34742-modelcontextprotocol-go-sdk-dns-rebinding-in-http-handlers2026-07-21 https://junglewise.ai/threats/cve-2026-34736-open-edx-platform-authentication-bypass-via-activation-key2026-07-24 https://junglewise.ai/threats/cve-2026-34735-hytalemodding-wiki-remote-code-execution-via-file-upload-bypass2026-07-24 https://junglewise.ai/threats/cve-2026-34730-copier-path-traversal-and-local-file-disclosure-in-external-data2026-09-26 https://junglewise.ai/threats/cve-2026-34726-copier-path-traversal-via-subdirectory-setting2026-09-26 https://junglewise.ai/threats/cve-2026-34581-patrickhener-goshs-authentication-bypass-via-share-token2026-07-24 https://junglewise.ai/threats/cve-2026-34426-openclaw-approval-bypass-via-environment-variable-normalization2026-09-25 https://junglewise.ai/threats/cve-2026-34425-openclaw-validation-bypass-in-shell-bleed-protection2026-09-25 https://junglewise.ai/threats/cve-2025-43264-apple-macos-memory-corruption-in-image-processing2026-07-24 https://junglewise.ai/threats/cve-2025-43257-apple-macos-sequoia-sandbox-escape-via-improper-symlink-handling2026-07-24 https://junglewise.ai/threats/cve-2025-43238-apple-macos-integer-overflow-system-termination2026-07-24 https://junglewise.ai/threats/cve-2025-43236-apple-macos-type-confusion-memory-handling-issue2026-07-24 https://junglewise.ai/threats/cve-2025-43219-apple-macos-sequoia-memory-corruption-in-image-processing2026-07-20 https://junglewise.ai/threats/cve-2025-43210-apple-multiple-operating-systems-out-of-bounds-access-in-media2026-07-24 https://junglewise.ai/threats/cve-2025-43202-apple-ios-and-macos-memory-corruption-in-file-processing2026-07-20 https://junglewise.ai/threats/cve-2024-44303-apple-macos-sequoia-improper-access-control-in-file-system2026-07-24 https://junglewise.ai/threats/cve-2024-44286-apple-macos-sequoia-keyboard-input-bypass-on-locked-device2026-07-24 https://junglewise.ai/threats/cve-2024-44250-apple-macos-sequoia-privilege-escalation-in-sandbox2026-07-24 https://junglewise.ai/threats/cve-2024-44219-apple-macos-sequoia-improper-access-control-in-permissions2026-07-24 https://junglewise.ai/threats/cve-2024-40858-apple-macos-sequoia-improper-access-control-in-contacts2026-07-24 https://junglewise.ai/threats/cve-2024-40849-apple-macos-race-condition-in-sandbox-isolation2026-07-24 https://junglewise.ai/threats/cve-2023-7342-belden-hirschmann-hisecos-privilege-escalation-in-web-server2026-07-24 https://junglewise.ai/threats/lightdash-lightdash-cli-supply-chain-attack-via-compromised-axios-05be2e702026-09-25 https://junglewise.ai/threats/cve-2026-34841-axios-npm-supply-chain-attack-via-usebruno-cli2026-09-25 https://junglewise.ai/threats/cve-2026-5414-newgen-omnidocs-resource-injection-in-webapirequestredirection2026-07-24 https://junglewise.ai/threats/cve-2026-5413-newgen-omnidocs-information-disclosure-in-getwebapiconfiguration2026-07-24 https://junglewise.ai/threats/cve-2026-5370-krayin-laravel-crm-stored-xss-in-activities-and-notes-modules2026-07-24 https://junglewise.ai/threats/cve-2026-5368-projectworlds-car-rental-project-sql-injection-in-login-php2026-07-24 https://junglewise.ai/threats/cve-2026-35414-openbsd-openssh-incorrect-principal-matching-in-sshd-via2026-07-24 https://junglewise.ai/threats/cve-2026-34835-rack-rack-request-host-allowlist-bypass-via-host-header-poisoning2026-07-24 https://junglewise.ai/threats/cve-2026-34828-knadh-listmonk-insufficient-session-expiration-after-password2026-07-24 https://junglewise.ai/threats/cve-2026-34827-rack-algorithmic-complexity-denial-of-service-in-multipart-parser2026-06-30 https://junglewise.ai/threats/cve-2026-34725-dbgate-stored-xss-and-rce-via-unsanitized-svg-icons2026-09-25 https://junglewise.ai/threats/cve-2026-34717-openproject-sql-injection-in-cost-reporting-module2026-07-24 https://junglewise.ai/threats/cve-2026-34715-vshakitskiy-ewe-http-response-splitting-in-encoder2026-07-24 https://junglewise.ai/threats/cve-2026-34610-leancrypto-integer-truncation-in-lc-x509-extract-name-segment2026-07-24 https://junglewise.ai/threats/cve-2026-34608-nanomq-mqtt-broker-out-of-bounds-read-in-webhook-inproc-c2026-07-24 https://junglewise.ai/threats/cve-2026-34606-frappe-lms-stored-xss-in-lesson-content2026-07-24 https://junglewise.ai/threats/cve-2026-34601-xmldom-xml-injection-via-unsafe-cdata-serialization2026-09-25 https://junglewise.ai/threats/cve-2026-34598-yeswiki-stored-xss-in-form-title-field2026-07-24 https://junglewise.ai/threats/cve-2026-34593-ash-framework-denial-of-service-via-atom-exhaustion-in-module2026-07-24 https://junglewise.ai/threats/cve-2026-34591-python-poetry-poetry-path-traversal-in-wheel-installer2026-09-26 https://junglewise.ai/threats/cve-2026-34590-gitroomhq-postiz-ssrf-in-webhook-creation-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-34584-knadh-listmonk-authorization-bypass-in-list-permission-checks2026-07-24 https://junglewise.ai/threats/cve-2026-34577-postiz-ssrf-in-publiccontroller-stream-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-34576-postiz-ssrf-in-upload-from-url-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-34526-sillytavern-ssrf-via-incomplete-ip-validation-in-search-endpoint2026-09-25 https://junglewise.ai/threats/cve-2026-34524-sillytavern-path-traversal-in-chat-endpoints2026-09-25 https://junglewise.ai/threats/cve-2026-34523-sillytavern-path-traversal-in-static-file-route-handler2026-09-25 https://junglewise.ai/threats/cve-2026-34522-sillytavern-path-traversal-in-chat-import-api2026-09-25 https://junglewise.ai/threats/cve-2026-34124-tp-link-tapo-c520ws-buffer-overflow-in-http-path-parsing2026-07-24 https://junglewise.ai/threats/cve-2026-34122-tp-link-tapo-c520ws-stack-overflow-in-configuration-handling2026-07-24 https://junglewise.ai/threats/cve-2026-34121-tp-link-tapo-c520ws-authentication-bypass-in-ds-configuration2026-07-24 https://junglewise.ai/threats/cve-2026-34120-tp-link-tapo-c520ws-heap-overflow-in-video-stream-parsing2026-07-24 https://junglewise.ai/threats/cve-2026-34119-tp-link-tapo-c520ws-heap-overflow-in-http-parsing-loop2026-07-24 https://junglewise.ai/threats/cve-2026-34118-tp-link-tapo-c520ws-heap-overflow-in-http-post-parsing2026-07-24 https://junglewise.ai/threats/cve-2026-33271-acronis-true-image-local-privilege-escalation-via-insecure-folder2026-07-24 https://junglewise.ai/threats/cve-2026-32762-rack-interpretation-conflict-in-forwarded-header-parsing2026-07-24 https://junglewise.ai/threats/cve-2026-28728-acronis-true-image-dll-hijacking-privilege-escalation2026-07-24 https://junglewise.ai/threats/cve-2026-27774-acronis-true-image-dll-hijacking-privilege-escalation2026-07-24 https://junglewise.ai/threats/cve-2026-26962-rack-crlf-injection-in-rack-multipart-parser2026-07-24 https://junglewise.ai/threats/cve-2026-5360-free5gc-type-confusion-in-aper-component2026-07-24 https://junglewise.ai/threats/cve-2026-5355-trendnet-tew-657brm-command-injection-in-setup-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-5354-trendnet-tew-657brm-command-injection-in-setup-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-5353-trendnet-tew-657brm-command-injection-in-setup-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-5352-trendnet-tew-657brm-os-command-injection-in-setup-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-35388-openssh-connection-multiplexing-confirmation-bypass-in-proxy-mode2026-07-24 https://junglewise.ai/threats/cve-2026-35387-openssh-unintended-ecdsa-algorithm-acceptance-in-sshd-config2026-07-24 https://junglewise.ai/threats/cve-2026-35386-openssh-command-injection-via-shell-metacharacters-in-username2026-07-07 https://junglewise.ai/threats/cve-2026-35385-openssh-scp-improper-permission-preservation-in-legacy-mode2026-06-30 https://junglewise.ai/threats/cve-2026-35038-signalk-signalk-server-arbitrary-prototype-read-in2026-09-25 https://junglewise.ai/threats/cve-2026-34877-mbed-tls-memory-corruption-via-insecure-deserialization-of-ssl2026-06-05 https://junglewise.ai/threats/cve-2026-34831-rack-incorrect-content-length-calculation-in-rack-files-error2026-07-24 https://junglewise.ai/threats/cve-2026-34830-rack-rack-regular-expression-injection-in-rack-sendfile2026-07-24 https://junglewise.ai/threats/cve-2026-34829-rack-uncontrolled-resource-consumption-in-rack-multipart-parser2026-06-30 https://junglewise.ai/threats/cve-2026-34826-rack-denial-of-service-via-excessive-overlapping-http-byte-ranges2026-07-24 https://junglewise.ai/threats/cve-2026-34786-rack-rack-static-security-header-bypass-via-url-encoded-paths2026-07-24 https://junglewise.ai/threats/cve-2026-34785-rack-rack-static-information-disclosure-via-partial-string2026-06-30 https://junglewise.ai/threats/cve-2026-34763-rack-rack-directory-information-disclosure-via-unescaped-regex2026-07-24 https://junglewise.ai/threats/cve-2026-34230-rack-inefficient-algorithmic-complexity-in-rack-utils-select-best2026-07-24 https://junglewise.ai/threats/cve-2026-34083-signal-k-server-oauth-code-theft-via-unvalidated-host-header-in2026-09-25 https://junglewise.ai/threats/cve-2026-33951-signalk-signal-k-server-authentication-bypass-in-sourcepriorities2026-09-25 https://junglewise.ai/threats/cve-2026-33950-signalk-signal-k-server-privilege-escalation-in-enablesecurity2026-09-25 https://junglewise.ai/threats/cve-2026-30603-qianniao-qn-l23pa0904-root-code-execution-via-sd-card-script2026-07-05 https://junglewise.ai/threats/cve-2026-26961-rack-interpretation-conflict-in-multipart-parser-boundary2026-07-24 https://junglewise.ai/threats/cve-2026-26895-osticket-user-enumeration-via-timing-side-channel-in-pwreset-php2026-07-05 https://junglewise.ai/threats/cve-2026-25212-percona-pmm-privilege-escalation-to-rce-via-add-data-source2026-07-24 https://junglewise.ai/threats/cve-2025-65114-apache-traffic-server-request-smuggling-in-chunked-messages2026-07-24 https://junglewise.ai/threats/cve-2025-58136-apache-traffic-server-denial-of-service-in-post-request-handling2026-07-24 https://junglewise.ai/threats/cve-2026-5351-trendnet-tew-657brm-os-command-injection-in-setup-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-5350-trendnet-tew-657brm-stack-overflow-in-setup-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-5349-trendnet-tew-657brm-stack-overflow-in-setup-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-34876-mbed-tls-out-of-bounds-read-in-mbedtls-ccm-finish2026-06-05 https://junglewise.ai/threats/cve-2026-33746-convoypanel-convoy-authentication-bypass-via-jwt-signature2026-07-24 https://junglewise.ai/threats/cve-2026-33691-owasp-core-rule-set-bypass-via-filename-whitespace-padding2026-07-24 https://junglewise.ai/threats/cve-2026-30332-balena-etcher-privilege-escalation-in-windows-temporary-file2026-07-24 https://junglewise.ai/threats/cve-2026-5346-huimeicloud-hm-editor-ssrf-in-image-to-base64-endpoint2026-07-24 https://junglewise.ai/threats/cve-2026-5344-textpattern-cms-path-traversal-in-xml-rpc-mt-uploadimage2026-07-24 https://junglewise.ai/threats/cve-2026-5342-libraw-out-of-bounds-read-in-nikon-load-padded-packed-raw2026-07-24 https://junglewise.ai/threats/cve-2026-5339-tenda-g103-command-injection-in-gpon-lua-action-set-net-settings2026-07-24 https://junglewise.ai/threats/cve-2026-35002-agno-eval-injection-in-model-execution-component2026-09-26 https://junglewise.ai/threats/cve-2026-34974-phpmyfaq-stored-xss-and-privilege-escalation-in-svg-sanitizer2026-07-24 https://junglewise.ai/threats/cve-2026-34973-phpmyfaq-sql-like-wildcard-injection-in-search-php2026-07-24 https://junglewise.ai/threats/cve-2026-34823-endian-firewall-stored-xss-in-remark-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-34822-endian-firewall-stored-xss-in-certificate-management-interface2026-07-24 https://junglewise.ai/threats/cve-2026-34821-endian-firewall-stored-xss-in-vpn-user-remark-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-34820-endian-firewall-stored-xss-in-ipsec-remark-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-34819-endian-firewall-stored-xss-in-openvpnclient-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-34818-endian-firewall-stored-xss-in-dnsmasq-local-domains-remark2026-07-24 https://junglewise.ai/threats/cve-2026-34817-endian-firewall-stored-xss-in-smtprouting-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-34816-endian-firewall-stored-xss-in-smtp-scan-domain-routing2026-07-24 https://junglewise.ai/threats/cve-2026-34815-endian-firewall-stored-xss-in-smtpdomains-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-34814-endian-firewall-stored-xss-in-proxygroup-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-34813-endian-firewall-stored-xss-in-proxyuser-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-34812-endian-firewall-stored-xss-in-proxypolicy-cgi-mimetypes-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-34811-endian-firewall-stored-xss-in-xtaccess-cgi-remark-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-34810-endian-firewall-stored-xss-in-vpnfw-cgi-remark-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-34809-endian-firewall-stored-xss-in-zonefw-cgi-remark-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-34808-endian-firewall-stored-xss-in-outgoingfw-cgi-remark-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-34807-endian-firewall-stored-xss-in-incoming-cgi-remark-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-34806-endian-firewall-stored-xss-in-snat-cgi-remark-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-34805-endian-firewall-stored-xss-in-dnat-cgi-remark-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-34804-endian-firewall-stored-xss-in-qos-rules-dscp-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-34803-endian-firewall-stored-xss-in-qos-classes-management-interface2026-07-24 https://junglewise.ai/threats/cve-2026-34802-endian-firewall-stored-xss-in-salearn-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-34801-endian-firewall-stored-xss-in-dhcp-fixed-leases-remark-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-34800-endian-firewall-stored-xss-in-uplinkeditor-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-34799-endian-firewall-stored-xss-in-dnsmasq-hosts-remark-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-34798-endian-firewall-stored-xss-in-routing-cgi-remark-parameter2026-07-24 https://junglewise.ai/threats/cve-2026-34797-endian-firewall-os-command-injection-in-logs-smtp-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-34796-endian-firewall-os-command-injection-in-logs-openvpn-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-34795-endian-firewall-os-command-injection-in-logs-log-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-34794-endian-firewall-os-command-injection-in-logs-ids-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-34793-endian-firewall-os-command-injection-in-logs-firewall-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-34792-endian-firewall-os-command-injection-in-logs-clamav-cgi2026-07-24 https://junglewise.ai/threats/cve-2026-32871-prefecthq-fastmcp-path-traversal-and-ssrf-in-openapiprovider2026-06-30 https://junglewise.ai/threats/cve-2026-3692-progress-flowmon-os-command-injection-in-report-generation2026-07-06 https://junglewise.ai/threats/cve-2026-2737-progress-flowmon-cross-site-scripting-in-web-interface2026-07-06 https://junglewise.ai/threats/cve-2026-4636-keycloak-uma-policy-bypass-in-protection-api2026-06-30 https://junglewise.ai/threats/cve-2026-4634-keycloak-denial-of-service-via-oidc-scope-parameter2026-06-30 https://junglewise.ai/threats/cve-2026-4282-keycloak-privilege-escalation-via-forged-authorization-codes-in2026-06-30 https://junglewise.ai/threats/cve-2026-3872-keycloak-redirect-uri-validation-bypass-via-wildcard-path2026-06-30 https://junglewise.ai/threats/cve-2026-5327-fast-filesystem-mcp-command-injection-in-handlegetdiskusage2026-09-25 https://junglewise.ai/threats/cve-2026-23414-linux-kernel-memory-leak-in-tls-asynchronous-decryption2026-07-14 https://junglewise.ai/threats/cve-2026-32145-gleam-wisp-denial-of-service-via-multipart-form-parsing-bypass2026-05-22 https://junglewise.ai/threats/cve-2026-5323-a11y-mcp-server-side-request-forgery-in-a11yserver2026-09-25 https://junglewise.ai/threats/cve-2026-3502-trueconf-client-download-of-code-without-integrity-check2026-05-15 https://junglewise.ai/threats/mcp-handler-tool-response-leak-across-concurrent-client-sessions-1c688c652026-09-25 https://junglewise.ai/threats/cve-2021-23337-lodash-command-injection-in-template-function2026-09-25 https://junglewise.ai/threats/onnx-toctou-arbitrary-file-write-in-save-external-data-d7657f942026-06-08 https://junglewise.ai/threats/cve-2026-34969-nhost-leaks-refresh-tokens-via-url-query-parameter-in-oauth2026-05-11 https://junglewise.ai/threats/cve-2026-34940-kubeai-os-command-injection-in-ollama-engine-startup-probe2026-05-11 https://junglewise.ai/threats/stablelib-ed25519-signature-malleability-in-verify-0c3e40132026-09-25 https://junglewise.ai/threats/cve-2026-34572-ci4ms-account-deactivation-module-grants-full-persistent2026-05-11 https://junglewise.ai/threats/cve-2026-34563-ci4ms-backup-management-full-account-takeover-for-all-roles2026-05-11 https://junglewise.ai/threats/cve-2026-34561-ci4ms-system-settings-social-media-management-full-platform2026-05-11 https://junglewise.ai/threats/cve-2026-34520-aio-libs-aiohttp-header-injection-in-llhttp-c-parser2026-09-26 https://junglewise.ai/threats/cve-2026-34750-payload-insufficient-filename-validation-in-client-upload-signed2026-09-25 https://junglewise.ai/threats/cve-2026-34749-payload-csrf-protection-bypass-in-authentication-flow2026-09-25 https://junglewise.ai/threats/cve-2026-34746-payload-cms-authenticated-ssrf-in-upload-functionality2026-09-25 https://junglewise.ai/threats/cve-2026-34748-payload-payloadcms-next-stored-xss-in-admin-panel2026-09-25 https://junglewise.ai/threats/cve-2026-34514-aiohttp-crlf-injection-in-multipart-content-type-header2026-09-26 https://junglewise.ai/threats/cve-2026-34747-payload-sql-injection-via-query-handling2026-09-25 https://junglewise.ai/threats/cve-2026-34873-mbed-tls-client-impersonation-in-tls-1-3-session-resumption2026-06-05 https://junglewise.ai/threats/cve-2026-34545-academysoftwarefoundation-openexr-heap-overflow-in-htj2k-decoder2026-06-30 https://junglewise.ai/threats/cve-2026-34531-flask-httpauth-improper-authentication-via-empty-tokens2026-09-26 https://junglewise.ai/threats/cve-2026-34447-onnx-symlink-traversal-in-external-data-loading2026-09-26 https://junglewise.ai/threats/cve-2026-74879-openssl-encrypt-information-disclosure-in-readiness-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-35000-changedetection-io-arbitrary-file-read-in-safexpath3parser2026-07-14 https://junglewise.ai/threats/cve-2026-34874-mbed-tls-null-pointer-dereference-in-x-509-distinguished-name2026-06-05 https://junglewise.ai/threats/cve-2026-34871-arm-mbed-tls-predictable-seed-in-prng-on-linux2026-06-05 https://junglewise.ai/threats/cve-2026-25835-arm-mbed-tls-and-tf-psa-crypto-prng-state-cloning-vulnerability2026-06-01 https://junglewise.ai/threats/cve-2026-25833-mbed-tls-buffer-underflow-in-x509-inet-pton-ipv62026-06-05 https://junglewise.ai/threats/cve-2026-2265-replicator-insecure-deserialization-leading-to-rce2026-09-25 https://junglewise.ai/threats/cve-2026-5199-temporal-server-authorization-bypass-in-batch-workflow-operations2026-07-21 https://junglewise.ai/threats/cve-2026-34875-mbed-tls-buffer-overflow-in-ffdh-public-key-export2026-06-05 https://junglewise.ai/threats/cve-2026-34072-fccview-cronmaster-authentication-bypass-in-middleware2026-06-02 https://junglewise.ai/threats/cve-2026-27489-onnx-path-traversal-via-symlink-in-external-data-handling2026-09-26 https://junglewise.ai/threats/cve-2026-25834-mbed-tls-algorithm-downgrade-in-tls-1-2-client2026-06-05 https://junglewise.ai/threats/cve-2026-20174-cisco-nexus-dashboard-insights-arbitrary-file-write-in-metadata2026-07-01 https://junglewise.ai/threats/cve-2026-20160-cisco-smart-software-manager-on-prem-command-execution-via2026-07-01 https://junglewise.ai/threats/cve-2026-20155-cisco-epnm-improper-authorization-in-rest-api2026-07-02 https://junglewise.ai/threats/cve-2026-20151-cisco-smart-software-manager-on-prem-privilege-escalation-in-web2026-07-08 https://junglewise.ai/threats/cve-2026-20042-cisco-nexus-dashboard-arbitrary-command-execution-in2026-07-08 https://junglewise.ai/threats/cve-2025-67806-the-login-mechanism-of-sage-dpw-2021-06-004-displays-distinct2026-05-10 https://junglewise.ai/threats/cve-2025-67805-a-non-default-configuration-in-sage-dpw-2025-06-004-allows2026-05-10 https://junglewise.ai/threats/cve-2026-34751-payload-password-recovery-parameter-injection-account-takeover2026-09-25 https://junglewise.ai/threats/cve-2026-30526-a-reflected-cross-site-scripting-xss-vulnerability-exists-in2026-05-10 https://junglewise.ai/threats/cve-2026-29598-ddsn-interactive-acora-cms-stored-xss-in-user-management2026-07-05 https://junglewise.ai/threats/cve-2026-35093-freedesktop-libinput-code-injection-via-lua-bytecode-plugins2026-06-30 https://junglewise.ai/threats/cve-2026-35092-corosync-integer-overflow-in-join-message-validation2026-05-19 https://junglewise.ai/threats/cve-2026-35091-corosync-cluster-engine-out-of-bounds-read-in-membership-commit2026-05-19 https://junglewise.ai/threats/cve-2026-34999-volcengine-openviking-missing-authentication-in-bot-proxy-router2026-07-14 https://junglewise.ai/threats/cve-2026-34430-bytedance-deerflow-sandbox-escape-in-localsandboxprovider-bash2026-07-14 https://junglewise.ai/threats/cve-2026-23401-linux-kernel-kvm-stale-spte-in-x86-mmu2026-06-30 https://junglewise.ai/threats/cve-2026-28265-dell-powerstore-path-traversal-in-service-user2026-09-25 https://junglewise.ai/threats/cve-2026-5281-google-chrome-use-after-free-in-dawn2026-07-24 https://junglewise.ai/threats/cve-2026-5273-google-chrome-use-after-free-in-css2026-06-01 https://junglewise.ai/threats/cve-2026-5272-google-chrome-heap-buffer-overflow-in-gpu2026-05-28 https://junglewise.ai/threats/cve-2026-4374-rti-connext-professional-xxe-in-multiple-services2026-06-17 https://junglewise.ai/threats/cve-2026-2394-rti-connext-professional-buffer-over-read-in-core-libraries2026-06-17 https://junglewise.ai/threats/cve-2026-34604-tinacms-graphql-filesystembridge-path-traversal-via-symlinks2026-09-25 https://junglewise.ai/threats/cve-2026-34603-tina-cms-graphql-media-endpoints-path-traversal-via-symlinks2026-09-25 https://junglewise.ai/threats/cve-2026-41294-openclaw-has-a-cwd-env-environment-variable-injection-which2026-09-25 https://junglewise.ai/threats/cve-2026-41380-openclaw-gateway-exec-allow-always-over-trusts-positional-carrier2026-09-25