https://junglewise.ai/threats/cve-2026-56744-bsv-wallet-toolbox-storage-output-validation-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-96883-aws-pgcollection-type-confusion-remote-code-execution2026-09-25 https://junglewise.ai/threats/cve-2026-93289-eufy-omni-c20-and-x10-pro-os-command-injection-and-certificate2026-09-24 https://junglewise.ai/threats/cve-2026-84399-botslab-g980h-dashcam-multiple-authentication-and-authorization2026-09-24 https://junglewise.ai/threats/cve-2026-5430-wso2-api-control-plane-path-traversal-vulnerability2026-09-24 https://junglewise.ai/threats/cve-2026-71362-adobe-commerce-and-magento-incorrect-authorization2026-09-24 https://junglewise.ai/threats/third-party-ics-integrators-supply-chain-risk-to-critical-90b78f9a2026-09-24 https://junglewise.ai/threats/cve-2026-18655-aws-amazon-mq-mcp-server-credential-disclosure-via-prompt2026-09-25 https://junglewise.ai/threats/cve-2026-94384-amazon-connect-salesforce-lambda-authorization-bypass-in2026-09-25 https://junglewise.ai/threats/cve-2026-56682-9router-login-brute-force-lockout-bypass-via-spoofable-header2026-09-25 https://junglewise.ai/threats/cve-2026-58272-sync-in-server-username-enumeration-via-timing-side-channel-in2026-09-25 https://junglewise.ai/threats/cve-2026-58271-sync-in-server-totp-brute-force-in-sync-registration2026-09-24 https://junglewise.ai/threats/cve-2026-89207-siemens-wtv676-and-wtv776-denial-of-service-via-input-validation2026-09-24 https://junglewise.ai/threats/cve-2026-50093-siemens-siveillance-control-arbitrary-file-upload-in-ois-web2026-09-24 https://junglewise.ai/threats/cve-2026-67367-siemens-simove-fleetmanager-and-siplant-path-traversal2026-09-24 https://junglewise.ai/threats/cve-2026-87121-lwip-tcp-ip-stack-mqtt-client-application-out-of-bounds-write2026-09-24 https://junglewise.ai/threats/cve-2026-34223-siemens-desigo-cc-code-injection-in-graphics-documents2026-09-24 https://junglewise.ai/threats/cve-2026-88020-openplc-runtime-v3-cross-site-scripting-in-web-interface2026-09-24 https://junglewise.ai/threats/cve-2026-91018-lwip-double-free-vulnerability2026-09-24 https://junglewise.ai/threats/cve-2026-94127-f5-big-ip-apm-heap-based-buffer-overflow2026-09-24 https://junglewise.ai/threats/cve-2026-93952-arista-velocloud-orchestrator-improper-input-validation2026-09-24 https://junglewise.ai/threats/cve-2026-93616-check-point-multiple-products-path-traversal-vulnerability2026-09-24 https://junglewise.ai/threats/cve-2026-85102-check-point-security-gateway-and-spark-firewall-improper2026-09-24 https://junglewise.ai/threats/cve-2026-91127-file-viewer-dom-xss-via-unsafe-hyperlink-schemes-in-legacy-doc2026-09-25 https://junglewise.ai/threats/cve-2026-84992-md-editor-v3-cross-site-scripting-in-code-fence-rendering2026-09-25 https://junglewise.ai/threats/cve-2026-92943-aws-iot-device-sdk-for-python-certificate-host-mismatch2026-09-25 https://junglewise.ai/threats/cve-2026-13348-schneider-electric-powerchute-serial-shutdown-improper2026-09-24 https://junglewise.ai/threats/cve-2025-6625-schneider-electric-modicon-m340-improper-input-validation-in-ftp2026-09-24 https://junglewise.ai/threats/cve-2026-15688-mitsubishi-electric-gx-works3-authentication-bypass-in-block2026-09-24 https://junglewise.ai/threats/cve-2026-86520-bransys-eld-hardcoded-credentials-and-cleartext-transmission2026-09-24 https://junglewise.ai/threats/cve-2024-4872-hitachi-energy-facts-control-platform-multiple-vulnerabilities-in2026-09-24 https://junglewise.ai/threats/cve-2026-13336-schneider-electric-netbotz-5-750-755-os-command-injection-and-sql2026-09-24 https://junglewise.ai/threats/cve-2026-86831-amazon-eks-aws-network-policy-agent-cross-namespace-networkpolicy2026-09-25 https://junglewise.ai/threats/cisa-cyber-decoys-guidance-for-detection-and-response-4396c45f2026-09-24 https://junglewise.ai/threats/cve-2026-58704-google-pixel-improper-authorization-in-cellular-modem2026-09-24 https://junglewise.ai/threats/cve-2026-76460-cisco-identity-services-engine-incorrect-privileged-api-use2026-09-24 https://junglewise.ai/threats/cve-2026-87886-acronis-backup-privilege-escalation-in-cpanel-whm-and-plesk2026-09-24 https://junglewise.ai/threats/cve-2026-61559-zereight-mcp-gitlab-server-side-request-forgery-in-dynamic-api2026-09-25 https://junglewise.ai/threats/cve-2026-81861-schneider-electric-scadapack-x70-insufficiently-protected2026-09-24 https://junglewise.ai/threats/cve-2026-86830-aws-team-privilege-escalation-in-iam-identity-center2026-09-25 https://junglewise.ai/threats/cve-2026-76461-cisco-secure-email-gateway-sql-injection2026-09-24 https://junglewise.ai/threats/cve-2026-61534-yayson-prototype-pollution-in-store-legacystore-deserialization2026-09-25 https://junglewise.ai/threats/cve-2026-89332-kiro-ide-sensitive-workspace-data-exfiltration-via-agent-written2026-09-25 https://junglewise.ai/threats/cve-2026-89090-aws-sdk-for-go-v2-denial-of-service-in-eventstream-header-decoder2026-09-25 https://junglewise.ai/threats/cve-2026-18061-aws-advanced-jdbc-wrapper-xxe-in-remotequerycacheplugin2026-09-25 https://junglewise.ai/threats/cve-2026-89065-projen-path-traversal-in-file-manifest-cleanup2026-09-25 https://junglewise.ai/threats/cve-2026-84869-connectwise-screenconnect-unauthorized-file-transfer-and2026-09-24 https://junglewise.ai/threats/cve-2026-42018-jfrog-artifactory-improper-authentication-vulnerability2026-09-24 https://junglewise.ai/threats/cve-2026-85706-gitlab-community-and-enterprise-edition-path-traversal-in-commits2026-09-24 https://junglewise.ai/threats/cve-2026-86077-n8n-approval-gate-bypass-via-reused-resumetoken-in-chat-websocket2026-09-25 https://junglewise.ai/threats/cve-2026-89049-aws-systems-manager-agent-ssrf-in-session-manager-port-forwarding2026-09-25 https://junglewise.ai/threats/cve-2026-85228-aws-deep-java-library-integer-overflow-in-tensor-buffer2026-09-25 https://junglewise.ai/threats/cve-2026-86082-n8n-openai-chat-model-domain-restriction-bypass-in-model-search2026-09-25 https://junglewise.ai/threats/cve-2026-86060-mikrotik-routeros-argument-delimiter-neutralization-privilege2026-09-24 https://junglewise.ai/threats/cve-2026-67277-mikrotik-routeros-missing-authentication-in-btest-service2026-09-24 https://junglewise.ai/threats/cve-2026-59160-yeger-turbo-graph-unauthenticated-task-execution-via-api-run2026-09-25 https://junglewise.ai/threats/cve-2026-19642-aws-sdk-for-c-memory-safety-issues-in-base64-decoder2026-09-25 https://junglewise.ai/threats/cve-2026-18954-amazon-aws-labs-documentdb-mcp-server-authorization-bypass-in2026-09-25 https://junglewise.ai/threats/cve-2026-19111-aws-strands-agents-tools-insecure-direct-object-reference-in2026-09-25 https://junglewise.ai/threats/cve-2026-18952-opensearch-security-analytics-plugin-missing-input-validation2026-09-25 https://junglewise.ai/threats/cve-2026-18656-kiro-ide-and-cli-executable-resolution-from-untrusted-directory2026-09-25 https://junglewise.ai/threats/cve-2026-19311-opensearch-alerting-plugin-missing-authorization2026-09-25 https://junglewise.ai/threats/cve-2026-18830-amazon-bedrock-agentcore-insufficient-input-validation2026-09-25 https://junglewise.ai/threats/cve-2026-18953-aws-transform-mcp-server-improper-pathname-validation2026-09-25 https://junglewise.ai/threats/cve-2026-85781-amazon-efs-csi-driver-insufficient-access-point-ownership2026-09-25 https://junglewise.ai/threats/cve-2026-81838-awsdac-zip-slip-path-traversal-vulnerability2026-09-25 https://junglewise.ai/threats/cve-2026-78379-amazon-strands-agents-tools-python-repl-consent-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-83497-opensearch-sql-plugin-unrestricted-java-deserialization-in-cursor2026-09-25 https://junglewise.ai/threats/cve-2026-75897-opensearch-dashboards-uncontrolled-resource-consumption-in2026-09-25 https://junglewise.ai/threats/cve-2026-84942-opensearch-dashboards-stored-xss-via-vega-expression-function2026-09-25 https://junglewise.ai/threats/cve-2026-85786-amazon-ion-java-memory-amplification-denial-of-service2026-09-25 https://junglewise.ai/threats/cve-2026-85012-amazon-codecatalyst-blueprints-sdk-os-command-injection2026-09-25 https://junglewise.ai/threats/cve-2026-77234-aws-freertos-kernel-memory-safety-issues2026-09-25 https://junglewise.ai/threats/cve-2026-85654-amazon-awslabs-dynamodb-mcp-server-code-injection-in-cdk2026-09-25 https://junglewise.ai/threats/cve-2026-75910-aws-athena-clickhouse-connector-privilege-escalation-in-secrets2026-09-25 https://junglewise.ai/threats/cve-2026-87912-aws-security-agent-missing-s3-bucket-ownership-verification2026-09-25 https://junglewise.ai/threats/cve-2026-18428-opensearch-sql-plugin-async-query-validation-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-85788-aws-labs-mysql-mcp-server-read-only-enforcement-bypass-via-sql2026-09-25 https://junglewise.ai/threats/cve-2026-81849-amazon-ssm-agent-path-traversal-in-aws-downloadcontent-plugin2026-09-25 https://junglewise.ai/threats/cve-2026-85787-amazon-postgres-mcp-server-sql-validation-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-75935-amazon-ion-java-memory-amplification-denial-of-service2026-09-25 https://junglewise.ai/threats/cve-2026-85028-aws-fpga-development-kit-arbitrary-code-execution-via-insecure2026-09-25 https://junglewise.ai/threats/cve-2026-77811-opensearch-dashboards-stored-cross-site-scripting-in-integration2026-09-25 https://junglewise.ai/threats/cve-2026-83551-amazon-sagemaker-python-sdk-cleartext-hmac-key-storage2026-09-25 https://junglewise.ai/threats/cve-2026-84851-amazon-ion-c-uncontrolled-recursion-in-reader2026-09-25 https://junglewise.ai/threats/cve-2026-77810-aws-athena-federated-query-neptune-connector-credential-exposure2026-09-25 https://junglewise.ai/threats/cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path2026-09-24 https://junglewise.ai/threats/cve-2026-87491-google-chromium-v8-out-of-bounds-write-in-javascript-engine2026-09-24 https://junglewise.ai/threats/cve-2026-92596-nodemailer-quadratic-time-complexity-in-address-parser-denial-of2026-09-25 https://junglewise.ai/threats/typespec-openapi3-path-traversal-in-version-placeholder-4368a6df2026-09-25 https://junglewise.ai/threats/astro-remote-code-execution-via-avif-image-processing-6b99ffe82026-09-24 https://junglewise.ai/threats/cve-2026-84376-astro-authorization-bypass-in-base-path-stripping2026-09-25 https://junglewise.ai/threats/cve-2026-84375-js-yaml-denial-of-service-via-empty-merge-sources2026-09-25 https://junglewise.ai/threats/next-js-image-optimization-heap-buffer-overflow-via-avif-9ce530ed2026-09-25 https://junglewise.ai/threats/cve-2026-83608-xmldom-doctype-name-injection-bypasses-requirewellformed2026-09-24 https://junglewise.ai/threats/cve-2026-83609-xmldom-name-qname-validation-bypass-via-embedded-line-terminator2026-09-25 https://junglewise.ai/threats/cve-2026-85062-colord-regular-expression-denial-of-service-in-color-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-81963-microsoft-windows-privilege-escalation-via-link-following-in2026-09-24 https://junglewise.ai/threats/cve-2026-86218-n-able-n-central-static-code-injection-vulnerability2026-09-24 https://junglewise.ai/threats/cve-2026-85880-microsoft-windows-heap-based-buffer-overflow-in-advanced-local2026-09-24 https://junglewise.ai/threats/cve-2026-75650-adobe-commerce-and-magento-improper-neutralization-in-template2026-09-24 https://junglewise.ai/threats/cve-2026-85046-google-chromium-v8-type-confusion-vulnerability2026-09-24 https://junglewise.ai/threats/cve-2026-71869-orval-code-injection-in-zod-schema-generation-via-template2026-09-25 https://junglewise.ai/threats/cve-2026-71867-orval-rce-via-schema-property-name-computed-property-key2026-09-25 https://junglewise.ai/threats/cve-2026-71868-orval-template-literal-injection-in-zod-schema-defaults2026-09-25 https://junglewise.ai/threats/cve-2026-16732-fastify-x-forwarded-header-spoofing-in-trustproxy-numeric-mode2026-09-25 https://junglewise.ai/threats/cve-2026-82329-jfrog-artifactory-improper-authentication-vulnerability2026-09-24 https://junglewise.ai/threats/cve-2026-83548-sonicwall-sma1000-server-side-request-forgery2026-09-24 https://junglewise.ai/threats/cve-2026-83549-sonicwall-sma1000-os-command-injection2026-09-24 https://junglewise.ai/threats/pnpm-pacquet-path-traversal-in-lockfile-dependency-symlinks-dc3f81d12026-09-25 https://junglewise.ai/threats/mlflow-statsmodels-flavor-security-control-bypass-in-pickle-c4a0165d2026-09-25 https://junglewise.ai/threats/cve-2026-73089-browserslist-unbounded-cache-memory-growth-via-distinct-query2026-09-25 https://junglewise.ai/threats/cve-2026-73088-browserslist-dos-crash-via-untrusted-stats-file-in-normalizestats2026-09-25 https://junglewise.ai/threats/mysql2-auth-plugin-downgrade-to-mysql-clear-password-leaks-credentials-620917f52026-09-25 https://junglewise.ai/threats/mysql2-auth-plugin-downgrade-to-mysql-clear-password-leaks-plaintext-4f5044492026-09-25 https://junglewise.ai/threats/cve-2026-62993-smarty-ssrf-via-redirect-bypass-in-fetch2026-09-25 https://junglewise.ai/threats/cve-2026-69127-kirby-rest-api-information-disclosure-via-error-messages2026-09-25 https://junglewise.ai/threats/cve-2026-71415-kirby-authorization-bypass-in-rest-api-file-uploads2026-09-25 https://junglewise.ai/threats/cve-2026-75594-kirby-path-traversal-in-media-handler-via-encoded-slashes2026-09-25 https://junglewise.ai/threats/cve-2026-81888-hono-oauth-providers-oauth-state-validation-bypass-in-social2026-09-25 https://junglewise.ai/threats/cve-2026-81889-elfinder-ssrf-protection-bypass-via-dns-rebinding2026-09-25 https://junglewise.ai/threats/cve-2026-82078-papercut-ng-mf-unsafe-reflection-vulnerability2026-09-24 https://junglewise.ai/threats/cve-2026-81578-papercut-ng-mf-missing-authentication-for-critical-function2026-09-24 https://junglewise.ai/threats/cve-2026-55855-mariadb-connector-node-js-sql-injection-in-buffer-parameter2026-09-25 https://junglewise.ai/threats/cve-2026-55860-mariadb-r2dbc-cleartext-password-disclosure-to-mitm2026-09-25 https://junglewise.ai/threats/cve-2026-55859-mariadb-r2dbc-charset-confusion-leading-to-sql-injection2026-09-25 https://junglewise.ai/threats/cve-2026-55858-mariadb-java-client-charset-confusion-encoding-mismatch2026-09-25 https://junglewise.ai/threats/cve-2026-55857-mariadb-connector-j-cleartext-password-transmission-in-pam2026-09-25 https://junglewise.ai/threats/cve-2026-55856-mariadb-connector-j-cleartext-password-disclosure-in-mitm2026-09-25 https://junglewise.ai/threats/cve-2026-55848-mapfish-print-xxe-in-gml-layer-processing2026-09-25 https://junglewise.ai/threats/cve-2026-55785-free5gc-ausf-non-constant-time-authentication-comparison-and2026-09-25 https://junglewise.ai/threats/cve-2026-55784-free5gc-ausf-authentication-context-race-condition2026-09-25 https://junglewise.ai/threats/cve-2026-55779-silverstripe-versioned-xss-in-archive-admin-restore2026-09-25 https://junglewise.ai/threats/cve-2026-55867-graylog-token-revocation-endpoint-idor2026-09-25 https://junglewise.ai/threats/cve-2026-55841-graylog-syslog-parser-field-injection-in-key-value-message2026-09-25 https://junglewise.ai/threats/cve-2026-55764-klever-go-sft-add-quantity-int64-overflow-bypasses-maxsupply2026-09-25 https://junglewise.ai/threats/cve-2026-55854-mariadb-connector-node-js-cleartext-password-transmission-in-pam2026-09-25 https://junglewise.ai/threats/cve-2026-55678-arc-enterprise-authentication-bypass-in-cluster-node-admission2026-09-25 https://junglewise.ai/threats/cve-2026-55763-klever-klever-go-percentage-transfer-royalty-zero-debit-in2026-09-25 https://junglewise.ai/threats/cve-2026-55891-privatebin-reflected-json-injection-in-jsonld-endpoints2026-09-25 https://junglewise.ai/threats/cve-2026-55696-privatebin-stored-xss-in-attachment-download-link2026-09-25 https://junglewise.ai/threats/aiir-verification-and-policy-gates-fail-open-ab3a8d0c2026-09-25 https://junglewise.ai/threats/cve-2026-55484-alos-http-unauthenticated-dos-in-sanitizerequestpath2026-09-25 https://junglewise.ai/threats/cve-2026-55634-pimcore-dataobject-class-definition-field-name-remote-code2026-09-25 https://junglewise.ai/threats/cve-2026-55220-pimcore-hotspotimage-unrestricted-php-object-deserialization2026-09-25 https://junglewise.ai/threats/cve-2026-55215-mariadb-connector-node-js-cleartext-password-disclosure-to-mitm2026-09-25 https://junglewise.ai/threats/cve-2026-55247-plone-plone-app-event-denial-of-service-in-icalendar-import2026-09-25 https://junglewise.ai/threats/cve-2026-55622-incus-project-restriction-bypass-in-instance-copy2026-09-25 https://junglewise.ai/threats/cve-2026-55621-incus-authorization-bypass-in-custom-volume-copy2026-09-25 https://junglewise.ai/threats/cve-2026-55228-weblate-idor-in-groupviewset-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-55227-weblate-observable-object-existence-disclosure-via-http-status2026-09-25 https://junglewise.ai/threats/cve-2026-55520-protego-redos-in-robots-txt-wildcard-matching2026-09-25 https://junglewise.ai/threats/cve-2026-55248-plone-plone-app-portlets-denial-of-service-via-rss-feed-portlet2026-09-25 https://junglewise.ai/threats/cve-2026-55673-powsybl-core-os-command-injection-in-localcommandexecutor2026-09-25 https://junglewise.ai/threats/cve-2026-55584-phpsysinfo-ip-allowlist-bypass-via-header-spoofing2026-09-25 https://junglewise.ai/threats/cve-2026-55245-bifrost-ssrf-bypass-in-ispublicip-ip-classification2026-09-25 https://junglewise.ai/threats/cve-2026-55588-oras-cli-uncontrolled-recursion-in-referrer-graph-traversal2026-09-25 https://junglewise.ai/threats/cve-2026-55485-piccolo-admin-privilege-escalation-via-session-token-disclosure2026-09-25 https://junglewise.ai/threats/cve-2026-55509-wsgidav-mysqlbrowserprovider-blind-sql-injection2026-09-25 https://junglewise.ai/threats/cve-2026-55425-graylog-server-information-disclosure-in-system-catalog-api2026-09-25 https://junglewise.ai/threats/cve-2026-55566-yamcs-dom-xss-in-extension-routing2026-09-25 https://junglewise.ai/threats/cve-2026-55565-yamcs-remote-code-execution-via-unescaped-streamsql-like-pattern2026-09-25 https://junglewise.ai/threats/cve-2026-55559-yamcs-remote-code-execution-via-yaml-injection-in-instance2026-09-25 https://junglewise.ai/threats/cve-2026-55552-yamcs-unauthenticated-directory-traversal2026-09-25 https://junglewise.ai/threats/cve-2026-55549-yamcs-reflected-xss-in-authorize-endpoint2026-09-25 https://junglewise.ai/threats/cve-2026-55547-yamcs-missing-authorization-on-role-and-privilege-enumeration2026-09-25 https://junglewise.ai/threats/cve-2026-55545-yamcs-websocket-subscription-handlers-missing-authorization2026-09-25 https://junglewise.ai/threats/cve-2026-55521-yamcs-core-api-missing-authorization-in-multiple-endpoints2026-09-25 https://junglewise.ai/threats/cve-2026-55511-yamcs-authenticated-rce-via-streamsql-column-name-injection2026-09-25 https://junglewise.ai/threats/cve-2026-55068-free5gc-nrf-input-validation-bypass-in-nf-profile-registration2026-09-25 https://junglewise.ai/threats/cve-2026-55067-vikunja-kanban-bucket-cross-tenant-relocation-via-mass-assignment2026-09-25 https://junglewise.ai/threats/cve-2026-55065-vikunja-authorization-bypass-in-project-view-deletion2026-09-25 https://junglewise.ai/threats/cve-2026-55064-vikunja-incomplete-privilege-escalation-fix-via-parent-project-id2026-09-25 https://junglewise.ai/threats/cve-2026-54766-vikunja-project-duplication-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-54788-datadog-dd-trace-rs-unbounded-w3c-tracestate-parsing-dos2026-09-25 https://junglewise.ai/threats/cve-2026-55834-pocket-id-open-redirect-in-oidc-authorize-page-with-prompt-none2026-09-25 https://junglewise.ai/threats/cve-2026-55569-aqua-archive-extraction-path-traversal-via-symlink2026-09-25 https://junglewise.ai/threats/cve-2026-54755-klever-integer-overflow-in-split-royalty-validation-enables2026-09-25 https://junglewise.ai/threats/cve-2026-54754-klever-marketplace-settlement-mints-klv-when-referral-and-royalty2026-09-25 https://junglewise.ai/threats/cve-2026-55108-kubevela-terraform-remote-loader-dos-via-unbounded-file-read2026-09-25 https://junglewise.ai/threats/gix-packetline-integer-underflow-in-side-band-packet-parsing-50c9592d2026-09-25 https://junglewise.ai/threats/cve-2026-54746-hatchet-cross-tenant-authorization-bypass-in-dispatcher-grpc2026-09-25 https://junglewise.ai/threats/cve-2026-55558-aiosmtplib-starttls-response-injection2026-09-25 https://junglewise.ai/threats/cve-2026-54770-webob-open-redirect-via-leading-control-characters-in-location2026-09-25 https://junglewise.ai/threats/crossplane-package-manager-signature-bypass-via-toctou-in-tag-c3cd87162026-09-25 https://junglewise.ai/threats/cve-2026-54732-libreoffice-convert-path-traversal-in-filename-handling2026-09-25 https://junglewise.ai/threats/cve-2026-54718-silverstripe-advanced-workflow-rce-in-email-template2026-09-25 https://junglewise.ai/threats/cve-2026-54687-n8n-nodes-sqlite3-path-traversal-via-user-controlled-database2026-09-25 https://junglewise.ai/threats/cve-2026-54713-cakephp-queue-incomplete-comparison-in-getuniqueid2026-09-25 https://junglewise.ai/threats/cve-2026-54721-silverstripe-userforms-remote-code-execution-in-email-subject2026-09-25 https://junglewise.ai/threats/cve-2023-49105-owncloud-improper-authentication-vulnerability2026-09-24 https://junglewise.ai/threats/cve-2026-66384-jfrog-artifactory-path-traversal-in-docker-cache2026-09-24 https://junglewise.ai/threats/cve-2026-44701-openstamanager-html-injection-in-group-name2026-09-25 https://junglewise.ai/threats/librenms-stored-xss-via-snmp-syslog-data-in-legacy-templates-a27e8a902026-09-25 https://junglewise.ai/threats/cve-2026-54614-cakephp-debugkit-mailpreview-unsafe-reflection2026-09-25 https://junglewise.ai/threats/cve-2026-54569-senaite-core-unauthenticated-rce-via-eval-injection-and-missing2026-09-25 https://junglewise.ai/threats/cve-2026-54606-suneditor-embed-plugin-dom-xss-via-external-script-element2026-09-25 https://junglewise.ai/threats/openwisp-ipam-missing-authorization-in-subnet-export-55f605542026-09-25 https://junglewise.ai/threats/pantheon-agents-trojanized-pypi-packages-deliver-credential-stealer-56064d972026-09-25 https://junglewise.ai/threats/cve-2026-54511-logtape-syslog-log-injection-via-unescaped-control-characters2026-09-25 https://junglewise.ai/threats/cve-2026-54550-izpack-path-traversal-in-unpackerbase2026-09-25 https://junglewise.ai/threats/cve-2026-54523-kyverno-namespacedmutatingpolicy-generator-apply-namespace2026-09-25 https://junglewise.ai/threats/cve-2026-54548-siemens-kas-ssh-host-key-checking-configuration-weakness2026-09-25 https://junglewise.ai/threats/cve-2026-54553-starlette-admin-unvalidated-order-by-parameter-information2026-09-25 https://junglewise.ai/threats/cve-2026-54556-http4s-http-2-denial-of-service-in-hpack-header-compression2026-09-25 https://junglewise.ai/threats/cve-2026-54356-budibase-s3-signed-upload-url-issuance-via-attachments-endpoint2026-09-25 https://junglewise.ai/threats/cve-2021-23758-ajax-net-professional-unsafe-deserialization-of-untrusted-data2026-09-24 https://junglewise.ai/threats/cve-2015-3246-red-hat-libuser-race-condition-in-passwd-file-handling2026-09-24 https://junglewise.ai/threats/cve-2015-5287-red-hat-abrt-privilege-escalation-via-symlink-attack2026-09-24 https://junglewise.ai/threats/cve-2022-0995-linux-kernel-out-of-bounds-write-vulnerability2026-09-24 https://junglewise.ai/threats/cve-2019-1068-microsoft-sql-server-remote-code-execution2026-09-24 https://junglewise.ai/threats/cve-2026-54338-jupyterhub-unauthenticated-denial-of-service-in-login-form2026-09-25 https://junglewise.ai/threats/cve-2026-55099-icalendar-algorithmic-complexity-in-equality-comparison2026-09-25 https://junglewise.ai/threats/cve-2026-45019-chainlit-server-side-request-forgery-via-mcp-transports2026-09-25 https://junglewise.ai/threats/cve-2026-45018-chainlit-command-injection-in-mcp-stdio-transport2026-09-25 https://junglewise.ai/threats/cve-2026-55609-sublinear-time-solver-mcp-arbitrary-file-write2026-09-25 https://junglewise.ai/threats/cve-2026-55620-eml-parser-denial-of-service-via-nested-parentheses-in-received2026-09-25 https://junglewise.ai/threats/cve-2026-55619-eml-parser-denial-of-service-via-deeply-nested-email-header2026-09-25 https://junglewise.ai/threats/cve-2026-55618-govcert-lu-eml-parser-url-extraction-bypass-via-html-entities2026-09-25 https://junglewise.ai/threats/cve-2026-55663-mediasoup-sctp-state-cookie-authentication-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-55637-genieacs-mcp-dns-rebinding-in-streamable-http-transport2026-09-25 https://junglewise.ai/threats/cve-2026-55419-pollen-robotics-reachy-mini-unrestricted-file-upload-in-media-api2026-09-25 https://junglewise.ai/threats/phpmyfaq-privilege-escalation-in-groupcontroller-updatepermissions-3da5d4fe2026-09-25 https://junglewise.ai/threats/phpmyfaq-public-api-information-disclosure-in-faq-endpoints-8f0c6c402026-09-25 https://junglewise.ai/threats/phpmyfaq-path-traversal-in-pdf-export-5f62d0df2026-09-25 https://junglewise.ai/threats/cve-2026-55557-browse-mcp-arbitrary-file-write-via-path-traversal2026-09-25 https://junglewise.ai/threats/cve-2026-55585-qwed-authenticated-remote-code-execution-in-parse-expr2026-09-25 https://junglewise.ai/threats/cve-2026-55553-urllib-cross-origin-redirect-credential-leakage2026-09-25 https://junglewise.ai/threats/cve-2026-55571-djust-authentication-bypass-in-liveview-websocket-mount2026-09-25 https://junglewise.ai/threats/cve-2026-55640-nextcloud-mcp-server-webhook-auth-bypass-in-vector-sync2026-09-25 https://junglewise.ai/threats/pickem-terminal-escape-sequence-injection-via-unsanitized-item-text-d94d9a832026-09-25 https://junglewise.ai/threats/utcp-http-oauth2-tokenurl-trust-boundary-bypass-in-openapi-conversion-c10cfda82026-09-25 https://junglewise.ai/threats/utcp-http-http-tool-invocation-ssrf-via-unvalidated-redirects-681a2cb02026-09-25 https://junglewise.ai/threats/cve-2026-55580-mcp-shell-security-disabled-by-default-and-shell-interpreter2026-09-25 https://junglewise.ai/threats/cve-2026-55581-sonirico-mcp-shell-allowlist-bypass-via-bash-c-flag2026-09-25 https://junglewise.ai/threats/cve-2026-55582-mcp-shell-secure-mode-allowlist-bypass-via-git-shell-alias2026-09-25 https://junglewise.ai/threats/cve-2026-55546-qwed-ai-qwed-mcp-unsafe-sympy-parse-expr-remote-code-execution2026-09-25 https://junglewise.ai/threats/cve-2026-55536-praisonai-browser-server-websocket-origin-validation-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-55532-praisonai-origin-validation-bypass-enabling-csrf2026-09-25 https://junglewise.ai/threats/cve-2026-55533-praisonai-recipe-server-authentication-bypass-with-missing2026-09-25 https://junglewise.ai/threats/cve-2026-55539-praisonai-async-jobs-api-authentication-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-55527-praisonaiagents-filememory-path-traversal-arbitrary-file-write2026-09-25 https://junglewise.ai/threats/cve-2026-55541-praisonai-authentication-bypass-in-serve-command2026-09-25 https://junglewise.ai/threats/cve-2026-55535-praisonai-server-side-request-forgery-in-webhook-url-validation2026-09-25 https://junglewise.ai/threats/cve-2026-55537-praisonai-webhook-ssrf-via-dns-fail-open-and-toctou2026-09-25 https://junglewise.ai/threats/cve-2026-55538-praisonai-agent-invocation-auth-bypass-via-missing-api-key2026-09-25 https://junglewise.ai/threats/cve-2026-55540-praisonai-path-traversal-via-symlinks-and-unvalidated-working2026-09-25 https://junglewise.ai/threats/cve-2026-55530-praisonai-ast-grep-rewrite-missing-authorization-in-file2026-09-25 https://junglewise.ai/threats/cve-2026-55524-praisonai-agents-ssrf-in-web-crawl-tool-via-redirect-and-dns2026-09-25 https://junglewise.ai/threats/cve-2026-55534-praisonai-serve-agents-authentication-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-55526-praisonai-ssrf-protection-bypass-in-spider-tools-via-dns2026-09-25 https://junglewise.ai/threats/cve-2026-55531-praisonai-mcp-http-server-memory-exhaustion-via-unbounded-session2026-09-25 https://junglewise.ai/threats/cve-2026-55528-praisonai-agentserver-authentication-bypass-on-all-routes2026-09-25 https://junglewise.ai/threats/cve-2026-55529-praisonai-mcp-http-stream-origin-validation-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-55523-praisonai-web-crawl-ssrf-protection-bypass-via-unchecked2026-09-25 https://junglewise.ai/threats/cve-2026-55522-praisonai-workflow-include-remote-code-execution-in-tools-py2026-09-25 https://junglewise.ai/threats/cve-2026-55525-praisonai-web-crawl-ssrf-via-redirect-following2026-09-25 https://junglewise.ai/threats/cve-2026-60004-gitea-code-injection-in-diffpatch-api2026-09-24 https://junglewise.ai/threats/vibeio-http-dos-in-http-1-x-chunked-encoding-parser-d87e84a02026-09-25 https://junglewise.ai/threats/cloudreve-path-traversal-in-remote-download-287482492026-09-25 https://junglewise.ai/threats/cloudreve-broken-access-control-in-file-share-caching-13df24a42026-09-25 https://junglewise.ai/threats/gorilla-websocket-weak-prng-for-mask-key-generation-0861bf092026-09-25 https://junglewise.ai/threats/netfoil-improper-output-neutralization-for-logs-in-doh-response-c6a8161c2026-09-25 https://junglewise.ai/threats/cve-2026-54625-django-cms-page-cache-ignores-plugin-vary-headers2026-09-25 https://junglewise.ai/threats/cve-2026-54623-django-cms-plugin-move-endpoint-denial-of-service-via-cyclic2026-09-25 https://junglewise.ai/threats/tokio-postgres-out-of-bounds-read-on-mismatched-datarow-fields-51e13d2d2026-09-25 https://junglewise.ai/threats/postgres-protocol-panic-on-malformed-hstore-value-98d63cdf2026-09-25 https://junglewise.ai/threats/postgres-protocol-unbounded-scram-iteration-count-dos-d8dcba222026-09-25 https://junglewise.ai/threats/cve-2026-54050-sakai-profile-image-deletion-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-54049-sakai-conversations-stored-cross-site-scripting-in-messages2026-09-25 https://junglewise.ai/threats/cve-2026-78329-apache-camel-undertow-header-filter-bypass-in-endpoint-routes2026-09-25 https://junglewise.ai/threats/cve-2026-71300-apache-camel-atmosphere-websocket-header-injection-in-producer2026-09-25 https://junglewise.ai/threats/cve-2026-63621-apache-camel-knative-header-injection-in-structured-content-mode2026-09-25 https://junglewise.ai/threats/cve-2026-66906-apache-camel-azure-storage-blob-path-traversal-in2026-09-25 https://junglewise.ai/threats/cve-2026-66907-apache-camel-google-storage-relative-path-traversal-in-download2026-09-25 https://junglewise.ai/threats/cve-2026-59230-apache-camel-mail-header-injection-via-headersinline2026-09-25 https://junglewise.ai/threats/cve-2026-60093-apache-camel-azure-storage-datalake-path-traversal-in2026-09-25 https://junglewise.ai/threats/cve-2026-66908-apache-camel-platform-http-main-jwt-authentication-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-21962-oracle-http-server-and-oracle-weblogic-server-proxy-plug-in2026-09-24 https://junglewise.ai/threats/justhtml-uncontrolled-recursion-dos-via-deeply-nested-html-26591bb62026-09-25 https://junglewise.ai/threats/cve-2026-77415-jsonata-arbitrary-code-execution-via-crafted-expressions2026-09-25 https://junglewise.ai/threats/cve-2026-77414-jsonata-arbitrary-code-execution-in-expression-evaluation2026-09-25 https://junglewise.ai/threats/cve-2026-68508-hydra-hydra-utils-instantiate-code-injection-with-untrusted2026-09-25 https://junglewise.ai/threats/cve-2026-63135-yourls-stored-xss-in-referrer-statistics-via-crafted-referer2026-09-25 https://junglewise.ai/threats/cve-2026-77413-jsonata-arbitrary-code-execution-in-lookup-function2026-09-25 https://junglewise.ai/threats/cve-2026-77354-kin-openapi-uncontrolled-resource-consumption-in-deepobject-query2026-09-25 https://junglewise.ai/threats/cve-2026-61539-xinference-remote-code-execution-via-unsafe-eval-in-llama3-tool2026-09-25 https://junglewise.ai/threats/cve-2026-59989-phalcon-volt-template-engine-code-injection-via-join-filter2026-09-25 https://junglewise.ai/threats/cve-2026-76905-kin-openapi-openapi3filter-nil-pointer-panic-in-converterrors2026-09-25 https://junglewise.ai/threats/cve-2026-64679-atlantis-path-traversal-in-workspace-handling2026-09-25 https://junglewise.ai/threats/cve-2026-63421-keystone-graphql-maxtake-bypass-with-negative-values2026-09-25 https://junglewise.ai/threats/cve-2026-61824-defuddle-cross-site-scripting-in-site-extractors2026-09-25 https://junglewise.ai/threats/cve-2026-76904-geotools-sql-injection-in-jsonarraycontains-filter2026-09-25 https://junglewise.ai/threats/grav-cms-cross-site-scripting-via-twig-sandbox-asset-injection-d5a761cc2026-09-25 https://junglewise.ai/threats/cve-2026-63466-unleash-global-mustache-escape-override-disables-html-escaping-in2026-09-25 https://junglewise.ai/threats/cve-2026-63004-unleash-addon-webhook-url-server-side-request-forgery2026-09-25 https://junglewise.ai/threats/cve-2026-63462-unleash-server-unauthenticated-denial-of-service-via-deeply2026-09-25 https://junglewise.ai/threats/cve-2026-73570-zimbra-collaboration-suite-os-command-injection-in-smtp2026-09-24 https://junglewise.ai/threats/cve-2026-55451-gettext-converter-prototype-pollution-in-js2i18next2026-09-25 https://junglewise.ai/threats/wagtail-improper-permission-restriction-on-page-translation-api-871f48042026-09-25 https://junglewise.ai/threats/wagtail-improper-permission-handling-when-copying-snippets-7cffb1992026-09-25 https://junglewise.ai/threats/wagtail-improper-restriction-handling-in-documents-and-images-api-0df25de52026-09-25 https://junglewise.ai/threats/wagtail-document-sha1-hash-enumeration-via-http-headers-c56639c42026-09-25 https://junglewise.ai/threats/winter-cms-reflected-xss-in-backend-table-widget-search-parameter-37a9f4532026-09-25 https://junglewise.ai/threats/winter-cms-csrf-through-backend-page-action-routing-63f3a65d2026-09-25 https://junglewise.ai/threats/winter-backend-module-stored-xss-in-cached-styles-3dde5f4d2026-09-25 https://junglewise.ai/threats/winter-cms-importexportcontroller-ajax-handlers-permission-bypass-ac8bbb082026-09-25 https://junglewise.ai/threats/winter-backend-user-profile-information-disclosure-via-myaccount-d7c5a5b12026-09-25 https://junglewise.ai/threats/winter-backend-list-widget-stored-xss-in-image-columns-e56efd1b2026-09-25 https://junglewise.ai/threats/fleet-order-by-column-injection-in-activity-endpoints-40f0d0f72026-09-25 https://junglewise.ai/threats/fleet-missing-authorization-in-ios-app-endpoints-324729062026-09-25 https://junglewise.ai/threats/winter-cms-local-file-inclusion-in-javascript-asset-compilation-04487cca2026-09-25 https://junglewise.ai/threats/cve-2026-63202-netty-incubator-ohttp-binaryhttpparser-infinite-loop-dos2026-09-25 https://junglewise.ai/threats/cve-2026-63179-winter-cms-local-file-inclusion-via-less-import-directives2026-09-25 https://junglewise.ai/threats/cve-2026-61827-netty-incubator-ohttp-unbounded-variable-length-field-buffering2026-09-25 https://junglewise.ai/threats/cve-2026-63124-netty-netty-incubator-codec-bhttp-infinite-loop-in-field-section2026-09-25 https://junglewise.ai/threats/cve-2026-61799-netty-binary-http-parser-integer-overflow-in-varint-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-61798-netty-netty-incubator-codec-ohttp-hpke-private-key-exposure-in2026-09-25 https://junglewise.ai/threats/cve-2026-63003-django-cms-page-duplicate-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-75526-django-cms-stored-xss-in-edit-mode-plugin-exception-rendering2026-09-25 https://junglewise.ai/threats/cve-2026-57570-laravel-backpack-crud-authorization-bypass-in-hasmany-morphmany2026-09-25 https://junglewise.ai/threats/cve-2026-55468-wagtail-pages-admin-api-improper-access-control2026-09-25 https://junglewise.ai/threats/nocobase-arbitrary-file-write-and-local-file-inclusion-leading-to-c46c0c582026-09-25 https://junglewise.ai/threats/cve-2026-54624-django-cms-structure-endpoint-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-54622-django-cms-clipboard-copy-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-54256-winter-cms-fileupload-widget-idor-in-attachment-metadata2026-09-25 https://junglewise.ai/threats/cve-2026-54251-netty-netty-incubator-codec-ohttp-memory-leak-in-aead-decryption2026-09-25 https://junglewise.ai/threats/cve-2026-54182-laravel-backpack-crud-os-command-injection-in-stats2026-09-25 https://junglewise.ai/threats/cve-2026-54181-laravel-backpack-crud-stored-xss-in-color-column2026-09-25 https://junglewise.ai/threats/cve-2026-54180-laravel-backpack-crud-authorization-bypass-in-write-operations2026-09-25 https://junglewise.ai/threats/cve-2026-54179-laravel-backpack-crud-arbitrary-file-upload-via-base64-image2026-09-25 https://junglewise.ai/threats/cve-2026-54178-laravel-backpack-crud-arbitrary-file-deletion-in-hasuploadfields2026-09-25 https://junglewise.ai/threats/cve-2026-54177-laravel-backpack-crud-file-upload-remote-code-execution2026-09-25 https://junglewise.ai/threats/cve-2026-54176-laravel-backpack-crud-authentication-bypass-in-account-email2026-09-25 https://junglewise.ai/threats/cve-2026-54175-laravel-backpack-crud-unverified-password-change-in2026-09-25 https://junglewise.ai/threats/cve-2026-54168-tekton-pipelines-as-code-unscoped-github-app-token-unauthorized2026-09-25 https://junglewise.ai/threats/cve-2026-54167-openshift-pipelines-as-code-github-app-token-credential2026-09-25 https://junglewise.ai/threats/opentofu-denial-of-service-via-untrusted-server-connections-9195aa102026-09-25 https://junglewise.ai/threats/cve-2026-54162-ember-terminal-escape-sequence-injection-from-caddy-logs2026-09-25 https://junglewise.ai/threats/cve-2026-54156-node-opcua-unbounded-nonce-cache-heap-exhaustion2026-09-25 https://junglewise.ai/threats/cve-2026-54155-node-opcua-missing-nonce-verification-in-usernameidentitytoken2026-09-25 https://junglewise.ai/threats/cve-2026-54150-mux-next-video-unauthenticated-arbitrary-file-read-in-api-video2026-09-25 https://junglewise.ai/threats/coder-stored-html-injection-in-appearance-settings-6383f2592026-09-25 https://junglewise.ai/threats/coder-user-enumeration-in-login-endpoint-via-timing-based-placeholder-35423c9f2026-09-25 https://junglewise.ai/threats/kittycad-kcl-lib-use-after-free-in-environment-access-bb46f4bb2026-09-25 https://junglewise.ai/threats/zoo-design-studio-kcl-parser-stack-overflow-via-recursive-expression-52ec95422026-09-25 https://junglewise.ai/threats/stigmem-node-blind-ssrf-in-webhook-subscription-delivery-5725952b2026-09-25 https://junglewise.ai/threats/cve-2026-55253-langchain-mongodb-nosql-injection-in-list-search-methods2026-09-25 https://junglewise.ai/threats/cve-2026-55244-asteval-interpreter-sandbox-escape-via-baseexception-subclasses2026-09-25 https://junglewise.ai/threats/asteval-sandbox-escape-via-numpy-ctypes-arbitrary-memory-read-write-a89cc5272026-09-25 https://junglewise.ai/threats/cve-2026-55149-vouch-proxy-unbounded-multipart-cookie-allocation-dos2026-09-25 https://junglewise.ai/threats/cve-2026-45404-opentelemetry-go-unsynchronized-baggage-map-race-condition2026-09-25 https://junglewise.ai/threats/cve-2026-32637-velero-path-traversal-in-tarball-extraction-during-restore2026-09-25 https://junglewise.ai/threats/cve-2026-72530-trueconf-server-code-injection-vulnerability2026-09-24 https://junglewise.ai/threats/cve-2026-72529-trueconf-server-missing-authentication-for-critical-function2026-09-24 https://junglewise.ai/threats/cve-2026-63123-tinacms-cli-cross-origin-csrf-in-media-upload2026-09-25 https://junglewise.ai/threats/cve-2026-59992-tinacms-next-tinacms-s3-broken-access-control-in-media-handler2026-09-25 https://junglewise.ai/threats/cve-2026-63188-logto-logto-tunnel-path-traversal-in-static-file-serving2026-09-25 https://junglewise.ai/threats/cve-2026-61712-moby-buildkit-denial-of-service-via-unbounded-group-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-61711-moby-buildkit-custom-frontend-security-bypass2026-09-25 https://junglewise.ai/threats/mcp-searxng-credential-exposure-in-mcp-logs-and-json-rpc-errors-07f55aad2026-09-25 https://junglewise.ai/threats/cve-2026-62673-grav-htaccess-file-extension-rules-bypass-via-case-variation2026-09-25 https://junglewise.ai/threats/cve-2026-61807-snipe-it-stored-dom-xss-via-table-selected-count-ids2026-09-25 https://junglewise.ai/threats/cve-2026-55703-snipe-it-maintenance-record-disclosure-via-missing-authorization2026-09-25 https://junglewise.ai/threats/cve-2026-55694-snipe-it-authorization-bypass-in-eula-file-access2026-09-25 https://junglewise.ai/threats/cve-2024-45747-geoserver-server-side-template-injection-in-freemarker-templates2026-09-25 https://junglewise.ai/threats/cve-2026-54689-searxng-mcp-server-hardened-mode-ssrf-bypass-via-redirect-and2026-09-25 https://junglewise.ai/threats/cve-2026-54688-searxng-mcp-server-ssrf-in-web-url-read2026-09-25 https://junglewise.ai/threats/geolens-authorization-and-cache-scope-disclosure-flaws-bc4770e02026-09-25 https://junglewise.ai/threats/cve-2026-53966-xwiki-platform-live-data-privilege-escalation-through-edit-api2026-09-25 https://junglewise.ai/threats/cve-2026-53965-mcp-php-sdk-unbounded-sse-buffer-memory-exhaustion2026-09-25 https://junglewise.ai/threats/cve-2026-53964-adfinis-document-merge-service-rce-via-ssti-in-xlsx-templates2026-09-25 https://junglewise.ai/threats/cve-2026-53957-contentful-mcp-server-export-space-import-space-credential2026-09-25 https://junglewise.ai/threats/cve-2026-53941-inspektor-gadget-ldcache-parser-denial-of-service2026-09-25 https://junglewise.ai/threats/block-buffer-panic-corrupts-buffer-cursor-position-4abf624c2026-09-25 https://junglewise.ai/threats/claude-faf-mcp-path-traversal-in-file-read-write-tools-85bafa302026-09-25 https://junglewise.ai/threats/faf-mcp-path-traversal-in-file-read-write-tools-756b91902026-09-25 https://junglewise.ai/threats/grok-faf-mcp-path-traversal-arbitrary-file-read-79c0a4722026-09-25 https://junglewise.ai/threats/cve-2026-55236-langchain-langgraph-api-authorization-bypass-in-run-creation2026-09-25 https://junglewise.ai/threats/cve-2026-55235-langchain-langgraph-api-authentication-bypass-in-webhook-routing2026-09-25 https://junglewise.ai/threats/cve-2026-73974-linuxfabrik-monitoring-plugins-arbitrary-root-file-read-via-test2026-09-25 https://junglewise.ai/threats/cve-2026-17106-moby-go-archive-path-traversal-in-tar-extraction2026-09-25 https://junglewise.ai/threats/librenms-stored-xss-in-device-showconfig-via-oxidized-api-e20d3cc82026-09-25 https://junglewise.ai/threats/librenms-stored-xss-in-graph-description-settings-ffdfb5dd2026-09-25 https://junglewise.ai/threats/librenms-remote-code-execution-via-aboutcontroller-d7e2e3b02026-09-25 https://junglewise.ai/threats/cve-2026-71417-netflix-lemur-arbitrary-certificate-revocation-via-duplicate2026-09-25 https://junglewise.ai/threats/cve-2026-71322-netflix-lemur-missing-authorization-check-on-post-certificates-id2026-09-25 https://junglewise.ai/threats/cve-2026-71317-netflix-lemur-sub-ca-creation-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-71308-netflix-lemur-unchecked-replaces-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-71307-netflix-lemur-destinations-api-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-71303-lemur-acme-authority-update-endpoint-ssrf-via-url-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-70667-netflix-lemur-ssrf-in-certificate-revocation-checking-via2026-09-25 https://junglewise.ai/threats/cve-2026-70666-lemur-server-side-request-forgery-via-acme-authority-update2026-09-25 https://junglewise.ai/threats/cve-2026-62988-froxlor-api-credential-and-2fa-secret-disclosure2026-09-25 https://junglewise.ai/threats/cve-2026-55593-froxlor-csrf-vulnerability-in-ajax-endpoint2026-09-25 https://junglewise.ai/threats/cve-2026-54543-froxlor-domainzones-add-dns-zone-file-injection2026-09-25 https://junglewise.ai/threats/cve-2026-54348-froxlor-second-order-sql-injection-in-ipsandports-listing2026-09-25 https://junglewise.ai/threats/cve-2026-54347-froxlor-stored-xss-in-dns-editor-via-txt-records2026-09-25 https://junglewise.ai/threats/cve-2026-54723-devpi-server-database-leak-in-changelog-endpoint2026-09-25 https://junglewise.ai/threats/cve-2026-55224-mineadmin-path-traversal-via-unsanitized-identifier-in-plugin2026-09-25 https://junglewise.ai/threats/monai-numpyreader-unsafe-deserialization-in-image-loading-44691ae52026-09-25 https://junglewise.ai/threats/monai-os-command-injection-in-nnunetv2runner-d81ab1232026-09-25 https://junglewise.ai/threats/monai-algo-from-pickle-rce-via-pickle-deserialization-6f8e02602026-09-25 https://junglewise.ai/threats/triton-vm-missing-constraint-in-sponge-absorb-mem-instruction-1db6e8652026-09-25 https://junglewise.ai/threats/cve-2026-55211-surfio-out-of-bounds-read-in-irap-file-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-55209-equinor-resdata-input-validation-flaws-in-grdecl-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-55107-kobako-sandbox-escape-via-public-send-reflection2026-09-25 https://junglewise.ai/threats/meshcentral-stored-xss-via-unsanitized-agent-fields-1e9bee492026-09-25 https://junglewise.ai/threats/cve-2026-18963-siemens-industrial-edge-management-authentication-bypass-in2026-09-25 https://junglewise.ai/threats/cve-2026-68922-mobsf-path-traversal-in-icon-analysis2026-09-25 https://junglewise.ai/threats/cve-2026-68923-mobsf-csrf-protection-bypass-after-django-migration2026-09-25 https://junglewise.ai/threats/cve-2026-68927-mobsf-ssrf-port-restriction-bypass-in-assetlinks-check2026-09-25 https://junglewise.ai/threats/cve-2026-68924-mobsf-zip-apk-extraction-denial-of-service-via-per-file-size2026-09-25 https://junglewise.ai/threats/cve-2026-63640-magicmirror-socket-payload-secret-placeholder-expansion2026-09-25 https://junglewise.ai/threats/cve-2026-55178-geolens-cross-dataset-authorization-bypass-in-map-relationship2026-09-25 https://junglewise.ai/threats/cve-2026-55182-librenms-remote-code-execution-in-signal-alert-transport2026-09-25 https://junglewise.ai/threats/cve-2026-63643-magicmirror-server-side-request-forgery-in-calendar-module2026-09-25 https://junglewise.ai/threats/cve-2026-63642-magicmirror-newsfeed-server-side-request-forgery-in-check-article2026-09-25 https://junglewise.ai/threats/cve-2026-63641-magicmirror-socket-io-auth-bypass-allows-unauthenticated-module2026-09-25 https://junglewise.ai/threats/cve-2026-61634-rabbitmq-java-client-protocol-violation-on-oversized-frames2026-09-25 https://junglewise.ai/threats/cve-2026-63336-rabbitmq-java-client-insecure-default-tls-certificate-validation2026-09-25 https://junglewise.ai/threats/cve-2026-63335-rabbitmq-java-client-denial-of-service-via-malformed-amqp-frame2026-09-25 https://junglewise.ai/threats/cve-2026-63337-rabbitmq-java-client-unsafe-reflection-in-json-rpc2026-09-25 https://junglewise.ai/threats/cve-2026-69219-rabbitmq-java-client-memory-allocation-dos-in-valuereader2026-09-25 https://junglewise.ai/threats/cve-2026-69220-rabbitmq-java-client-unbounded-recursion-in-valuereader2026-09-25 https://junglewise.ai/threats/cve-2026-63328-aqua-trivy-plugin-manager-path-traversal-arbitrary-file-write2026-09-25 https://junglewise.ai/threats/cve-2026-55839-kestra-stored-xss-via-custom-markdown-link-attribute-injection2026-09-25 https://junglewise.ai/threats/rhinostone-swig-path-traversal-in-include-extends-tags-19cf49282026-09-25 https://junglewise.ai/threats/rhinostone-swig-path-traversal-in-include-extends-3d83b9b92026-09-25 https://junglewise.ai/threats/cve-2026-70657-copyparty-file-dirkey-confusion-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-65400-apple-macos-screen-sharing-authentication-bypass2026-09-24 https://junglewise.ai/threats/cve-2026-69148-mlflow-createmodelversion-authorization-bypass-via-source2026-09-25 https://junglewise.ai/threats/cve-2026-69146-mlflow-loginputs-endpoint-authorization-bypass-in-basic-auth2026-09-25 https://junglewise.ai/threats/cve-2026-64849-mlflow-server-side-request-forgery2026-09-25 https://junglewise.ai/threats/cve-2026-56677-9router-unauthenticated-server-side-request-forgery-in-oidc-test2026-09-25 https://junglewise.ai/threats/cve-2026-54147-http4k-http4k-security-digest-weak-cryptographic-algorithm-in2026-09-25 https://junglewise.ai/threats/go-pkcs12-authentication-bypass-in-decode-functions-db1e1a0f2026-09-25 https://junglewise.ai/threats/cve-2026-53752-docx4j-stack-overflow-via-cyclic-style-chain2026-09-25 https://junglewise.ai/threats/cve-2026-53659-http4k-unbounded-gzip-decompression-denial-of-service2026-09-25 https://junglewise.ai/threats/atomic-agents-stack-cost-guardrail-bypass-for-unknown-models-8c83e6212026-09-25 https://junglewise.ai/threats/atomic-agents-stack-http-mcp-catalog-code-execution-via-mitm-25e6df1d2026-09-25 https://junglewise.ai/threats/cve-2026-59903-netty-corshandler-cache-poisoning-via-vary-header-overwrite2026-09-25 https://junglewise.ai/threats/cve-2026-59902-netty-sctpmessagecompletionhandler-memory-exhaustion2026-09-25 https://junglewise.ai/threats/uniget-cli-metadata-signature-verification-logic-inversion-d671aea82026-09-25 https://junglewise.ai/threats/cve-2026-59893-sqlparse-inefficient-regex-handling-in-dollar-quoted-literals2026-09-25 https://junglewise.ai/threats/cve-2026-54284-sqlparse-tokenlist-cpu-denial-of-service2026-09-25 https://junglewise.ai/threats/cve-2026-55090-etherpad-stored-xss-in-html-export-via-unescaped-attribute-pool2026-09-25 https://junglewise.ai/threats/etherpad-cryptographic-hardening-in-token-generation-authentication-and-b07b6d552026-09-25 https://junglewise.ai/threats/cve-2026-55062-uniget-cli-path-traversal-in-hook-file-handling2026-09-25 https://junglewise.ai/threats/cve-2026-55061-uniget-cli-command-injection-in-editor-variable-parsing2026-09-25 https://junglewise.ai/threats/vm2-memory-exhaustion-dos-via-bufferalloclimit-bypass-8ef444232026-09-25 https://junglewise.ai/threats/vm2-nodevm-builtin-wildcard-host-process-hijack-c37091372026-09-25 https://junglewise.ai/threats/cve-2026-47698-vm2-sandbox-escape-via-proto-mutators2026-09-25 https://junglewise.ai/threats/cve-2026-47686-vm2-sandbox-escape-via-unsanitized-error-cause2026-09-25 https://junglewise.ai/threats/cve-2026-47683-vm2-bufferalloclimit-bypass-in-buffer-concat-and-buffer-from2026-09-25 https://junglewise.ai/threats/cve-2026-71491-sqlparse-quadratic-dos-in-group-comments2026-09-25 https://junglewise.ai/threats/cve-2026-68520-glances-as-dict-secure-credential-leak-in-api-config-endpoint2026-09-25 https://junglewise.ai/threats/cve-2026-68519-glances-incomplete-fix-in-alert-action-command-execution2026-09-25 https://junglewise.ai/threats/cve-2026-62982-glances-incomplete-command-injection-sanitizer-fix-in-nested-stat2026-09-25 https://junglewise.ai/threats/cve-2026-59894-sqlparse-code-injection-in-python-and-php-output-modes2026-09-25 https://junglewise.ai/threats/cve-2026-68517-glances-rest-api-cors-credentials-bypass-via-wildcard-in-multi2026-09-25 https://junglewise.ai/threats/cve-2026-45099-gruntwork-terragrunt-arbitrary-file-deletion-in-module-manifest2026-09-25 https://junglewise.ai/threats/cve-2026-68518-glances-command-injection-via-cross-field-shell-operator2026-09-25 https://junglewise.ai/threats/cve-2026-64865-quantumnous-new-api-redis-quota-cache-race-condition-in-user2026-09-25 https://junglewise.ai/threats/cve-2026-71479-quantumnous-new-api-integer-overflow-in-quota-billing2026-09-25 https://junglewise.ai/threats/cve-2026-64866-quantumnous-new-api-admin-passkey-reset-privilege-escalation2026-09-25 https://junglewise.ai/threats/cve-2026-64868-quantumnous-new-api-unauthenticated-payment-webhook-denial-of2026-09-25 https://junglewise.ai/threats/cve-2026-64859-new-api-user-list-api-information-disclosure-and-privilege2026-09-25 https://junglewise.ai/threats/cve-2026-55158-conflibot-command-injection-in-pull-request-branch-names2026-09-24 https://junglewise.ai/threats/cve-2026-40345-deepmergets-stack-exhaustion-in-recursive-object-merging2026-09-24 https://junglewise.ai/threats/cve-2025-62593-ray-project-ray-code-injection-vulnerability2026-09-24 https://junglewise.ai/threats/cve-2026-55156-token-optimizer-mcp-path-traversal-in-session-log-api2026-09-24 https://junglewise.ai/threats/cve-2026-55157-token-optimizer-mcp-os-command-injection-in-smart-user2026-09-24 https://junglewise.ai/threats/cve-2026-53708-ibm-contextforge-dns-toctou-race-condition-in-ssrf-validation2026-09-24 https://junglewise.ai/threats/cve-2026-53660-openam-insecure-sso-cookie-initialization2026-09-24 https://junglewise.ai/threats/cve-2026-53658-hyperledger-fabric-ca-ldap-injection-in-getuser-filter2026-09-24 https://junglewise.ai/threats/cve-2026-35219-budibase-automation-ssrf-in-webhook-and-integration-steps2026-09-24 https://junglewise.ai/threats/cve-2026-35511-authorizer-oauth-account-takeover-via-unverified-email-linking2026-09-24 https://junglewise.ai/threats/cve-2026-73654-trigger-dev-prototype-pollution-in-run-metadata-operations2026-09-24 https://junglewise.ai/threats/cve-2026-73559-vllm-completion-prompt-lists-dos2026-09-24 https://junglewise.ai/threats/atomic-agents-stack-dashboard-path-traversal-in-http-server-0ec5bd4c2026-09-24 https://junglewise.ai/threats/cve-2026-55102-hashi-vault-js-sensitive-information-exposure-in-error-handling2026-09-24 https://junglewise.ai/threats/cve-2026-55088-etherpad-replayable-token-transfer-endpoint-with-cleartext-token2026-09-24 https://junglewise.ai/threats/cve-2026-55086-etherpad-predictable-temp-file-paths-enable-symlink-based-file2026-09-25 https://junglewise.ai/threats/cve-2026-55087-etherpad-lite-cache-poisoning-xss-and-open-redirect-via-x-proxy2026-09-24 https://junglewise.ai/threats/cve-2026-55072-pimcore-classdefinition-uid-regex-sql-injection-in-block-php2026-09-24 https://junglewise.ai/threats/cve-2026-55074-chofstede-ansible-jailexec-jail-escape-via-symlink-following2026-08-12 https://junglewise.ai/threats/sipsorcery-turnserver-denial-of-service-via-malformed-udp-datagram-96530cb32026-08-12 https://junglewise.ai/threats/sipsorcery-out-of-bounds-read-in-sctp-sack-chunk-parsing-365efd662026-08-12 https://junglewise.ai/threats/cve-2026-55071-stata-mcp-command-injection-in-ado-package-install2026-08-12 https://junglewise.ai/threats/cve-2026-52776-compliance-trestle-ssrf-allowlist-bypass-in-urlsecurityvalidator2026-08-12 https://junglewise.ai/threats/cve-2026-48798-ssh-net-scpclient-path-traversal-in-recursive-download2026-08-12 https://junglewise.ai/threats/cve-2026-48786-fleet-information-disclosure-in-target-search-endpoint2026-08-12 https://junglewise.ai/threats/cve-2026-47132-phpmyfaq-sql-like-wildcard-injection-in-chat-user-search2026-08-12 https://junglewise.ai/threats/cve-2026-46369-nimiq-nimiq-blockchain-off-by-one-error-in-validity-store2026-08-12 https://junglewise.ai/threats/cve-2026-45694-librenms-reflected-xss-in-proxmox-application-component2026-08-12 https://junglewise.ai/threats/cve-2026-35445-winter-cms-authorization-bypass-in-users-controller2026-08-12 https://junglewise.ai/threats/cve-2026-32639-winter-cms-broken-access-control-in-cms-controllers-index2026-08-12 https://junglewise.ai/threats/cve-2026-32593-winter-cms-sql-injection-in-backend-filter-widget-numberrange2026-08-12 https://junglewise.ai/threats/cve-2026-32258-winter-cms-stored-xss-in-editor-settings-custom-styles2026-08-12 https://junglewise.ai/threats/cve-2026-32257-winter-cms-stored-xss-in-brand-settings-custom-styles2026-08-12 https://junglewise.ai/threats/cve-2026-9318-jazzband-tablib-stored-xss-in-html-export-dataset-title2026-08-12 https://junglewise.ai/threats/cve-2026-62902-microsoft-net-wpf-information-disclosure-in-document-parsing2026-08-11 https://junglewise.ai/threats/cve-2026-62871-microsoft-net-wpf-heap-overflow-and-elevation-of-privilege2026-08-11 https://junglewise.ai/threats/cve-2026-62897-microsoft-net-integer-overflow-in-windows-presentation-foundation2026-08-11 https://junglewise.ai/threats/cve-2026-70354-microsoft-net-out-of-bounds-write-in-windows-presentation2026-08-11 https://junglewise.ai/threats/cve-2026-62909-microsoft-net-privilege-escalation-in-diagnostics-ipc2026-08-11 https://junglewise.ai/threats/cve-2026-62886-microsoft-net-wpf-elevation-of-privilege-via-integer-overflow2026-08-11 https://junglewise.ai/threats/cve-2026-62901-microsoft-net-denial-of-service-in-system-net-websockets2026-08-11 https://junglewise.ai/threats/cve-2026-62899-microsoft-net-security-feature-bypass-in-system-net-httplistener2026-08-11 https://junglewise.ai/threats/cve-2026-62898-microsoft-net-use-after-free-in-microsoft-quic2026-08-11 https://junglewise.ai/threats/cve-2026-73080-seaweedfs-unauthenticated-ssrf-in-volumeserver2026-08-11 https://junglewise.ai/threats/nuxt-dev-server-information-disclosure-via-chrome-devtools-endpoint-1e6095d92026-09-24 https://junglewise.ai/threats/cve-2026-20349-cisco-secure-firewall-asa-and-ftd-denial-of-service-in-ssl-vpn2026-08-11 https://junglewise.ai/threats/cve-2026-68820-microsoft-windows-ancillary-function-driver-for-winsock-use-after2026-08-11 https://junglewise.ai/threats/cve-2026-72898-metabase-sql-injection-in-password-reset-endpoint2026-08-11 https://junglewise.ai/threats/cve-2026-71870-pypdf-uncontrolled-resource-consumption-in-tounicode-streams2026-08-07 https://junglewise.ai/threats/cve-2026-71852-pypdf-excessive-iteration-in-cid-font-width-parsing2026-08-07 https://junglewise.ai/threats/cve-2026-71851-brix-crypto-js-insufficient-entropy-in-wordarray-random2026-08-07 https://junglewise.ai/threats/cve-2026-71850-hono-hono-jsx-cross-user-data-disclosure-in-memo-function2026-08-07 https://junglewise.ai/threats/cve-2026-71849-hono-proxy-helper-information-disclosure-via-hop-by-hop-headers2026-08-07 https://junglewise.ai/threats/cve-2026-71848-hono-languagedetector-algorithmic-complexity-dos2026-08-07 https://junglewise.ai/threats/cve-2026-71847-ruby-json-heap-use-after-free-in-resumableparser2026-08-07 https://junglewise.ai/threats/cve-2026-67422-facelessuser-pymdown-extensions-redos-in-multiple-inline2026-08-07 https://junglewise.ai/threats/cve-2026-56818-netty-redisarrayaggregator-memory-leak-in-resp-decoding2026-08-07 https://junglewise.ai/threats/cve-2026-66062-svelte-sveltekit-redos-in-accept-header-content-negotiation2026-09-25 https://junglewise.ai/threats/nuxt-dev-server-information-disclosure-in-chrome-devtools-endpoint-84ecf4052026-08-07 https://junglewise.ai/threats/cve-2026-71557-go-git-path-traversal-via-malicious-reference-names2026-08-07 https://junglewise.ai/threats/cve-2026-71556-go-git-symlink-traversal-in-worktree-operations2026-08-07 https://junglewise.ai/threats/gitpython-command-execution-via-short-option-smuggling-bypass-37730e442026-08-07 https://junglewise.ai/threats/gitpython-rce-via-git-config-option-name-injection-a2291ba62026-08-07 https://junglewise.ai/threats/gitpython-path-traversal-via-unvalidated-submodule-name-287f90262026-08-07 https://junglewise.ai/threats/gitpython-arbitrary-file-read-in-indexfile-remove-and-head-checkout-fe58ac212026-08-07 https://junglewise.ai/threats/gitpython-command-injection-in-repo-init-via-template-option-d6ee64e12026-08-07 https://junglewise.ai/threats/gitpython-argument-injection-in-indexfile-enables-arbitrary-file-b2cd09f22026-08-07 https://junglewise.ai/threats/cure53-dompurify-xss-via-in-place-hook-removal-a96c9d922026-08-07 https://junglewise.ai/threats/cve-2026-62996-smarty-security-stream-restriction-bypass-in-streamplugin2026-08-07 https://junglewise.ai/threats/cve-2026-62992-smarty-symlink-path-traversal-in-security-policy2026-08-07 https://junglewise.ai/threats/craft-cms-authentication-bypass-via-webauthn-replay-in-passkey-login-5577ef1c2026-08-07 https://junglewise.ai/threats/craft-cms-arbitrary-file-read-via-splfileobject-in-twig-templates-1e0ddcaf2026-08-06 https://junglewise.ai/threats/cve-2026-71554-python-hyper-h2-request-smuggling-via-duplicate-host-headers2026-08-06 https://junglewise.ai/threats/craft-cms-environment-variable-leak-via-twig-sandbox-bypass-54f53d6c2026-08-06 https://junglewise.ai/threats/craft-cms-authorization-bypass-in-category-structure-management-d28fa1202026-08-07 https://junglewise.ai/threats/craft-cms-missing-authorization-check-in-chartscontroller-3b1c02d92026-08-06 https://junglewise.ai/threats/craft-cms-path-traversal-in-local-file-system-class-15e6d0942026-08-06 https://junglewise.ai/threats/craft-cms-stored-xss-via-unescaped-draft-name-in-control-panel-117560862026-08-06 https://junglewise.ai/threats/cve-2026-67434-php-codesniffer-command-injection-in-blame-reports-via-crafted2026-08-06 https://junglewise.ai/threats/cve-2026-71498-uhop-node-re2-out-of-bounds-heap-read-in-replace-and-split2026-08-06 https://junglewise.ai/threats/cve-2026-71430-node-re2-process-abort-via-large-string-replacement2026-08-06 https://junglewise.ai/threats/ngx-extended-pdf-viewer-arbitrary-code-execution-via-bundled-pdf-js-40df0fef2026-08-06 https://junglewise.ai/threats/cve-2026-16633-mozilla-pdf-js-arbitrary-javascript-execution-via-malicious-pdf2026-08-06 https://junglewise.ai/threats/cve-2026-71497-jsoup-xss-in-cleaner-with-custom-safelist-raw-text-elements2026-08-06 https://junglewise.ai/threats/craft-cms-improper-authorization-in-user-password-reset-9461dd382026-08-06 https://junglewise.ai/threats/craft-cms-twig-sandbox-escape-leading-to-authenticated-rce-f8c70cd62026-08-06 https://junglewise.ai/threats/craft-cms-authenticated-rce-via-condition-config-json-cleanse-bypass-08cfc3c02026-08-06 https://junglewise.ai/threats/thephpleague-commonmark-denial-of-service-in-xmlrenderer-995339922026-08-06 https://junglewise.ai/threats/thephpleague-commonmark-denial-of-service-in-uniqueslugnormalizer-94ab233b2026-08-06 https://junglewise.ai/threats/league-commonmark-denial-of-service-in-footnote-extension-90371ead2026-08-06 https://junglewise.ai/threats/league-commonmark-denial-of-service-in-attributesextension-c631ba682026-08-06 https://junglewise.ai/threats/cve-2026-71488-league-commonmark-quadratic-time-denial-of-service-in-markdown2026-08-06 https://junglewise.ai/threats/cve-2026-71478-thephpleague-commonmark-xss-bypass-in-attributesextension2026-08-06 https://junglewise.ai/threats/nodeca-js-yaml-quadratic-cpu-consumption-in-omap-resolution-9112c3572026-08-06 https://junglewise.ai/threats/cve-2026-54717-silverstripe-cms-cross-site-scripting-in-breadcrumbs-page-list2026-08-06 https://junglewise.ai/threats/cve-2026-18654-aws-aws-cli-disabled-ssh-host-key-verification-in-emr-helper2026-09-25 https://junglewise.ai/threats/cve-2026-71476-nrwl-nx-path-traversal-in-self-hosted-remote-cache2026-08-06 https://junglewise.ai/threats/cve-2026-71439-mermaid-radar-diagrams-denial-of-service-via-unchecked-ticks2026-08-06 https://junglewise.ai/threats/cve-2026-71438-mermaid-prototype-pollution-in-configuration-apis2026-08-06 https://junglewise.ai/threats/cve-2026-50159-mermaid-css-injection-via-sibling-combinators2026-08-06 https://junglewise.ai/threats/cve-2026-71437-mermaid-prototype-pollution-in-architecture-beta-diagrams2026-09-25 https://junglewise.ai/threats/cve-2026-71436-mermaid-infinite-loop-in-xy-charts-axis-processing2026-09-25 https://junglewise.ai/threats/cve-2026-71435-statamic-cms-stored-xss-in-form-notification-email-template2026-08-06 https://junglewise.ai/threats/cve-2026-71434-statamic-cms-unrestricted-file-upload-in-frontend-forms2026-08-06 https://junglewise.ai/threats/cve-2026-64662-statamic-cms-missing-authorization-in-navigation-endpoint2026-08-06 https://junglewise.ai/threats/cve-2026-64663-statamic-cms-unsafe-reflection-in-antlers-template-resolution2026-08-06 https://junglewise.ai/threats/cve-2026-64665-statamic-cms-account-takeover-via-oauth-email-matching2026-08-06 https://junglewise.ai/threats/cve-2026-64664-statamic-cms-missing-authorization-in-control-panel-user-wizard2026-08-06 https://junglewise.ai/threats/cve-2026-71433-langgraph-incorrect-authorization-in-postgres-and-sqlite2026-08-06 https://junglewise.ai/threats/cve-2026-67309-traefik-auth-bypass-via-path-traversal-in-kubernetes-ingress2026-08-06 https://junglewise.ai/threats/cve-2026-71325-traefik-namespace-isolation-bypass-in-kubernetes-crd2026-08-06 https://junglewise.ai/threats/cve-2026-71327-traefik-proxy-cross-namespace-route-hijacking-via-identity2026-08-06 https://junglewise.ai/threats/cve-2026-71326-traefik-basicauth-identity-spoofing-via-singleflight-key2026-08-06 https://junglewise.ai/threats/cve-2026-71324-traefik-response-poisoning-via-proxied-connect-in-shared2026-08-06 https://junglewise.ai/threats/cve-2026-71321-nuxt-cpu-exhaustion-in-island-renderer-endpoint2026-08-05 https://junglewise.ai/threats/cve-2026-71320-nuxt-rce-via-runtime-template-injection-in-server-island-props2026-08-05 https://junglewise.ai/threats/cve-2026-71319-nuxt-devtools-command-injection-via-unauthenticated-rpc-channel2026-09-24 https://junglewise.ai/threats/cve-2026-71318-nuxt-unauthorized-component-instantiation-in-server-islands2026-08-05 https://junglewise.ai/threats/cve-2026-71316-nuxt-sensitive-information-disclosure-in-runtime-payload-cache2026-08-05 https://junglewise.ai/threats/cve-2026-71315-nuxt-authorization-bypass-via-mixed-case-route-rules2026-08-05 https://junglewise.ai/threats/cve-2026-71314-nuxt-denial-of-service-via-unbounded-v-for-expansion-in-island2026-08-05 https://junglewise.ai/threats/cve-2026-71313-rclone-path-traversal-in-local-backend-via-custom-filename2026-08-05 https://junglewise.ai/threats/rclone-s3-backend-cleartext-credential-disclosure-via-scheme-downgrade-ce52b5df2026-08-05 https://junglewise.ai/threats/cve-2026-71312-rclone-command-injection-via-powershell-smart-quotes-in-sftp2026-08-05 https://junglewise.ai/threats/rclone-webdav-credential-leakage-in-https-to-http-redirect-c81178f52026-08-05 https://junglewise.ai/threats/cve-2026-71311-rclone-crlf-injection-in-ftp-backend-via-custom-filename-encoding2026-08-05 https://junglewise.ai/threats/rclone-s3-credential-disclosure-in-redirect-sanitization-4aebb4be2026-08-05 https://junglewise.ai/threats/rclone-path-traversal-in-serve-s3-b8a133122026-08-05 https://junglewise.ai/threats/rclone-null-pointer-dereference-in-webdav-tus-upload-796eb40c2026-08-05 https://junglewise.ai/threats/cve-2026-71310-rclone-memory-exhaustion-via-unbounded-http-connect-response2026-08-05 https://junglewise.ai/threats/cve-2026-71309-rclone-path-traversal-in-serve-restic-command2026-08-05 https://junglewise.ai/threats/rclone-privilege-escalation-via-insecure-metadata-application-in-local-a1d9574b2026-08-05 https://junglewise.ai/threats/rclone-verbose-stack-trace-disclosure-in-rc-api-0577cd742026-08-05 https://junglewise.ai/threats/cve-2026-70612-electron-sandbox-bypass-via-external-protocol-handlers-in-iframes2026-08-05 https://junglewise.ai/threats/cve-2026-70611-electron-command-injection-in-devtools-reveal-in-file-manager2026-08-05 https://junglewise.ai/threats/cve-2026-70610-electron-prototype-pollution-in-contextbridge-object-copying2026-08-05 https://junglewise.ai/threats/cve-2026-70609-electron-javascript-injection-in-devtools-via-unsanitized-dock2026-08-05 https://junglewise.ai/threats/cve-2026-70608-electron-sandbox-bypass-via-openurl-navigation-path2026-08-05 https://junglewise.ai/threats/cve-2026-70607-electron-improper-input-validation-in-window-open-features-string2026-08-05 https://junglewise.ai/threats/cve-2026-70606-electron-cache-isolation-bypass-in-protocolresponse2026-08-05 https://junglewise.ai/threats/cve-2026-70605-electron-ssrf-and-local-file-disclosure-via-http-redirect2026-08-05 https://junglewise.ai/threats/cve-2026-70604-electron-cross-origin-read-in-custom-protocol-handlers2026-08-05 https://junglewise.ai/threats/cve-2026-70602-electron-session-isolation-bypass-in-extension-tab-and-scripting2026-08-05 https://junglewise.ai/threats/cve-2026-70603-electron-shell-openpath-path-validation-bypass-via-embedded-null2026-08-05 https://junglewise.ai/threats/cve-2026-70601-electron-context-isolation-bypass-via-function-prototype-bind2026-08-05 https://junglewise.ai/threats/cve-2026-70600-electron-ui-layer-restriction-bypass-in-native-autofill-popup2026-08-05 https://junglewise.ai/threats/cve-2026-70599-electron-origin-validation-error-in-permission-check-handler2026-08-05 https://junglewise.ai/threats/cve-2026-70598-electron-out-of-bounds-read-in-off-screen-rendering2026-08-05 https://junglewise.ai/threats/cve-2026-70597-electron-code-signing-bypass-in-macos-parent-process-validation2026-08-05 https://junglewise.ai/threats/cve-2026-70596-ghost-stored-xss-in-feature-image-captions2026-08-05 https://junglewise.ai/threats/cve-2026-70595-ghost-ssrf-in-webmentions-functionality2026-08-05 https://junglewise.ai/threats/cve-2026-71211-mlflow-ai-gateway-ssrf-via-unvalidated-api-base2026-09-25 https://junglewise.ai/threats/cve-2026-70594-tryghost-ghost-session-fixation-in-ghost-admin2026-08-04 https://junglewise.ai/threats/cve-2026-70593-ghost-path-traversal-in-custom-theme-upload2026-08-04 https://junglewise.ai/threats/cve-2026-70592-ghost-path-traversal-in-database-backup-functionality2026-08-04 https://junglewise.ai/threats/cve-2026-70591-ghost-ssrf-in-ghost-admin-image-fetching2026-08-04 https://junglewise.ai/threats/cve-2026-70590-tryghost-ghost-password-hash-disclosure-in-admin-api2026-08-04 https://junglewise.ai/threats/cve-2026-70589-ghost-improper-validation-of-archived-subscription-offers2026-08-04 https://junglewise.ai/threats/cve-2026-70588-ghost-xss-in-universal-import-feature2026-09-25 https://junglewise.ai/threats/cve-2026-70494-open-webui-incorrect-authorization-in-shared-folder-deletion2026-08-04 https://junglewise.ai/threats/cve-2026-70493-open-webui-redos-in-knowledge-search-tools2026-08-04 https://junglewise.ai/threats/cve-2026-70492-open-webui-stored-xss-in-katex-render-error-fallback2026-08-04 https://junglewise.ai/threats/cve-2026-70491-open-webui-tool-source-code-disclosure-to-read-only-users2026-08-04 https://junglewise.ai/threats/cve-2026-70490-open-webui-authorization-bypass-in-terminal-websocket-route2026-08-04 https://junglewise.ai/threats/cve-2026-70489-open-webui-resource-consumption-via-automation-recurrence-rules2026-08-04 https://junglewise.ai/threats/cve-2026-54020-open-webui-dns-rebinding-ssrf-bypass-in-multiple-components2026-08-04 https://junglewise.ai/threats/cve-2026-70487-open-webui-missing-authorization-in-inline-model-knowledge2026-08-04 https://junglewise.ai/threats/cve-2026-70488-open-webui-incorrect-authorization-in-sync-cleanup-endpoint2026-08-04 https://junglewise.ai/threats/cve-2026-70486-open-webui-same-origin-xss-in-terminal-file-preview2026-08-04 https://junglewise.ai/threats/cve-2026-70485-open-webui-ssrf-via-nat64-encoded-urls-in-web-retrieval2026-08-04 https://junglewise.ai/threats/cve-2026-70484-open-webui-authorization-bypass-in-image-generation-via-chat2026-08-04 https://junglewise.ai/threats/cve-2026-70480-open-webui-client-side-ssrf-in-vega-chart-rendering2026-08-04 https://junglewise.ai/threats/cve-2026-70483-open-webui-missing-authorization-in-chat-delete-endpoint2026-08-04 https://junglewise.ai/threats/cve-2026-70482-open-webui-account-takeover-via-oauth-token-exchange2026-08-04 https://junglewise.ai/threats/cve-2026-70481-open-webui-improper-authorization-in-standard-channel-message2026-08-04 https://junglewise.ai/threats/cve-2026-70479-open-webui-ssrf-in-playwright-web-loader-safeplaywrighturlloader2026-08-04 https://junglewise.ai/threats/cve-2026-70478-flowise-unauthenticated-oauth2-token-refresh-in-credential2026-08-04 https://junglewise.ai/threats/cve-2026-70477-flowise-rce-via-csv-agent-prompt-injection2026-08-04 https://junglewise.ai/threats/cve-2026-70476-flowise-broken-access-control-in-stripe-subscription-endpoints2026-08-04 https://junglewise.ai/threats/flowise-missing-authorization-in-text-to-speech-endpoint-09292a2d2026-08-04 https://junglewise.ai/threats/cve-2026-70475-flowise-missing-authorization-in-execution-update-endpoint2026-08-04 https://junglewise.ai/threats/cve-2026-70474-flowise-oauth2-credential-isolation-bypass-and-authentication2026-08-04 https://junglewise.ai/threats/flowise-incomplete-credential-redaction-in-credentials-api-b2a120842026-08-04 https://junglewise.ai/threats/cve-2026-70473-flowise-information-disclosure-in-upsert-history-api2026-08-04 https://junglewise.ai/threats/cve-2026-70472-flowise-idor-in-openai-assistants-vector-store2026-08-04 https://junglewise.ai/threats/cve-2026-69264-flowise-flowise-rce-via-python-injection-in-csvagent2026-08-04 https://junglewise.ai/threats/flowise-arbitrary-file-write-via-path-traversal-in-s3-document-loaders-a834fe1c2026-08-04 https://junglewise.ai/threats/cve-2026-70471-flowise-rbac-bypass-in-workspace-variables-injection2026-08-04 https://junglewise.ai/threats/cve-2026-70470-flowise-pyodide-validator-unicode-homoglyph-bypass-in-csv-and2026-08-04 https://junglewise.ai/threats/cve-2026-69263-flowise-rce-via-mcp-environment-variable-blocklist-bypass2026-08-04 https://junglewise.ai/threats/cve-2026-69262-flowise-incorrect-authorization-in-chatflow-deletion-api2026-08-04 https://junglewise.ai/threats/cve-2026-69259-flowise-remote-code-execution-in-sqlite-record-manager-node2026-08-04 https://junglewise.ai/threats/cve-2026-69258-flowise-property-injection-in-prediction-api2026-08-04 https://junglewise.ai/threats/cve-2026-69257-flowise-ssrf-protection-bypass-via-ipv4-mapped-ipv6-addresses2026-08-04 https://junglewise.ai/threats/cve-2026-69256-flowise-csvagent-remote-code-execution-via-pandas-read-pickle2026-08-04 https://junglewise.ai/threats/cve-2026-69255-flowise-csv-agent-remote-code-execution-via-pyodide-code2026-08-04 https://junglewise.ai/threats/cve-2026-69254-flowise-nodevm-sandbox-escape-in-executejavascriptcode2026-09-25 https://junglewise.ai/threats/cve-2026-69252-flowise-missing-authorization-in-files-api-endpoint2026-08-04 https://junglewise.ai/threats/cve-2026-69251-flowise-rce-via-typeorm-datasource-configuration2026-08-04 https://junglewise.ai/threats/cve-2026-69250-flowise-ssrf-and-secret-exfiltration-in-oauth2-refresh-endpoint2026-08-04 https://junglewise.ai/threats/cve-2026-73488-flowise-idor-in-payment-source-endpoint2026-09-24 https://junglewise.ai/threats/flowise-idor-in-customer-default-source-endpoint-e345be382026-08-04 https://junglewise.ai/threats/cve-2026-18556-n-able-n-central-authentication-bypass-via-alternate-path2026-08-04 https://junglewise.ai/threats/cve-2026-69248-pyca-cryptography-improper-certificate-validation-in-name2026-08-03 https://junglewise.ai/threats/cve-2026-69249-pyca-cryptography-exponential-path-building-in-x-509-verification2026-08-03 https://junglewise.ai/threats/cve-2026-69247-pyca-cryptography-bleichenbacher-oracle-in-pkcs-7-decryption2026-08-03 https://junglewise.ai/threats/cve-2026-69246-guzzle-noncanonical-host-bypass-in-uri-handlers2026-08-03 https://junglewise.ai/threats/cve-2026-69245-guzzle-incorrect-cookie-domain-matching-for-noncanonical-ip2026-08-03 https://junglewise.ai/threats/cve-2026-69244-aiohttp-out-of-bounds-heap-read-in-c-http-response-parser2026-08-03 https://junglewise.ai/threats/cve-2026-69243-aiohttp-request-smuggling-in-websocket-upgrade2026-08-03 https://junglewise.ai/threats/cve-2026-69240-sequelize-sql-injection-in-oracle-dialect-escape-function2026-08-03 https://junglewise.ai/threats/cve-2026-69207-hono-redos-in-cors-middleware-via-access-control-request-headers2026-08-03 https://junglewise.ai/threats/gitpython-argument-injection-in-commit-count-method-0c4ff2702026-08-03 https://junglewise.ai/threats/gitpython-arbitrary-file-read-in-repo-archive-via-incomplete-denylist-851641e42026-08-03 https://junglewise.ai/threats/gitpython-arbitrary-file-read-and-overwrite-in-indexfile-and-89737d7c2026-08-03 https://junglewise.ai/threats/cve-2026-69192-beaugunderson-ip-address-ssrf-via-improper-leading-zero-octal2026-08-03 https://junglewise.ai/threats/cve-2026-69198-beaugunderson-ip-address-ssrf-bypass-via-cidr-suffix-masking2026-08-03 https://junglewise.ai/threats/cve-2026-69185-socket-io-socket-io-parser-memory-exhaustion-via-binary2026-09-25 https://junglewise.ai/threats/cve-2026-69153-postcss-path-traversal-in-sourcemappingurl-parsing2026-08-03 https://junglewise.ai/threats/cve-2026-69152-juliangruber-brace-expansion-denial-of-service-via-unbounded2026-08-03 https://junglewise.ai/threats/cve-2026-69151-angular-i18n-cross-site-scripting-via-event-handler-attributes2026-08-03 https://junglewise.ai/threats/cve-2026-69149-angular-ssr-xss-in-fallback-raw-content-elements2026-08-03 https://junglewise.ai/threats/cve-2026-68945-angular-httptransfercache-cache-key-ambiguity-in-ssr2026-08-03 https://junglewise.ai/threats/cve-2026-68930-eugeny-russh-channel-scoped-callback-bypass-for-unopened-channels2026-08-03 https://junglewise.ai/threats/siyuan-missing-authorization-in-getbacklinkdoc-getbackmentiondoc-568c02d62026-09-25 https://junglewise.ai/threats/cve-2026-18577-n-able-n-central-authentication-bypass-and-account-takeover2026-08-03 https://junglewise.ai/threats/better-auth-external-request-basepath-modification-dos-644481c42026-09-25 https://junglewise.ai/threats/cve-2026-9335-keras-hdf5-arbitrary-file-disclosure-via-externallinks2026-08-07 https://junglewise.ai/threats/guzzle-guzzlehttp-host-only-cookie-scope-disclosure-958db8d52026-08-04 https://junglewise.ai/threats/guzzle-information-disclosure-in-redirectmiddleware-referer-headers-d2e711b62026-08-04 https://junglewise.ai/threats/guzzle-unbounded-response-cookies-denial-of-service-in-cookiejar-f650c2bc2026-08-04 https://junglewise.ai/threats/guzzle-proxy-authorization-header-disclosure-to-origin-servers-7a8a65752026-08-04 https://junglewise.ai/threats/axios-form-serializer-maxdepth-bypass-via-metatoken-e443b5bd2026-09-25 https://junglewise.ai/threats/axios-prototype-pollution-in-basic-auth-subfields-af4d71372026-09-25 https://junglewise.ai/threats/axios-fetch-adapter-readablestream-maxbodylength-bypass-cf80b4522026-09-25 https://junglewise.ai/threats/axios-prototype-pollution-gadgets-in-request-construction-a32711452026-09-25 https://junglewise.ai/threats/axios-uncontrolled-recursion-in-formdatatojson-denial-of-service-99f685fa2026-09-25 https://junglewise.ai/threats/axios-prototype-pollution-in-basic-auth-subfield-handling-84a58e9b2026-08-07 https://junglewise.ai/threats/traefik-path-traversal-in-kubernetes-ingress-nginx-rewritetarget-0cb6afa72026-08-06 https://junglewise.ai/threats/cve-2026-6453-cubewp-framework-sql-injection-in-cubewp-remove-relation2026-08-01 https://junglewise.ai/threats/cve-2026-18435-stellarwp-kadence-blocks-stored-xss-in-toggleicon-attribute2026-08-01 https://junglewise.ai/threats/cve-2026-18344-nik00726-wp-responsive-thumbnail-slider-reflected-xss-in-id2026-08-01 https://junglewise.ai/threats/cve-2026-18062-stellarwp-kadence-blocks-stored-xss-in-identity-block2026-08-01 https://junglewise.ai/threats/cve-2026-18059-pixelyoursite-wordpress-plugin-sensitive-information-exposure-in2026-08-01 https://junglewise.ai/threats/cve-2026-17605-ayecode-getpaid-local-file-inclusion-in-getpaid-payment-form2026-08-01 https://junglewise.ai/threats/cve-2026-17580-wplakeorg-advanced-views-sensitive-information-exposure-in-rest2026-08-01 https://junglewise.ai/threats/cve-2026-17571-wpmanageninja-fluent-forms-reflected-xss-via-param-parameter2026-08-01 https://junglewise.ai/threats/cve-2026-17555-wpvivid-backup-migration-sql-injection-in-export-data2026-08-01 https://junglewise.ai/threats/cve-2026-16685-wordpress-download-manager-stored-xss-in-icon-shortcode-attribute2026-08-01 https://junglewise.ai/threats/cve-2026-16684-mervb1-easy-property-listings-stored-xss-in-facebook-contact2026-08-01 https://junglewise.ai/threats/cve-2026-16635-pronamic-pay-privilege-escalation-in-gravity-forms-extension2026-08-01 https://junglewise.ai/threats/cve-2026-16614-westerndeal-gsheetconnector-sql-injection-via-s-parameter2026-08-01 https://junglewise.ai/threats/cve-2026-16144-wpchill-kali-forms-remote-code-execution-in-save-data2026-08-01 https://junglewise.ai/threats/cve-2026-16091-gamipress-wordpress-plugin-stored-xss-in-gamipress-rank-shortcode2026-08-01 https://junglewise.ai/threats/cve-2026-16090-gamipress-wordpress-plugin-stored-xss-in-gamipress-achievement2026-08-01 https://junglewise.ai/threats/cve-2026-16087-icegram-engage-second-order-sql-injection-in-messages-parameter2026-08-01 https://junglewise.ai/threats/cve-2026-15964-britcoder-single-sign-on-for-tng-authentication-bypass-via2026-08-01 https://junglewise.ai/threats/cve-2026-15951-icegram-mailer-sql-injection-in-get-logs-function2026-08-01 https://junglewise.ai/threats/cve-2026-15950-cozy-blocks-wordpress-plugin-stored-xss-in-layoutcircle-alignment2026-08-01 https://junglewise.ai/threats/cve-2026-15662-mihail-barinov-advanced-woo-labels-stored-xss-in-bg-color2026-08-01 https://junglewise.ai/threats/cve-2026-15649-code-supply-co-powerkit-stored-xss-via-shortcode-attributes2026-08-01 https://junglewise.ai/threats/cve-2026-15645-codesupplyco-powerkit-stored-xss-in-nav-shortcode-attribute2026-08-01 https://junglewise.ai/threats/cve-2026-15644-powerkit-wordpress-plugin-stored-xss-in-style-shortcode-attribute2026-08-01 https://junglewise.ai/threats/cve-2026-15601-kirki-freeform-page-builder-path-traversal-in-extract-zip-file2026-08-01 https://junglewise.ai/threats/cve-2026-15450-webaways-nex-forms-lite-arbitrary-file-deletion-via-path2026-08-01 https://junglewise.ai/threats/cve-2026-15052-wordpress-mailchimp-subscribe-form-stored-xss-in-form-field2026-08-01 https://junglewise.ai/threats/cve-2026-15018-davejesch-database-collation-fix-sql-injection-in-force-collation2026-08-01 https://junglewise.ai/threats/cve-2026-13458-generateblocks-stored-xss-via-dynamic-tag-injection-in-html2026-08-01 https://junglewise.ai/threats/cve-2026-11995-gutena-forms-authorization-bypass-in-form-entry-management2026-08-01 https://junglewise.ai/threats/cve-2026-10782-inspiry-themes-realhomes-memberships-authorization-bypass-in2026-08-01 https://junglewise.ai/threats/cve-2025-14073-woocommerce-paypal-payments-idor-in-enqueue-paypal-insights2026-08-01 https://junglewise.ai/threats/cve-2026-2916-jegtheme-jeg-kit-for-elementor-sensitive-information-exposure2026-08-01 https://junglewise.ai/threats/cve-2026-15988-meow-apps-ai-engine-csrf-based-auth-bypass-in-reauth-for2026-08-01 https://junglewise.ai/threats/cve-2025-14469-mndpsingh287-theme-editor-csrf-in-ms-update-ajax-action2026-08-01 https://junglewise.ai/threats/cve-2026-15932-support-genix-wordpress-plugin-directory-traversal-in-ticket2026-08-01 https://junglewise.ai/threats/cve-2026-15368-cozmoslabs-user-profile-builder-account-takeover-via-auto-login2026-08-01 https://junglewise.ai/threats/cve-2026-15262-admin-columns-for-acf-fields-stored-xss-in-admin-list-table2026-08-01 https://junglewise.ai/threats/cve-2026-15244-husky-products-filter-professional-local-file-inclusion-in-meta2026-08-01 https://junglewise.ai/threats/cve-2026-15234-codeless-page-builder-stored-xss-in-shortcode-attribute2026-08-01 https://junglewise.ai/threats/cve-2026-14840-yop-poll-ip-address-spoofing-in-vote-restriction-mechanism2026-08-01 https://junglewise.ai/threats/cve-2026-14839-mapster-wp-maps-information-disclosure-via-public-rest-endpoint2026-08-01 https://junglewise.ai/threats/cve-2026-14836-wordpress-login-signup-popup-account-takeover-via-rate-limit2026-08-01 https://junglewise.ai/threats/cve-2026-14823-event-tickets-and-registration-idor-in-seating-actions2026-08-01 https://junglewise.ai/threats/cve-2026-14822-the-events-calendar-event-tickets-missing-authorization-in-rest2026-08-01 https://junglewise.ai/threats/cve-2026-14596-dynamickit-for-elementor-account-takeover-via-password-reset-host2026-08-01 https://junglewise.ai/threats/cve-2026-14561-authora-easy-login-with-mobile-number-authentication-bypass-via2026-08-01 https://junglewise.ai/threats/cve-2026-14315-sweetcode-pixel-manager-for-woocommerce-auth-bypass-in-ajax2026-08-01 https://junglewise.ai/threats/cve-2026-14309-chat-on-desk-order-notifications-authentication-bypass-in2026-08-01 https://junglewise.ai/threats/cve-2026-14292-wpdm-download-manager-stored-xss-in-package-title2026-08-01 https://junglewise.ai/threats/cve-2026-14214-amelia-booking-wordpress-plugin-arbitrary-user-field-modification2026-08-01 https://junglewise.ai/threats/cve-2026-14197-wpmanageninja-fluent-support-idor-in-ticket-customer-reassignment2026-08-01 https://junglewise.ai/threats/cve-2026-14195-brizy-wordpress-plugin-idor-in-get-post-info-handler2026-08-01 https://junglewise.ai/threats/cve-2026-13729-podlove-podcast-publisher-csrf-in-contributor-and-role-management2026-08-01 https://junglewise.ai/threats/cve-2026-13725-acowebs-dynamic-pricing-with-discount-rules-for-woocommerce2026-08-01 https://junglewise.ai/threats/cve-2026-13604-pixelavo-wordpress-plugin-event-injection-in-facebook-conversions2026-08-01 https://junglewise.ai/threats/cve-2026-13596-participants-database-wordpress-plugin-sql-injection-in-list2026-08-01 https://junglewise.ai/threats/cve-2026-13329-buckaroo-woocommerce-payments-plugin-unauthorized-refund-via-ajax2026-08-01 https://junglewise.ai/threats/cve-2026-13158-everest-themes-everest-toolkit-arbitrary-file-upload-in-demo2026-08-01 https://junglewise.ai/threats/cve-2026-13157-theme-demo-import-arbitrary-file-upload-in-demo-content-import2026-08-01 https://junglewise.ai/threats/cve-2026-12966-direct-payments-for-woocommerce-broken-access-control-in-ajax2026-08-01 https://junglewise.ai/threats/cve-2026-12696-wpforo-forum-stored-xss-in-user-profile-field2026-08-01 https://junglewise.ai/threats/cve-2026-11882-builderall-for-wordpress-oauth-access-token-poisoning2026-08-01 https://junglewise.ai/threats/cve-2026-10827-spectra-wordpress-plugin-stored-css-injection-in-block-attributes2026-08-01 https://junglewise.ai/threats/cve-2025-15669-bit-apps-bit-form-stored-xss-in-conversational-form-progress2026-08-01 https://junglewise.ai/threats/cve-2026-3141-wpwax-formgent-arbitrary-file-deletion-in-rest-api2026-08-01 https://junglewise.ai/threats/cve-2026-7623-brainstorm-force-sureforms-stored-xss-in-headingwrapper-parameter2026-08-01 https://junglewise.ai/threats/cve-2026-15414-wp-swings-subscriptions-for-woocommerce-privilege-escalation2026-08-01 https://junglewise.ai/threats/cve-2026-15403-dotonpaper-pinpoint-booking-system-blind-sql-injection-in-field2026-08-01 https://junglewise.ai/threats/cve-2026-15006-bitpress-bit-integrations-directory-traversal-in2026-08-01 https://junglewise.ai/threats/cve-2026-13362-sendpulse-email-marketing-newsletter-stored-xss-in-sp-form-code2026-08-01 https://junglewise.ai/threats/cve-2026-9044-tp-link-archer-axe75-os-command-injection-in-vpn-module2026-07-31 https://junglewise.ai/threats/cve-2026-54909-pion-stun-denial-of-service-via-panic-in-xormappedaddress2026-07-31 https://junglewise.ai/threats/cve-2026-54787-sigstore-go-expired-key-usage-in-self-managed-signing-workflow2026-07-31 https://junglewise.ai/threats/cve-2026-54785-elyin-gemini-bridge-path-traversal-in-consult-gemini-with-files2026-07-31 https://junglewise.ai/threats/cve-2026-54768-wpgraphql-user-enumeration-in-sendpasswordresetemail-mutation2026-07-31 https://junglewise.ai/threats/cve-2026-53573-geonetwork-open-redirect-in-oauth2-and-keycloak-login-filters2026-07-31 https://junglewise.ai/threats/cve-2026-45377-decidim-improper-access-control-in-private-data-exports2026-07-31 https://junglewise.ai/threats/cve-2026-45376-decidim-sql-injection-in-administrative-user-search2026-07-31 https://junglewise.ai/threats/cve-2026-45330-decidim-missing-authorization-in-identity-document-verification2026-07-31 https://junglewise.ai/threats/cve-2026-34641-adobe-premiere-pro-out-of-bounds-write2026-07-31 https://junglewise.ai/threats/cve-2016-1000305-guard-livereload-directory-traversal-in-livereload-server2026-07-31 https://junglewise.ai/threats/cve-2026-68771-comfy-org-comfyui-unsafe-deserialization-in-loadtrainingdataset2026-07-31 https://junglewise.ai/threats/cve-2026-52371-xxl-job-ssrf-in-jobinfo-trigger-component2026-07-31 https://junglewise.ai/threats/cve-2026-52232-fs-inc-s3150-8t2f-switch-reflected-xss-in-logo-asp2026-07-31 https://junglewise.ai/threats/cve-2026-52134-mz-automation-libiec61850-authentication-bypass-in2026-07-31 https://junglewise.ai/threats/cve-2026-51953-feehicms-insufficient-session-expiration-in-logout-handler2026-07-31 https://junglewise.ai/threats/cve-2026-45086-decidim-missing-authorization-in-demographics-questionnaire2026-07-31 https://junglewise.ai/threats/cve-2026-68770-hugging-face-sentence-transformers-code-execution-via-trust2026-07-31 https://junglewise.ai/threats/cve-2026-65981-coturn-authorization-bypass-in-mice-mobility-session-resumption2026-07-31 https://junglewise.ai/threats/cve-2026-51785-hugo-leisink-hiawatha-http-request-smuggling2026-07-31 https://junglewise.ai/threats/cve-2026-50986-202-ecommerce-prestashop-administrative-mandate-csrf-in-payment2026-07-31 https://junglewise.ai/threats/cve-2026-38713-cudy-routers-command-injection-in-ipsec-conn-interface2026-07-31 https://junglewise.ai/threats/cve-2026-38710-cudy-tr1200-and-tr3000-command-injection-in-system-setclock2026-07-31 https://junglewise.ai/threats/cve-2026-38708-cudy-tr-and-wr-routers-command-injection-in-system-setclock2026-07-31 https://junglewise.ai/threats/cve-2025-69948-sourcecodester-modern-loan-management-system-sql-injection-in2026-07-31 https://junglewise.ai/threats/cve-2025-69946-sourcecodester-modern-loan-management-system-sql-injection-in2026-07-31 https://junglewise.ai/threats/cve-2026-65841-xdan-jodit-editor-xss-via-svg-and-mathml-bypass-in-clean-html2026-07-31 https://junglewise.ai/threats/cve-2026-62999-copier-path-traversal-trust-bypass-via-encoded-urls2026-07-31 https://junglewise.ai/threats/cve-2026-62959-coturn-heap-memory-disclosure-in-acme-redirect2026-07-31 https://junglewise.ai/threats/cve-2026-62324-xdan-jodit-editor-xss-via-incomplete-href-normalization2026-07-31 https://junglewise.ai/threats/cve-2026-55825-contao-path-traversal-in-job-attachment-downloads2026-08-06 https://junglewise.ai/threats/cve-2026-53599-redaxo-cms-authenticated-rce-via-multi-extension-upload-bypass2026-07-31 https://junglewise.ai/threats/cve-2026-53551-free5gc-ausf-improper-input-validation-in-supiorsuci-field2026-07-31 https://junglewise.ai/threats/cve-2026-53510-savonrb-savon-code-injection-in-savon-model2026-07-31 https://junglewise.ai/threats/cve-2026-38711-cudy-tr-and-wr-series-routers-command-injection-in-system-upgrade2026-07-31 https://junglewise.ai/threats/cve-2026-18394-aws-strands-agents-tools-credential-exfiltration-in-http-request2026-09-25 https://junglewise.ai/threats/zingolabs-zaino-state-denial-of-service-in-reorg-handling-2b4a87ff2026-07-31 https://junglewise.ai/threats/cve-2026-57232-contao-ssrf-in-feed-reader-module2026-07-31 https://junglewise.ai/threats/cve-2026-55824-contao-cms-credential-leak-in-crawler-component2026-08-06 https://junglewise.ai/threats/cve-2026-53505-thumbor-uncontrolled-resource-consumption-in-proportion-filter2026-07-31 https://junglewise.ai/threats/cve-2026-53504-thumbor-redos-in-convolution-filter2026-07-31 https://junglewise.ai/threats/cve-2026-53503-thumbor-divide-by-zero-in-convolution-filter-c-extension2026-07-31 https://junglewise.ai/threats/cve-2026-53502-thumbor-path-traversal-in-file-loader-via-encoded-path-segments2026-07-31 https://junglewise.ai/threats/cve-2026-53501-thumbor-hmac-validation-bypass-via-multiple-signature-injection2026-07-31 https://junglewise.ai/threats/cve-2026-53500-thumbor-ssrf-via-unescaped-dots-in-allowed-sources2026-07-31 https://junglewise.ai/threats/cve-2026-25552-tryghost-ghost-cli-ip-spoofing-in-nginx-configuration2026-07-31 https://junglewise.ai/threats/cve-2026-18481-aws-ops-wheel-stored-xss-in-participant-url-handling2026-09-25 https://junglewise.ai/threats/cve-2026-18321-ntpsec-buffer-overflow-in-zyfer-refclock2026-07-31 https://junglewise.ai/threats/cve-2026-55100-kyndryl-hashi-vault-js-path-traversal-and-query-injection-in2026-07-31 https://junglewise.ai/threats/cve-2026-54737-phun-ky-defaults-deep-prototype-pollution-in-recursive-merge2026-07-31 https://junglewise.ai/threats/cve-2026-54729-hackingrepo-dssrf-js-ssrf-bypass-via-dns-resolver-inconsistency2026-07-31 https://junglewise.ai/threats/cve-2026-54725-bank-vaults-vault-secrets-webhook-ssrf-and-credential-theft-via2026-07-31 https://junglewise.ai/threats/cve-2026-34497-johnson-controls-fm-systems-employee-cross-site-scripting2026-07-31 https://junglewise.ai/threats/cve-2026-34495-johnson-controls-fm-systems-employee-stored-xss2026-07-31 https://junglewise.ai/threats/cve-2026-34490-johnson-controls-xaap-application-cleartext-storage-on-android2026-07-31 https://junglewise.ai/threats/cve-2026-21662-johnson-controls-fm-systems-employee-unrestricted-file-upload2026-07-31 https://junglewise.ai/threats/cve-2026-67822-tenda-w6-s-stack-overflow-in-wifissidset2026-07-31 https://junglewise.ai/threats/cve-2026-58048-webpros-cpanel-sql-injection-via-database-renaming2026-07-31 https://junglewise.ai/threats/cve-2026-58047-webpros-cpanel-http-request-smuggling-credential-leak2026-07-31 https://junglewise.ai/threats/cve-2026-54707-onionshare-incorrect-authorization-in-receive-mode-file-upload2026-07-31 https://junglewise.ai/threats/cve-2026-54706-onionshare-symlink-traversal-in-share-and-website-modes2026-07-31 https://junglewise.ai/threats/cve-2026-52856-pterodactyl-wings-denial-of-service-in-sftp-handshake2026-07-31 https://junglewise.ai/threats/cve-2026-52855-pterodactyl-wings-sensitive-information-disclosure-in-egg2026-07-31 https://junglewise.ai/threats/cve-2026-12075-nltk-dns-rebinding-ssrf-filter-bypass-in-pathsec-urlopen2026-07-31 https://junglewise.ai/threats/cve-2026-12061-nltk-redos-in-reviewscorpusreader-features-regex2026-07-31 https://junglewise.ai/threats/cve-2026-12072-nltk-path-traversal-in-nkjpcorpusreader-bypasses-pathsec-sandbox2026-07-31 https://junglewise.ai/threats/cve-2026-12074-nltk-path-traversal-in-framenetcorpusreader-allows-arbitrary-xml2026-07-31 https://junglewise.ai/threats/cve-2026-67607-hfiref0x-lightftp-race-condition-in-worker-thread-cleanup2026-07-31 https://junglewise.ai/threats/cve-2026-59232-roskus-prospero-flow-crm-stored-xss-in-lead-name-field2026-07-31 https://junglewise.ai/threats/cve-2026-59231-maalfer-pentestify-ssrf-in-pdf-export-component2026-07-31 https://junglewise.ai/threats/cve-2026-56571-hcl-icontrol-sensitive-information-disclosure-via-improper-error2026-07-31 https://junglewise.ai/threats/cve-2026-56570-hcl-icontrol-sensitive-information-disclosure-via-enabled2026-07-31 https://junglewise.ai/threats/cve-2026-56569-hcl-icontrol-sensitive-data-exposure-via-internal-configuration2026-07-31 https://junglewise.ai/threats/cve-2026-56568-hcl-icontrol-information-exposure-in-verbose-api-error-messages2026-07-31 https://junglewise.ai/threats/cve-2026-56567-hcl-icontrol-configuration-file-exposure-via-security2026-07-31 https://junglewise.ai/threats/cve-2026-52857-pterodactyl-wings-memory-exhaustion-in-configuration-file-parsers2026-07-31 https://junglewise.ai/threats/cve-2026-18141-red-hat-ansible-automation-platform-mtls-bypass-in-aap-gateway2026-07-31 https://junglewise.ai/threats/cve-2026-17566-pgadmin-4-os-command-injection-in-import-export-data-tool2026-07-31 https://junglewise.ai/threats/cve-2026-17351-pgadmin-4-sql-injection-bypass-in-ai-assistant2026-07-31 https://junglewise.ai/threats/cve-2026-17350-postgresql-pgadmin-4-missing-authorization-in-per-tool2026-07-31 https://junglewise.ai/threats/cve-2026-17349-postgresql-pgadmin-4-credential-leak-in-workspaces-adhoc2026-07-31 https://junglewise.ai/threats/cve-2026-17348-pgadmin-4-missing-authentication-in-multiple-server-mode-routes2026-07-31 https://junglewise.ai/threats/cve-2026-17347-pgadmin-4-os-command-injection-in-master-password-hook2026-07-31 https://junglewise.ai/threats/cve-2026-17346-pgadmin-4-sql-injection-in-statistics-and-dependencies-tabs2026-07-31 https://junglewise.ai/threats/cve-2026-16504-vps-org-zulip-template-hardcoded-secrets-and-insecure-defaults2026-07-31 https://junglewise.ai/threats/cve-2026-16503-vps-org-supabase-template-default-credentials-and-insecure2026-07-31 https://junglewise.ai/threats/cve-2026-10686-zephyr-rtos-infinite-loop-in-ipv6-forwarding-path2026-07-31 https://junglewise.ai/threats/cve-2025-62347-hcl-icontrol-improper-input-validation2026-07-31 https://junglewise.ai/threats/dynatrace-mcp-server-unauthenticated-tool-invocation-in-http-mode-b16625162026-07-31 https://junglewise.ai/threats/dynatrace-mcp-server-jinja2-template-injection-in-workflow-creation-7092d4e52026-07-31 https://junglewise.ai/threats/dynatrace-mcp-server-dql-injection-in-multiple-read-tools-0802dc372026-07-31 https://junglewise.ai/threats/cve-2026-67350-serendipity-open-redirect-in-exit-php2026-07-31 https://junglewise.ai/threats/cve-2026-51301-rejected-record2026-07-31 https://junglewise.ai/threats/cve-2026-51299-withdrawn-vulnerability-record2026-07-31 https://junglewise.ai/threats/cve-2026-51289-withdrawn-record2026-07-31 https://junglewise.ai/threats/cve-2026-51288-withdrawn-record-for2026-07-31 https://junglewise.ai/threats/cve-2026-51287-withdrawn-non-security-issue2026-07-31 https://junglewise.ai/threats/cve-2026-51286-withdrawn-invalid-security-record2026-07-31 https://junglewise.ai/threats/cve-2026-51285-withdrawn-record2026-07-31 https://junglewise.ai/threats/cve-2026-51284-rejected-record2026-07-31 https://junglewise.ai/threats/cve-2026-51283-withdrawn-non-security-issue2026-07-31 https://junglewise.ai/threats/cve-2026-51282-withdrawn-record2026-07-31 https://junglewise.ai/threats/cve-2026-51281-withdrawn-cve-record2026-07-31 https://junglewise.ai/threats/cve-2026-51280-withdrawn-non-security-issue2026-07-31 https://junglewise.ai/threats/cve-2026-51279-withdrawn-record2026-07-31 https://junglewise.ai/threats/cve-2026-51278-withdrawn-record2026-07-31 https://junglewise.ai/threats/cve-2026-51277-rejected-record2026-07-31 https://junglewise.ai/threats/cve-2026-51276-withdrawn-vulnerability-record2026-07-31 https://junglewise.ai/threats/cve-2026-51265-withdrawn-record2026-07-31 https://junglewise.ai/threats/cve-2026-51264-withdrawn-cve-record2026-07-31 https://junglewise.ai/threats/cve-2026-51262-withdrawn-cve-record2026-07-31 https://junglewise.ai/threats/cve-2026-51258-rejected-withdrawn-by-cna2026-07-31 https://junglewise.ai/threats/cve-2026-51257-rejected-withdrawn-by-cna2026-07-31 https://junglewise.ai/threats/cve-2026-51256-rejected-record2026-07-31 https://junglewise.ai/threats/cve-2026-51255-rejected-record2026-07-31 https://junglewise.ai/threats/cve-2026-51253-withdrawn-cve-record2026-07-31 https://junglewise.ai/threats/cve-2026-51250-withdrawn-non-security-issue2026-07-31 https://junglewise.ai/threats/cve-2026-51249-rejected-record2026-07-31 https://junglewise.ai/threats/cve-2026-51248-withdrawn-cve-record2026-07-31 https://junglewise.ai/threats/cve-2026-51247-withdrawn-cve-record2026-07-31 https://junglewise.ai/threats/cve-2026-51246-rejected-record2026-07-31 https://junglewise.ai/threats/cve-2026-51245-rejected-withdrawn-by-cna2026-07-31 https://junglewise.ai/threats/cve-2026-51243-withdrawn-or-rejected-cve-record2026-07-31 https://junglewise.ai/threats/cve-2026-51242-withdrawn-vulnerability-record2026-07-31 https://junglewise.ai/threats/cve-2026-51241-rejected-record2026-07-31 https://junglewise.ai/threats/cve-2026-51240-withdrawn-cve-record2026-07-31 https://junglewise.ai/threats/cve-2026-51239-withdrawn-non-security-issue2026-07-31 https://junglewise.ai/threats/cve-2026-51238-rejected-record2026-07-31 https://junglewise.ai/threats/cve-2026-51237-withdrawn-record2026-07-31 https://junglewise.ai/threats/cve-2026-51236-rejected-withdrawn-by-cna2026-07-31 https://junglewise.ai/threats/cve-2026-51234-withdrawn-cve-record2026-07-31 https://junglewise.ai/threats/cve-2026-51233-rejected-invalid-security-issue2026-07-31 https://junglewise.ai/threats/cve-2026-51232-rejected-record-withdrawn-by-cna2026-07-31 https://junglewise.ai/threats/cve-2026-51231-withdrawn-record2026-07-31 https://junglewise.ai/threats/cve-2026-51230-rejected-withdrawn-by-cna2026-07-31 https://junglewise.ai/threats/cve-2026-51229-rejected-withdrawn-by-cna2026-07-31 https://junglewise.ai/threats/cve-2026-18446-fast-uri-host-confusion-via-backslash-authority-introducer2026-08-03 https://junglewise.ai/threats/cve-2026-10685-zephyr-rtos-use-after-free-in-bluetooth-gatt-client2026-07-31 https://junglewise.ai/threats/cve-2026-65636-ufirstgroup-ymlr-crlf-injection-in-elixir-ymlr-comments2026-07-31 https://junglewise.ai/threats/cve-2026-28145-stylemixthemes-masterstudy-lms-user-state-manipulation2026-07-31 https://junglewise.ai/threats/cve-2026-28144-flipper-code-wp-maps-sensitive-data-exposure2026-07-31 https://junglewise.ai/threats/cve-2026-9611-rejected-issued-in-error2026-07-31 https://junglewise.ai/threats/cve-2026-68577-cve-rejected2026-07-31 https://junglewise.ai/threats/cve-2026-68576-rejected-cve2026-07-31 https://junglewise.ai/threats/cve-2026-68575-red-hat-administrative-rejection2026-07-31 https://junglewise.ai/threats/cve-2026-68574-red-hat-administrative-rejection-of2026-07-31 https://junglewise.ai/threats/cve-2026-18358-red-hat-enterprise-linux-gnome-remote-desktop-dos-in-system-mode2026-07-31 https://junglewise.ai/threats/cve-2026-17592-rejected-issued-in-error2026-07-31 https://junglewise.ai/threats/cve-2026-17561-innotim-logsign-siem-code-injection2026-07-31 https://junglewise.ai/threats/cve-2026-15227-checkmk-missing-authorization-in-reporting-component2026-07-31 https://junglewise.ai/threats/cve-2026-46594-php-jabbers-php-poll-script-reflected-xss2026-07-31 https://junglewise.ai/threats/cve-2026-46593-php-jabbers-php-poll-script-sql-injection-in-pjadminpolls2026-07-31 https://junglewise.ai/threats/cve-2025-67651-php-jabbers-multiple-scripts-cross-site-request-forgery2026-07-31 https://junglewise.ai/threats/cve-2025-67650-php-jabbers-multiple-scripts-authenticated-sql-injection-in2026-07-31 https://junglewise.ai/threats/cve-2025-67649-php-jabbers-car-rental-script-sql-injection-in-sorting-functions2026-07-31 https://junglewise.ai/threats/cve-2026-64607-apache-httpcomponents-client-resource-leak-in-classic-i-o-model2026-09-24 https://junglewise.ai/threats/cve-2026-62391-apache-kyuubi-path-traversal-via-spark-config-alias-bypass2026-07-31 https://junglewise.ai/threats/cve-2026-44615-apache-zeppelin-path-traversal-in-filesystemnotebookrepo2026-07-31 https://junglewise.ai/threats/cve-2026-17567-wpmanageninja-fluent-forms-idor-in-transaction-parameter2026-07-31 https://junglewise.ai/threats/cve-2026-16843-hikvision-wireless-access-points-authenticated-command-execution2026-07-31 https://junglewise.ai/threats/cve-2026-18437-mailerpress-wordpress-plugin-missing-authorization-in-contact2026-07-31 https://junglewise.ai/threats/cve-2026-18436-mailpress-wordpress-plugin-unauthorized-revision-restoration2026-07-31 https://junglewise.ai/threats/cve-2026-15722-red-hat-389-directory-server-stack-overflow-in-replication2026-07-31 https://junglewise.ai/threats/cve-2026-11770-389-directory-server-ldap-injection-in-cleanallruv-replication2026-07-31 https://junglewise.ai/threats/cve-2026-10079-red-hat-advanced-cluster-security-policy-bypass-via-label2026-07-31 https://junglewise.ai/threats/cve-2026-65313-andritz-hipase-250-hard-coded-x11vnc-password-in-provisioning2026-07-31 https://junglewise.ai/threats/cve-2026-65311-andritz-hipase-250-missing-authentication-for-logging2026-07-31 https://junglewise.ai/threats/cve-2026-65310-andritz-hipase-250-missing-authentication-in-data-endpoint2026-07-31 https://junglewise.ai/threats/cve-2026-65309-andritz-hipase-250-reversible-password-storage-and-transmission2026-07-31 https://junglewise.ai/threats/cve-2026-18218-keycloak-tokenmanager-revocation-bypass-via-client-not-before2026-07-31 https://junglewise.ai/threats/cve-2026-18217-keycloak-saml-http-parameter-pollution-in-http-redirect-binding2026-07-31 https://junglewise.ai/threats/cve-2026-18215-keycloak-authentication-bypass-in-microsoft-token-exchange2026-07-31 https://junglewise.ai/threats/cve-2026-18214-keycloak-domain-restriction-bypass-in-google-token-exchange2026-07-31 https://junglewise.ai/threats/cve-2026-18211-keycloak-secure-client-uris-policy-bypass-via-improper-host2026-07-31 https://junglewise.ai/threats/cve-2026-18209-keycloak-oidc-parameter-pollution-via-redirect-uri-fragment2026-07-31 https://junglewise.ai/threats/cve-2026-18208-keycloak-information-disclosure-in-oidc-token-introspection2026-07-31 https://junglewise.ai/threats/cve-2026-18206-keycloak-keycloak-services-improper-wildcard-domain-validation-in2026-07-31 https://junglewise.ai/threats/cve-2026-18203-keycloak-incorrect-authorization-via-group-path-prefix-matching2026-07-31 https://junglewise.ai/threats/cve-2026-16105-keycloak-improper-authorization-in-rolecontainerresource2026-07-31 https://junglewise.ai/threats/cve-2026-8155-buddypress-idor-in-private-messaging-endpoints2026-07-31 https://junglewise.ai/threats/cve-2026-18452-rich-source-dms-hard-coded-api-key2026-07-31 https://junglewise.ai/threats/cve-2026-16236-realtyna-organic-idx-arbitrary-file-upload-in-saveliveimages2026-07-31 https://junglewise.ai/threats/cve-2026-15381-wp-go-maps-sql-injection-in-markers-rest-filter2026-07-31 https://junglewise.ai/threats/cve-2026-15258-product-feed-manager-for-woocommerce-sql-injection-in-custom2026-07-31 https://junglewise.ai/threats/cve-2026-15209-js-help-desk-wordpress-plugin-idor-in-support-tickets2026-07-31 https://junglewise.ai/threats/cve-2026-15048-geeky-bot-wordpress-plugin-authorization-bypass-in-chat-history2026-07-31 https://junglewise.ai/threats/cve-2026-14931-js-help-desk-wordpress-plugin-information-disclosure-in-user2026-07-31 https://junglewise.ai/threats/cve-2026-14930-js-help-desk-wordpress-plugin-missing-authorization-in-file2026-07-31 https://junglewise.ai/threats/cve-2026-14929-js-help-desk-wordpress-plugin-idor-in-ticket-reply-update2026-07-31 https://junglewise.ai/threats/cve-2026-14928-js-help-desk-wordpress-plugin-information-disclosure-in-ticket2026-07-31 https://junglewise.ai/threats/cve-2026-14927-fluentcart-wordpress-plugin-idor-in-order-print-routes2026-07-31 https://junglewise.ai/threats/cve-2026-14922-wp-photo-album-plus-stored-xss-in-photo-comment-pipeline2026-07-31 https://junglewise.ai/threats/cve-2026-14921-brainstorm-force-ultimate-addons-for-wpbakery-page-builder-stored2026-07-31 https://junglewise.ai/threats/cve-2026-14919-shopmonitor-io-wordpress-plugin-authentication-bypass-via-email2026-07-31 https://junglewise.ai/threats/cve-2026-14862-support-genix-wordpress-plugin-missing-authorization-in-ticket2026-07-31 https://junglewise.ai/threats/cve-2026-14849-cozmoslabs-paid-member-subscriptions-information-exposure-in2026-07-31 https://junglewise.ai/threats/cve-2026-14847-cozmoslabs-paid-member-subscriptions-idor-in-payment-refund-modal2026-07-31 https://junglewise.ai/threats/cve-2026-14845-newstatpress-wordpress-plugin-stored-xss-in-top-post-widget2026-07-31 https://junglewise.ai/threats/cve-2026-14843-events-made-easy-wordpress-plugin-idor-in-person-record2026-07-31 https://junglewise.ai/threats/cve-2026-14834-mailgun-for-wordpress-broken-access-control-in-add-list-ajax2026-07-31 https://junglewise.ai/threats/cve-2026-14833-lightbox-with-photoswipe-stored-xss-in-image-captions2026-07-31 https://junglewise.ai/threats/cve-2026-14830-flxwoo-wordpress-plugin-payment-bypass2026-07-31 https://junglewise.ai/threats/cve-2026-14554-check-log-email-sql-injection-in-d-and-s-parameters2026-07-31 https://junglewise.ai/threats/cve-2026-14483-realtyna-wpl-real-estate-arbitrary-file-upload-in-i-o-endpoint2026-07-31 https://junglewise.ai/threats/cve-2026-14333-demi-wordpress-plugin-sensitive-data-exposure-in-backup-directory2026-07-31 https://junglewise.ai/threats/cve-2026-14319-givewp-wordpress-plugin-information-disclosure-in-rest-api2026-07-31 https://junglewise.ai/threats/cve-2026-14317-givewp-wordpress-plugin-payment-gateway-restriction-bypass2026-07-31 https://junglewise.ai/threats/cve-2026-13609-dynamiapps-frontend-admin-unauthenticated-stored-xss-in-form2026-07-31 https://junglewise.ai/threats/cve-2026-13393-wpmet-elementskit-elementor-addons-stored-xss-in-megamenu2026-07-31 https://junglewise.ai/threats/cve-2026-13392-wpmet-elementskit-elementor-addons-php-code-injection-in-custom2026-07-31 https://junglewise.ai/threats/cve-2026-12721-kirki-wordpress-plugin-sql-injection2026-07-31 https://junglewise.ai/threats/cve-2026-12720-kirki-wordpress-plugin-php-object-injection2026-07-31 https://junglewise.ai/threats/cve-2026-12697-wpforo-forum-idor-in-ai-chat-message-deletion2026-07-31 https://junglewise.ai/threats/cve-2026-12695-miniorange-2fa-wordpress-plugin-authentication-bypass-via-ga2026-07-31 https://junglewise.ai/threats/cve-2026-12376-academy-lms-wordpress-plugin-idor-in-quiz-attempts-rest-endpoint2026-07-31 https://junglewise.ai/threats/cve-2026-12251-ultimate-member-wordpress-plugin-unauthenticated-privilege2026-07-31 https://junglewise.ai/threats/cve-2026-63223-codeigniter-codeigniter4-unrestricted-file-upload-in-is-image-and2026-08-07 https://junglewise.ai/threats/cve-2026-63222-codeigniter-path-traversal-in-uploadedfile-move-method2026-08-07 https://junglewise.ai/threats/cve-2026-63221-codeigniter-sql-injection-in-query-builder-deletebatch2026-08-07 https://junglewise.ai/threats/cve-2026-56673-comfyui-path-traversal-in-loadimage-and-media-nodes2026-07-31 https://junglewise.ai/threats/cve-2026-56672-comfy-org-comfyui-stored-xss-in-userdata-endpoint2026-07-31 https://junglewise.ai/threats/cve-2026-56671-comfy-org-comfyui-path-traversal-in-model-preview-endpoint2026-07-31