https://junglewise.ai/threats/cve-2026-92161-friendsofflarum-oauth-account-takeover-via-unverified-discord2026-09-26 https://junglewise.ai/threats/cve-2026-57440-mediawiki-embedvideo-extension-stored-xss-via-unescaped-iframe2026-09-25 https://junglewise.ai/threats/cve-2026-61823-code16-sharp-stored-xss-in-iframe-srcdoc-attribute2026-09-25 https://junglewise.ai/threats/cve-2026-61825-code16-sharp-stored-xss-via-sanitizer-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-65660-microsoft-sharepoint-code-injection2026-09-26 https://junglewise.ai/threats/cve-2026-67279-mikrotik-routeros-improper-behavioral-workflow-enforcement2026-09-26 https://junglewise.ai/threats/cve-2026-57179-python-social-auth-social-auth-core-session-fixation-in-partial2026-09-25 https://junglewise.ai/threats/cve-2026-57178-python-social-auth-social-core-vk-app-backend-auth-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-57177-python-social-auth-social-core-login-csrf-in-loginradius-backend2026-09-25 https://junglewise.ai/threats/cve-2026-57176-python-social-auth-social-core-account-takeover-in-vend-backend2026-09-25 https://junglewise.ai/threats/cve-2026-57175-python-social-auth-social-auth-core-saml-authentication-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-61815-zbateson-mail-mime-parser-crlf-header-injection-in-attachment2026-09-25 https://junglewise.ai/threats/cve-2026-61816-zbateson-mail-mime-parser-uncontrolled-resource-consumption-in2026-09-25 https://junglewise.ai/threats/cve-2026-59980-hpack-unbounded-variable-integer-decoding-denial-of-service2026-09-25 https://junglewise.ai/threats/cve-2026-61782-rsdoctor-rspack-plugin-unauthenticated-information-disclosure2026-09-25 https://junglewise.ai/threats/cve-2026-61788-bytebase-dbhub-read-only-mode-bypass-via-function-calls2026-09-25 https://junglewise.ai/threats/cve-2026-61742-dbhub-http-transport-dns-rebinding-allows-unauthenticated-sql2026-09-25 https://junglewise.ai/threats/cve-2026-61741-http4s-scala-xml-xxe-vulnerability-in-entitydecoder2026-09-25 https://junglewise.ai/threats/cve-2026-61784-xhtml-purifier-attribute-injection-sanitizer-bypass-leading-to2026-09-25 https://junglewise.ai/threats/cve-2026-56744-bsv-wallet-toolbox-storage-output-validation-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-56738-phpmyfaq-sql-injection-in-stopwords-add2026-09-25 https://junglewise.ai/threats/cve-2026-56737-phpmyfaq-two-factor-authentication-password-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-56736-phpmyfaq-stored-xss-in-admin-faq-editor-via-html-entity-bypass2026-09-25 https://junglewise.ai/threats/langchain-nvidia-local-file-disclosure-through-vlm-image-inputs-2ea392d62026-09-25 https://junglewise.ai/threats/cve-2026-61604-ixo-blockchain-x-bonds-did-resolved-payer-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-61732-decepticon-role-boundary-forgery-via-chatml-special-token2026-09-25 https://junglewise.ai/threats/cve-2026-96883-aws-pgcollection-type-confusion-remote-code-execution2026-09-25 https://junglewise.ai/threats/virustotal-yara-x-unvalidated-deserialization-in-rules-deserialize-d57692532026-09-25 https://junglewise.ai/threats/cve-2026-63498-snipe-it-stored-xss-via-inline-xml-rendering-in-uploaded-files2026-09-25 https://junglewise.ai/threats/cve-2026-85056-zitadel-login-v2-mfa-bypass-via-session-reuse2026-09-25 https://junglewise.ai/threats/cve-2026-85057-zitadel-actions-v1-sandbox-escape-via-require-filesystem-read2026-09-25 https://junglewise.ai/threats/cve-2026-62368-snipe-it-stored-xss-in-custom-field-names2026-09-25 https://junglewise.ai/threats/cve-2026-62286-dozzle-label-filter-bypass-in-events-stream2026-09-25 https://junglewise.ai/threats/cve-2026-63493-snipe-it-2fa-bypass-via-api-token-flow2026-09-25 https://junglewise.ai/threats/cve-2026-19730-podman-quadlet-install-incomplete-file-truncation2026-09-25 https://junglewise.ai/threats/cve-2026-59167-suneditor-xss-vulnerability-in-sanitizer-with-namespaced-tags2026-09-25 https://junglewise.ai/threats/cve-2026-62998-redaxo-rex-list-unwhitelisted-order-by-column-injection2026-09-25 https://junglewise.ai/threats/cve-2026-93289-eufy-omni-c20-and-x10-pro-os-command-injection-and-certificate2026-09-24 https://junglewise.ai/threats/cve-2026-84399-botslab-g980h-dashcam-multiple-authentication-and-authorization2026-09-24 https://junglewise.ai/threats/cve-2026-5430-wso2-api-control-plane-path-traversal-vulnerability2026-09-24 https://junglewise.ai/threats/cve-2026-71362-adobe-commerce-and-magento-incorrect-authorization2026-09-24 https://junglewise.ai/threats/cve-2026-61685-reactpress-sql-injection-via-dynamic-column-names-in-typeorm2026-09-25 https://junglewise.ai/threats/plone-plone-app-contenttypes-denial-of-service-via-excessive-filename-c46fb3072026-09-25 https://junglewise.ai/threats/cve-2026-57576-plone-plone-app-dexterity-denial-of-service-via-excessive-field2026-09-25 https://junglewise.ai/threats/cve-2026-77394-openc3-cosmos-stored-cross-user-xss-in-button-widget2026-09-25 https://junglewise.ai/threats/cve-2026-82407-klever-go-bls-public-key-validation-bypass-in-validator2026-09-25 https://junglewise.ai/threats/cve-2026-82409-klever-go-elasticsearch-injection-via-account-name2026-09-25 https://junglewise.ai/threats/cve-2026-82406-klever-go-marketplace-buy-missing-isclaimed-guard2026-09-25 https://junglewise.ai/threats/cve-2026-76089-verbb-formie-missing-authorization-on-sent-notification-resend2026-09-25 https://junglewise.ai/threats/cve-2026-61814-typelevel-jawn-asyncparser-quadratic-parsing-effort-denial-of2026-09-25 https://junglewise.ai/threats/cve-2026-59990-jawn-json-parser-denial-of-service-via-uncontrolled-nesting-depth2026-09-25 https://junglewise.ai/threats/cve-2026-82405-klever-go-account-takeover-via-authorization-bypass-in2026-09-25 https://junglewise.ai/threats/cve-2026-86065-klever-go-unauthenticated-websocket-subscribe-remote-dos2026-09-25 https://junglewise.ai/threats/cve-2026-86064-klever-go-log-endpoint-unauthenticated-logging-configuration2026-09-25 https://junglewise.ai/threats/cve-2026-93421-google-mesop-unauthenticated-ansi-escape-sequence-injection-in2026-09-25 https://junglewise.ai/threats/cve-2026-77602-openc3-cosmos-authenticated-remote-code-execution-via-config2026-09-25 https://junglewise.ai/threats/cve-2026-77601-openc3-cosmos-authenticated-os-command-injection-via-pypi-url2026-09-25 https://junglewise.ai/threats/cve-2026-61695-square-wire-swift-runtime-negative-length-in-skipgroup-denial-of2026-09-25 https://junglewise.ai/threats/cve-2026-76087-verbb-formie-unauthenticated-submission-hijacking-via-submit2026-09-25 https://junglewise.ai/threats/cve-2026-76086-craft-formie-integration-form-settings-ssrf-and-credential2026-09-25 https://junglewise.ai/threats/cve-2026-92692-sulu-jcr-sql2-injection-in-category-filter2026-09-25 https://junglewise.ai/threats/cve-2026-77421-jline-nano-editor-redos-in-regex-search-mode2026-09-25 https://junglewise.ai/threats/cve-2026-77422-jline-redos-in-built-in-grep-command2026-09-25 https://junglewise.ai/threats/cve-2026-77420-jline-history-ignore-redos-via-unescaped-regex-metacharacters2026-09-25 https://junglewise.ai/threats/cve-2026-85724-moquette-mqtt-broker-pattern-acl-wildcard-injection-and2026-09-25 https://junglewise.ai/threats/cve-2026-73858-solspace-freeform-twig-template-injection-via-form-field-values2026-09-25 https://junglewise.ai/threats/cve-2026-88974-wpgraphql-authorization-bypass-in-updatepost-mutation2026-09-25 https://junglewise.ai/threats/cve-2026-63000-redaxo-missing-csrf-protection-on-package-update2026-09-25 https://junglewise.ai/threats/cve-2026-63002-redaxo-stored-xss-in-mediapool-sync-page-via-unescaped-filenames2026-09-25 https://junglewise.ai/threats/cve-2026-63001-redaxo-media-manager-stored-xss-in-type-name2026-09-25 https://junglewise.ai/threats/cve-2026-61541-zapros-unbounded-content-encoding-decompression-denial-of-service2026-09-25 https://junglewise.ai/threats/cve-2026-61652-zapros-decompression-bomb-in-streaming-decoder2026-09-25 https://junglewise.ai/threats/cve-2026-57149-plone-plone-app-portlets-tales-injection-remote-code-execution2026-09-25 https://junglewise.ai/threats/third-party-ics-integrators-supply-chain-risk-to-critical-90b78f9a2026-09-24 https://junglewise.ai/threats/cve-2026-91130-home-assistant-statistics-graph-card-xss-via-entity-names2026-09-25 https://junglewise.ai/threats/cve-2026-91129-home-assistant-server-side-request-forgery-in-mdns-ipp2026-09-25 https://junglewise.ai/threats/cve-2026-88010-traefik-basicauth-singleflight-username-enumeration-via-timing2026-09-25 https://junglewise.ai/threats/cve-2026-88978-hatchet-durabletask-workerstatus-grpc-authorization-bypass-via2026-09-25 https://junglewise.ai/threats/cve-2026-84298-hatchet-cross-tenant-durable-callback-payload-disclosure2026-09-25 https://junglewise.ai/threats/cve-2026-79913-cloudreve-ssrf-guard-bypass-via-ipv6-transition-wrappers2026-09-25 https://junglewise.ai/threats/cve-2026-79767-gardener-authorization-bypass-via-group-subject-injection2026-09-25 https://junglewise.ai/threats/cve-2026-77637-cloudreve-privilege-scope-bypass-in-admin-api-endpoints2026-09-25 https://junglewise.ai/threats/cve-2026-77633-cloudreve-toctou-race-in-storage-quota-check-and-charge2026-09-25 https://junglewise.ai/threats/cve-2026-94462-spree-store-api-broken-access-control-in-cart-association2026-09-25 https://junglewise.ai/threats/cve-2026-86062-lightrag-webui-stored-xss-in-chat-answer-renderer2026-09-25 https://junglewise.ai/threats/cve-2026-85740-lightrag-ssrf-via-ipv6-transition-address-bypass-in-markdown2026-09-25 https://junglewise.ai/threats/cve-2026-85734-lightrag-hku-login-endpoint-missing-rate-limiting-enables-brute2026-09-25 https://junglewise.ai/threats/cve-2026-85725-lightrag-plaintext-password-timing-attack-vulnerability2026-09-25 https://junglewise.ai/threats/cve-2026-85709-lightrag-api-sensitive-information-exposure-in-error-responses2026-09-25 https://junglewise.ai/threats/cve-2026-83805-nautobot-authorization-bypass-in-approval-workflow-rest-api2026-09-25 https://junglewise.ai/threats/cve-2026-83801-nautobot-stored-cross-site-scripting-in-form-help-text2026-09-25 https://junglewise.ai/threats/cve-2026-77528-autobahn-python-permessage-deflate-decompression-bypass-in2026-09-25 https://junglewise.ai/threats/cve-2026-76805-nuclei-environment-variable-disclosure-in-dast-fuzz-mode2026-09-25 https://junglewise.ai/threats/cve-2026-76804-projectdiscovery-nuclei-security-gate-bypass-via-workflow-file2026-09-25 https://junglewise.ai/threats/cve-2026-76803-projectdiscovery-nuclei-local-file-read-via-mysql-sandbox-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-76802-projectdiscovery-nuclei-arbitrary-command-execution-in-dast2026-09-25 https://junglewise.ai/threats/cve-2026-76819-projectdiscovery-nuclei-arbitrary-code-execution-via-goja2026-09-25 https://junglewise.ai/threats/cve-2026-77561-tinyauth-denial-of-service-via-login-attempt-map-saturation2026-09-25 https://junglewise.ai/threats/cve-2026-77560-tinyauth-forward-auth-authorization-bypass-via-case-sensitive-acl2026-09-25 https://junglewise.ai/threats/cve-2026-77582-tinyauth-user-enumeration-via-timing-oracle2026-09-25 https://junglewise.ai/threats/cve-2026-62371-kubeedge-command-injection-in-nodeupgradejob-via-v1alpha2-api2026-09-25 https://junglewise.ai/threats/cve-2026-62370-kubeedge-cloudhub-unbounded-buffer-allocation-in-viaduct-packer2026-09-25 https://junglewise.ai/threats/cve-2026-62369-kubeedge-keadm-path-traversal-in-decompresstargz2026-09-25 https://junglewise.ai/threats/cve-2026-63131-openbao-authorization-bypass-in-policy-enforcement-for-list2026-09-25 https://junglewise.ai/threats/cve-2026-63132-openbao-recovery-mode-timing-attack-token-leakage2026-09-25 https://junglewise.ai/threats/cve-2026-71543-openbao-templated-policies-privilege-escalation-via-wildcard2026-09-25 https://junglewise.ai/threats/cve-2026-77285-openbao-agent-information-disclosure-via-stdout-in-exec-rendering2026-09-25 https://junglewise.ai/threats/cve-2026-62182-kubeedge-configupdatejob-command-injection-in-updatefields2026-09-25 https://junglewise.ai/threats/cve-2026-77426-unleash-admin-api-missing-await-on-permission-check-and-cross2026-09-25 https://junglewise.ai/threats/cve-2026-77425-unleash-authorization-bypass-in-strategy-reordering2026-09-25 https://junglewise.ai/threats/cve-2026-77250-mcp-atlassian-oauth-fallback-token-storage-plaintext-exposure2026-09-25 https://junglewise.ai/threats/cve-2026-77249-atlassian-mcp-jira-user-permission-lookup-ssrf-via-unvalidated2026-09-25 https://junglewise.ai/threats/cve-2026-77247-sooperset-mcp-atlassian-arbitrary-file-upload-to-jira-confluence2026-09-25 https://junglewise.ai/threats/cve-2026-77244-mcp-atlassian-authentication-bypass-in-http-transport2026-09-25 https://junglewise.ai/threats/cve-2026-77274-atlassian-mcp-ssrf-protection-bypass-via-url-parser-mismatch2026-09-25 https://junglewise.ai/threats/cve-2026-77271-atlassian-mcp-path-traversal-bypass-leading-to-rce2026-09-25 https://junglewise.ai/threats/cve-2026-77267-mcp-atlassian-incomplete-ssrf-remediation-in-url-header2026-09-25 https://junglewise.ai/threats/cve-2026-77272-atlassian-mcp-reflected-xss-in-oauth-setup-callback-handler2026-09-25 https://junglewise.ai/threats/cve-2026-77262-sooperset-mcp-atlassian-path-traversal-in-confluence-upload2026-09-25 https://junglewise.ai/threats/cve-2026-77268-atlassian-mcp-insecure-oauth-token-file-permissions2026-09-25 https://junglewise.ai/threats/cve-2026-77259-mcp-atlassian-arbitrary-file-read-via-confluence-upload2026-09-25 https://junglewise.ai/threats/cve-2026-77261-mcp-atlassian-ssrf-protection-bypass-in-basic-auth-and-oauth2026-09-25 https://junglewise.ai/threats/cve-2026-77270-atlassian-mcp-arbitrary-file-read-via-upload-attachment-tools2026-09-25 https://junglewise.ai/threats/cve-2026-77265-atlassian-mcp-server-ssrf-via-dns-rebinding-in-header2026-09-25 https://junglewise.ai/threats/cve-2026-77266-mcp-atlassian-path-traversal-in-upload-attachment2026-09-25 https://junglewise.ai/threats/cve-2026-77269-atlassian-mcp-path-traversal-in-upload-attachment-allows2026-09-25 https://junglewise.ai/threats/cve-2026-77260-atlassian-mcp-server-arbitrary-file-read-via-unconstrained-upload2026-09-25 https://junglewise.ai/threats/cve-2026-77257-sooperset-mcp-atlassian-arbitrary-local-file-read-in-http-upload2026-09-25 https://junglewise.ai/threats/cve-2026-77243-mcp-atlassian-tool-authorization-bypass-in-tools-call2026-09-25 https://junglewise.ai/threats/cve-2026-77255-atlassian-mcp-arbitrary-file-read-via-path-traversal-in-update2026-09-25 https://junglewise.ai/threats/cve-2026-77253-mcp-atlassian-arbitrary-file-read-in-attachment-upload2026-09-25 https://junglewise.ai/threats/cve-2026-77251-mcp-atlassian-jql-cql-filter-bypass-in-jira-and-confluence-search2026-09-25 https://junglewise.ai/threats/cve-2026-77246-mcp-atlassian-http-server-local-file-exfiltration-via-unvalidated2026-09-25 https://junglewise.ai/threats/cve-2026-77248-atlassian-mcp-unauthenticated-arbitrary-file-read-in-upload2026-09-25 https://junglewise.ai/threats/cve-2026-76910-unleash-feature-toggle-authorization-bypass-in-clone-endpoint2026-09-25 https://junglewise.ai/threats/cve-2026-76909-unleash-change-request-approval-email-html-injection2026-09-25 https://junglewise.ai/threats/cve-2026-75510-novu-stored-xss-in-in-app-inbox-via-javascript-scheme-in-redirect2026-09-25 https://junglewise.ai/threats/cve-2026-69190-graylog-privilege-escalation-in-saved-searches-and-dashboards-api2026-09-25 https://junglewise.ai/threats/cve-2026-77322-sipgo-dos-via-unvalidated-websocket-frame-length2026-09-25 https://junglewise.ai/threats/cve-2026-65829-mpxj-path-traversal-in-primavera-p3-prx-and-suretrak-stx-readers2026-09-25 https://junglewise.ai/threats/cve-2026-61570-mpxj-xxe-vulnerability-in-merlinreader2026-09-25 https://junglewise.ai/threats/cve-2026-62987-fabio-incomplete-fix-for-hop-by-hop-header-stripping-in-trust2026-09-25 https://junglewise.ai/threats/cve-2026-63628-mppx-gas-draining-via-eip-2930-access-list2026-09-25 https://junglewise.ai/threats/cve-2026-63627-mppx-gas-draining-via-calldata-padding2026-09-25 https://junglewise.ai/threats/cve-2026-63342-hatchet-authorization-bypass-in-durable-task-event-log-endpoint2026-09-25 https://junglewise.ai/threats/cve-2026-61681-hatchet-ssrf-in-sns-unsubscribeconfirmation-handler2026-09-25 https://junglewise.ai/threats/cve-2026-62364-weblate-wlc-api-token-disclosure-in-project-configuration2026-09-25 https://junglewise.ai/threats/cve-2026-58268-sipgo-dos-via-unvalidated-content-length-in-stream-parser2026-09-25 https://junglewise.ai/threats/cve-2026-63116-deepstream-patch-multi-permission-bypass-in-valve-access-control2026-09-25 https://junglewise.ai/threats/cve-2026-62985-request-filtering-agent-unhandled-synchronous-exception-in2026-09-25 https://junglewise.ai/threats/cve-2026-62866-dasel-selector-lexer-panic-on-trailing-whitespace2026-09-25 https://junglewise.ai/threats/cve-2026-59168-dasel-unbounded-recursion-in-json-and-xml-readers-causes-stack2026-09-25 https://junglewise.ai/threats/cve-2026-62282-opencve-server-side-request-forgery-in-notifications2026-09-25 https://junglewise.ai/threats/cve-2026-59991-psd-tools-uncontrolled-memory-allocation-in-composite-numpy2026-09-25 https://junglewise.ai/threats/cve-2026-61670-microsandbox-information-disclosure-in-process-arguments2026-09-25 https://junglewise.ai/threats/cve-2026-94384-amazon-connect-salesforce-lambda-authorization-bypass-in2026-09-25 https://junglewise.ai/threats/cve-2026-56682-9router-login-brute-force-lockout-bypass-via-spoofable-header2026-09-25 https://junglewise.ai/threats/cve-2026-56681-9router-authentication-bypass-in-public-llm-api-via-spoofable-x2026-09-25 https://junglewise.ai/threats/cve-2026-61612-aborruso-ckan-mcp-server-ssrf-via-dns-name-resolution2026-09-25 https://junglewise.ai/threats/cve-2026-58272-sync-in-server-username-enumeration-via-timing-side-channel-in2026-09-25 https://junglewise.ai/threats/cve-2026-58270-sync-in-server-redos-via-unsanitized-regex-in-pathfilters2026-09-25 https://junglewise.ai/threats/cve-2026-58269-sync-in-server-two-factor-authentication-bypass-in-token-endpoint2026-09-25 https://junglewise.ai/threats/cve-2026-58271-sync-in-server-totp-brute-force-in-sync-registration2026-09-25 https://junglewise.ai/threats/cve-2026-61647-roomi-fields-notebooklm-mcp-path-traversal-in-vault-batch-tool2026-09-25 https://junglewise.ai/threats/cve-2026-89207-siemens-wtv676-and-wtv776-denial-of-service-via-input-validation2026-09-24 https://junglewise.ai/threats/cve-2026-87121-lwip-tcp-ip-stack-mqtt-client-application-out-of-bounds-write2026-09-24 https://junglewise.ai/threats/cve-2026-88020-openplc-runtime-v3-cross-site-scripting-in-web-interface2026-09-24 https://junglewise.ai/threats/cve-2026-91018-lwip-double-free-vulnerability2026-09-24 https://junglewise.ai/threats/cve-2026-94127-f5-big-ip-apm-heap-based-buffer-overflow2026-09-24 https://junglewise.ai/threats/cve-2026-93952-arista-velocloud-orchestrator-improper-input-validation2026-09-24 https://junglewise.ai/threats/cve-2026-93616-check-point-multiple-products-path-traversal-vulnerability2026-09-24 https://junglewise.ai/threats/cve-2026-61628-nginx-ignition-unauthenticated-admin-account-creation-via2026-09-25 https://junglewise.ai/threats/cve-2026-61629-nginx-ignition-i18n-middleware-cpu-amplification-via-accept2026-09-25 https://junglewise.ai/threats/cve-2026-61630-nginx-ignition-totp-reuse-during-validity-window2026-09-25 https://junglewise.ai/threats/falco-k8saudit-detection-bypass-for-privileged-init-and-ephemeral-7788502d2026-09-25 https://junglewise.ai/threats/cve-2026-61687-hatchet-oauth-state-csrf-via-empty-state-collision2026-09-25 https://junglewise.ai/threats/obot-server-side-request-forgery-via-remote-mcp-server-url-8f4d0bee2026-09-25 https://junglewise.ai/threats/obot-mcp-registry-api-authentication-bypass-7d5ec1f32026-09-25 https://junglewise.ai/threats/obot-oauth-dynamic-client-registration-token-theft-via-audience-62f980392026-09-25 https://junglewise.ai/threats/cve-2026-71537-paymenter-credit-refund-double-spend-race-condition-in-service2026-09-25 https://junglewise.ai/threats/cve-2026-85058-moquette-mqtt-broker-authorization-bypass-in-will-message2026-09-25 https://junglewise.ai/threats/cve-2026-59163-mnemosyne-jwt-signature-verification-bypass-in-sync-server2026-09-25 https://junglewise.ai/threats/cve-2026-63445-perses-filesystem-path-traversal-via-unvalidated-project2026-09-25 https://junglewise.ai/threats/cve-2026-63199-perses-missing-authorization-in-datasource-proxy2026-09-25 https://junglewise.ai/threats/cve-2026-63458-perses-project-query-parameter-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-91127-file-viewer-dom-xss-via-unsafe-hyperlink-schemes-in-legacy-doc2026-09-25 https://junglewise.ai/threats/cve-2026-77301-adm-zip-uncontrolled-memory-allocation-via-uncompressed-size2026-09-25 https://junglewise.ai/threats/cve-2026-77339-f1bonacc1-process-compose-dns-rebinding-in-mcp-sse-transport2026-09-25 https://junglewise.ai/threats/cve-2026-81505-convoy-cross-tenant-source-idor-leaks-broker-credentials2026-09-25 https://junglewise.ai/threats/cve-2026-84992-md-editor-v3-cross-site-scripting-in-code-fence-rendering2026-09-25 https://junglewise.ai/threats/cve-2026-63406-anycable-hardcoded-telemetry-auth-token-and-credential-leak2026-09-25 https://junglewise.ai/threats/cve-2026-63349-anyio-run-process-open-process-privilege-dropping-bug-with-extra2026-09-25 https://junglewise.ai/threats/cve-2026-63374-anyio-tlsstream-idna-2003-host-name-encoding-certificate-spoofing2026-09-25 https://junglewise.ai/threats/cve-2026-64847-anyio-process-pool-workers-indefinite-blocking-on-undrained2026-09-25 https://junglewise.ai/threats/cve-2026-63405-anycable-pusher-rest-api-request-body-md5-verification-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-58197-toolhive-containerized-mcp-servers-host-service-access-via-host2026-09-25 https://junglewise.ai/threats/cve-2026-61682-kcp-front-proxy-header-injection-and-privilege-escalation2026-09-25 https://junglewise.ai/threats/cve-2026-61833-zot-registry-bearer-authentication-delete-authorization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-61795-capsule-hostnameregexhandler-parameter-order-bypass-in-webhook2026-09-25 https://junglewise.ai/threats/cve-2026-61672-capsule-forbidden-namespace-service-node-label-and-annotation2026-09-25 https://junglewise.ai/threats/cve-2026-61794-capsule-tenant-forbiddenannotations-regex-validation-bypass2026-09-25 https://junglewise.ai/threats/lmdeploy-ssrf-bypass-in-url-validation-f10a8d232026-09-25 https://junglewise.ai/threats/cve-2026-33625-lmdeploy-arbitrary-code-execution-via-eval-of-untrusted-quant2026-09-25 https://junglewise.ai/threats/cve-2025-66455-lmdeploy-remote-code-execution-via-pickle-deserialization-in2026-09-25 https://junglewise.ai/threats/semantic-mediawiki-missing-authorization-in-smwtask-api-module-37615b772026-09-25 https://junglewise.ai/threats/semantic-mediawiki-special-facetedsearch-reflected-xss-via-cstate-15c1ff892026-09-25 https://junglewise.ai/threats/cve-2026-77616-semantic-mediawiki-reflected-xss-in-special-ask-cursor-parameter2026-09-25 https://junglewise.ai/threats/cve-2026-77610-semantic-mediawiki-query-debug-output-xss-in-debugformatter2026-09-25 https://junglewise.ai/threats/cve-2026-77609-semantic-mediawiki-open-redirect-in-special-uriresolver2026-09-25 https://junglewise.ai/threats/cve-2026-77607-semantic-mediawiki-reflected-xss-in-special-ask-separator2026-09-25 https://junglewise.ai/threats/cve-2026-77608-semantic-mediawiki-reflected-xss-in-searchbyproperty2026-09-25 https://junglewise.ai/threats/cve-2026-77606-semantic-mediawiki-reflected-xss-in-special-ask-plain-table2026-09-25 https://junglewise.ai/threats/cve-2025-61682-semantic-mediawiki-stored-xss-through-wikitext-data-attributes2026-09-25 https://junglewise.ai/threats/cve-2025-53837-xwiki-xwiki-rendering-xml-eval-injection-via-html-macro-escaping2026-09-25 https://junglewise.ai/threats/cve-2026-77615-opencast-paella-player-stored-xss-in-webvtt-dfxp-caption-cues2026-09-25 https://junglewise.ai/threats/cve-2026-72819-grav-cms-remote-code-execution-via-zip-file-upload2026-09-25 https://junglewise.ai/threats/cve-2026-75827-grav-blueprint-bare-function-arbitrary-file-write-via-error-log2026-09-25 https://junglewise.ai/threats/cve-2026-75828-grav-stored-xss-in-xss-detector-via-unpaired-quote-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-74907-grav-path-traversal-in-static-asset-server2026-09-25 https://junglewise.ai/threats/cve-2026-86003-coredns-rfc-2136-update-bypass-in-doh-doq-grpc2026-09-25 https://junglewise.ai/threats/cve-2026-86000-soup-sieve-redos-in-identifier-and-value-selector-patterns2026-09-25 https://junglewise.ai/threats/cve-2026-85999-soup-sieve-polynomial-time-redos-in-whitespace-trimming-regex2026-09-25 https://junglewise.ai/threats/cve-2026-88976-plate-html-deserialization-xss-via-browser-parsing-behavior2026-09-25 https://junglewise.ai/threats/cve-2026-84997-reactphp-http-denial-of-service-in-chunked-decoder2026-09-25 https://junglewise.ai/threats/cve-2026-82399-coredns-unauthenticated-memory-exhaustion-in-doh-doq-and-doh32026-09-25 https://junglewise.ai/threats/cve-2026-81876-hapi-fhir-shcparser-deflate-infinite-loop-denial-of-service2026-09-25 https://junglewise.ai/threats/cve-2026-81875-hapi-fhir-shcparser-unbounded-deflate-decompression-denial-of2026-09-25 https://junglewise.ai/threats/djust-template-xss-via-inherited-context-safety-grant-eaaae5cf2026-09-25 https://junglewise.ai/threats/djust-six-template-auto-escaping-bypass-xss-fc5069722026-09-25 https://junglewise.ai/threats/cve-2026-81871-opentelemetry-go-otlp-log-grpc-exporter-tls-certificate2026-09-25 https://junglewise.ai/threats/cve-2026-81870-opentelemetry-go-endpoint-url-logging-in-tracerprovider2026-09-25 https://junglewise.ai/threats/cve-2026-81868-steeltoe-certificate-authorization-header-spoofing-via-missing2026-09-25 https://junglewise.ai/threats/cve-2026-81516-steeltoe-discovery-consul-malformed-secure-metadata-dos2026-09-25 https://junglewise.ai/threats/cve-2026-81515-steeltoe-eureka-discovery-client-denial-of-service-via-malformed2026-09-25 https://junglewise.ai/threats/cve-2026-86049-jupyter-server-token-leakage-in-5xx-error-logs2026-09-25 https://junglewise.ai/threats/cve-2026-81176-svelte-devalue-dos-via-malformed-input2026-09-25 https://junglewise.ai/threats/cve-2026-79752-cakephp-functionsbuilder-sql-injection-in-multiple-methods2026-09-25 https://junglewise.ai/threats/cve-2026-45140-chamilo-lms-cstudio-upload-flow-unauthenticated-remote-code2026-09-25 https://junglewise.ai/threats/cve-2026-92943-aws-iot-device-sdk-for-python-certificate-host-mismatch2026-09-25 https://junglewise.ai/threats/cve-2026-68537-fulgur-non-painting-replaced-elements-denial-of-service2026-09-25 https://junglewise.ai/threats/cve-2026-68523-fulgur-unbounded-page-slicing-denial-of-service2026-09-25 https://junglewise.ai/threats/cve-2026-86039-libp2p-peerstore-peer-id-spoofing-in-signed-records2026-09-25 https://junglewise.ai/threats/cve-2026-75523-steeltoe-management-endpoint-httpexchanges-query-string-secret2026-09-25 https://junglewise.ai/threats/cve-2026-75831-grav-stored-xss-via-markdown-audio-video-source-url2026-09-25 https://junglewise.ai/threats/cve-2026-86038-libp2p-gossipsub-message-authentication-bypass-in-rsa-peer-ids2026-09-25 https://junglewise.ai/threats/cve-2026-72832-grav-stored-xss-via-quoted-attribute-bypass-in-detectxss2026-09-25 https://junglewise.ai/threats/cve-2026-85717-asynchttpclient-credential-leak-on-cross-origin-redirect2026-09-25 https://junglewise.ai/threats/cve-2026-85720-asynchttpclient-credentials-exposure-in-plaintext-connect-proxy2026-09-25 https://junglewise.ai/threats/cve-2026-85721-asynchttpclient-unbounded-http-1-1-response-decompression-denial2026-09-25 https://junglewise.ai/threats/cve-2026-85716-asynchttpclient-scram-and-digest-mutual-authentication2026-09-25 https://junglewise.ai/threats/cve-2026-85756-ssh-net-scpclient-remote-code-execution-via-unquoted-scp-paths2026-09-25 https://junglewise.ai/threats/cve-2026-69147-vllm-request-selected-pynvvideocodec-gpu-decode-bypasses-vram2026-09-25 https://junglewise.ai/threats/cve-2026-69089-grav-cms-path-traversal-in-imagemedium-watermark2026-09-25 https://junglewise.ai/threats/cve-2026-69088-grav-cms-incomplete-callable-validation-in-blueprint-dynamic2026-09-25 https://junglewise.ai/threats/cve-2026-85732-oras-go-blind-ssrf-via-unvalidated-link-header-in-pagination2026-09-25 https://junglewise.ai/threats/cve-2026-85731-oras-go-arbitrary-file-write-via-symlink-chain-bypass-in-tar2026-09-25 https://junglewise.ai/threats/cve-2026-86043-skipper-opa-body-authz-bypass-in-chunked-http-2-requests2026-09-25 https://junglewise.ai/threats/cve-2026-77412-rabbitmq-amqp091-go-denial-of-service-via-malicious-field-length2026-09-25 https://junglewise.ai/threats/cve-2026-77411-rabbitmq-amqp091-go-protocol-desynchronization-via-integer2026-09-25 https://junglewise.ai/threats/cve-2026-77410-rabbitmq-amqp091-go-resource-exhaustion-via-unbounded-buffer2026-09-25 https://junglewise.ai/threats/cve-2026-77408-rabbitmq-amqp091-go-silent-data-truncation-via-shortstr-integer2026-09-25 https://junglewise.ai/threats/cve-2026-77407-rabbitmq-amqp091-go-plaintext-credential-exposure-in-plain-auth2026-09-25 https://junglewise.ai/threats/cve-2026-77406-rabbitmq-amqp091-go-resource-exhaustion-via-signed-to-unsigned2026-09-25 https://junglewise.ai/threats/cve-2026-77405-rabbitmq-amqp091-go-missing-tls-minimum-version-configuration2026-09-25 https://junglewise.ai/threats/cve-2026-77404-rabbitmq-amqp091-go-connection-configuration-injection-via-tls2026-09-25 https://junglewise.ai/threats/cve-2026-77403-rabbitmq-amqp091-go-denial-of-service-in-frame-size-negotiation2026-09-25 https://junglewise.ai/threats/cve-2026-86071-junrar-localfolderextractor-path-traversal-via-intermediate2026-09-25 https://junglewise.ai/threats/cve-2026-77401-zope-accesscontrol-information-disclosure-via-string-format2026-09-25 https://junglewise.ai/threats/cve-2026-76825-restrictedpython-sandbox-escape-via-string-formatter-field2026-09-25 https://junglewise.ai/threats/cve-2026-85715-exifreader-denial-of-service-via-crafted-heic-avif-iloc-box2026-09-25 https://junglewise.ai/threats/cve-2026-61700-mariadb-connector-j-allowlocalinfile-bypass-in-local-infile2026-09-25 https://junglewise.ai/threats/cve-2026-69197-umbraco-delivery-api-authorization-bypass-in-content-reference2026-09-25 https://junglewise.ai/threats/cve-2026-85078-sanic-http-chunked-trailer-request-smuggling2026-09-25 https://junglewise.ai/threats/cve-2026-63506-tinacms-auth-broken-access-control-in-isauthorized2026-09-25 https://junglewise.ai/threats/cve-2026-63225-redocly-cli-path-traversal-in-split-command2026-09-25 https://junglewise.ai/threats/cve-2026-82410-pocketbase-unhandled-panic-in-worker-goroutines2026-09-25 https://junglewise.ai/threats/cve-2026-62949-asyncssh-event-loop-infinite-loop-via-zero-maximum-packet-size2026-09-25 https://junglewise.ai/threats/cve-2026-63126-wire-protobuf-decoder-integer-overflow-denial-of-service2026-09-25 https://junglewise.ai/threats/cve-2026-77360-orpc-vary-header-injection-in-cors-plugin2026-09-25 https://junglewise.ai/threats/cve-2026-75516-rabbitmq-java-client-frame-level-oom-via-math-min-with-unlimited2026-09-25 https://junglewise.ai/threats/cve-2026-75513-marten-linq-provider-sql-injection-via-unescaped-string-literals2026-09-25 https://junglewise.ai/threats/cve-2026-59823-litellm-proxy-server-side-request-forgery-in-user-config2026-09-25 https://junglewise.ai/threats/cve-2026-71538-cyclonedx-cyclonedx-npm-shell-injection-in-workspace-argument-on2026-09-25 https://junglewise.ai/threats/cve-2026-63472-vendure-account-takeover-in-external-authentication2026-09-25 https://junglewise.ai/threats/cve-2026-63461-vendure-shop-api-authorization-bypass-via-filteroperator2026-09-25 https://junglewise.ai/threats/cve-2026-63460-vendure-unauthenticated-redos-in-regex-filter-on-sqlite2026-09-25 https://junglewise.ai/threats/cve-2026-63459-vendure-dashboard-stored-xss-in-richtextdescriptioncell2026-09-25 https://junglewise.ai/threats/cve-2026-61793-nuxt-og-image-unauthenticated-ssrf-in-font-url-validation2026-09-25 https://junglewise.ai/threats/cve-2026-64684-model-context-protocol-rust-sdk-custom-header-leak-on-cross2026-09-25 https://junglewise.ai/threats/cve-2025-6625-schneider-electric-modicon-m340-improper-input-validation-in-ftp2026-09-24 https://junglewise.ai/threats/cve-2026-15688-mitsubishi-electric-gx-works3-authentication-bypass-in-block2026-09-24 https://junglewise.ai/threats/cve-2026-86520-bransys-eld-hardcoded-credentials-and-cleartext-transmission2026-09-24 https://junglewise.ai/threats/cve-2024-4872-hitachi-energy-facts-control-platform-multiple-vulnerabilities-in2026-09-24 https://junglewise.ai/threats/cve-2026-61709-openfga-listusers-incorrect-authorization-in-intersection2026-09-25 https://junglewise.ai/threats/cve-2026-63671-nuxtjs-mdc-url-sanitizer-bypass-via-svg-xlink-href-and-data2026-09-25 https://junglewise.ai/threats/cve-2026-63128-rmcp-streamable-http-server-unauthenticated-session-table-memory2026-09-25 https://junglewise.ai/threats/cve-2026-63127-rmcp-missing-resource-field-validation-in-oauth-metadata2026-09-25 https://junglewise.ai/threats/cve-2026-57173-vllm-unauthenticated-audio-decompression-bomb-dos2026-09-25 https://junglewise.ai/threats/cve-2026-61599-djust-unauthenticated-arbitrary-module-import-in-websocket-sse2026-09-25 https://junglewise.ai/threats/cve-2026-61589-djust-host-header-omission-in-websocket-tenant-resolution2026-09-25 https://junglewise.ai/threats/cve-2026-61596-djust-broken-object-level-access-control-idor2026-09-25 https://junglewise.ai/threats/cve-2026-61588-djust-django-model-serialization-sensitive-data-exposure2026-09-25 https://junglewise.ai/threats/cve-2026-61594-djust-authorization-bypass-on-websocket-sse-mount-path2026-09-25 https://junglewise.ai/threats/cve-2026-61591-djust-state-snapshot-state-injection-vulnerability2026-09-25 https://junglewise.ai/threats/cve-2026-61592-djust-sse-session-hijacking-via-client-chosen-session-id2026-09-25 https://junglewise.ai/threats/cve-2026-61597-djust-stored-reflected-xss-via-javascript-urls-in-component-tags2026-09-25 https://junglewise.ai/threats/cve-2026-86831-amazon-eks-aws-network-policy-agent-cross-namespace-networkpolicy2026-09-25 https://junglewise.ai/threats/cve-2026-68904-node-opcua-tcp-socket-leak-in-keepalive-reconnection2026-09-25 https://junglewise.ai/threats/cve-2026-61593-djust-server-sent-events-cross-site-request-forgery2026-09-25 https://junglewise.ai/threats/cve-2025-59953-lmdeploy-remote-code-execution-via-pickle-deserialization-in-zmq2026-09-25 https://junglewise.ai/threats/cve-2026-61595-djust-multi-tenant-isolation-bypass-on-websocket-sse2026-09-25 https://junglewise.ai/threats/cve-2026-61598-djust-mass-assignment-of-arbitrary-view-attributes-in-update2026-09-25 https://junglewise.ai/threats/cve-2026-61590-djust-observability-endpoints-authentication-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-61560-zereight-mcp-gitlab-unauthenticated-arbitrary-file-read-via2026-09-25 https://junglewise.ai/threats/cisa-cyber-decoys-guidance-for-detection-and-response-4396c45f2026-09-24 https://junglewise.ai/threats/cve-2026-76460-cisco-identity-services-engine-incorrect-privileged-api-use2026-09-24 https://junglewise.ai/threats/cve-2026-87886-acronis-backup-privilege-escalation-in-cpanel-whm-and-plesk2026-09-24 https://junglewise.ai/threats/cve-2026-15587-google-security-operations-soar-privilege-escalation-via2026-09-25 https://junglewise.ai/threats/cve-2026-61559-zereight-mcp-gitlab-server-side-request-forgery-in-dynamic-api2026-09-25 https://junglewise.ai/threats/cve-2026-61568-zereight-mcp-gitlab-dns-rebinding-in-streamable-http-transport2026-09-25 https://junglewise.ai/threats/zereight-mcp-gitlab-multiple-safety-control-bypasses-fcdfc95d2026-09-25 https://junglewise.ai/threats/zereight-mcp-gitlab-multiple-safety-control-bypasses-6b1d97f32026-09-25 https://junglewise.ai/threats/cve-2026-61554-emp3r0r-http-polling-unauthenticated-dos2026-09-25 https://junglewise.ai/threats/cve-2026-83012-oracle-webcenter-enterprise-capture-unauthorized-data-access-in2026-09-26 https://junglewise.ai/threats/cve-2026-83011-oracle-platform-security-for-java-remote-code-execution-in2026-09-26 https://junglewise.ai/threats/cve-2026-83010-oracle-webcenter-enterprise-capture-authorization-bypass-in2026-09-26 https://junglewise.ai/threats/cve-2026-83009-oracle-webcenter-enterprise-capture-privilege-escalation-in2026-09-26 https://junglewise.ai/threats/cve-2026-83008-oracle-webcenter-enterprise-capture-privilege-escalation-in2026-09-26 https://junglewise.ai/threats/cve-2026-83007-oracle-webcenter-enterprise-capture-privilege-escalation-in2026-09-26 https://junglewise.ai/threats/cve-2026-83006-oracle-webcenter-enterprise-capture-privilege-escalation-in2026-09-26 https://junglewise.ai/threats/cve-2026-83005-oracle-webcenter-enterprise-capture-privilege-escalation-in2026-09-26 https://junglewise.ai/threats/cve-2026-83004-oracle-webcenter-enterprise-capture-privilege-escalation-in2026-09-26 https://junglewise.ai/threats/cve-2026-83003-oracle-webcenter-enterprise-capture-privilege-escalation-in2026-09-26 https://junglewise.ai/threats/cve-2026-83002-oracle-access-manager-authentication-bypass-in-oracle-fusion2026-09-26 https://junglewise.ai/threats/cve-2026-83001-oracle-access-manager-authentication-bypass-in-authentication2026-09-26 https://junglewise.ai/threats/cve-2026-83000-oracle-fusion-middleware-service-delivery-platform-remote-code2026-09-26 https://junglewise.ai/threats/cve-2026-82999-oracle-service-delivery-platform-privilege-escalation-via2026-09-26 https://junglewise.ai/threats/cve-2026-82998-oracle-fusion-middleware-service-delivery-platform-privilege2026-09-26 https://junglewise.ai/threats/cve-2026-82997-oracle-fusion-middleware-service-delivery-platform-privilege2026-09-26 https://junglewise.ai/threats/cve-2026-82996-oracle-platform-security-for-java-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-82995-oracle-platform-security-for-java-remote-code-execution-in2026-09-26 https://junglewise.ai/threats/cve-2026-82994-oracle-platform-security-for-java-remote-code-execution-in-ldap2026-09-26 https://junglewise.ai/threats/cve-2026-82993-oracle-peoplesoft-enterprise-peopletools-authentication-bypass-in2026-09-26 https://junglewise.ai/threats/cve-2026-82992-oracle-siebel-crm-privilege-escalation-in-installation2026-09-26 https://junglewise.ai/threats/cve-2026-81925-concrete-cms-reflected-xss-in-conversation-date-format2026-09-26 https://junglewise.ai/threats/cve-2026-76821-opencti-json-mapper-redos-via-unvalidated-regular-expression2026-09-26 https://junglewise.ai/threats/cve-2026-76820-opencti-unauthorized-internal-network-access-via2026-09-26 https://junglewise.ai/threats/cve-2026-76796-newell-brands-dymo-connect-desktop-arbitrary-file-read-via-path2026-09-26 https://junglewise.ai/threats/cve-2026-76707-hpe-edgeconnect-sd-wan-gateway-information-disclosure-via-memory2026-09-26 https://junglewise.ai/threats/cve-2026-76705-hpe-networking-edgeconnect-sd-wan-gateways-buffer-overflow-in-api2026-09-26 https://junglewise.ai/threats/cve-2026-76703-hpe-networking-edgeconnect-buffer-overflow-in-web-management2026-09-26 https://junglewise.ai/threats/cve-2026-76702-hpe-edgeconnect-denial-of-service-in-operating-system2026-09-26 https://junglewise.ai/threats/cve-2026-76701-hpe-networking-edgeconnect-information-disclosure-in-api-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-76700-hpe-networking-edgeconnect-sd-wan-gateways-denial-of-service2026-09-26 https://junglewise.ai/threats/cve-2026-76699-hpe-edgeconnect-sd-wan-gateway-buffer-overflow-in-system-service2026-09-26 https://junglewise.ai/threats/cve-2026-76698-hpe-networking-edgeconnect-sd-wan-gateway-command-injection2026-09-26 https://junglewise.ai/threats/cve-2026-76697-hpe-networking-edgeconnect-sd-wan-gateway-information-disclosure2026-09-26 https://junglewise.ai/threats/cve-2026-76696-hpe-edgeconnect-sd-wan-gateway-denial-of-service2026-09-26 https://junglewise.ai/threats/cve-2026-76695-hpe-edgeconnect-sd-wan-gateway-buffer-overflow-in-underlying-os2026-09-26 https://junglewise.ai/threats/cve-2026-76694-hpe-edgeconnect-sd-wan-privilege-escalation-in-cli2026-09-26 https://junglewise.ai/threats/cve-2026-76693-hpe-edgeconnect-sd-wan-gateways-denial-of-service2026-09-26 https://junglewise.ai/threats/cve-2026-76692-hpe-edgeconnect-sd-wan-gateway-information-disclosure-and-denial2026-09-26 https://junglewise.ai/threats/cve-2026-76691-hpe-networking-edgeconnect-sd-wan-gateway-buffer-overflow-in-api2026-09-26 https://junglewise.ai/threats/cve-2026-76690-hpe-networking-edgeconnect-sd-wan-gateways-command-execution2026-09-26 https://junglewise.ai/threats/cve-2026-76689-hpe-configuration-processing-stack-buffer-overflow2026-09-26 https://junglewise.ai/threats/cve-2026-76686-hpe-networking-edgeconnect-sd-wan-gateway-os-denial-of-service2026-09-26 https://junglewise.ai/threats/cve-2026-76685-hpe-proxy-packet-processing-integer-overflow2026-09-26 https://junglewise.ai/threats/cve-2026-76683-hpe-edgeconnect-sd-wan-gateway-buffer-overflow-in-api-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-76682-intrusion-detection-system-network-security-monitoring-buffer2026-09-26 https://junglewise.ai/threats/cve-2026-76679-hpe-edgeconnect-sd-wan-denial-of-service2026-09-26 https://junglewise.ai/threats/cve-2026-76678-hpe-edgeconnect-sd-wan-gateway-api-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-76677-hpe-edgeconnect-privilege-escalation-in-api2026-09-26 https://junglewise.ai/threats/cve-2026-76676-silverpeak-edgeconnect-sd-wan-gateway-buffer-overflow-in2026-09-26 https://junglewise.ai/threats/cve-2026-76675-hewlett-packard-enterprise-edgeconnect-command-injection-in-cli2026-09-26 https://junglewise.ai/threats/cve-2026-76674-hpe-edgeconnect-sd-wan-gateway-buffer-overflow2026-09-26 https://junglewise.ai/threats/cve-2026-73966-oracle-siebel-crm-apps-marketing-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-73965-oracle-siebel-crm-unauthorized-data-access-in-cloud-gateway2026-09-26 https://junglewise.ai/threats/cve-2026-73963-oracle-webcenter-portal-remote-code-execution-in-portlet-services2026-09-26 https://junglewise.ai/threats/cve-2026-73962-oracle-access-manager-authentication-bypass-in-authentication2026-09-26 https://junglewise.ai/threats/cve-2026-73961-oracle-jdeveloper-remote-code-execution-in-adf-faces2026-09-26 https://junglewise.ai/threats/cve-2026-73960-oracle-peoplesoft-enterprise-peopletools-denial-of-service-in-ren2026-09-26 https://junglewise.ai/threats/cve-2026-73959-oracle-webcenter-portal-privilege-escalation-in-composer2026-09-26 https://junglewise.ai/threats/cve-2026-73958-oracle-access-manager-authentication-bypass-in-http2026-09-26 https://junglewise.ai/threats/cve-2026-73957-oracle-webcenter-portal-xss-or-authentication-bypass-in-portlet2026-09-26 https://junglewise.ai/threats/cve-2026-73956-oracle-webcenter-portal-remote-code-execution-in-composer2026-09-26 https://junglewise.ai/threats/cve-2026-73955-oracle-peoplesoft-enterprise-peopletools-cross-site-scripting-in2026-09-26 https://junglewise.ai/threats/cve-2026-73954-oracle-peoplesoft-enterprise-peopletools-remote-compromise-in2026-09-26 https://junglewise.ai/threats/cve-2026-73953-oracle-webcenter-portal-remote-code-execution-in-portlet-services2026-09-26 https://junglewise.ai/threats/cve-2026-73952-oracle-webcenter-portal-unauthenticated-access-vulnerability-in2026-09-26 https://junglewise.ai/threats/cve-2026-73951-oracle-webcenter-portal-authentication-bypass-in-portlet-services2026-09-26 https://junglewise.ai/threats/cve-2026-73950-oracle-access-manager-authentication-bypass-in-http2026-09-26 https://junglewise.ai/threats/cve-2026-73949-oracle-webcenter-portal-privilege-escalation-in-portlet-services2026-09-26 https://junglewise.ai/threats/cve-2026-73948-oracle-webcenter-portal-privilege-escalation-in-composer2026-09-26 https://junglewise.ai/threats/cve-2026-73947-oracle-access-manager-remote-code-execution-in-authentication2026-09-26 https://junglewise.ai/threats/cve-2026-73946-oracle-access-manager-authentication-bypass-in-http-component2026-09-26 https://junglewise.ai/threats/cve-2026-73945-oracle-access-manager-authentication-bypass-in-oracle-fusion2026-09-26 https://junglewise.ai/threats/cve-2026-73944-oracle-access-manager-authentication-bypass-in-http2026-09-26 https://junglewise.ai/threats/cve-2026-73943-oracle-identity-manager-authentication-bypass-in-legacy-ui2026-09-26 https://junglewise.ai/threats/cve-2026-73942-oracle-identity-manager-privilege-escalation-in-legacy-ui2026-09-26 https://junglewise.ai/threats/cve-2026-73941-oracle-access-manager-authentication-bypass-in-oracle-fusion2026-09-26 https://junglewise.ai/threats/cve-2026-73940-oracle-access-manager-authentication-engine-remote-code-execution2026-09-26 https://junglewise.ai/threats/cve-2026-73926-oracle-access-manager-authentication-engine-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-73458-arista-eos-bfd-authentication-bypass-causing-session-reset2026-09-26 https://junglewise.ai/threats/cve-2026-71163-oracle-access-manager-authentication-bypass-in-http2026-09-26 https://junglewise.ai/threats/cve-2026-71133-oracle-access-manager-authentication-bypass-in-http2026-09-26 https://junglewise.ai/threats/cve-2026-71047-oracle-identity-manager-privilege-escalation-via-http2026-09-26 https://junglewise.ai/threats/cve-2026-70915-oracle-identity-manager-remote-code-execution-in-t3-iiop-protocol2026-09-26 https://junglewise.ai/threats/cve-2026-70913-oracle-identity-manager-unauthenticated-remote-compromise-in-http2026-09-26 https://junglewise.ai/threats/cve-2026-70757-oracle-weblogic-server-unauthenticated-remote-code-execution2026-09-26 https://junglewise.ai/threats/cve-2026-70756-oracle-weblogic-server-remote-code-execution-in-t3-iiop2026-09-26 https://junglewise.ai/threats/cve-2026-70755-oracle-e-business-suite-web-applications-desktop-integrator2026-09-26 https://junglewise.ai/threats/cve-2026-70748-oracle-weblogic-server-remote-code-execution-in-core2026-09-26 https://junglewise.ai/threats/cve-2026-69218-http4s-ember-http-2-unbounded-continuation-frame-accumulation2026-09-26 https://junglewise.ai/threats/cve-2026-69217-http4s-ember-http-1-1-parser-request-smuggling-via-duplicate2026-09-26 https://junglewise.ai/threats/cve-2026-69215-http4s-cookiejar-middleware-cookie-leakage-via-substring-matching2026-09-26 https://junglewise.ai/threats/cve-2026-69210-http4s-websocket-decoder-negative-length-handling-denial-of2026-09-26 https://junglewise.ai/threats/cve-2026-69206-http4s-digestauth-replay-attack-in-authorization-header2026-09-26 https://junglewise.ai/threats/cve-2026-69205-http4s-ember-http-request-smuggling-via-transfer-encoding-parsing2026-09-26 https://junglewise.ai/threats/cve-2026-69203-http4s-ember-http-2-stream-limit-enforcement-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-69202-http4s-ember-http-2-unbounded-inbound-body-buffering2026-09-26 https://junglewise.ai/threats/cve-2026-62597-oracle-enterprise-manager-base-platform-integrity-violation-in2026-09-26 https://junglewise.ai/threats/cve-2026-61544-libp2p-quic-remote-panic-in-quic-handshake-certificate-validation2026-09-26 https://junglewise.ai/threats/cve-2026-51134-c-mor-video-surveillance-path-traversal-in-show-movies-pml2026-09-26 https://junglewise.ai/threats/cve-2026-51133-za-internet-gmbh-c-mor-video-surveillance-reflected-cross-site2026-09-26 https://junglewise.ai/threats/cve-2026-32599-netmaker-boolean-based-sql-injection-in-dns-deletion2026-09-26 https://junglewise.ai/threats/cve-2026-18425-concrete-cms-dashboard-sitemap-reorder-authorization-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-18424-concrete-cms-server-side-request-forgery-in-remote-file-import2026-09-26 https://junglewise.ai/threats/cve-2026-18423-concrete-cms-insecure-direct-object-reference-in-express-saved2026-09-26 https://junglewise.ai/threats/cve-2026-18422-concrete-cms-authorization-and-csrf-bypass-in-multilingual-page2026-09-26 https://junglewise.ai/threats/cve-2026-13327-devolutions-server-improper-ldaps-certificate-validation2026-09-26 https://junglewise.ai/threats/cve-2026-88975-http4s-ember-http-2-frame-buffering-denial-of-service2026-09-25 https://junglewise.ai/threats/nezha-oauth2-redirect-uri-host-header-injection-regression-331e924a2026-09-25 https://junglewise.ai/threats/cve-2026-92180-pdfforge-pdf-architect-privilege-escalation-in-activation-service2026-09-26 https://junglewise.ai/threats/cve-2026-92179-pdfforge-pdf-architect-out-of-bounds-write-in-pdf-parsing2026-09-26 https://junglewise.ai/threats/cve-2026-92178-pdfforge-pdf-architect-memory-corruption-in-pdf-parsing2026-09-26 https://junglewise.ai/threats/cve-2026-92177-pdfforge-pdf-architect-out-of-bounds-write-in-pdf-parsing2026-09-26 https://junglewise.ai/threats/cve-2026-92176-pdfforge-pdf-architect-app-object-out-of-bounds-read-remote-code2026-09-26 https://junglewise.ai/threats/cve-2026-90971-devolutions-server-ssrf-in-vmware-synchronization-feature2026-09-26 https://junglewise.ai/threats/cve-2026-90969-devolutions-server-improper-access-control-in-vault-entry-listing2026-09-26 https://junglewise.ai/threats/cve-2026-84850-devolutions-server-improper-certificate-validation-in-http-client2026-09-26 https://junglewise.ai/threats/cve-2026-84048-joomgallery-arbitrary-file-upload-via-tus-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-82191-j2store-paypal-parameter-injection-in-redirect2026-09-26 https://junglewise.ai/threats/cve-2026-82190-j2store-predictable-order-access-token2026-09-26 https://junglewise.ai/threats/cve-2026-82189-j2store-order-status-manipulation-via-unauthenticated-request2026-09-26 https://junglewise.ai/threats/cve-2026-81924-concrete-cms-csrf-in-theme-page-template-activation2026-09-26 https://junglewise.ai/threats/cve-2026-81923-concrete-cms-seo-bulk-update-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-81922-concrete-cms-authorization-bypass-in-sitemap-page-reordering2026-09-26 https://junglewise.ai/threats/cve-2026-81921-concrete-cms-oauth-2-0-refresh-token-account-status-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-81920-concrete-cms-csrf-in-dashboard-seo-excluded-words-page2026-09-26 https://junglewise.ai/threats/cve-2026-81919-concrete-cms-csrf-in-block-arrangement-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-81568-j2store-arbitrary-file-read-via-path-traversal-in-download2026-09-26 https://junglewise.ai/threats/cve-2026-81567-j2store-sql-injection-in-storefront-product-list2026-09-26 https://junglewise.ai/threats/cve-2026-79411-webkul-bagisto-privilege-escalation-in-user-management2026-09-26 https://junglewise.ai/threats/cve-2026-79410-webkul-bagisto-improper-quantity-validation-in-add-to-cart2026-09-26 https://junglewise.ai/threats/cve-2026-79409-webkul-bagisto-information-disclosure-in-add-to-cart-api2026-09-26 https://junglewise.ai/threats/cve-2026-78081-j2commerce-j2store-missing-csrf-protection-in-checkout2026-09-26 https://junglewise.ai/threats/cve-2026-73467-arista-eos-plaintext-secrets-disclosure-in-log-files2026-09-26 https://junglewise.ai/threats/cve-2026-73466-arista-eos-sensitive-information-insertion-in-log-files2026-09-26 https://junglewise.ai/threats/cve-2026-73465-arista-eos-sensitive-information-insertion-in-log-files2026-09-26 https://junglewise.ai/threats/cve-2026-73451-arista-eos-security-acl-bypass-on-dual-switch-cards2026-09-26 https://junglewise.ai/threats/cve-2026-69216-http4s-ember-chunk-parser-lenience-in-http-request-smuggling2026-09-26 https://junglewise.ai/threats/cve-2026-69214-http4s-cookiejar-middleware-accepts-arbitrary-set-cookie-domain2026-09-26 https://junglewise.ai/threats/cve-2026-69213-http4s-ember-http-2-unbounded-outbound-frame-queue-denial-of2026-09-26 https://junglewise.ai/threats/cve-2026-69212-http4s-followredirect-credential-leak-on-scheme-downgrade2026-09-26 https://junglewise.ai/threats/cve-2026-69211-http4s-responsecookie-header-injection-via-unescaped-attributes2026-09-26 https://junglewise.ai/threats/cve-2026-69209-http4s-websocket-decoder-unbounded-message-buffering2026-09-26 https://junglewise.ai/threats/cve-2026-69208-http4s-digestauth-memory-exhaustion-via-unbounded-nonce-cache2026-09-26 https://junglewise.ai/threats/cve-2026-69204-http4s-ember-http-request-smuggling-via-transfer-encoding-and2026-09-26 https://junglewise.ai/threats/cve-2026-69201-http4s-resourceservice-and-webjarservice-path-traversal-via2026-09-26 https://junglewise.ai/threats/cve-2026-68534-concrete-cms-stored-cross-site-scripting-in-express-entry-labels2026-09-26 https://junglewise.ai/threats/cve-2026-68533-concrete-cms-authorization-bypass-in-file-upload-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-68532-concrete-cms-dashboard-group-type-csrf-in-delete-action2026-09-26 https://junglewise.ai/threats/cve-2026-68531-concrete-cms-sql-wildcard-injection-in-search-filters2026-09-26 https://junglewise.ai/threats/cve-2026-68530-concrete-cms-authorization-bypass-in-board-instance-actions2026-09-26 https://junglewise.ai/threats/cve-2026-68529-concrete-cms-express-entries-authorization-bypass-in-advanced2026-09-26 https://junglewise.ai/threats/cve-2026-66790-rejected-duplicate2026-09-26 https://junglewise.ai/threats/cve-2026-66789-duplicate-cve-rejection-notice2026-09-26 https://junglewise.ai/threats/cve-2026-58773-google-pixel-kernel-out-of-bounds-write-in-gnss-image-loading2026-09-26 https://junglewise.ai/threats/cve-2026-58767-arm-smmu-v3-privilege-escalation-in-arm-smmu-v3-c2026-09-26 https://junglewise.ai/threats/cve-2026-58766-arm-smmu-v3-privilege-escalation-due-to-logic-error2026-09-26 https://junglewise.ai/threats/cve-2026-58765-google-pixel-gpu-permission-bypass-via-logic-error2026-09-26 https://junglewise.ai/threats/cve-2026-58755-arm-smmu-v3-privilege-escalation-in-nested-ste-installation2026-09-26 https://junglewise.ai/threats/cve-2026-58751-arm-smmu-v3-use-after-free-in-arm-smmu-v3-c2026-09-26 https://junglewise.ai/threats/cve-2026-58747-arm-smmu-v3-permission-bypass-in-smmu-detach-dev2026-09-26 https://junglewise.ai/threats/cve-2026-58744-google-pixel-privilege-escalation-in-multiple-kernel-components2026-09-26 https://junglewise.ai/threats/cve-2026-58739-google-pixel-gdmc-confused-deputy-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-58734-google-pixel-gdmc-out-of-bounds-write-due-to-race-condition2026-09-26 https://junglewise.ai/threats/cve-2026-58728-arm64-tlbi-memory-corruption-in-trusty-kernel2026-09-26 https://junglewise.ai/threats/cve-2026-58726-google-pixel-gpca-permission-bypass-in-fsmreleasekey2026-09-26 https://junglewise.ai/threats/cve-2026-58724-google-pixel-kernel-use-after-free-in-race-condition2026-09-26 https://junglewise.ai/threats/cve-2026-58721-google-pixel-uninitialized-memory-information-disclosure-in-gsa2026-09-26 https://junglewise.ai/threats/cve-2026-58718-arm-smmu-v3-privilege-escalation-in-smmu-detach-dev-nested2026-09-26 https://junglewise.ai/threats/cve-2026-58716-google-pixel-gsa-privilege-escalation-via-toctou-race-condition2026-09-26 https://junglewise.ai/threats/cve-2026-58710-google-pixel-bigocean-out-of-bounds-write-in-film-grain-decoding2026-09-26 https://junglewise.ai/threats/cve-2026-58704-google-pixel-improper-authorization-in-cellular-modem2026-09-26 https://junglewise.ai/threats/cve-2026-58701-google-trusty-out-of-bounds-write-via-race-condition2026-09-26 https://junglewise.ai/threats/cve-2026-58699-android-vp9-decoder-out-of-bounds-read-in-vp9hwd-output-cc2026-09-26 https://junglewise.ai/threats/cve-2026-58698-google-pixel-firmware-permission-bypass-in-ap-pmic-handler2026-09-26 https://junglewise.ai/threats/cve-2026-58695-google-pixel-cpm-privilege-escalation-in-phy-power-c2026-09-26 https://junglewise.ai/threats/cve-2026-58691-google-pixel-gpca-permission-bypass-in-fsm-c2026-09-26 https://junglewise.ai/threats/cve-2026-58683-google-pixel-ip-multimedia-subsystem-out-of-bounds-write2026-09-26 https://junglewise.ai/threats/cve-2026-58679-google-goodix-fingerprint-ta-heap-buffer-overflow2026-09-26 https://junglewise.ai/threats/cve-2026-57042-google-pixel-dreampickerreceiver-permission-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-57035-google-pixel-kernel-out-of-bounds-write2026-09-26 https://junglewise.ai/threats/cve-2026-57014-nxp-nci-hal-out-of-bounds-write-in-nfc-initialization2026-09-26 https://junglewise.ai/threats/cve-2026-57012-google-pixel-setup-wizard-privilege-escalation-via-missing2026-09-26 https://junglewise.ai/threats/cve-2026-57008-google-pixel-modem-information-disclosure-via-improper-input2026-09-26 https://junglewise.ai/threats/cve-2026-57006-google-pixel-acfw-information-disclosure-due-to-logic-error2026-09-26 https://junglewise.ai/threats/cve-2026-56992-google-pixel-permission-bypass-in-ap-rom2026-09-26 https://junglewise.ai/threats/cve-2026-56989-google-pixel-out-of-bounds-write-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-56986-google-pixel-out-of-bounds-read-via-type-confusion2026-09-26 https://junglewise.ai/threats/cve-2026-56985-google-pixel-keymint-type-confusion-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-56982-google-pixel-vpu-permission-bypass-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-56979-google-pixel-permission-bypass-due-to-logic-error2026-09-26 https://junglewise.ai/threats/cve-2026-56978-google-pixel-bootloader-out-of-bounds-read-in-gc-c2026-09-26 https://junglewise.ai/threats/cve-2026-56975-google-cellular-modem-denial-of-service-via-improper-input2026-09-26 https://junglewise.ai/threats/cve-2026-56974-google-pixel-libpixelimsmedia-out-of-bounds-write-in2026-09-26 https://junglewise.ai/threats/cve-2026-56973-google-pixel-gdmc-privilege-escalation-logic-error2026-09-26 https://junglewise.ai/threats/cve-2026-56972-google-pixel-bootloader-out-of-bounds-write2026-09-26 https://junglewise.ai/threats/cve-2026-56970-google-pixel-firmware-permission-bypass-in-multiple-components2026-09-26 https://junglewise.ai/threats/cve-2026-56967-google-pixel-cellular-modem-heap-buffer-overflow2026-09-26 https://junglewise.ai/threats/cve-2026-56964-google-pixel-kernel-use-after-free-in-race-condition2026-09-26 https://junglewise.ai/threats/cve-2026-56960-google-pixel-use-after-free-in-kernel2026-09-26 https://junglewise.ai/threats/cve-2026-56958-google-pixel-kernel-out-of-bounds-read-in-gf-algo-c2026-09-26 https://junglewise.ai/threats/cve-2026-56950-google-pixel-information-disclosure-in-validate-ns-buf2026-09-26 https://junglewise.ai/threats/cve-2026-56945-google-pixel-vpu-out-of-bounds-write-in-confused-deputy2026-09-26 https://junglewise.ai/threats/cve-2026-56942-google-pixel-vp9-decoder-out-of-bounds-write-in-readtileinfo2026-09-26 https://junglewise.ai/threats/cve-2026-56941-google-pixel-trusted-execution-environment-use-after-free-in-fpc2026-09-26 https://junglewise.ai/threats/cve-2026-56932-google-pixel-trusted-execution-environment-memory-corruption2026-09-26 https://junglewise.ai/threats/cve-2026-56923-google-pixel-kernel-race-condition-memory-corruption-in-tipc2026-09-26 https://junglewise.ai/threats/cve-2026-56922-google-pixel-cpm-permission-bypass-via-confused-deputy2026-09-26 https://junglewise.ai/threats/cve-2026-56920-google-pixel-vpu-out-of-bounds-write-in-hevc-decoder2026-09-26 https://junglewise.ai/threats/cve-2026-56915-google-pixel-bigo-c-race-condition-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-56914-google-pixel-use-after-free-in-kernel-due-to-improper-locking2026-09-26 https://junglewise.ai/threats/cve-2026-56907-google-pixel-vpu-shared-memory-overwrite-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-56892-google-pixel-secure-world-information-disclosure-in2026-09-26 https://junglewise.ai/threats/cve-2026-56889-google-pixel-bootloader-permission-bypass-via-integer-overflow2026-09-26 https://junglewise.ai/threats/cve-2026-56888-google-pixel-gsa-permission-bypass-via-side-channel-information2026-09-26 https://junglewise.ai/threats/cve-2026-56882-google-pixel-telephony-logic-error-remote-code-execution2026-09-26 https://junglewise.ai/threats/cve-2026-56881-google-pixel-bootloader-permission-bypass-in-remap-c2026-09-26 https://junglewise.ai/threats/cve-2026-56879-google-pixel-bootloader-memory-corruption-via-confused-deputy2026-09-26 https://junglewise.ai/threats/cve-2026-55366-google-pixel-ip-multimedia-subsystem-authentication-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-55365-google-pixel-bootloader-out-of-bounds-write-in-remap-c2026-09-26 https://junglewise.ai/threats/cve-2026-55359-google-pixel-gpca-permission-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-55351-google-pixel-vpu-integer-overflow-leading-to-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-55343-google-pixel-imsmediaaudioplayer-out-of-bounds-write2026-09-26 https://junglewise.ai/threats/cve-2026-55332-google-pixel-bootloader-out-of-bounds-write-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-55331-google-pixel-ip-multimedia-subsystem-out-of-bounds-write2026-09-26 https://junglewise.ai/threats/cve-2026-55323-google-pixel-goodix-fingerprint-ta-heap-buffer-overflow2026-09-26 https://junglewise.ai/threats/cve-2026-55318-google-pixel-use-after-free-in-ip-multimedia-subsystem2026-09-26 https://junglewise.ai/threats/cve-2026-55317-google-pixel-bootloader-out-of-bounds-write-in-printf2026-09-26 https://junglewise.ai/threats/cve-2026-55306-google-pixel-cellular-modem-denial-of-service2026-09-26 https://junglewise.ai/threats/cve-2026-55304-google-pixel-bootloader-privilege-escalation-in-addr-remap2026-09-26 https://junglewise.ai/threats/cve-2026-55302-google-pixel-bootloader-permission-bypass-in-logic2026-09-26 https://junglewise.ai/threats/cve-2026-55301-google-pixel-vpu-out-of-bounds-write-in-wave6-c2026-09-26 https://junglewise.ai/threats/cve-2026-19886-originlab-origin-viewer-memory-corruption-in-ogm-file-parsing2026-09-26 https://junglewise.ai/threats/cve-2026-19885-originlab-origin-viewer-out-of-bounds-write-in-ogwu-file-parsing2026-09-26 https://junglewise.ai/threats/cve-2026-19781-ashlar-vellum-cobalt-heap-buffer-overflow-in-vs-file-parsing2026-09-26 https://junglewise.ai/threats/cve-2026-19774-bluez-a2dp-stack-based-buffer-overflow2026-09-26 https://junglewise.ai/threats/cve-2026-19773-libwebsockets-http-2-hpack-path-header-out-of-bounds-write-rce2026-09-26 https://junglewise.ai/threats/cve-2026-19641-arista-eos-orphan-authentication-session-denial-of-service2026-09-26 https://junglewise.ai/threats/cve-2026-19504-fabric-js-server-side-request-forgery-in-loadfromjson2026-09-26 https://junglewise.ai/threats/cve-2026-18421-concrete-cms-authorization-bypass-in-boards-data-source-dashboard2026-09-26 https://junglewise.ai/threats/cve-2026-0200-google-pixel-cellular-modem-heap-buffer-overflow2026-09-26 https://junglewise.ai/threats/cve-2026-0199-google-goodix-fingerprint-ta-out-of-bounds-write2026-09-26 https://junglewise.ai/threats/cve-2026-0197-google-pixel-vpu-information-disclosure-due-to-logic-error2026-09-26 https://junglewise.ai/threats/cve-2026-0194-google-pixel-trusted-execution-environment-permission-bypass-via2026-09-26 https://junglewise.ai/threats/cve-2026-0192-google-pixel-bootloader-privilege-escalation-due-to-missing2026-09-26 https://junglewise.ai/threats/cve-2026-0189-google-pixel-bootloader-permission-bypass-in-ac-init-policy2026-09-26 https://junglewise.ai/threats/cve-2026-0187-google-pixel-gsa-privilege-escalation-in-image-authentication2026-09-26 https://junglewise.ai/threats/cve-2026-0186-google-pixel-bootloader-privilege-escalation-via-logic-error-in-ac2026-09-26 https://junglewise.ai/threats/cve-2026-0183-google-pixel-cpm-information-disclosure-via-confused-deputy2026-09-26 https://junglewise.ai/threats/cve-2026-0179-google-pixel-bootloader-permission-bypass-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-0177-google-gsa-out-of-bounds-read-in-aes-gcm-crypto-operation2026-09-26 https://junglewise.ai/threats/cve-2026-0171-google-pixel-bigwave-out-of-bounds-write-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-0170-google-pixel-vp9-decoder-out-of-bounds-write-in-bigocean2026-09-26 https://junglewise.ai/threats/cve-2026-0159-google-pixel-cellular-modem-out-of-bounds-write2026-09-26 https://junglewise.ai/threats/cve-2026-88765-gitlab-ee-buffer-overflow-in-advanced-search-indexing2026-09-26 https://junglewise.ai/threats/cve-2026-85234-tftp-hpa-in-tftpd-out-of-bounds-read-write-in-remap-engine2026-09-26 https://junglewise.ai/threats/cve-2026-82837-gitlab-ce-ee-improper-authorization-in-data-emission-endpoints2026-09-26 https://junglewise.ai/threats/cve-2026-81899-concrete-cms-stored-cross-site-scripting-in-group-folder-names2026-09-26 https://junglewise.ai/threats/cve-2026-81898-concrete-cms-stored-xss-in-address-attribute-formatter2026-09-26 https://junglewise.ai/threats/cve-2026-81240-dell-wyse-management-suite-unrestricted-file-upload-with2026-09-26 https://junglewise.ai/threats/cve-2026-81239-dell-wyse-management-suite-unrestricted-file-upload2026-09-26 https://junglewise.ai/threats/cve-2026-81238-dell-wyse-management-suite-missing-authentication-in-critical2026-09-26 https://junglewise.ai/threats/cve-2026-81237-dell-wyse-management-suite-improper-authentication2026-09-26 https://junglewise.ai/threats/cve-2026-81236-dell-wyse-management-suite-unrestricted-file-upload2026-09-26 https://junglewise.ai/threats/cve-2026-81235-dell-wyse-management-suite-missing-cryptographic-step-information2026-09-26 https://junglewise.ai/threats/cve-2026-61668-dirac-improper-certificate-validation-in-pilotwrapper2026-09-26 https://junglewise.ai/threats/cve-2026-61667-dirac-remote-code-execution-in-filecatalog-datasetmanager2026-09-26 https://junglewise.ai/threats/cve-2026-58502-githubtoplanguages-command-injection-in-discord-workflow2026-09-26 https://junglewise.ai/threats/cve-2026-58485-mcp-searxng-web-url-read-dns-rebinding-ssrf2026-09-26 https://junglewise.ai/threats/cve-2026-58483-mcp-searxng-web-url-read-denial-of-service-via-unbounded-response2026-09-26 https://junglewise.ai/threats/cve-2026-57442-bitbonsai-mcpvault-path-traversal-in-pathfilter-restrictions2026-09-26 https://junglewise.ai/threats/cve-2026-57441-mcpvault-pathfilter-deny-list-bypass-via-case-and-path2026-09-26 https://junglewise.ai/threats/cve-2026-56831-shopper-framework-negative-discount-validation-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-56830-shopper-media-component-missing-authorization-in-store2026-09-26 https://junglewise.ai/threats/cve-2026-56829-shopper-variantstock-missing-authorization-and-unlocked-property2026-09-26 https://junglewise.ai/threats/cve-2026-56827-shopper-authorization-bypass-in-filament-bulk-actions2026-09-26 https://junglewise.ai/threats/cve-2026-56825-shopper-collectionproducts-missing-authorization-on-product2026-09-26 https://junglewise.ai/threats/cve-2026-55375-jleehr-canto-saas-api-oauth-credential-exposure-in-logs-and-urls2026-09-26 https://junglewise.ai/threats/cve-2026-55374-jleehr-canto-saas-api-ssrf-via-unencoded-path-variables2026-09-26 https://junglewise.ai/threats/cve-2026-55226-strimzi-kafka-operator-least-privilege-violation-in-entity2026-09-26 https://junglewise.ai/threats/cve-2026-55225-strimzi-kafka-operator-privilege-escalation-in-kafka-spec2026-09-26 https://junglewise.ai/threats/cve-2026-54689-searxng-mcp-server-hardened-mode-ssrf-bypass-via-redirect-and2026-09-26 https://junglewise.ai/threats/cve-2026-54688-searxng-mcp-server-ssrf-in-web-url-read2026-09-26 https://junglewise.ai/threats/cve-2026-54549-pipeboard-co-meta-ads-mcp-ssrf-in-upload-ad-image2026-09-26 https://junglewise.ai/threats/cve-2026-54547-pipeboard-co-meta-ads-mcp-auth-bypass-via-x-pipeboard-token2026-09-26 https://junglewise.ai/threats/cve-2026-54251-netty-netty-incubator-codec-ohttp-memory-leak-in-aead-decryption2026-09-26 https://junglewise.ai/threats/cve-2026-53954-bugsink-denial-of-service-via-excessive-event-tags2026-09-26 https://junglewise.ai/threats/cve-2026-53941-inspektor-gadget-ldcache-parser-denial-of-service2026-09-26 https://junglewise.ai/threats/cve-2026-53459-bambuddy-authentication-bypass-via-resource-exhaustion2026-09-26 https://junglewise.ai/threats/cve-2026-52484-mitrastar-gpt-2742gx4x5v6-sv-command-injection-in-device2026-09-26 https://junglewise.ai/threats/cve-2026-45579-dirac-rce-via-eval-injection-in-requestmanager2026-09-26 https://junglewise.ai/threats/cve-2026-44300-opencost-unauthenticated-file-write-in-servicekey-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-40058-crowdstrike-falcon-sensor-arbitrary-file-write-in-office-macro2026-09-26 https://junglewise.ai/threats/cve-2026-39040-bharatmlstack-cross-site-scripting-in-trufflebox-ui2026-09-26 https://junglewise.ai/threats/cve-2026-39039-bharatmlstack-trufflebox-ui-sensitive-token-storage-in2026-09-26 https://junglewise.ai/threats/cve-2026-39038-bharatmlstack-trufflebox-ui-cross-site-scripting-in2026-09-26 https://junglewise.ai/threats/cve-2026-18115-concrete-cms-rest-api-permission-bypass-in-user-write-endpoints2026-09-26 https://junglewise.ai/threats/cve-2026-18113-concrete-cms-top-navigation-bar-block-xss-in-dropdown-child-page2026-09-26 https://junglewise.ai/threats/cve-2026-13210-gitlab-ce-ee-improper-ci-cd-variable-scope-validation2026-09-26 https://junglewise.ai/threats/cve-2026-12910-gitlab-saml-sso-authentication-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-12752-ibm-business-automation-workflow-xml-external-entity-injection2026-09-26 https://junglewise.ai/threats/cve-2026-12751-ibm-cloud-pak-for-business-automation-html-injection2026-09-26 https://junglewise.ai/threats/cve-2026-12750-ibm-cloud-pak-for-business-automation-stored-cross-site-scripting2026-09-26 https://junglewise.ai/threats/cve-2026-12749-ibm-cloud-pak-for-business-automation-stored-xss-in-web-ui2026-09-26 https://junglewise.ai/threats/cve-2026-12742-ibm-business-automation-workflow-missing-authorization-in-import2026-09-26 https://junglewise.ai/threats/cve-2026-12728-ibm-mq-deserialization-bypass-remote-code-execution2026-09-26 https://junglewise.ai/threats/cve-2026-12667-ibm-mq-xxe-injection-in-net-client-rfh2-parser2026-09-26 https://junglewise.ai/threats/cve-2026-12666-ibm-mq-xml-external-entity-injection-in-mqrfh2-header2026-09-26 https://junglewise.ai/threats/cve-2026-12358-ibm-verify-identity-access-denial-of-service-due-to-uncontrolled2026-09-26 https://junglewise.ai/threats/cve-2026-12355-ibm-mq-jndi-injection-in-resource-adapter-ivt-servlet2026-09-26 https://junglewise.ai/threats/cve-2026-12354-ibm-mq-jndi-injection-in-resource-adapter-ivt2026-09-26 https://junglewise.ai/threats/cve-2026-12351-ibm-mq-remote-code-execution-via-jndi-injection2026-09-26 https://junglewise.ai/threats/cve-2026-12150-ibm-mq-stack-based-buffer-overflow-in-tls-certificate-parser2026-09-26 https://junglewise.ai/threats/cve-2026-12101-ibm-verify-identity-access-privilege-escalation-via-improper2026-09-26 https://junglewise.ai/threats/cve-2026-11934-ibm-verify-identity-access-improper-authorization-in-command2026-09-26 https://junglewise.ai/threats/cve-2026-11929-ibm-security-verify-identity-access-reverse-proxy-weak2026-09-26 https://junglewise.ai/threats/cve-2026-11927-ibm-security-verify-identity-access-parameter-injection-in2026-09-26 https://junglewise.ai/threats/cve-2026-11926-ibm-verify-identity-access-denial-of-service-in-request2026-09-26 https://junglewise.ai/threats/cve-2026-11921-ibm-verify-identity-access-insecurely-protected-credentials2026-09-26 https://junglewise.ai/threats/cve-2026-11918-ibm-contextforge-mcp-gateway-protection-bypass-in-nested-payload2026-09-26 https://junglewise.ai/threats/cve-2026-11864-ibm-cloud-pak-for-business-automation-xpath-injection2026-09-26 https://junglewise.ai/threats/cve-2026-11729-ibm-mq-unsafe-deserialization-in-java-client2026-09-26 https://junglewise.ai/threats/cve-2026-11728-ibm-mq-net-client-heap-buffer-overflow2026-09-26 https://junglewise.ai/threats/cve-2025-66974-prolink-ds-3202m-smart-plug-provisioning-token-validation-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-91855-open5gs-pfcp-message-handler-assertion-failure-in-far-validation2026-09-26 https://junglewise.ai/threats/cve-2026-91854-code-projects-record-management-system-stored-xss-in-reg-php2026-09-26 https://junglewise.ai/threats/cve-2026-91853-totolink-x5000r-os-command-injection-in-exportovpn-handler2026-09-26 https://junglewise.ai/threats/cve-2026-89026-issabel-framework-hard-coded-jwt-signing-key-remote-command2026-09-26 https://junglewise.ai/threats/cve-2026-89022-bookstack-social-login-authentication-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-81897-concrete-cms-stored-cross-site-scripting-in-express-form-text2026-09-26 https://junglewise.ai/threats/cve-2026-81896-concrete-cms-stored-xss-in-form-block-question-labels2026-09-26 https://junglewise.ai/threats/cve-2026-81895-concrete-cms-document-library-block-sql-injection2026-09-26 https://junglewise.ai/threats/cve-2026-81894-concrete-cms-stored-dom-based-xss-in-gallery-block-caption2026-09-26 https://junglewise.ai/threats/cve-2026-79705-buildah-copier-directory-traversal-via-tar-symlinks2026-09-26 https://junglewise.ai/threats/cve-2026-79699-containers-storage-tar-whiteout-header-directory-replacement2026-09-26 https://junglewise.ai/threats/cve-2026-63443-coder-http-redirect-injection-in-workspace-agent-api2026-09-26 https://junglewise.ai/threats/cve-2026-59160-yeger-turbo-graph-unauthenticated-task-execution-via-api-run2026-09-26 https://junglewise.ai/threats/cve-2026-58201-lokka-azure-resource-manager-token-leakage-via-url-path2026-09-26 https://junglewise.ai/threats/cve-2026-58200-jhb-software-payload-cloudinary-plugin-arbitrary-api-parameter2026-09-26 https://junglewise.ai/threats/cve-2026-55863-motioneye-missing-authentication-in-actionhandler2026-09-26 https://junglewise.ai/threats/cve-2026-55692-starcitizenwiki-embedvideo-stored-xss-in-embedhtmlformatter2026-09-26 https://junglewise.ai/threats/cve-2026-55691-starcitizenwiki-embedvideo-stored-xss-in-embedhtmlformatter2026-09-26 https://junglewise.ai/threats/cve-2026-55690-starcitizenwiki-embedvideo-stored-xss-in-exception-text2026-09-26 https://junglewise.ai/threats/cve-2026-55149-vouch-proxy-unbounded-multipart-cookie-allocation-dos2026-09-26 https://junglewise.ai/threats/cve-2026-54561-mkreyman-mcp-memory-keeper-path-traversal-in-context-import2026-09-26 https://junglewise.ai/threats/cve-2026-54503-plone-plone-app-textfield-stored-xss-via-mime-type-spoofing2026-09-26 https://junglewise.ai/threats/cve-2026-53710-ibm-mcp-contextforge-gateway-restrictedpython-sandbox-bypass-via2026-09-26 https://junglewise.ai/threats/cve-2026-53658-hyperledger-fabric-ca-ldap-injection-in-getuser-filter2026-09-26 https://junglewise.ai/threats/cve-2026-46488-motioneye-authentication-bypass-via-password-hash-in-cookies2026-09-26 https://junglewise.ai/threats/cve-2026-44778-inspektor-gadget-denial-of-service-in-usdt-note-parser2026-09-26 https://junglewise.ai/threats/cve-2026-21588-atlassian-confluence-data-center-dos-in-authenticated-request2026-09-26 https://junglewise.ai/threats/cve-2026-21587-atlassian-jira-service-management-data-center-improper2026-09-26 https://junglewise.ai/threats/cve-2026-21586-atlassian-confluence-data-center-improper-authorization2026-09-26 https://junglewise.ai/threats/cve-2026-19780-koha-eval-code-injection-remote-code-execution2026-09-26 https://junglewise.ai/threats/cve-2026-18111-concrete-cms-stored-xss-in-block-components2026-09-26 https://junglewise.ai/threats/cve-2026-18110-concrete-cms-user-selector-autocomplete-authorization-bypass2026-09-26 https://junglewise.ai/threats/cve-2024-58385-yonyou-u8-crm-unauthenticated-sql-injection-in2026-09-26 https://junglewise.ai/threats/cve-2023-54398-yonyou-u8-cloud-unauthenticated-java-deserialization-rce2026-09-26 https://junglewise.ai/threats/cve-2026-91992-tornado-curlasynchttpclient-credential-leak-via-handle-reuse2026-09-26 https://junglewise.ai/threats/cve-2026-91991-tornado-cookie-attribute-injection-via-capitalized-kwargs2026-09-26 https://junglewise.ai/threats/cve-2026-91990-tornado-memory-amplification-vulnerability-in-multipart-form2026-09-26 https://junglewise.ai/threats/cve-2026-91989-atomic-agents-stack-path-traversal-in-dashboard-http-server2026-09-26 https://junglewise.ai/threats/cve-2026-91988-atomic-agents-stack-cleartext-http-mcp-registry-remote-code2026-09-26 https://junglewise.ai/threats/cve-2026-91987-atomic-agents-stack-cost-guardrail-bypass-in-batch-cost2026-09-26 https://junglewise.ai/threats/cve-2026-91986-gitoxide-gix-transport-cr-lf-nul-injection-in-git-daemon-connect2026-09-26 https://junglewise.ai/threats/cve-2026-91985-vikunja-link-share-hash-disclosure-and-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-91984-vikunja-task-position-authorization-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-91983-vikunja-api-token-scope-bypass-via-expand-parameter2026-09-26 https://junglewise.ai/threats/cve-2026-91982-vikunja-totp-secret-exposure-via-unprotected-api-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-91981-vikunja-user-enumeration-via-v2-api-token-validation-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-91980-vikunja-team-enumeration-via-project-share2026-09-26 https://junglewise.ai/threats/cve-2026-91979-vikunja-decompression-bomb-denial-of-service-in-data-import2026-09-26 https://junglewise.ai/threats/cve-2026-91973-vikunja-authentication-bypass-in-caldav-basicauth-endpoints2026-09-26 https://junglewise.ai/threats/cve-2026-91972-vikunja-api-v2-missing-rate-limiting-on-authentication-endpoints2026-09-26 https://junglewise.ai/threats/cve-2026-91971-vikunja-avatar-and-project-background-upload-denial-of-service2026-09-26 https://junglewise.ai/threats/cve-2026-91970-vikunja-resource-exhaustion-in-planka-migrator2026-09-26 https://junglewise.ai/threats/cve-2026-91969-vikunja-resource-exhaustion-in-csv-migration-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-91968-vikunja-task-filter-resource-exhaustion-via-unbounded-recursion2026-09-26 https://junglewise.ai/threats/cve-2026-91967-avideo-ssrf-in-getheadercontenttypefromurl-via-stored-video-link2026-09-26 https://junglewise.ai/threats/cve-2026-91966-avideo-unauthenticated-ssrf-in-check-site-availability2026-09-26 https://junglewise.ai/threats/cve-2026-91965-wwbn-avideo-broken-access-control-in-live-endpoints2026-09-26 https://junglewise.ai/threats/cve-2026-91964-freerdp-heap-buffer-overflow-in-nego-send-negotiation-request2026-09-26 https://junglewise.ai/threats/cve-2026-91963-freerdp-uninitialized-heap-memory-disclosure-in-urbdrc2026-09-26 https://junglewise.ai/threats/cve-2026-91962-freerdp-integer-overflow-in-audin-apple-backends2026-09-26 https://junglewise.ai/threats/cve-2026-91961-freerdp-denial-of-service-in-urbdrc-control-transfer2026-09-26 https://junglewise.ai/threats/cve-2026-91960-freerdp-integer-overflow-in-winpr-stream-ensureremainingcapacity2026-09-26 https://junglewise.ai/threats/cve-2026-91959-freerdp-buffer-over-read-in-rpc-gateway-parser2026-09-26 https://junglewise.ai/threats/cve-2026-91958-freerdp-unbounded-array-indexing-in-x11-monitor-selection2026-09-26 https://junglewise.ai/threats/cve-2026-91957-freerdp-use-after-free-in-smartcard-rdpdr-device-handler2026-09-26 https://junglewise.ai/threats/cve-2026-91956-freerdp-out-of-bounds-read-in-urbdrc-channel2026-09-26 https://junglewise.ai/threats/cve-2026-91955-freerdp-server-denial-of-service-via-unvalidated-desktop2026-09-26 https://junglewise.ai/threats/cve-2026-91954-freerdp-null-pointer-dereference-in-gdi-surface-bits-with-nscodec2026-09-26 https://junglewise.ai/threats/cve-2026-91953-freerdp-heap-buffer-overflow-in-negotiation-request-routing-token2026-09-26 https://junglewise.ai/threats/cve-2026-91952-freerdp-infinite-loop-denial-of-service-in-pool-decode-rect2026-09-26 https://junglewise.ai/threats/cve-2026-91951-freerdp-out-of-bounds-write-in-urbdrc-client-channel2026-09-26 https://junglewise.ai/threats/cve-2026-91950-freerdp-out-of-bounds-read-in-rdpdr-dump-packet2026-09-26 https://junglewise.ai/threats/cve-2026-91949-freerdp-protocol-negotiation-bypass-in-server-mode2026-09-26 https://junglewise.ai/threats/cve-2026-91948-freerdp-out-of-bounds-write-in-static-virtual-channel-handling2026-09-26 https://junglewise.ai/threats/cve-2026-91947-freerdp-server-use-after-free-in-drdynvc-parser2026-09-26 https://junglewise.ai/threats/cve-2026-91946-freerdp-rdpgfx-resetgraphics-uninitialized-memory-disclosure2026-09-26 https://junglewise.ai/threats/cve-2026-91945-freerdp-out-of-bounds-read-in-smartcard-response-decoder2026-09-26 https://junglewise.ai/threats/cve-2026-91944-crawl4ai-dom-based-xss-in-playground-ui2026-09-26 https://junglewise.ai/threats/cve-2026-91943-crawl4ai-pdfcontentscrapingstrategy-server-side-request-forgery2026-09-26 https://junglewise.ai/threats/cve-2026-91942-crawl4ai-dom-based-xss-in-docker-playground-via-innerhtml2026-09-26 https://junglewise.ai/threats/cve-2026-91941-crawl4ai-uncontrolled-resource-consumption-in2026-09-26 https://junglewise.ai/threats/cve-2026-91940-crawl4ai-arbitrary-file-write-in-pdfcontentscrapingstrategy2026-09-26 https://junglewise.ai/threats/cve-2026-91938-flowise-server-side-request-forgery-in-document-loaders2026-09-26 https://junglewise.ai/threats/cve-2026-91937-flowise-nosql-injection-in-mongodbmemory-sessionid2026-09-26 https://junglewise.ai/threats/cve-2026-91936-flowiseai-flowise-script-injection-in-docker-workflow-inputs2026-09-26 https://junglewise.ai/threats/cve-2026-91935-flowise-ssrf-and-llm-api-key-exfiltration-via-chat-model-nodes2026-09-26 https://junglewise.ai/threats/cve-2026-91934-flowise-sql-database-chain-arbitrary-file-write-in-sqlite2026-09-26 https://junglewise.ai/threats/cve-2026-91933-flowise-openai-realtime-cross-workspace-authorization-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-91932-flowise-mcp-server-configuration-validation-bypass-in-cwd2026-09-26 https://junglewise.ai/threats/cve-2026-91931-flowise-custom-mcp-remote-code-execution-via-npx2026-09-26 https://junglewise.ai/threats/cve-2026-91930-flowise-cross-tenant-organization-admin-takeover-via-unscoped2026-09-26 https://junglewise.ai/threats/cve-2026-91929-flowise-cross-tenant-authorization-bypass-in-enterprise-endpoints2026-09-26 https://junglewise.ai/threats/cve-2026-91849-wuzhicms-arbitrary-file-upload-via-avatar-function2026-09-26 https://junglewise.ai/threats/cve-2026-91848-wuzhicms-sql-injection-in-article-getdataofjson2026-09-26 https://junglewise.ai/threats/cve-2026-89307-design-scuole-italia-theme-stored-html-injection-and-open2026-09-26 https://junglewise.ai/threats/cve-2026-88621-onenav-arbitrary-file-deletion-via-authenticated-upload2026-09-26 https://junglewise.ai/threats/cve-2026-88620-smartadmin-api-java17-springboot3-improper-authorization-in2026-09-26 https://junglewise.ai/threats/cve-2026-88619-1024-lab-smartadmin-missing-authorization-in-scheduled-job2026-09-26 https://junglewise.ai/threats/cve-2026-87793-italia-design-scuole-wordpress-theme-reflected-xss-in-filters2026-09-26 https://junglewise.ai/threats/cve-2026-87792-design-scuole-italia-wordpress-theme-authorization-bypass-in-pdf2026-09-26 https://junglewise.ai/threats/cve-2026-87791-design-scuole-italia-path-traversal-in-reserved-file-check2026-09-26 https://junglewise.ai/threats/cve-2026-85013-environment-modules-arbitrary-command-execution-via-shell2026-09-26 https://junglewise.ai/threats/cve-2026-77972-slab-safeurl-toctou-race-condition-in-dns-validation2026-09-26 https://junglewise.ai/threats/cve-2026-77866-slab-safeurl-ssrf-via-ipv6-and-blocklist-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-65831-arcadedb-privilege-escalation-in-polyglot-scripting-engine2026-09-26 https://junglewise.ai/threats/cve-2026-59973-frontmcp-and-mcp-from-openapi-ssrf-bypass-in-openapi-ref2026-09-26 https://junglewise.ai/threats/cve-2026-59965-jhb-software-payload-alt-text-plugin-authorization-bypass-in2026-09-26 https://junglewise.ai/threats/cve-2026-59157-webhookd-unrestricted-http-header-to-shell-variable-injection2026-09-26 https://junglewise.ai/threats/cve-2026-58196-stacklok-toolhive-ssrf-in-remote-mcp-server-authentication2026-09-26 https://junglewise.ai/threats/cve-2026-55887-docker-mcp-gateway-argument-injection-via-oci-image-label2026-09-26 https://junglewise.ai/threats/cve-2026-55864-geonetwork-unauthenticated-server-side-request-forgery-in-sld2026-09-26 https://junglewise.ai/threats/cve-2026-55828-qbee-io-transport-path-traversal-in-tar-extraction2026-09-26 https://junglewise.ai/threats/cve-2026-55776-openbao-denial-of-service-via-transit-engine-key-creation2026-09-26 https://junglewise.ai/threats/cve-2026-55770-openbao-ldap-injection-in-ldaputil-search-filter-construction2026-09-26 https://junglewise.ai/threats/cve-2026-55701-opentelemetry-collector-githubreceiver-auth-bypass-via-missing2026-09-26 https://junglewise.ai/threats/cve-2026-55636-clastix-capsule-incorrect-authorization-via-typo-in-namespaces2026-09-26 https://junglewise.ai/threats/cve-2026-55630-kiwi-tcms-stored-xss-in-testplan-and-testcase-extra-link-fields2026-09-26 https://junglewise.ai/threats/cve-2026-55591-signal-k-server-ssrf-in-remote-connection-endpoints2026-09-26 https://junglewise.ai/threats/cve-2026-55211-surfio-out-of-bounds-read-in-irap-file-parsing2026-09-26 https://junglewise.ai/threats/cve-2026-54724-kiwi-tcms-open-redirect-in-account-confirmation-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-54450-stacklok-toolhive-ssrf-bypass-via-ipv6-nat64-ranges2026-09-26 https://junglewise.ai/threats/cve-2026-54077-arcadedb-ssrf-and-local-file-read-in-import-database-statement2026-09-26 https://junglewise.ai/threats/cve-2026-54076-arcadedata-arcadedb-incorrect-authorization-in-engine-schema2026-09-26 https://junglewise.ai/threats/cve-2026-50024-githacker-path-traversal-in-ref-parsing-enables-file-existence2026-09-26 https://junglewise.ai/threats/cve-2026-44282-decidim-decidim-elections-stored-xss-in-question-titles2026-09-26 https://junglewise.ai/threats/cve-2026-44163-fluentd-fluent-plugin-opentelemetry-dos-in-in-opentelemetry-http2026-09-26 https://junglewise.ai/threats/cve-2026-37152-totolink-x5000r-hardcoded-root-password2026-09-26 https://junglewise.ai/threats/cve-2026-19407-google-cloud-gemini-enterprise-agent-platform-sdk-bucket2026-09-26 https://junglewise.ai/threats/cve-2024-58384-tornado-curlasynchttpclient-crlf-injection-in-request-headers2026-09-26 https://junglewise.ai/threats/cve-2024-14029-tornado-http-request-smuggling-via-duplicate-transfer-encoding2026-09-26 https://junglewise.ai/threats/cve-2023-54397-tornado-http-request-smuggling-in-content-length-parsing2026-09-26 https://junglewise.ai/threats/cve-2026-92082-payara-server-brute-force-attack-via-unlimited-login-attempts2026-09-26 https://junglewise.ai/threats/cve-2026-91842-openbankproject-obp-api-deserialization-in-kryo-handler2026-09-26 https://junglewise.ai/threats/cve-2026-91836-openclaw-clawscan-incomplete-comparison-in-static-scanner2026-09-26 https://junglewise.ai/threats/cve-2026-91835-openclaw-clawscan-file-classification-bypass-in-isbinaryfile2026-09-26 https://junglewise.ai/threats/cve-2026-90650-motopress-hotel-booking-stored-cross-site-scripting-via-stripe2026-09-26 https://junglewise.ai/threats/cve-2026-90439-nginx-plus-and-open-source-http-3-heap-buffer-overflow-in-tls2026-09-26 https://junglewise.ai/threats/cve-2026-89025-hirschmann-hios-switch-platform-denial-of-service-in-web-server2026-09-26 https://junglewise.ai/threats/cve-2026-88618-1024-lab-smartadmin-stored-cross-site-scripting-in-file-upload2026-09-26 https://junglewise.ai/threats/cve-2026-88617-smartadmin-configuration-disclosure-and-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-88616-ruoyi-vue-plus-authorization-bypass-in-workflow-task-completion2026-09-26 https://junglewise.ai/threats/cve-2026-79551-tenda-nvr-4h-hardcoded-cryptographic-key-in-https-certificate2026-09-26 https://junglewise.ai/threats/cve-2026-79425-crmeb-server-side-request-forgery-in-file-upload2026-09-26 https://junglewise.ai/threats/cve-2026-79303-kaiten-sql-injection-in-api-card-sorting-parameters2026-09-26 https://junglewise.ai/threats/cve-2026-63696-dell-smartfabric-os10-code-download-without-integrity-check2026-09-26 https://junglewise.ai/threats/cve-2026-63695-dell-smartfabric-os10-session-fixation-vulnerability2026-09-26 https://junglewise.ai/threats/cve-2026-61549-woodpecker-ci-privilege-escalation-in-kubernetes-backend2026-09-26 https://junglewise.ai/threats/cve-2026-59971-mysql-mcp-server-missing-authentication-and-dns-rebinding2026-09-26 https://junglewise.ai/threats/cve-2026-57586-coderag-arbitrary-code-execution-in-gradle-dependency-sync2026-09-26 https://junglewise.ai/threats/cve-2026-55650-outerbase-studio-stored-xss-in-text-widget2026-09-26 https://junglewise.ai/threats/cve-2026-55617-hydro-insufficient-session-expiration-during-session-recreation2026-09-26 https://junglewise.ai/threats/cve-2026-55178-geolens-cross-dataset-authorization-bypass-in-map-relationship2026-09-26 https://junglewise.ai/threats/cve-2026-55158-conflibot-command-injection-in-pull-request-branch-names2026-09-26 https://junglewise.ai/threats/cve-2026-54637-dragonfly-dragonfly-scheduler-unauthenticated-ssrf-in2026-09-26 https://junglewise.ai/threats/cve-2026-54254-cyberdrop-dl-pixeldrain-api-key-exposure-via-unverified-hosts2026-09-26 https://junglewise.ai/threats/cve-2026-54168-tekton-pipelines-as-code-unscoped-github-app-token-unauthorized2026-09-26 https://junglewise.ai/threats/cve-2026-54167-openshift-pipelines-as-code-github-app-token-credential2026-09-26 https://junglewise.ai/threats/cve-2026-53966-xwiki-platform-live-data-privilege-escalation-through-edit-api2026-09-26 https://junglewise.ai/threats/cve-2026-53957-contentful-mcp-server-export-space-import-space-credential2026-09-26 https://junglewise.ai/threats/cve-2026-52724-kumahq-kuma-improper-tls-certificate-validation-in-kuma-dp2026-09-26 https://junglewise.ai/threats/cve-2026-50166-kong-kuma-improper-tls-certificate-validation-in-kumactl2026-09-26 https://junglewise.ai/threats/cve-2026-49446-cosmos-server-auth-bypass-via-header-smuggling-in-constellation2026-09-26 https://junglewise.ai/threats/cve-2026-49254-dragonfly-manager-oauth-client-secret-disclosure-in-api2026-09-26 https://junglewise.ai/threats/cve-2026-48987-pyload-uncontrolled-memory-growth-in-eventmanager2026-09-26 https://junglewise.ai/threats/cve-2026-48737-pyload-pyload-ng-ssrf-bypass-via-ipv6-transition-wrappers2026-09-26 https://junglewise.ai/threats/cve-2026-48722-nextflow-incorrect-default-permissions-in-auth-login-command2026-09-26 https://junglewise.ai/threats/cve-2026-47780-free5gc-udr-improper-input-validation-in-ee-subscription-handlers2026-09-26 https://junglewise.ai/threats/cve-2026-39919-ghostscript-heap-buffer-overflow-in-jpeg-2000-decoder2026-09-26 https://junglewise.ai/threats/cve-2026-25827-keyfactor-signserver-local-file-enumeration-via-unrestricted2026-09-26 https://junglewise.ai/threats/cve-2026-25826-keyfactor-signserver-file-content-exposure-in-pkcs11cryptotoken2026-09-26 https://junglewise.ai/threats/cve-2026-25825-keyfactor-signserver-arbitrary-file-write-in2026-09-26 https://junglewise.ai/threats/cve-2026-77179-docker-sandboxes-virtio-fs-symlink-escape-on-macos2026-09-26 https://junglewise.ai/threats/cve-2026-16141-openbmc-phosphor-net-ipmid-authentication-bypass-in-rakp2026-09-26 https://junglewise.ai/threats/cve-2026-16140-openbmc-phosphor-net-ipmid-privilege-escalation-in-rakp2026-09-26 https://junglewise.ai/threats/cve-2026-92079-mozilla-firefox-mitigation-bypass-in-widget-win322026-09-26 https://junglewise.ai/threats/cve-2026-92078-mozilla-firefox-denial-of-service-in-security-component2026-09-26 https://junglewise.ai/threats/cve-2026-92077-mozilla-firefox-denial-of-service-in-svg-component2026-09-26 https://junglewise.ai/threats/cve-2026-92076-mozilla-firefox-incorrect-boundary-conditions-in-networking2026-09-26 https://junglewise.ai/threats/cve-2026-92075-mozilla-firefox-mitigation-bypass-in-networking-component2026-09-26 https://junglewise.ai/threats/cve-2026-92074-mozilla-firefox-and-thunderbird-popup-blocker-mitigation-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-92073-mozilla-firefox-privilege-escalation-in-enterprise-policies2026-09-26 https://junglewise.ai/threats/cve-2026-92072-mozilla-firefox-incorrect-boundary-conditions-in-safe-browsing2026-09-26 https://junglewise.ai/threats/cve-2026-92071-mozilla-firefox-sandbox-escape-in-widget-win32-component2026-09-26 https://junglewise.ai/threats/cve-2026-92070-mozilla-firefox-information-disclosure-in-networking-component2026-09-26 https://junglewise.ai/threats/cve-2026-92069-mozilla-firefox-spoofing-issue-in-dom-navigation-component2026-09-26 https://junglewise.ai/threats/cve-2026-92068-mozilla-firefox-site-isolation-issue-in-reader-mode2026-09-26 https://junglewise.ai/threats/cve-2026-92067-mozilla-firefox-use-after-free-in-widget-gtk-component2026-09-26 https://junglewise.ai/threats/cve-2026-92066-mozilla-firefox-sandbox-escape-in-profile-backup2026-09-26 https://junglewise.ai/threats/cve-2026-92065-mozilla-firefox-sandbox-escape-in-widget-win322026-09-26 https://junglewise.ai/threats/cve-2026-92064-mozilla-firefox-sandbox-escape-in-widget-win32-component2026-09-26 https://junglewise.ai/threats/cve-2026-92063-mozilla-firefox-denial-of-service-in-audio-video-component2026-09-26 https://junglewise.ai/threats/cve-2026-92062-mozilla-firefox-privilege-escalation-in-session-restore-component2026-09-26 https://junglewise.ai/threats/cve-2026-92061-mozilla-firefox-incorrect-boundary-conditions-in-process2026-09-26 https://junglewise.ai/threats/cve-2026-92060-mozilla-firefox-use-after-free-in-internationalization-component2026-09-26 https://junglewise.ai/threats/cve-2026-92059-mozilla-firefox-incorrect-boundary-conditions-in-dom-editor2026-09-26 https://junglewise.ai/threats/cve-2026-92058-mozilla-firefox-use-after-free-in-graphics-component2026-09-26 https://junglewise.ai/threats/cve-2026-92057-mozilla-firefox-mitigation-bypass-in-enterprise-policies2026-09-26 https://junglewise.ai/threats/cve-2026-92056-mozilla-firefox-use-after-free-in-graphics-text-component2026-09-26 https://junglewise.ai/threats/cve-2026-92055-mozilla-firefox-privilege-escalation-in-devtools-component2026-09-26 https://junglewise.ai/threats/cve-2026-92054-mozilla-firefox-privilege-escalation-in-memory-component2026-09-26 https://junglewise.ai/threats/cve-2026-92053-mozilla-firefox-privilege-escalation-in-graphics-canvaswebgl2026-09-26 https://junglewise.ai/threats/cve-2026-92052-mozilla-firefox-privilege-escalation-in-canvaswebgl-due-to2026-09-26 https://junglewise.ai/threats/cve-2026-92051-mozilla-firefox-spoofing-issue-due-to-invalid-pointer-in-graphics2026-09-26 https://junglewise.ai/threats/cve-2026-92050-mozilla-firefox-xpconnect-race-condition-sandbox-escape2026-09-26 https://junglewise.ai/threats/cve-2026-92048-mozilla-firefox-sandbox-escape-in-widget-win32-component2026-09-26 https://junglewise.ai/threats/cve-2026-92047-mozilla-firefox-privilege-escalation-in-crash-reporting2026-09-26 https://junglewise.ai/threats/cve-2026-92046-mozilla-firefox-use-after-free-in-graphics-component2026-09-26 https://junglewise.ai/threats/cve-2026-92045-mozilla-firefox-sandbox-escape-in-webrtc-due-to-incorrect2026-09-26 https://junglewise.ai/threats/cve-2026-92044-mozilla-firefox-information-disclosure-in-networking-http2026-09-26 https://junglewise.ai/threats/cve-2026-92043-mozilla-firefox-privilege-escalation-in-audio-video-component2026-09-26 https://junglewise.ai/threats/cve-2026-92042-mozilla-firefox-race-condition-in-dom-content-processes-component2026-09-26 https://junglewise.ai/threats/cve-2026-92041-mozilla-firefox-mitigation-bypass-in-dom-networking-component2026-09-26 https://junglewise.ai/threats/cve-2026-92040-mozilla-firefox-use-after-free-in-javascript-webassembly2026-09-26 https://junglewise.ai/threats/cve-2026-92039-mozilla-firefox-mitigation-bypass-in-dom-notifications-component2026-09-26 https://junglewise.ai/threats/cve-2026-92038-mozilla-firefox-mitigation-bypass-in-remote-settings-client2026-09-26 https://junglewise.ai/threats/cve-2026-92037-mozilla-firefox-incorrect-boundary-conditions-in-dom-animation2026-09-26 https://junglewise.ai/threats/cve-2026-92036-mozilla-firefox-incorrect-boundary-conditions-in-http-networking2026-09-26 https://junglewise.ai/threats/cve-2026-92035-mozilla-firefox-sandbox-escape-in-graphics-component2026-09-26 https://junglewise.ai/threats/cve-2026-92034-mozilla-firefox-site-isolation-issue-in-graphics-component2026-09-26 https://junglewise.ai/threats/cve-2026-92033-mozilla-firefox-privilege-escalation-in-android2026-09-26 https://junglewise.ai/threats/cve-2026-92032-mozilla-firefox-sandbox-escape-in-graphics-component2026-09-26 https://junglewise.ai/threats/cve-2026-92031-mozilla-firefox-information-disclosure-in-imagelib2026-09-26 https://junglewise.ai/threats/cve-2026-92030-mozilla-firefox-mitigation-bypass-in-dom-copy-paste-and-drag-drop2026-09-26 https://junglewise.ai/threats/cve-2026-92029-mozilla-firefox-use-after-free-in-svg-component2026-09-26 https://junglewise.ai/threats/cve-2026-92028-mozilla-firefox-use-after-free-in-dom-core-amp-html2026-09-26 https://junglewise.ai/threats/cve-2026-92027-mozilla-firefox-use-after-free-in-dom-streams-component2026-09-26 https://junglewise.ai/threats/cve-2026-92026-mozilla-firefox-use-after-free-in-networking-component2026-09-26 https://junglewise.ai/threats/cve-2026-92025-mozilla-firefox-use-after-free-in-dom-navigation-component2026-09-26 https://junglewise.ai/threats/cve-2026-92024-mozilla-firefox-use-after-free-in-svg-component2026-09-26 https://junglewise.ai/threats/cve-2026-92023-mozilla-firefox-use-after-free-in-xml-component2026-09-26 https://junglewise.ai/threats/cve-2026-92022-mozilla-firefox-use-after-free-in-dom-html-parser2026-09-26 https://junglewise.ai/threats/cve-2026-92021-mozilla-firefox-esr-use-after-free-in-javascript-engine-jit2026-09-26 https://junglewise.ai/threats/cve-2026-92020-mozilla-firefox-privilege-escalation-in-graphics-webrender2026-09-26 https://junglewise.ai/threats/cve-2026-92019-mozilla-firefox-mitigation-bypass-in-remote-settings-client2026-09-26 https://junglewise.ai/threats/cve-2026-92018-mozilla-firefox-sandbox-escape-in-dom-core-html2026-09-26 https://junglewise.ai/threats/cve-2026-92017-mozilla-firefox-privilege-escalation-in-dom-service-workers2026-09-26 https://junglewise.ai/threats/cve-2026-92016-mozilla-firefox-use-after-free-in-disability-access-apis2026-09-26 https://junglewise.ai/threats/cve-2026-92015-mozilla-firefox-privilege-escalation-in-webextensions2026-09-26 https://junglewise.ai/threats/cve-2026-92014-mozilla-firefox-privilege-escalation-in-graphics-component2026-09-26 https://junglewise.ai/threats/cve-2026-92013-mozilla-firefox-privilege-escalation-in-canvaswebgl-graphics2026-09-26 https://junglewise.ai/threats/cve-2026-92012-mozilla-firefox-privilege-escalation-in-graphics-canvaswebgl2026-09-26 https://junglewise.ai/threats/cve-2026-92011-mozilla-firefox-privilege-escalation-in-graphics-canvaswebgl2026-09-26 https://junglewise.ai/threats/cve-2026-92010-mozilla-firefox-privilege-escalation-in-graphics-canvaswebgl2026-09-26 https://junglewise.ai/threats/cve-2026-92009-mozilla-firefox-privilege-escalation-in-canvaswebgl2026-09-26 https://junglewise.ai/threats/cve-2026-92008-mozilla-firefox-privilege-escalation-in-canvaswebgl2026-09-26 https://junglewise.ai/threats/cve-2026-92007-mozilla-firefox-privilege-escalation-in-canvaswebgl2026-09-26 https://junglewise.ai/threats/cve-2026-92006-mozilla-firefox-privilege-escalation-in-canvaswebgl-due-to2026-09-26 https://junglewise.ai/threats/cve-2026-92005-mozilla-firefox-use-after-free-in-audio-video-web-codecs2026-09-26 https://junglewise.ai/threats/cve-2026-15609-qode-interactive-the-bridge-wordpress-theme-stored-xss-in-circle2026-09-26 https://junglewise.ai/threats/cve-2026-14805-the-consulting-wordpress-theme-privilege-escalation2026-09-26 https://junglewise.ai/threats/cve-2026-92003-misp-authentication-failure-logging-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-92002-misp-redis-unavailability-silences-authentication-failure-logging2026-09-26 https://junglewise.ai/threats/cve-2026-91998-casdoor-authorization-bypass-in-api-mcp-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-91997-evolution-api-ip-whitelist-bypass-in-metricsipwhitelist2026-09-26 https://junglewise.ai/threats/cve-2026-91996-lamp-cloud-authentication-bypass-via-anno-path-whitelist2026-09-26 https://junglewise.ai/threats/cve-2026-91995-pig-authentication-bypass-in-password-reset-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-91994-semaphore-ui-authorization-bypass-in-environment-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-91993-jpom-workspace-isolation-bypass-in-repository-enumeration2026-09-26 https://junglewise.ai/threats/cve-2026-91926-gss-ntlmssp-memory-leak-in-ntlm-target-info-parser2026-09-26 https://junglewise.ai/threats/cve-2026-89308-trexom-trxtimeattendance-os-command-injection-in-ping-php2026-09-26 https://junglewise.ai/threats/cve-2026-91925-polyaxon-unsandboxed-jinja2-template-injection-in-run2026-09-26 https://junglewise.ai/threats/cve-2026-91924-pgweb-authentication-bypass-in-api-connect-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-91923-kubesphere-server-side-request-forgery-in-git-credential2026-09-26 https://junglewise.ai/threats/cve-2026-91922-steedos-platform-reflected-xss-in-api-page-render-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-91786-gnome-shell-out-of-bounds-read-in-remote-search-icon-rendering2026-09-26 https://junglewise.ai/threats/cve-2026-86818-fast-uri-mailto-header-injection-via-percent-encoded-field-name2026-09-26 https://junglewise.ai/threats/cve-2026-86472-fast-uri-inconsistent-host-case-normalization-via-percent-encoded2026-09-26 https://junglewise.ai/threats/cve-2026-80489-gnu-c-library-euc-jisx0213-converter-denial-of-service2026-09-26 https://junglewise.ai/threats/cve-2026-77117-gnu-c-library-shift-jisx0213-converter-hang-in-iconv2026-09-26 https://junglewise.ai/threats/cve-2026-57148-praisonai-jwt-authentication-bypass-with-hardcoded-dev-secret2026-09-26 https://junglewise.ai/threats/cve-2026-57147-praisonai-jwt-authentication-bypass-with-hardcoded-secret2026-09-26 https://junglewise.ai/threats/cve-2026-57141-praisonai-codemode-tool-remote-code-execution-via-sandbox-escape2026-09-26 https://junglewise.ai/threats/cve-2026-57140-praisonai-agentos-unauthenticated-agent-listing-and-invocation2026-09-26 https://junglewise.ai/threats/cve-2026-57139-praisonai-mcpserver-unauthenticated-http-tools-exposure2026-09-26 https://junglewise.ai/threats/cve-2026-57138-npm-praisonai-codemode-sandbox-escape-via-function-constructor2026-09-26 https://junglewise.ai/threats/cve-2026-57137-praisonai-agentloop-approval-bypass-via-post-execution-callback2026-09-26 https://junglewise.ai/threats/cve-2026-57136-praisonai-sandboxexecutor-command-allowlist-bypass-via-shell2026-09-26 https://junglewise.ai/threats/cve-2026-57135-praisonai-sandboxexecutor-network-isolation-bypass-via-non-proxy2026-09-26 https://junglewise.ai/threats/cve-2026-57134-npm-praisonai-mcpsecurity-auth-bypass-in-basic-oauth-validation2026-09-26 https://junglewise.ai/threats/cve-2026-57133-praisonai-shell-command-allowlist-bypass-via-shell-chaining2026-09-26 https://junglewise.ai/threats/cve-2026-57112-praisonai-legacy-sse-endpoint-cors-and-authentication-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-52828-kimai-missing-authorization-check-in-exportcontroller-export2026-09-26 https://junglewise.ai/threats/cve-2026-52827-kimai-2fa-bypass-in-rest-api-via-session-cookie-replay2026-09-26 https://junglewise.ai/threats/cve-2026-52826-kimai-improper-authorization-in-rate-edit-endpoints2026-09-26 https://junglewise.ai/threats/cve-2026-52825-kimai-improper-authorization-in-team-assignment-apis2026-09-26 https://junglewise.ai/threats/cve-2026-52824-kimai-insecure-default-app-secret-in-docker-image2026-09-26 https://junglewise.ai/threats/cve-2026-52823-kimai-csrf-in-timesheet-stop-and-restart-api-endpoints2026-09-26 https://junglewise.ai/threats/cve-2026-52822-kimai-improper-authorization-in-timesheet-restart-and-duplicate2026-09-26 https://junglewise.ai/threats/cve-2026-52821-kimai-improper-authorization-in-activity-and-project-creation2026-09-26 https://junglewise.ai/threats/cve-2026-52820-kimai-timesheet-authorization-bypass-in-project-assignment2026-09-26 https://junglewise.ai/threats/cve-2026-52819-kimai-authorization-bypass-in-get-api-timesheets-api2026-09-26 https://junglewise.ai/threats/cve-2026-1759-secomea-gatemanager-privilege-escalation-in-permissions-handling2026-09-26 https://junglewise.ai/threats/cve-2026-1758-secomea-gatemanager-session-fixation-in-webserver-module2026-09-26 https://junglewise.ai/threats/cve-2026-91859-misp-access-log-corruption-on-request-exceptions2026-09-26 https://junglewise.ai/threats/cve-2026-91857-misp-state-changing-actions-missing-post-requirement2026-09-26 https://junglewise.ai/threats/cve-2026-62280-open-identity-platform-openam-reflected-xss-in-oauth2-consent2026-09-26 https://junglewise.ai/threats/cve-2026-62263-openidentityplatform-openam-java-deserialization-rce-in-webauthn2026-09-26 https://junglewise.ai/threats/cve-2026-59341-bitnami-sealed-secrets-controller-decryption-oracle-via-template2026-09-26 https://junglewise.ai/threats/cve-2026-53660-openam-insecure-sso-cookie-initialization2026-09-26 https://junglewise.ai/threats/cve-2026-48717-open-identity-platform-openam-oauth-authorization-bypass-in-pkce2026-09-26 https://junglewise.ai/threats/cve-2026-47426-open-identity-platform-openam-oauth-client-impersonation-in-jwks2026-09-26 https://junglewise.ai/threats/cve-2026-47424-openidentityplatform-openam-rce-via-groovy-sandbox-escape2026-09-26 https://junglewise.ai/threats/cve-2026-46623-openidentityplatform-openam-account-takeover-in-oauth2-module2026-09-26 https://junglewise.ai/threats/cve-2026-46498-openidentityplatform-openam-oauth-token-forgery-via-push2026-09-26 https://junglewise.ai/threats/cve-2026-45794-openidentityplatform-openam-unsafe-java-deserialization-in-sns2026-09-26 https://junglewise.ai/threats/cve-2026-45052-open-identity-platform-openam-improper-authorization-in-liberty2026-09-26 https://junglewise.ai/threats/cve-2026-45051-openidentityplatform-openam-java-deserialization-in-webauthn2026-09-26 https://junglewise.ai/threats/cve-2026-45048-open-identity-platform-openam-privilege-escalation-in-session2026-09-26 https://junglewise.ai/threats/cve-2026-44793-open-identity-platform-openam-reflected-xss-in-saml2-federation2026-09-26 https://junglewise.ai/threats/cve-2026-44203-open-identity-platform-openam-reflected-xss-in-oauth2-state2026-09-26 https://junglewise.ai/threats/cve-2026-41573-open-identity-platform-openam-ldap-injection-in-crest-rest-api2026-09-26 https://junglewise.ai/threats/cve-2026-19515-wso2-integrator-mi-vs-code-extension-command-injection-in-unit2026-09-26 https://junglewise.ai/threats/cve-2025-5802-wso2-identity-server-username-enumeration-in-self-registration2026-09-26 https://junglewise.ai/threats/cve-2025-13166-wso2-identity-server-username-enumeration-in-sms-otp-flow2026-09-26 https://junglewise.ai/threats/cve-2026-91851-misp-dashboard-template-permission-filter-bypass-via-numeric2026-09-26 https://junglewise.ai/threats/cve-2026-91846-misp-collection-element-uuid-authorization-bypass2026-09-26 https://junglewise.ai/threats/cve-2026-91826-samsung-rlottie-stack-based-buffer-overflow2026-09-26 https://junglewise.ai/threats/cve-2026-91825-misp-authorization-bypass-in-event-sharing-group-assignment2026-09-26 https://junglewise.ai/threats/cve-2026-91782-gnu-binutils-null-pointer-dereference-in-dynamic-relocation2026-09-26 https://junglewise.ai/threats/cve-2026-91781-gnu-binutils-null-pointer-dereference-in-elf-section-handler2026-09-26 https://junglewise.ai/threats/cve-2026-91780-gnu-binutils-null-pointer-dereference-in-elf-linker2026-09-26 https://junglewise.ai/threats/cve-2026-91779-gnu-binutils-null-pointer-dereference-in-eh-frame-section-offset2026-09-26 https://junglewise.ai/threats/cve-2026-87730-rejected-vulnerability-advisory2026-09-26 https://junglewise.ai/threats/cve-2026-80217-lite-on-o-ru-hidden-functionality-arbitrary-command-execution-via2026-09-26 https://junglewise.ai/threats/cve-2026-77853-lite-on-o-ru-os-command-injection-in-m-plane2026-09-26 https://junglewise.ai/threats/cve-2026-76159-duplicati-configuration-loader-incorrect-permission-assignment2026-09-26 https://junglewise.ai/threats/cve-2026-75092-red-hat-leapp-repository-privilege-escalation-in-scan-mysql2026-09-26 https://junglewise.ai/threats/cve-2026-91819-misp-csrf-and-form-validation-bypass-via-http-method-override2026-09-26 https://junglewise.ai/threats/cve-2026-91778-octopus-deploy-server-privilege-escalation-in-script-execution2026-09-26 https://junglewise.ai/threats/cve-2026-91091-gpac-memory-corruption-in-node-insertion2026-09-26 https://junglewise.ai/threats/cve-2026-91090-gpac-stack-based-buffer-overflow-in-scenegraph-base-module2026-09-26 https://junglewise.ai/threats/cve-2026-91089-gpac-use-after-free-in-gf-node-get-name-and-id2026-09-26 https://junglewise.ai/threats/cve-2026-91088-gpac-heap-based-buffer-overflow-in-url-handler2026-09-26 https://junglewise.ai/threats/cve-2026-91087-gpac-use-after-free-in-media-object-compositor2026-09-26 https://junglewise.ai/threats/cve-2026-91086-gpac-heap-based-buffer-overflow-in-mpeg-video-reframer2026-09-26 https://junglewise.ai/threats/cve-2026-91005-sourcecodester-online-faculty-clearance-system-arbitrary-file2026-09-26 https://junglewise.ai/threats/cve-2026-90711-proxy-addr-ip-spoofing-via-ipv4-mapped-ipv6-trust-subnet2026-09-26 https://junglewise.ai/threats/cve-2026-89141-leap-ai-engine-insecure-direct-object-reference-in-audio2026-09-26 https://junglewise.ai/threats/cve-2026-75983-eventin-event-calendar-privilege-escalation-via-map-meta-cap2026-09-26 https://junglewise.ai/threats/cve-2026-18063-wordpress-job-postings-plugin-stored-cross-site-scripting2026-09-26 https://junglewise.ai/threats/cve-2026-15402-eventin-event-calendar-stored-xss-in-schedule-slot-parameter2026-09-26 https://junglewise.ai/threats/cve-2026-91004-sourcecodester-online-faculty-clearance-system-sql-injection-in2026-09-26 https://junglewise.ai/threats/cve-2026-91003-d-link-di-8300-stack-based-buffer-overflow-in-rzgl-asp2026-09-26 https://junglewise.ai/threats/cve-2026-91002-stamparm-maltrail-authentication-bypass-in-blacklist-endpoint2026-09-26 https://junglewise.ai/threats/cve-2026-91001-d-link-di-8400-stack-buffer-overflow-in-ddns-configuration2026-09-26 https://junglewise.ai/threats/cve-2026-86701-manabipocket-for-parents-improper-access-control-vulnerability2026-09-26 https://junglewise.ai/threats/cve-2026-81320-red-hat-hawtio-operator-sensitive-information-logging2026-09-26 https://junglewise.ai/threats/cve-2026-81303-hawtio-operator-confused-deputy-in-route-hostname-validation2026-09-26 https://junglewise.ai/threats/cve-2026-18232-wp-directory-kit-unauthenticated-listing-disclosure-via-ajax2026-09-26 https://junglewise.ai/threats/cve-2026-17495-moment-path-traversal-via-crafted-non-string-locale-name2026-09-26 https://junglewise.ai/threats/cve-2026-16593-wp-directory-kit-sql-injection-in-widget-settings2026-09-26 https://junglewise.ai/threats/cve-2026-16592-wordpress-wp-directory-kit-authorization-bypass-in-shortcodes2026-09-26 https://junglewise.ai/threats/cve-2026-15758-wordpress-3d-flipbook-plugin-sensitive-information-exposure-via2026-09-26