diff --git a/2025/CVE-2025-15690.md b/2025/CVE-2025-15690.md
new file mode 100644
index 0000000000..e8baa435d0
--- /dev/null
+++ b/2025/CVE-2025-15690.md
@@ -0,0 +1,17 @@
+### [CVE-2025-15690](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15690)
+
+
+&color=brightgreen)
+
+### Description
+
+The Content Mask WordPress plugin before 1.8.5.6 does not properly sanitise and escape content submitted with a post before outputting it in the pages it generates, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks against any user viewing or previewing the affected page.The Content Mask WordPress plugin before 1.8.5.6's option to restrict its use by role does not prevent this.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/bb49823c-16f1-4cce-a212-ae2aa7ea5730/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2025/CVE-2025-15695.md b/2025/CVE-2025-15695.md
new file mode 100644
index 0000000000..1aa8917da9
--- /dev/null
+++ b/2025/CVE-2025-15695.md
@@ -0,0 +1,17 @@
+### [CVE-2025-15695](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15695)
+
+
+&color=brightgreen)
+
+### Description
+
+The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it, allowing users with a role as high as administrator to store JavaScript that runs in the session of any visitor to the site.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/423b6be0-e0f2-42c0-8b40-4015e4a0e670/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2025/CVE-2025-49794.md b/2025/CVE-2025-49794.md
index aa2af19db6..a07c2bc069 100644
--- a/2025/CVE-2025-49794.md
+++ b/2025/CVE-2025-49794.md
@@ -24,6 +24,7 @@
+
diff --git a/2025/CVE-2025-49796.md b/2025/CVE-2025-49796.md
index 6f2d4af98a..79283e0cd7 100644
--- a/2025/CVE-2025-49796.md
+++ b/2025/CVE-2025-49796.md
@@ -25,6 +25,7 @@
+
diff --git a/2025/CVE-2025-5459.md b/2025/CVE-2025-5459.md
index 7c16160a2c..65fa9021a5 100644
--- a/2025/CVE-2025-5459.md
+++ b/2025/CVE-2025-5459.md
@@ -10,6 +10,7 @@ A user with specific node group editing permissions and a specially crafted clas
### POC
#### Reference
+- http://seclists.org/fulldisclosure/2026/Sep/9
- https://portal.perforce.com/s/detail/a91PA000001SiDdYAK
#### Github
diff --git a/2025/CVE-2025-70141.md b/2025/CVE-2025-70141.md
index f662ef6fa6..68cbb083e0 100644
--- a/2025/CVE-2025-70141.md
+++ b/2025/CVE-2025-70141.md
@@ -10,6 +10,7 @@ SourceCodester Customer Support System 1.0 contains an incorrect access control
### POC
#### Reference
+- https://0x0bito.github.io/posts/CVE-2025-70141-Customer-Support-BAC/
- https://www.sourcecodester.com/download-code?nid=14587&title=Customer+Support+System+using+PHP%2FMySQLi+with+Source+Code
- https://youngkevinn.github.io/posts/CVE-2025-70141-Customer-Support-BAC/
diff --git a/2025/CVE-2025-70147.md b/2025/CVE-2025-70147.md
index c2c54d9db4..3f03fd243e 100644
--- a/2025/CVE-2025-70147.md
+++ b/2025/CVE-2025-70147.md
@@ -10,6 +10,7 @@ Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWo
### POC
#### Reference
+- https://0x0bito.github.io/posts/CVE-2025-70147-OTTTG-Info-Disclosure/
- https://youngkevinn.github.io/posts/CVE-2025-70147-OTTTG-Info-Disclosure/
#### Github
diff --git a/2025/CVE-2025-70152.md b/2025/CVE-2025-70152.md
index 85e24cdcbf..d602e505b5 100644
--- a/2025/CVE-2025-70152.md
+++ b/2025/CVE-2025-70152.md
@@ -10,6 +10,7 @@ code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQ
### POC
#### Reference
+- https://0x0bito.github.io/posts/CVE-2025-70152-Scholars-SQLi-Missing-Auth/
- https://youngkevinn.github.io/posts/CVE-2025-70152-Scholars-SQLi-Missing-Auth/
#### Github
diff --git a/2025/CVE-2025-9566.md b/2025/CVE-2025-9566.md
index cf7b61aa7d..cb525e5d07 100644
--- a/2025/CVE-2025-9566.md
+++ b/2025/CVE-2025-9566.md
@@ -16,6 +16,7 @@
+
diff --git a/2026/CVE-2026-13542.md b/2026/CVE-2026-13542.md
index e8111c016c..3dff276d7f 100644
--- a/2026/CVE-2026-13542.md
+++ b/2026/CVE-2026-13542.md
@@ -12,6 +12,7 @@ A security vulnerability has been detected in itsourcecode Hospital Management S
#### Reference
- https://github.com/ltranquility/submit/issues/18
+- https://vuldb.com/cve/CVE-2026-13542
#### Github
No PoCs found on GitHub currently.
diff --git a/2026/CVE-2026-13931.md b/2026/CVE-2026-13931.md
new file mode 100644
index 0000000000..53b88a9b48
--- /dev/null
+++ b/2026/CVE-2026-13931.md
@@ -0,0 +1,17 @@
+### [CVE-2026-13931](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13931)
+
+
+
+
+### Description
+
+Inappropriate implementation in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/512997441
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-14559.md b/2026/CVE-2026-14559.md
new file mode 100644
index 0000000000..85a8f937f8
--- /dev/null
+++ b/2026/CVE-2026-14559.md
@@ -0,0 +1,17 @@
+### [CVE-2026-14559](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14559)
+
+
+
+
+### Description
+
+The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user's password before authenticating them, allowing unauthenticated attackers to log in as any registered user, including administrators, by supplying only that user's email address.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/90cbbed5-9662-4405-88b8-bd55854dccdf/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-14560.md b/2026/CVE-2026-14560.md
new file mode 100644
index 0000000000..c1d91e2ff3
--- /dev/null
+++ b/2026/CVE-2026-14560.md
@@ -0,0 +1,17 @@
+### [CVE-2026-14560](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14560)
+
+
+&color=brightgreen)
+
+### Description
+
+The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preserving the original filename, allowing unauthenticated attackers to upload arbitrary PHP files and execute code on the server.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/aba51906-91dc-4e75-ad44-373fe128deee/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-14562.md b/2026/CVE-2026-14562.md
new file mode 100644
index 0000000000..620f02cf01
--- /dev/null
+++ b/2026/CVE-2026-14562.md
@@ -0,0 +1,17 @@
+### [CVE-2026-14562](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14562)
+
+
+
+
+### Description
+
+The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of customer-uploaded attachments, allowing unauthenticated attackers to disclose other customers' order and attachment data.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/890f55f9-0bd0-4816-a666-a735b41ce5c7/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-14563.md b/2026/CVE-2026-14563.md
new file mode 100644
index 0000000000..6281418b8b
--- /dev/null
+++ b/2026/CVE-2026-14563.md
@@ -0,0 +1,17 @@
+### [CVE-2026-14563](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14563)
+
+
+
+
+### Description
+
+The advanced-customized-prompts WordPress plugin through 1.0.1 does not verify the password before issuing an authenticated session for a supplied email address in an unauthenticated action, allowing unauthenticated attackers to log in as any registered user, including administrators, or to create arbitrary new accounts.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/7c7ad196-dff3-485f-9a50-8705bd796fb3/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-14565.md b/2026/CVE-2026-14565.md
new file mode 100644
index 0000000000..926982369c
--- /dev/null
+++ b/2026/CVE-2026-14565.md
@@ -0,0 +1,17 @@
+### [CVE-2026-14565](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14565)
+
+
+&color=brightgreen)
+
+### Description
+
+The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce check before saving popup configuration to a product, nor escape the stored values on output, allowing any authenticated user such as a subscriber to store JavaScript that executes in the browser of visitors viewing the affected product.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/613e5421-9da5-408a-b35d-b0def567e8db/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-14566.md b/2026/CVE-2026-14566.md
new file mode 100644
index 0000000000..4284dd0138
--- /dev/null
+++ b/2026/CVE-2026-14566.md
@@ -0,0 +1,17 @@
+### [CVE-2026-14566](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14566)
+
+
+
+
+### Description
+
+The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce check before updating WooCommerce order item metadata for a supplied order, allowing any authenticated user such as a subscriber to tamper with the custom metadata of orders belonging to other customers.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/01094477-a9ad-41d9-9acd-f6ed37e6e605/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-15138.md b/2026/CVE-2026-15138.md
index 4e77b3d374..60cbdb44d4 100644
--- a/2026/CVE-2026-15138.md
+++ b/2026/CVE-2026-15138.md
@@ -13,6 +13,8 @@ A security vulnerability has been detected in tumf mcp-text-editor up to 1.0.2.
#### Reference
- https://github.com/tumf/mcp-text-editor/issues/22
+- https://vuldb.com/vuln/376953
+- https://vuldb.com/vuln/376953/cti
#### Github
No PoCs found on GitHub currently.
diff --git a/2026/CVE-2026-15816.md b/2026/CVE-2026-15816.md
index 575f3915b8..1ca1ac52cc 100644
--- a/2026/CVE-2026-15816.md
+++ b/2026/CVE-2026-15816.md
@@ -12,6 +12,7 @@
+
diff --git a/2026/CVE-2026-17523.md b/2026/CVE-2026-17523.md
index 6b03babe35..b845878cf7 100644
--- a/2026/CVE-2026-17523.md
+++ b/2026/CVE-2026-17523.md
@@ -1,8 +1,8 @@
### [CVE-2026-17523](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17523)
-
-
+
+
### Description
diff --git a/2026/CVE-2026-17657.md b/2026/CVE-2026-17657.md
new file mode 100644
index 0000000000..aef7228012
--- /dev/null
+++ b/2026/CVE-2026-17657.md
@@ -0,0 +1,17 @@
+### [CVE-2026-17657](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17657)
+
+
+
+
+### Description
+
+Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/502293787
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-17703.md b/2026/CVE-2026-17703.md
new file mode 100644
index 0000000000..3865d53e5e
--- /dev/null
+++ b/2026/CVE-2026-17703.md
@@ -0,0 +1,17 @@
+### [CVE-2026-17703](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17703)
+
+
+
+
+### Description
+
+Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/518051499
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-17710.md b/2026/CVE-2026-17710.md
new file mode 100644
index 0000000000..0d068f858c
--- /dev/null
+++ b/2026/CVE-2026-17710.md
@@ -0,0 +1,17 @@
+### [CVE-2026-17710](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17710)
+
+
+
+
+### Description
+
+Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/519991712
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-17717.md b/2026/CVE-2026-17717.md
new file mode 100644
index 0000000000..4bd8a62af4
--- /dev/null
+++ b/2026/CVE-2026-17717.md
@@ -0,0 +1,17 @@
+### [CVE-2026-17717](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17717)
+
+
+
+
+### Description
+
+Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/522063116
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-17744.md b/2026/CVE-2026-17744.md
new file mode 100644
index 0000000000..62b8d4ab42
--- /dev/null
+++ b/2026/CVE-2026-17744.md
@@ -0,0 +1,17 @@
+### [CVE-2026-17744](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17744)
+
+
+
+
+### Description
+
+Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/500137309
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-17752.md b/2026/CVE-2026-17752.md
new file mode 100644
index 0000000000..c7e959e26b
--- /dev/null
+++ b/2026/CVE-2026-17752.md
@@ -0,0 +1,17 @@
+### [CVE-2026-17752](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17752)
+
+
+
+
+### Description
+
+Use after free in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/501619207
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-17753.md b/2026/CVE-2026-17753.md
new file mode 100644
index 0000000000..f484a03557
--- /dev/null
+++ b/2026/CVE-2026-17753.md
@@ -0,0 +1,17 @@
+### [CVE-2026-17753](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17753)
+
+
+
+
+### Description
+
+Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/501628355
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-17760.md b/2026/CVE-2026-17760.md
new file mode 100644
index 0000000000..6225ae4d72
--- /dev/null
+++ b/2026/CVE-2026-17760.md
@@ -0,0 +1,17 @@
+### [CVE-2026-17760](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17760)
+
+
+
+
+### Description
+
+Side-channel information leakage in NoStatePrefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/506473189
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-17761.md b/2026/CVE-2026-17761.md
new file mode 100644
index 0000000000..81444e425d
--- /dev/null
+++ b/2026/CVE-2026-17761.md
@@ -0,0 +1,17 @@
+### [CVE-2026-17761](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17761)
+
+
+
+
+### Description
+
+Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via malicious network traffic. (Chromium security severity: Medium)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/508249524
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-17814.md b/2026/CVE-2026-17814.md
new file mode 100644
index 0000000000..b5fdec18af
--- /dev/null
+++ b/2026/CVE-2026-17814.md
@@ -0,0 +1,17 @@
+### [CVE-2026-17814](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17814)
+
+
+
+
+### Description
+
+Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/517312048
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-17824.md b/2026/CVE-2026-17824.md
new file mode 100644
index 0000000000..ac0781bdc6
--- /dev/null
+++ b/2026/CVE-2026-17824.md
@@ -0,0 +1,17 @@
+### [CVE-2026-17824](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17824)
+
+
+
+
+### Description
+
+Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/517655543
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-17848.md b/2026/CVE-2026-17848.md
new file mode 100644
index 0000000000..0482d9837d
--- /dev/null
+++ b/2026/CVE-2026-17848.md
@@ -0,0 +1,17 @@
+### [CVE-2026-17848](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17848)
+
+
+
+
+### Description
+
+Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/518284253
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-17850.md b/2026/CVE-2026-17850.md
new file mode 100644
index 0000000000..1b12db3ddb
--- /dev/null
+++ b/2026/CVE-2026-17850.md
@@ -0,0 +1,17 @@
+### [CVE-2026-17850](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17850)
+
+
+
+
+### Description
+
+Inappropriate implementation in Permissions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/519078527
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-17857.md b/2026/CVE-2026-17857.md
new file mode 100644
index 0000000000..9191c43696
--- /dev/null
+++ b/2026/CVE-2026-17857.md
@@ -0,0 +1,17 @@
+### [CVE-2026-17857](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17857)
+
+
+
+
+### Description
+
+Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/520186620
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-18615.md b/2026/CVE-2026-18615.md
new file mode 100644
index 0000000000..3ea05f7ee9
--- /dev/null
+++ b/2026/CVE-2026-18615.md
@@ -0,0 +1,23 @@
+### [CVE-2026-18615](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18615)
+
+
+
+
+
+
+
+
+
+
+### Description
+
+A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected element is the function wg-server.generate_publickey of the file /cgi-bin/glc of the component wg-server.so Native Plugin. Executing a manipulation of the argument private_key can lead to command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.
+
+### POC
+
+#### Reference
+- https://vuldb.com/cve/CVE-2026-18615
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-19486.md b/2026/CVE-2026-19486.md
new file mode 100644
index 0000000000..a722f80bee
--- /dev/null
+++ b/2026/CVE-2026-19486.md
@@ -0,0 +1,17 @@
+### [CVE-2026-19486](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19486)
+
+
+&color=brightgreen)
+
+### Description
+
+A Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token.This vulnerability was patched on 01 June 2026. Users will need to redeploy their previously deployed apps.
+
+### POC
+
+#### Reference
+- https://docs.cloud.google.com/gemini-enterprise-agent-platform/release-notes#July_20_2026
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-19820.md b/2026/CVE-2026-19820.md
index 4bc9bd4aa1..b9206c35db 100644
--- a/2026/CVE-2026-19820.md
+++ b/2026/CVE-2026-19820.md
@@ -1,7 +1,7 @@
### [CVE-2026-19820](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19820)
-
+
diff --git a/2026/CVE-2026-22660.md b/2026/CVE-2026-22660.md
new file mode 100644
index 0000000000..e3244789da
--- /dev/null
+++ b/2026/CVE-2026-22660.md
@@ -0,0 +1,18 @@
+### [CVE-2026-22660](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22660)
+
+
+
+
+
+### Description
+
+FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administrators to delete all built-in authorization groups by exploiting a type mismatch in the bulk delete protection check. The bulk AJAX endpoint in the management views compares received JSON integer group IDs against string literals, causing the protection check to always pass, which allows deletion of all six built-in groups and destroys the forum's permission model, potentially rendering the site unusable.
+
+### POC
+
+#### Reference
+- https://github.com/flaskbb/flaskbb/security/advisories/GHSA-r9cf-jxr6-5h3r
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-22874.md b/2026/CVE-2026-22874.md
new file mode 100644
index 0000000000..2886167bfe
--- /dev/null
+++ b/2026/CVE-2026-22874.md
@@ -0,0 +1,17 @@
+### [CVE-2026-22874](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22874)
+
+
+
+
+### Description
+
+Gitea versions up to and including 1.26.2 have incomplete SSRF protection in webhook and migration allow-list filtering.
+
+### POC
+
+#### Reference
+- https://github.com/go-gitea/gitea/security/advisories/GHSA-2r5c-gw76-rh3w
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-30368.md b/2026/CVE-2026-30368.md
index 12128103e1..30a1f2fa2c 100644
--- a/2026/CVE-2026-30368.md
+++ b/2026/CVE-2026-30368.md
@@ -11,6 +11,7 @@ A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.17637706
#### Reference
- https://github.com/truekas/ls-poc
+- https://truekas.dev/blog/lightspeed
- https://www.incognitotgt.me/blog/lightspeed
#### Github
diff --git a/2026/CVE-2026-34035.md b/2026/CVE-2026-34035.md
new file mode 100644
index 0000000000..90a97a5054
--- /dev/null
+++ b/2026/CVE-2026-34035.md
@@ -0,0 +1,18 @@
+### [CVE-2026-34035](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34035)
+
+
+&color=brightgreen)
+
+### Description
+
+Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.466, log drain secret and environment values were interpolated into shell commands without sufficient encoding, allowing an authenticated user to inject commands executed on the host. This issue is fixed in version 4.0.0-beta.466.
+
+### POC
+
+#### Reference
+- https://github.com/coollabsio/coolify/commit/fcd574e1eb1c2f504c48e5be4a5cb6d69f8f1f55
+- https://github.com/coollabsio/coolify/security/advisories/GHSA-3xm2-hqg8-4m2p
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34049.md b/2026/CVE-2026-34049.md
new file mode 100644
index 0000000000..46a0faafa9
--- /dev/null
+++ b/2026/CVE-2026-34049.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34049](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34049)
+
+
+&color=brightgreen)
+
+### Description
+
+Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. From 4.0.0-beta.451 through 4.0.0-beta.470, database backup handling for MongoDB collection names did not fully validate shell metacharacters, allowing a highly privileged attacker who can configure backup inputs to inject commands. This issue is fixed in version 4.0.0-beta.471.
+
+### POC
+
+#### Reference
+- https://github.com/coollabsio/coolify/security/advisories/GHSA-4mpw-wcj4-v9pp
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34051.md b/2026/CVE-2026-34051.md
new file mode 100644
index 0000000000..c0dc725156
--- /dev/null
+++ b/2026/CVE-2026-34051.md
@@ -0,0 +1,18 @@
+### [CVE-2026-34051](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34051)
+
+
+
+&color=brightgreen)
+
+### Description
+
+OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 have an improper access control on the Import/Export functionality, allowing unauthorized users to perform import and export actions through direct request manipulation despite UI restrictions. This can lead to unauthorized data access, bulk data extraction, and manipulation of system data. Version 8.0.0.3 contains a fix.
+
+### POC
+
+#### Reference
+- https://github.com/openemr/openemr/security/advisories/GHSA-54m8-wpg9-9665
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34166.md b/2026/CVE-2026-34166.md
new file mode 100644
index 0000000000..48a9ea1dcf
--- /dev/null
+++ b/2026/CVE-2026-34166.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34166](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34166)
+
+
+
+
+### Description
+
+LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.3, the replace filter in LiquidJS incorrectly accounts for memory usage when the memoryLimit option is enabled. It charges str.length + pattern.length + replacement.length bytes to the memory limiter, but the actual output from str.split(pattern).join(replacement) can be quadratically larger when the pattern occurs many times in the input string. This allows an attacker who controls template content to bypass the memoryLimit DoS protection with approximately 2,500x amplification, potentially causing out-of-memory conditions. This vulnerability is fixed in 10.25.3.
+
+### POC
+
+#### Reference
+- https://github.com/harttle/liquidjs/security/advisories/GHSA-mmg9-6m6j-jqqx
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34178.md b/2026/CVE-2026-34178.md
new file mode 100644
index 0000000000..ad3e95936e
--- /dev/null
+++ b/2026/CVE-2026-34178.md
@@ -0,0 +1,19 @@
+### [CVE-2026-34178](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34178)
+
+
+
+
+
+
+### Description
+
+In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/index.yaml in the supplied tar archive but creates the instance from backup/container/backup.yaml, a separate file in the same archive that is never checked against project restrictions. An authenticated remote attacker with instance-creation permission in a restricted project can craft a backup archive where backup.yaml carries restricted settings such as security.privileged=true or raw.lxc directives, bypassing all project restriction enforcement and allowing full host compromise.
+
+### POC
+
+#### Reference
+- https://github.com/canonical/lxd/security/advisories/GHSA-q96j-3fmm-7fv4
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34360.md b/2026/CVE-2026-34360.md
new file mode 100644
index 0000000000..febe65ab18
--- /dev/null
+++ b/2026/CVE-2026-34360.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34360](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34360)
+
+
+&color=brightgreen)
+
+### Description
+
+HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.4, the /loadIG HTTP endpoint in the FHIR Validator HTTP service accepts a user-supplied URL via JSON body and makes server-side HTTP requests to it without any hostname, scheme, or domain validation. An unauthenticated attacker with network access to the validator can probe internal network services, cloud metadata endpoints, and map network topology through error-based information leakage. With explore=true (the default for this code path), each request triggers multiple outbound HTTP calls, amplifying reconnaissance capability. This issue has been patched in version 6.9.4.
+
+### POC
+
+#### Reference
+- https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-3ww8-jw56-9f5h
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34378.md b/2026/CVE-2026-34378.md
new file mode 100644
index 0000000000..bb76ed05d6
--- /dev/null
+++ b/2026/CVE-2026-34378.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34378](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34378)
+
+
+
+
+### Description
+
+OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.4.0 to before 3.4.9, a missing bounds check on the dataWindow attribute in EXR file headers allows an attacker to trigger a signed integer overflow in generic_unpack(). By setting dataWindow.min.x to a large negative value, OpenEXRCore computes an enormous image width, which is later used in a signed integer multiplication that overflows, causing the process to terminate with SIGILL via UBSan. This vulnerability is fixed in 3.4.9.
+
+### POC
+
+#### Reference
+- https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-v76p-4qvv-vh4g
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34398.md b/2026/CVE-2026-34398.md
new file mode 100644
index 0000000000..b79b7dcdd6
--- /dev/null
+++ b/2026/CVE-2026-34398.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34398](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34398)
+
+
+&color=brightgreen)
+
+### Description
+
+FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval(), allowing arbitrary Python code execution when a user loads a malicious BIM project template. This issue is fixed in version 1.1.1.
+
+### POC
+
+#### Reference
+- https://github.com/FreeCAD/FreeCAD/security/advisories/GHSA-8rfj-7956-6gwf
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34441.md b/2026/CVE-2026-34441.md
new file mode 100644
index 0000000000..560fe2cfbe
--- /dev/null
+++ b/2026/CVE-2026-34441.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34441](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34441)
+
+
+&color=brightgreen)
+
+### Description
+
+cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.40.0, cpp-httplib is vulnerable to HTTP Request Smuggling. The server's static file handler serves GET responses without consuming the request body. On HTTP/1.1 keep-alive connections, the unread body bytes remain on the TCP stream and are interpreted as the start of a new HTTP request. An attacker can embed an arbitrary HTTP request inside the body of a GET request, which the server processes as a separate request. This issue has been patched in version 0.40.0.
+
+### POC
+
+#### Reference
+- https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-jv63-rm9j-6jwc
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34448.md b/2026/CVE-2026-34448.md
new file mode 100644
index 0000000000..2e2781093f
--- /dev/null
+++ b/2026/CVE-2026-34448.md
@@ -0,0 +1,18 @@
+### [CVE-2026-34448](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34448)
+
+
+&color=brightgreen)
+&color=brightgreen)
+
+### Description
+
+SiYuan is a personal knowledge management system. Prior to version 3.6.2, an attacker who can place a malicious URL in an Attribute View mAsse field can trigger stored XSS when a victim opens the Gallery or Kanban view with “Cover From -> Asset Field” enabled. The vulnerable code accepts arbitrary http(s) URLs without extensions as images, stores the attacker-controlled string in coverURL, and injects it directly into an 
attribute without escaping. In the Electron desktop client, the injected JavaScript executes with nodeIntegration enabled and contextIsolation disabled, so the XSS reaches arbitrary OS command execution under the victim’s account. This issue has been patched in version 3.6.2.
+
+### POC
+
+#### Reference
+- https://github.com/siyuan-note/siyuan/security/advisories/GHSA-rx4h-526q-4458
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34522.md b/2026/CVE-2026-34522.md
new file mode 100644
index 0000000000..ad32a3b4d9
--- /dev/null
+++ b/2026/CVE-2026-34522.md
@@ -0,0 +1,18 @@
+### [CVE-2026-34522](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34522)
+
+
+&color=brightgreen)
+
+
+### Description
+
+SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to version 1.17.0, a path traversal vulnerability in /api/chats/import allows an authenticated attacker to write attacker-controlled files outside the intended chats directory by injecting traversal sequences into character_name. This issue has been patched in version 1.17.0.
+
+### POC
+
+#### Reference
+- https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-xvww-xhx6-22pf
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34530.md b/2026/CVE-2026-34530.md
new file mode 100644
index 0000000000..69dbd47491
--- /dev/null
+++ b/2026/CVE-2026-34530.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34530](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34530)
+
+
+&color=brightgreen)
+
+### Description
+
+File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to version 2.62.2, the SPA index page in File Browser is vulnerable to Stored Cross-Site Scripting (XSS) via admin-controlled branding fields. An admin who sets branding.name to a malicious payload injects persistent JavaScript that executes for ALL visitors, including unauthenticated users. This issue has been patched in version 2.62.2.
+
+### POC
+
+#### Reference
+- https://github.com/filebrowser/filebrowser/security/advisories/GHSA-xfqj-3vmx-63wv
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34535.md b/2026/CVE-2026-34535.md
index e0e598cff2..af3ab5dcce 100644
--- a/2026/CVE-2026-34535.md
+++ b/2026/CVE-2026-34535.md
@@ -10,6 +10,7 @@ iccDEV provides a set of libraries and tools for working with ICC color manageme
### POC
#### Reference
+- https://github.com/InternationalColorConsortium/iccDEV/issues/666
- https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-965q-9pp6-6vw5
#### Github
diff --git a/2026/CVE-2026-34549.md b/2026/CVE-2026-34549.md
new file mode 100644
index 0000000000..e11cda3422
--- /dev/null
+++ b/2026/CVE-2026-34549.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34549](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34549)
+
+
+
+
+### Description
+
+iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior (UB) condition in IccUtil.cpp triggered by a crafted input profile. Under UndefinedBehaviorSanitizer, the issue is reported as invalid left shift operations on icUInt32Number (unsigned 32-bit) where the shifted value “cannot be represented” in that type. This issue has been patched in version 2.3.1.6.
+
+### POC
+
+#### Reference
+- https://github.com/InternationalColorConsortium/iccDEV/issues/721
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34571.md b/2026/CVE-2026-34571.md
new file mode 100644
index 0000000000..019c55a2ba
--- /dev/null
+++ b/2026/CVE-2026-34571.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34571](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34571)
+
+
+&color=brightgreen)
+
+### Description
+
+CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, a Stored Cross-Site Scripting (Stored XSS) vulnerability exists in the backend user management functionality. The application fails to properly sanitize user-controlled input before rendering it in the administrative interface, allowing attackers to inject persistent JavaScript code. This results in automatic execution whenever backend users access the affected page, enabling session hijacking, privilege escalation, and full administrative account compromise. This issue has been patched in version 0.31.0.0.
+
+### POC
+
+#### Reference
+- https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-fc4p-p49v-r948
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34578.md b/2026/CVE-2026-34578.md
new file mode 100644
index 0000000000..db8fc88004
--- /dev/null
+++ b/2026/CVE-2026-34578.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34578](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34578)
+
+
+&color=brightgreen)
+
+### Description
+
+OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.6, OPNsense's LDAP authentication connector passes the login username directly into an LDAP search filter without calling ldap_escape(). An unauthenticated attacker can inject LDAP filter metacharacters into the username field of the WebGUI login page to enumerate valid LDAP usernames in the configured directory. When the LDAP server configuration includes an Extended Query to restrict login to members of a specific group, the same injection can be used to bypass that group membership restriction and authenticate as any LDAP user whose password is known, regardless of group membership. This vulnerability is fixed in 26.1.6.
+
+### POC
+
+#### Reference
+- https://github.com/opnsense/core/security/advisories/GHSA-jpm7-f59c-mp54
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34591.md b/2026/CVE-2026-34591.md
new file mode 100644
index 0000000000..df582c8ff5
--- /dev/null
+++ b/2026/CVE-2026-34591.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34591](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34591)
+
+
+&color=brightgreen)
+
+### Description
+
+Poetry is a dependency manager for Python. From version 1.4.0 to before version 2.3.3, a crafted wheel can contain ../ paths that Poetry writes to disk without containment checks, allowing arbitrary file write with the privileges of the Poetry process. It is reachable from untrusted package artifacts during normal install flows. (Normally, installing a malicious wheel is not sufficient for execution of malicious code. Malicious code will only be executed after installation if the malicious package is imported or invoked by the user.). This issue has been patched in version 2.3.3.
+
+### POC
+
+#### Reference
+- https://github.com/python-poetry/poetry/security/advisories/GHSA-2599-h6xx-hpxp
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34596.md b/2026/CVE-2026-34596.md
new file mode 100644
index 0000000000..0fbecb519c
--- /dev/null
+++ b/2026/CVE-2026-34596.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34596](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34596)
+
+
+%20Race%20Condition&color=brightgreen)
+
+### Description
+
+Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a Time-of-Check-to-Time-of-Use (TOCTOU) race condition exists during addon installation. When a user installs an addon through the SandMan interface, UpdUtil.exe is spawned as SYSTEM by SbieSvc but stages files in the user-writable %TEMP%\sandboxie-updater directory. After UpdUtil verifies file hashes against the signed addon manifest, install.bat extracts files.cab and executes config.exe from its contents. Between hash verification and extraction, an unprivileged user can replace files.cab with a crafted cabinet containing a malicious executable, which is then run as SYSTEM. No UAC prompt is required.This issue has been fixed in version 1.17.3.
+
+### POC
+
+#### Reference
+- https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-xjvp-63f2-v585
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34742.md b/2026/CVE-2026-34742.md
new file mode 100644
index 0000000000..5a05477e25
--- /dev/null
+++ b/2026/CVE-2026-34742.md
@@ -0,0 +1,18 @@
+### [CVE-2026-34742](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34742)
+
+
+
+
+
+### Description
+
+The Go MCP SDK used Go's standard encoding/json. Prior to version 1.4.0, the Model Context Protocol (MCP) Go SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server is run on localhost without authentication with StreamableHTTPHandler or SSEHandler, a malicious website could exploit DNS rebinding to bypass same-origin policy restrictions and send requests to the local MCP server. This could allow an attacker to invoke tools or access resources exposed by the MCP server on behalf of the user in those limited circumstances. This issue has been patched in version 1.4.0.
+
+### POC
+
+#### Reference
+- https://github.com/modelcontextprotocol/go-sdk/pull/760
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34752.md b/2026/CVE-2026-34752.md
new file mode 100644
index 0000000000..68124f1b7d
--- /dev/null
+++ b/2026/CVE-2026-34752.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34752](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34752)
+
+
+
+
+### Description
+
+Haraka is a Node.js mail server. Prior to version 3.1.4, sending an email with __proto__: as a header name crashes the Haraka worker process. This issue has been patched in version 3.1.4.
+
+### POC
+
+#### Reference
+- https://github.com/haraka/Haraka/security/advisories/GHSA-xph3-r2jf-4vp3
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34824.md b/2026/CVE-2026-34824.md
new file mode 100644
index 0000000000..7b5eb7ec7a
--- /dev/null
+++ b/2026/CVE-2026-34824.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34824](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34824)
+
+
+
+
+### Description
+
+Mesop is a Python-based UI framework that allows users to build web applications. From version 1.2.3 to before version 1.2.5, an uncontrolled resource consumption vulnerability exists in the WebSocket implementation of the Mesop framework. An unauthenticated attacker can send a rapid succession of WebSocket messages, forcing the server to spawn an unbounded number of operating system threads. This leads to thread exhaustion and Out of Memory (OOM) errors, causing a complete Denial of Service (DoS) for any application built on the framework. This issue has been patched in version 1.2.5.
+
+### POC
+
+#### Reference
+- https://github.com/mesop-dev/mesop/security/advisories/GHSA-3jr7-6hqp-x679
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34840.md b/2026/CVE-2026-34840.md
new file mode 100644
index 0000000000..03333ad6de
--- /dev/null
+++ b/2026/CVE-2026-34840.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34840)
+
+
+
+
+### Description
+
+OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, OneUptime's SAML SSO implementation (App/FeatureSet/Identity/Utils/SSO.ts) has decoupled signature verification and identity extraction. isSignatureValid() verifies the first element in the XML DOM using xml-crypto, while getEmail() always reads from assertion[0] via xml2js. An attacker can prepend an unsigned assertion containing an arbitrary identity before a legitimately signed assertion, resulting in authentication bypass. This issue has been patched in version 10.0.42.
+
+### POC
+
+#### Reference
+- https://github.com/OneUptime/oneuptime/security/advisories/GHSA-5w5c-766x-265g
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34931.md b/2026/CVE-2026-34931.md
new file mode 100644
index 0000000000..a151806205
--- /dev/null
+++ b/2026/CVE-2026-34931.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34931](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34931)
+
+
+&color=brightgreen)
+
+### Description
+
+hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is an open redirect vulnerability that leads to token exfiltration. With these tokens, the attacker can sign in as the victim to takeover their account. This issue has been patched in version 2026.3.0.
+
+### POC
+
+#### Reference
+- https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-7fg7-wx5q-6m3v
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34939.md b/2026/CVE-2026-34939.md
new file mode 100644
index 0000000000..e20447b3e7
--- /dev/null
+++ b/2026/CVE-2026-34939.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34939](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34939)
+
+
+
+
+### Description
+
+PraisonAI is a multi-agent teams system. Prior to version 4.5.90, MCPToolIndex.search_tools() compiles a caller-supplied string directly as a Python regular expression with no validation, sanitization, or timeout. A crafted regex causes catastrophic backtracking in the re engine, blocking the Python thread for hundreds of seconds and causing a complete service outage. This issue has been patched in version 4.5.90.
+
+### POC
+
+#### Reference
+- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-8w9j-hc3g-3g7f
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34955.md b/2026/CVE-2026-34955.md
new file mode 100644
index 0000000000..f37dfc040f
--- /dev/null
+++ b/2026/CVE-2026-34955.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34955](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34955)
+
+
+&color=brightgreen)
+
+### Description
+
+PraisonAI is a multi-agent teams system. Prior to version 4.5.97, SubprocessSandbox in all modes (BASIC, STRICT, NETWORK_ISOLATED) calls subprocess.run() with shell=True and relies solely on string-pattern matching to block dangerous commands. The blocklist does not include sh or bash as standalone executables, allowing trivial sandbox escape in STRICT mode via sh -c ''. This issue has been patched in version 4.5.97.
+
+### POC
+
+#### Reference
+- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-r4f2-3m54-pp7q
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34959.md b/2026/CVE-2026-34959.md
new file mode 100644
index 0000000000..d89ecb7fae
--- /dev/null
+++ b/2026/CVE-2026-34959.md
@@ -0,0 +1,18 @@
+### [CVE-2026-34959](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34959)
+
+
+
+
+
+### Description
+
+Adminer 4.6.0 before 5.5.0 prepends the client-supplied X-Forwarded-Prefix header to $_SERVER["REQUEST_URI"] with no trusted-proxy check and no validation of the prefix value. An attacker can supply an absolute URL (e.g. X-Forwarded-Prefix: https://evil.example) that flows into Location redirect headers, the Set-Cookie path attribute, and self-referential links. This enables an authenticated open redirect after state-changing POSTs, unauthenticated control of the session cookie path attribute, and poisoning of self-referential links; CR/LF cannot be injected, so header splitting/XSS is not possible.
+
+### POC
+
+#### Reference
+- https://github.com/vrana/adminer/security/advisories/GHSA-8478-xrj3-h9c2
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34964.md b/2026/CVE-2026-34964.md
new file mode 100644
index 0000000000..020d898903
--- /dev/null
+++ b/2026/CVE-2026-34964.md
@@ -0,0 +1,18 @@
+### [CVE-2026-34964](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34964)
+
+
+
+&color=brightgreen)
+
+### Description
+
+Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values. Attackers can inject PDO DSN keys like host= and port= into the server parameter to bypass the privileged-port restriction and establish TCP connections to arbitrary internal hosts and ports before authentication.
+
+### POC
+
+#### Reference
+- https://github.com/vrana/adminer/security/advisories/GHSA-58cq-mgw2-38m5
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-34976.md b/2026/CVE-2026-34976.md
new file mode 100644
index 0000000000..f24fff180d
--- /dev/null
+++ b/2026/CVE-2026-34976.md
@@ -0,0 +1,17 @@
+### [CVE-2026-34976](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34976)
+
+
+
+
+### Description
+
+Dgraph is an open source distributed GraphQL database. Prior to 25.3.1, the restoreTenant admin mutation is missing from the authorization middleware config (admin.go), making it completely unauthenticated. Unlike the similar restore mutation which requires Guardian-of-Galaxy authentication, restoreTenant executes with zero middleware. This mutation accepts attacker-controlled backup source URLs (including file:// for local filesystem access), S3/MinIO credentials, encryption key file paths, and Vault credential file paths. An unauthenticated attacker can overwrite the entire database, read server-side files, and perform SSRF. This vulnerability is fixed in 25.3.1.
+
+### POC
+
+#### Reference
+- https://github.com/dgraph-io/dgraph/security/advisories/GHSA-p5rh-vmhp-gvcw
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-3833.md b/2026/CVE-2026-3833.md
index 6735bb414f..ea57d41e3b 100644
--- a/2026/CVE-2026-3833.md
+++ b/2026/CVE-2026-3833.md
@@ -18,6 +18,7 @@
+
diff --git a/2026/CVE-2026-45769.md b/2026/CVE-2026-45769.md
new file mode 100644
index 0000000000..5ee378787b
--- /dev/null
+++ b/2026/CVE-2026-45769.md
@@ -0,0 +1,19 @@
+### [CVE-2026-45769](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45769)
+
+
+
+
+
+
+### Description
+
+Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2 parser state could grow without bounds while storing client transforms. Repeated crafted UDP traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 fix the issue. Some workarounds are available. Disable IKE application-layer parsing if it is not needed. Alternatively, use a rule to bypass ike flows after the first packets like `alert ike any any -> any any (sid: 2; flow.pkts_toserver: > 256; bypass; noalert;)`.
+
+### POC
+
+#### Reference
+- https://redmine.openinfosecfoundation.org/issues/8415
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-5704.md b/2026/CVE-2026-5704.md
index f003e64454..56c5f472d8 100644
--- a/2026/CVE-2026-5704.md
+++ b/2026/CVE-2026-5704.md
@@ -6,6 +6,7 @@
+
diff --git a/2026/CVE-2026-57170.md b/2026/CVE-2026-57170.md
new file mode 100644
index 0000000000..e01a99ef99
--- /dev/null
+++ b/2026/CVE-2026-57170.md
@@ -0,0 +1,19 @@
+### [CVE-2026-57170](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-57170)
+
+
+
+
+&color=brightgreen)
+
+### Description
+
+Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions prior to 3.12.4 and 4.0.0 through 4.0.3, the custom Jinja2 include tags mdsection_include and md_clean_include re-parse the content of an included Markdown file as Jinja2 template code in a non-sandboxed environment, allowing server-side template injection that can lead to arbitrary code execution. The MDSectionInclude and MDCleanInclude tags in Trestle/core/jinja/tags.py pass included file content to Parser(self.environment, ...).parse(), splicing it into the host template's compilation, and the environment is a plain jinja2.Environment rather than a SandboxedEnvironment, so any expressions in the file are evaluated with full access to the usual SSTI gadget chain. Because Trestle's Markdown writers emit OSCAL prose and component-description fields verbatim, applying delimiter neutralization only to parameter tables, attacker-controlled OSCAL data such as a control statement, part prose, or component description containing Jinja2 syntax flows into an included Markdown file and is executed when the include tag re-parses it. This issue is fixed in version 4.1.0.
+
+### POC
+
+#### Reference
+- https://github.com/oscal-compass/compliance-trestle/security/advisories/GHSA-mr95-65j8-9mxp
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-6893.md b/2026/CVE-2026-6893.md
index eb4f08f46b..f902d698fe 100644
--- a/2026/CVE-2026-6893.md
+++ b/2026/CVE-2026-6893.md
@@ -12,6 +12,7 @@
+
&color=brightgreen)
diff --git a/2026/CVE-2026-74925.md b/2026/CVE-2026-74925.md
new file mode 100644
index 0000000000..58b81fdf5b
--- /dev/null
+++ b/2026/CVE-2026-74925.md
@@ -0,0 +1,17 @@
+### [CVE-2026-74925](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74925)
+
+
+
+
+### Description
+
+The MultiVendorX WordPress plugin before 5.0.16 does not restrict who can update its role and capability settings, allowing users holding its vendor role to grant that role administrator-level capabilities and take over the site.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/04d64797-751a-4cdd-a37d-70afbad5d784/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-80469.md b/2026/CVE-2026-80469.md
new file mode 100644
index 0000000000..d25875a629
--- /dev/null
+++ b/2026/CVE-2026-80469.md
@@ -0,0 +1,17 @@
+### [CVE-2026-80469](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80469)
+
+
+
+
+### Description
+
+An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution ofattacker-controlled code. User interaction is required.
+
+### POC
+
+#### Reference
+- https://www.first.org/cvss/calculator/3.1
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-82305.md b/2026/CVE-2026-82305.md
new file mode 100644
index 0000000000..ceef026f34
--- /dev/null
+++ b/2026/CVE-2026-82305.md
@@ -0,0 +1,17 @@
+### [CVE-2026-82305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-82305)
+
+
+
+
+### Description
+
+The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated users to rename any wishlist on the site.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/2a0a8762-582d-41ae-bb85-a1e906be811a/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-82589.md b/2026/CVE-2026-82589.md
new file mode 100644
index 0000000000..ead79be0f6
--- /dev/null
+++ b/2026/CVE-2026-82589.md
@@ -0,0 +1,26 @@
+### [CVE-2026-82589](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-82589)
+
+
+
+
+
+
+
+
+
+
+
+
+### Description
+
+A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amf_namf_comm_handle_n1_n2_message_transfer of the file src/amf/namf-handler.c of the component N1-N2 Message Handler. Performing a manipulation of the argument N1N2MessageTransferReqData.n2InfoContainer.smInfo.n2InfoContent.ngapIeType results in denial of service. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 2.8.0 is recommended to address this issue. The patch is named abf8a836564b966b5141110fc25ed413c4f17522. It is advisable to upgrade the affected component.
+
+### POC
+
+#### Reference
+- https://vuldb.com/vuln/397084
+- https://vuldb.com/vuln/397084/cti
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-83545.md b/2026/CVE-2026-83545.md
new file mode 100644
index 0000000000..f808594c08
--- /dev/null
+++ b/2026/CVE-2026-83545.md
@@ -0,0 +1,17 @@
+### [CVE-2026-83545](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-83545)
+
+
+&color=brightgreen)
+
+### Description
+
+The CoolClock WordPress plugin before 4.3.8 does not properly escape a custom skin setting before outputting it inside an inline script, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes when the content is viewed.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/d331d834-08f7-46e2-859a-7b797213ad0b/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-83546.md b/2026/CVE-2026-83546.md
new file mode 100644
index 0000000000..b426b85d6f
--- /dev/null
+++ b/2026/CVE-2026-83546.md
@@ -0,0 +1,17 @@
+### [CVE-2026-83546](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-83546)
+
+
+&color=brightgreen)
+
+### Description
+
+The CoolClock WordPress plugin before 4.3.8 does not properly escape a skin setting before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/57fcdde1-1723-42e1-a6d0-16e63a532ac7/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-84197.md b/2026/CVE-2026-84197.md
new file mode 100644
index 0000000000..1a1f896740
--- /dev/null
+++ b/2026/CVE-2026-84197.md
@@ -0,0 +1,21 @@
+### [CVE-2026-84197](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84197)
+
+
+
+
+
+
+
+
+### Description
+
+In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node_1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false when creating the underlying ws WebSocket. Certificate chain and hostname validation are therefore disabled for every wss:// connection, and no builder option, constructor argument or environment variable lets an application turn validation back on. An attacker in a position to intercept the connection can present an arbitrary certificate, complete the TLS handshake, read the credentials that the configured authentication provider sends in the Authorization header of the WebSocket upgrade request, and read, alter or inject Ditto Protocol messages for the lifetime of the connection. The Java client, the browser/DOM JavaScript client and the HTTP transport of the Node.js client are not affected.
+
+### POC
+
+#### Reference
+- https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/660
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-85150.md b/2026/CVE-2026-85150.md
index 53fae78d87..964d9dabe5 100644
--- a/2026/CVE-2026-85150.md
+++ b/2026/CVE-2026-85150.md
@@ -3,7 +3,7 @@
-
+
### Description
diff --git a/2026/CVE-2026-85677.md b/2026/CVE-2026-85677.md
new file mode 100644
index 0000000000..c87186c6dd
--- /dev/null
+++ b/2026/CVE-2026-85677.md
@@ -0,0 +1,17 @@
+### [CVE-2026-85677](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-85677)
+
+
+&color=brightgreen)
+
+### Description
+
+The Gutenverse News WordPress plugin before 3.3.3 does not restrict the extra HTML it adds to WordPress's allowed elements to the context it is meant for, applying the same relaxed list to every sanitisation context including untrusted comments, allowing unauthenticated users to store JavaScript that will execute in the browser of any administrator who reviews the comment queue, and of any visitor to the post once the comment is approved.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/80a2cc9f-4242-4ffb-a781-cffdceb84ab3/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-85678.md b/2026/CVE-2026-85678.md
new file mode 100644
index 0000000000..8fa6c19d61
--- /dev/null
+++ b/2026/CVE-2026-85678.md
@@ -0,0 +1,17 @@
+### [CVE-2026-85678](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-85678)
+
+
+&color=brightgreen)
+
+### Description
+
+The AI Builder WordPress plugin before 2.7.8 does not sanitise custom JavaScript saved against a post before echoing it inside a script tag on the front end, allowing users with contributor level access and above to store arbitrary JavaScript that will execute in the browser of anyone who views the post, including the editor or administrator who reviews it.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/d81ebdaa-4a06-48df-a471-c11ea7dc62f8/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-85978.md b/2026/CVE-2026-85978.md
new file mode 100644
index 0000000000..f9dc5a6773
--- /dev/null
+++ b/2026/CVE-2026-85978.md
@@ -0,0 +1,23 @@
+### [CVE-2026-85978](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-85978)
+
+
+
+
+
+
+
+
+&color=brightgreen)
+
+### Description
+
+An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates attacker-supplied script code without sandboxing, resulting in arbitrary code execution. Exploitation requires no authentication or user interaction.
+
+### POC
+
+#### Reference
+- https://portal.perforce.com/s/cve/a91Qi000003CcxRIAS/unauthenticated-remote-code-execution-in-akana-policy-manager-console
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-86779.md b/2026/CVE-2026-86779.md
new file mode 100644
index 0000000000..39f5e0445f
--- /dev/null
+++ b/2026/CVE-2026-86779.md
@@ -0,0 +1,17 @@
+### [CVE-2026-86779](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86779)
+
+
+
+
+### Description
+
+The Visualizer WordPress plugin before 4.0.6 does not properly authorise chart-deletion requests, performing only a site-wide capability check with no per-object ownership verification, allowing users with the Contributor role and above to permanently delete any chart on the site, including charts created by other users such as administrators.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/12a30aca-9b78-4ee8-9cf0-29e579ea5a0b/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-86780.md b/2026/CVE-2026-86780.md
new file mode 100644
index 0000000000..1c5cdc2a4a
--- /dev/null
+++ b/2026/CVE-2026-86780.md
@@ -0,0 +1,17 @@
+### [CVE-2026-86780](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86780)
+
+
+&color=brightgreen)
+
+### Description
+
+The Featured Image with URL WordPress plugin before 1.0.6 does not sanitise and escape a stored image attribute value before outputting it, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected post, including higher-privileged users such as Editors and Administrators.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/7c5795a2-e0bd-41b6-a3a9-d80ff66799d6/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-86781.md b/2026/CVE-2026-86781.md
new file mode 100644
index 0000000000..61ba94ff05
--- /dev/null
+++ b/2026/CVE-2026-86781.md
@@ -0,0 +1,17 @@
+### [CVE-2026-86781](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86781)
+
+
+
+
+### Description
+
+The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file download routine that runs early in the WordPress admin request lifecycle, allowing any authenticated user, including Subscribers, to download the site's TLS private key, certificates, and diagnostic logs.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/858977f8-8ea3-4d3d-8967-31567f6786ff/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-86782.md b/2026/CVE-2026-86782.md
new file mode 100644
index 0000000000..756365b623
--- /dev/null
+++ b/2026/CVE-2026-86782.md
@@ -0,0 +1,17 @@
+### [CVE-2026-86782](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86782)
+
+
+
+
+### Description
+
+The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and pages they do not own, including other users' private drafts.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/ad9909b8-c302-4cb5-bbe7-bff89c64b6ce/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-86812.md b/2026/CVE-2026-86812.md
new file mode 100644
index 0000000000..69eceebb9d
--- /dev/null
+++ b/2026/CVE-2026-86812.md
@@ -0,0 +1,17 @@
+### [CVE-2026-86812](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86812)
+
+
+
+
+### Description
+
+The WPCafe WordPress plugin before 3.0.18 does not correctly restrict access to a set of order-management REST endpoints because their permission callbacks return an incorrect type on failure, allowing unauthenticated users to disclose guest order information and to change the status of, or trash, any order.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/fe8d76b2-6d57-49cc-9927-5231e1a26a41/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-86815.md b/2026/CVE-2026-86815.md
new file mode 100644
index 0000000000..d4d47fe224
--- /dev/null
+++ b/2026/CVE-2026-86815.md
@@ -0,0 +1,17 @@
+### [CVE-2026-86815](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86815)
+
+
+
+
+### Description
+
+The BackWPup WordPress plugin before 5.7.5 does not properly restrict access to several of its REST API routes for job, backup-destination, and backup-execution management, allowing users holding a BackWPup WordPress plugin before 5.7.5-defined, administrator-assigned limited role to create and run backup jobs and exfiltrate a full database backup to an attacker-controlled destination.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/fa66c458-f14f-47bc-87e6-b603200ef8e9/
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-87432.md b/2026/CVE-2026-87432.md
new file mode 100644
index 0000000000..1cf6dc49be
--- /dev/null
+++ b/2026/CVE-2026-87432.md
@@ -0,0 +1,17 @@
+### [CVE-2026-87432](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87432)
+
+
+
+
+### Description
+
+Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/511820041
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-87433.md b/2026/CVE-2026-87433.md
new file mode 100644
index 0000000000..67b8d6c2e6
--- /dev/null
+++ b/2026/CVE-2026-87433.md
@@ -0,0 +1,17 @@
+### [CVE-2026-87433](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87433)
+
+
+
+
+### Description
+
+Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/497574154
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-87491.md b/2026/CVE-2026-87491.md
new file mode 100644
index 0000000000..75d382b209
--- /dev/null
+++ b/2026/CVE-2026-87491.md
@@ -0,0 +1,17 @@
+### [CVE-2026-87491](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87491)
+
+
+
+
+### Description
+
+Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/543557673
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-87517.md b/2026/CVE-2026-87517.md
new file mode 100644
index 0000000000..8bda014c44
--- /dev/null
+++ b/2026/CVE-2026-87517.md
@@ -0,0 +1,17 @@
+### [CVE-2026-87517](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87517)
+
+
+
+
+### Description
+
+Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/517581661
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-87637.md b/2026/CVE-2026-87637.md
new file mode 100644
index 0000000000..7279dc75ae
--- /dev/null
+++ b/2026/CVE-2026-87637.md
@@ -0,0 +1,17 @@
+### [CVE-2026-87637](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87637)
+
+
+
+
+### Description
+
+Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
+
+### POC
+
+#### Reference
+- https://issues.chromium.org/issues/534863145
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-88023.md b/2026/CVE-2026-88023.md
new file mode 100644
index 0000000000..8e5f63e867
--- /dev/null
+++ b/2026/CVE-2026-88023.md
@@ -0,0 +1,18 @@
+### [CVE-2026-88023](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88023)
+
+
+
+
+
+### Description
+
+Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable. The affected rename operation may also rename a stored file other than the intended target.
+
+### POC
+
+#### Reference
+- https://jira.mongodb.org/browse/PHPLIB-1929
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-88024.md b/2026/CVE-2026-88024.md
new file mode 100644
index 0000000000..e60494ad9b
--- /dev/null
+++ b/2026/CVE-2026-88024.md
@@ -0,0 +1,17 @@
+### [CVE-2026-88024](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88024)
+
+
+
+
+### Description
+
+Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.
+
+### POC
+
+#### Reference
+- https://jira.mongodb.org/browse/RUST-2469
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-88025.md b/2026/CVE-2026-88025.md
new file mode 100644
index 0000000000..bb65780381
--- /dev/null
+++ b/2026/CVE-2026-88025.md
@@ -0,0 +1,17 @@
+### [CVE-2026-88025](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88025)
+
+
+
+
+### Description
+
+Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C# Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable. The affected rename operation may also rename a stored file other than the intended target.
+
+### POC
+
+#### Reference
+- https://jira.mongodb.org/browse/CSHARP-6190
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-88026.md b/2026/CVE-2026-88026.md
new file mode 100644
index 0000000000..c006bc6b64
--- /dev/null
+++ b/2026/CVE-2026-88026.md
@@ -0,0 +1,17 @@
+### [CVE-2026-88026](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88026)
+
+
+
+
+### Description
+
+Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C# Driver can cause a caller-supplied character sequence to alter a regular-expression predicate generated by an affected application. An authenticated user who can influence such a value may cause the application to return records beyond those intended by the original filter.
+
+### POC
+
+#### Reference
+- https://jira.mongodb.org/browse/CSHARP-6177
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-88029.md b/2026/CVE-2026-88029.md
new file mode 100644
index 0000000000..e41455dd5d
--- /dev/null
+++ b/2026/CVE-2026-88029.md
@@ -0,0 +1,17 @@
+### [CVE-2026-88029](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88029)
+
+
+
+
+### Description
+
+Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable. The affected rename operation may also rename a stored file other than the intended target.
+
+### POC
+
+#### Reference
+- https://jira.mongodb.org/browse/PYTHON-5994
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-88030.md b/2026/CVE-2026-88030.md
new file mode 100644
index 0000000000..6847bfec1b
--- /dev/null
+++ b/2026/CVE-2026-88030.md
@@ -0,0 +1,17 @@
+### [CVE-2026-88030](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88030)
+
+
+
+
+### Description
+
+Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.
+
+### POC
+
+#### Reference
+- https://jira.mongodb.org/browse/RUBY-3941
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-88031.md b/2026/CVE-2026-88031.md
new file mode 100644
index 0000000000..dac34df0e8
--- /dev/null
+++ b/2026/CVE-2026-88031.md
@@ -0,0 +1,18 @@
+### [CVE-2026-88031](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88031)
+
+
+
+
+
+### Description
+
+Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.
+
+### POC
+
+#### Reference
+- https://jira.mongodb.org/browse/GODRIVER-4081
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-88032.md b/2026/CVE-2026-88032.md
new file mode 100644
index 0000000000..9406238402
--- /dev/null
+++ b/2026/CVE-2026-88032.md
@@ -0,0 +1,21 @@
+### [CVE-2026-88032](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88032)
+
+
+
+
+
+
+
+
+### Description
+
+A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the hosting application process to terminate. Reaching the issue requires an affected reactive encryption configuration that retrieves KMS credentials on demand.
+
+### POC
+
+#### Reference
+- https://jira.mongodb.org/browse/JAVA-6276
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-88033.md b/2026/CVE-2026-88033.md
new file mode 100644
index 0000000000..81d1ba60aa
--- /dev/null
+++ b/2026/CVE-2026-88033.md
@@ -0,0 +1,17 @@
+### [CVE-2026-88033](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88033)
+
+
+
+
+### Description
+
+Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable. The affected rename operation may also rename a stored file other than the intended target.
+
+### POC
+
+#### Reference
+- https://jira.mongodb.org/browse/JAVA-6283
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-88034.md b/2026/CVE-2026-88034.md
new file mode 100644
index 0000000000..52909a6fba
--- /dev/null
+++ b/2026/CVE-2026-88034.md
@@ -0,0 +1,17 @@
+### [CVE-2026-88034](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88034)
+
+
+
+
+### Description
+
+Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C++ Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.
+
+### POC
+
+#### Reference
+- https://jira.mongodb.org/browse/CXX-3556
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2026/CVE-2026-88036.md b/2026/CVE-2026-88036.md
new file mode 100644
index 0000000000..0def7d5ca7
--- /dev/null
+++ b/2026/CVE-2026-88036.md
@@ -0,0 +1,18 @@
+### [CVE-2026-88036](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88036)
+
+
+
+
+
+### Description
+
+Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.
+
+### POC
+
+#### Reference
+- https://jira.mongodb.org/browse/CDRIVER-6427
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/references.txt b/references.txt
index fa5c4bd53f..c0e412fece 100644
--- a/references.txt
+++ b/references.txt
@@ -134210,10 +134210,12 @@ CVE-2025-15678 - https://wpscan.com/vulnerability/2405c1ef-844a-462b-8329-c09d33
CVE-2025-1568 - https://issuetracker.google.com/issues/374279912
CVE-2025-15686 - https://github.com/open5gs/open5gs/issues/4190
CVE-2025-15686 - https://github.com/user-attachments/files/23847497/HSS_ULR_error_poc.pcapng.zip
+CVE-2025-15690 - https://wpscan.com/vulnerability/bb49823c-16f1-4cce-a212-ae2aa7ea5730/
CVE-2025-15691 - https://wpscan.com/vulnerability/c01926e9-f3e0-4bd5-9802-8f5f79a50504/
CVE-2025-15692 - https://wpscan.com/vulnerability/263e7dc0-61bb-468e-9e15-a6b6789923f4/
CVE-2025-15693 - https://wpscan.com/vulnerability/73e664a8-9075-4fe6-9af4-b6f5d2ccfe3c/
CVE-2025-15694 - https://wpscan.com/vulnerability/9ebaf1aa-eb8b-4c62-bbd0-07918503fbf1/
+CVE-2025-15695 - https://wpscan.com/vulnerability/423b6be0-e0f2-42c0-8b40-4015e4a0e670/
CVE-2025-1575 - https://vuldb.com/?id.296550
CVE-2025-1576 - https://github.com/fjl1113/cve/blob/main/sql-fjl.md
CVE-2025-1576 - https://vuldb.com/?id.296551
@@ -139861,6 +139863,7 @@ CVE-2025-54584 - https://github.com/finos/git-proxy/security/advisories/GHSA-xxm
CVE-2025-54585 - https://github.com/finos/git-proxy/security/advisories/GHSA-39p2-8hq9-fwj6
CVE-2025-54586 - https://github.com/finos/git-proxy/security/advisories/GHSA-v98g-8rqx-g93g
CVE-2025-54589 - https://github.com/9001/copyparty/security/advisories/GHSA-8mx2-rjh8-q3jq
+CVE-2025-5459 - http://seclists.org/fulldisclosure/2026/Sep/9
CVE-2025-5459 - https://portal.perforce.com/s/detail/a91PA000001SiDdYAK
CVE-2025-54590 - https://github.com/silverbucket/webfinger.js/security/advisories/GHSA-8xq3-w9fx-74rv
CVE-2025-54591 - https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-jf4v-f8p2-8xvq
@@ -143006,15 +143009,18 @@ CVE-2025-70116 - http://www.openwall.com/lists/oss-security/2026/05/30/2
CVE-2025-70116 - https://infosec.exchange/@sigdevel/116624563750949972
CVE-2025-7012 - https://support.catonetworks.com/hc/en-us/articles/28552501717405-CVE-2025-7012-Linux-Client-Local-Privilege-Escalation-via-Symbolic-Link-Handling
CVE-2025-70129 - https://youtu.be/dD2olE4yMqY
+CVE-2025-70141 - https://0x0bito.github.io/posts/CVE-2025-70141-Customer-Support-BAC/
CVE-2025-70141 - https://www.sourcecodester.com/download-code?nid=14587&title=Customer+Support+System+using+PHP%2FMySQLi+with+Source+Code
CVE-2025-70141 - https://youngkevinn.github.io/posts/CVE-2025-70141-Customer-Support-BAC/
CVE-2025-70146 - https://youngkevinn.github.io/posts/CVE-2025-70146-OTTTG-Unauth-Deletion/
+CVE-2025-70147 - https://0x0bito.github.io/posts/CVE-2025-70147-OTTTG-Info-Disclosure/
CVE-2025-70147 - https://youngkevinn.github.io/posts/CVE-2025-70147-OTTTG-Info-Disclosure/
CVE-2025-70148 - https://youngkevinn.github.io/posts/CVE-2025-70148-Membership-IDOR/
CVE-2025-70149 - https://youngkevinn.github.io/posts/CVE-2025-70149-Membership-SQLi/
CVE-2025-70150 - https://0x0bito.github.io/posts/CVE-2025-70150-Membership-Unauth-Delete/
CVE-2025-70150 - https://youngkevinn.github.io/posts/CVE-2025-70150-Membership-Unauth-Delete/
CVE-2025-70151 - https://youngkevinn.github.io/posts/CVE-2025-70151-Scholars-FileUpload-RCE/
+CVE-2025-70152 - https://0x0bito.github.io/posts/CVE-2025-70152-Scholars-SQLi-Missing-Auth/
CVE-2025-70152 - https://youngkevinn.github.io/posts/CVE-2025-70152-Scholars-SQLi-Missing-Auth/
CVE-2025-7017 - https://www.gendigital.com/us/en/contact-us/security-advisories/
CVE-2025-7018 - https://www.gendigital.com/us/en/contact-us/security-advisories/
@@ -146346,6 +146352,7 @@ CVE-2026-13539 - https://github.com/Svigo-o/Wavlink_vul/tree/main/wavlink-wl-nu5
CVE-2026-13540 - https://github.com/gitbucket/gitbucket/issues/4044
CVE-2026-13541 - https://github.com/ltranquility/submit/issues/17
CVE-2026-13542 - https://github.com/ltranquility/submit/issues/18
+CVE-2026-13542 - https://vuldb.com/cve/CVE-2026-13542
CVE-2026-13544 - https://github.com/liufee/cms/issues/88
CVE-2026-13544 - https://github.com/liufee/cms/issues/89
CVE-2026-13545 - https://github.com/Real-Simplicity/cve-database/tree/main/CVE_Report_DLink_DCS935L_Command_Injection
@@ -146489,6 +146496,7 @@ CVE-2026-13921 - https://issues.chromium.org/issues/511738175
CVE-2026-13927 - https://issues.chromium.org/issues/511826446
CVE-2026-13929 - https://issues.chromium.org/issues/512249559
CVE-2026-13930 - https://issues.chromium.org/issues/512937764
+CVE-2026-13931 - https://issues.chromium.org/issues/512997441
CVE-2026-13935 - https://issues.chromium.org/issues/513009005
CVE-2026-13938 - https://issues.chromium.org/issues/513143921
CVE-2026-13940 - https://issues.chromium.org/issues/513158425
@@ -146663,8 +146671,14 @@ CVE-2026-14553 - https://wpscan.com/vulnerability/02c83708-8f2f-48f8-b73e-df37a4
CVE-2026-14554 - https://wpscan.com/vulnerability/7b39bae3-41a2-4862-b7c3-1a386273d600/
CVE-2026-14557 - https://wpscan.com/vulnerability/ed5c7632-a307-43f1-bff0-f70977522e2e/
CVE-2026-14558 - https://wpscan.com/vulnerability/217303f4-4363-46f6-8aee-8e0c1aedc271/
+CVE-2026-14559 - https://wpscan.com/vulnerability/90cbbed5-9662-4405-88b8-bd55854dccdf/
CVE-2026-1456 - https://gitlab.com/gitlab-org/gitlab/-/issues/587688
+CVE-2026-14560 - https://wpscan.com/vulnerability/aba51906-91dc-4e75-ad44-373fe128deee/
CVE-2026-14561 - https://wpscan.com/vulnerability/4025601f-ed33-4772-b716-a9979830e10d/
+CVE-2026-14562 - https://wpscan.com/vulnerability/890f55f9-0bd0-4816-a666-a735b41ce5c7/
+CVE-2026-14563 - https://wpscan.com/vulnerability/7c7ad196-dff3-485f-9a50-8705bd796fb3/
+CVE-2026-14565 - https://wpscan.com/vulnerability/613e5421-9da5-408a-b35d-b0def567e8db/
+CVE-2026-14566 - https://wpscan.com/vulnerability/01094477-a9ad-41d9-9acd-f6ed37e6e605/
CVE-2026-14567 - https://wpscan.com/vulnerability/1ff904bd-cb9e-4530-afb4-6842395bb774/
CVE-2026-14568 - https://wpscan.com/vulnerability/dcbc2a0c-6fa6-4266-9292-0a1f3418da08/
CVE-2026-14574 - https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/567
@@ -146897,6 +146911,8 @@ CVE-2026-15135 - https://github.com/susususua-AI/CVE/issues/1
CVE-2026-15135 - https://vuldb.com/submit/851065
CVE-2026-15137 - https://github.com/susususua-AI/CVE/issues/2
CVE-2026-15138 - https://github.com/tumf/mcp-text-editor/issues/22
+CVE-2026-15138 - https://vuldb.com/vuln/376953
+CVE-2026-15138 - https://vuldb.com/vuln/376953/cti
CVE-2026-15147 - https://wpscan.com/vulnerability/9cfa5856-3c30-451d-895e-3d68208d834d/
CVE-2026-15148 - https://wpscan.com/vulnerability/08d4761f-ddc6-48f4-909e-db38438e385e/
CVE-2026-15149 - https://wpscan.com/vulnerability/9c1df017-dfa5-43c4-b31e-43c9315edab1/
@@ -147593,6 +147609,7 @@ CVE-2026-17652 - https://issues.chromium.org/issues/519262990
CVE-2026-17654 - https://issues.chromium.org/issues/522314940
CVE-2026-17655 - https://issues.chromium.org/issues/522556145
CVE-2026-17656 - https://issues.chromium.org/issues/523725277
+CVE-2026-17657 - https://issues.chromium.org/issues/502293787
CVE-2026-17658 - https://issues.chromium.org/issues/523030583
CVE-2026-1766 - https://bugzilla.redhat.com/show_bug.cgi?id=2435982
CVE-2026-17660 - https://issues.chromium.org/issues/497428001
@@ -147614,13 +147631,16 @@ CVE-2026-17694 - https://issues.chromium.org/issues/517511796
CVE-2026-17699 - https://issues.chromium.org/issues/517785292
CVE-2026-17701 - https://issues.chromium.org/issues/517972648
CVE-2026-17702 - https://issues.chromium.org/issues/517973093
+CVE-2026-17703 - https://issues.chromium.org/issues/518051499
CVE-2026-17704 - https://issues.chromium.org/issues/519259107
CVE-2026-17706 - https://issues.chromium.org/issues/519693032
CVE-2026-17707 - https://issues.chromium.org/issues/519701233
+CVE-2026-17710 - https://issues.chromium.org/issues/519991712
CVE-2026-17712 - https://issues.chromium.org/issues/520535595
CVE-2026-17713 - https://issues.chromium.org/issues/520572766
CVE-2026-17714 - https://issues.chromium.org/issues/521293438
CVE-2026-17716 - https://issues.chromium.org/issues/521866061
+CVE-2026-17717 - https://issues.chromium.org/issues/522063116
CVE-2026-17720 - https://issues.chromium.org/issues/522545249
CVE-2026-17721 - https://issues.chromium.org/issues/523495723
CVE-2026-17724 - https://issues.chromium.org/issues/523720739
@@ -147630,13 +147650,18 @@ CVE-2026-17734 - https://issues.chromium.org/issues/496304083
CVE-2026-17737 - https://issues.chromium.org/issues/498000415
CVE-2026-17738 - https://issues.chromium.org/issues/498079379
CVE-2026-17741 - https://issues.chromium.org/issues/498877660
+CVE-2026-17744 - https://issues.chromium.org/issues/500137309
CVE-2026-17745 - https://issues.chromium.org/issues/500172224
CVE-2026-17746 - https://issues.chromium.org/issues/500390256
CVE-2026-17749 - https://issues.chromium.org/issues/500526602
CVE-2026-17750 - https://issues.chromium.org/issues/500560234
CVE-2026-17751 - https://issues.chromium.org/issues/501591293
+CVE-2026-17752 - https://issues.chromium.org/issues/501619207
+CVE-2026-17753 - https://issues.chromium.org/issues/501628355
CVE-2026-17757 - https://issues.chromium.org/issues/502351526
CVE-2026-17758 - https://issues.chromium.org/issues/503801946
+CVE-2026-17760 - https://issues.chromium.org/issues/506473189
+CVE-2026-17761 - https://issues.chromium.org/issues/508249524
CVE-2026-17765 - https://issues.chromium.org/issues/511765328
CVE-2026-17766 - https://issues.chromium.org/issues/511799537
CVE-2026-17767 - https://issues.chromium.org/issues/511822402
@@ -147652,9 +147677,11 @@ CVE-2026-17797 - https://issues.chromium.org/issues/514441966
CVE-2026-17800 - https://issues.chromium.org/issues/514480948
CVE-2026-17802 - https://issues.chromium.org/issues/514512198
CVE-2026-17809 - https://issues.chromium.org/issues/516813317
+CVE-2026-17814 - https://issues.chromium.org/issues/517312048
CVE-2026-17816 - https://issues.chromium.org/issues/517429672
CVE-2026-17820 - https://issues.chromium.org/issues/517493101
CVE-2026-17822 - https://issues.chromium.org/issues/517621178
+CVE-2026-17824 - https://issues.chromium.org/issues/517655543
CVE-2026-17825 - https://issues.chromium.org/issues/517675979
CVE-2026-17826 - https://issues.chromium.org/issues/517690521
CVE-2026-17830 - https://issues.chromium.org/issues/517710397
@@ -147667,8 +147694,11 @@ CVE-2026-17841 - https://issues.chromium.org/issues/518088219
CVE-2026-17843 - https://issues.chromium.org/issues/518103887
CVE-2026-17844 - https://issues.chromium.org/issues/518111542
CVE-2026-17846 - https://issues.chromium.org/issues/518121320
+CVE-2026-17848 - https://issues.chromium.org/issues/518284253
CVE-2026-17849 - https://issues.chromium.org/issues/518812672
+CVE-2026-17850 - https://issues.chromium.org/issues/519078527
CVE-2026-17853 - https://issues.chromium.org/issues/519472272
+CVE-2026-17857 - https://issues.chromium.org/issues/520186620
CVE-2026-17858 - https://issues.chromium.org/issues/520191468
CVE-2026-17861 - https://issues.chromium.org/issues/520417861
CVE-2026-17862 - https://issues.chromium.org/issues/520426287
@@ -147758,6 +147788,7 @@ CVE-2026-18601 - https://github.com/StrTzz123/iot_vul/blob/main/GL-iNet/MT3000/4
CVE-2026-18602 - https://github.com/StrTzz123/iot_vul/blob/main/GL-iNet/MT3000/4.4.5/ovpn_get_recommend_config_glc_rce/CVE.md
CVE-2026-18603 - https://wpscan.com/vulnerability/544a35ce-c858-4718-ab43-6e945de6f278/
CVE-2026-18604 - https://github.com/actuator/com.gogii.textplus
+CVE-2026-18615 - https://vuldb.com/cve/CVE-2026-18615
CVE-2026-1862 - https://issues.chromium.org/issues/479726070
CVE-2026-18632 - https://github.com/CVE-Hunter-Leo/CVE/issues/14
CVE-2026-18641 - https://github.com/lkua-1/cve/issues/1
@@ -147962,6 +147993,7 @@ CVE-2026-19439 - https://wpscan.com/vulnerability/daefdabe-2277-4753-9df5-581134
CVE-2026-19453 - https://wpscan.com/vulnerability/82792fbb-36b3-4a90-a7a3-ddb2573e62f2/
CVE-2026-19454 - https://wpscan.com/vulnerability/1f5480c1-260a-40ce-9938-112746f9e8e8/
CVE-2026-19485 - https://unit42.paloaltonetworks.com/hijacking-vertex-ai-model/
+CVE-2026-19486 - https://docs.cloud.google.com/gemini-enterprise-agent-platform/release-notes#July_20_2026
CVE-2026-19505 - https://whitehats.pwr.edu.pl//blog/2026-08-19-multiple-vulnerabilities-in-rdkb/
CVE-2026-19506 - https://whitehats.pwr.edu.pl//blog/2026-08-19-multiple-vulnerabilities-in-rdkb/
CVE-2026-19507 - https://whitehats.pwr.edu.pl//blog/2026-08-19-multiple-vulnerabilities-in-rdkb/
@@ -148468,6 +148500,7 @@ CVE-2026-22646 - https://www.first.org/cvss/calculator/3.1
CVE-2026-2265 - https://github.com/inikulin/replicator/pull/19
CVE-2026-2265 - https://morielharush.github.io/2026/03/31/cve-2026-2265-replicator-deserialization-of-untrusted-data/
CVE-2026-22659 - https://github.com/flaskbb/flaskbb/security/advisories/GHSA-9rjj-9p2h-6c55
+CVE-2026-22660 - https://github.com/flaskbb/flaskbb/security/advisories/GHSA-r9cf-jxr6-5h3r
CVE-2026-22661 - https://github.com/f/prompts.chat/pull/1101
CVE-2026-22664 - https://gist.github.com/mdisec/27c0cac0ec6a8f3c8f85a18987ddb942
CVE-2026-22666 - https://jivasecurity.com/writeups/dolibarr-remote-code-execution-cve-2026-22666
@@ -148536,6 +148569,7 @@ CVE-2026-22869 - https://github.com/eigent-ai/eigent/pull/836
CVE-2026-22869 - https://github.com/eigent-ai/eigent/pull/837
CVE-2026-22869 - https://github.com/eigent-ai/eigent/security/advisories/GHSA-gvh4-93cq-5xxp
CVE-2026-22872 - https://github.com/projectcapsule/capsule/security/advisories/GHSA-qjjm-7j9w-pw72
+CVE-2026-22874 - https://github.com/go-gitea/gitea/security/advisories/GHSA-2r5c-gw76-rh3w
CVE-2026-22880 - https://mattermost.com/security-updates
CVE-2026-22885 - https://enoceanwiki.atlassian.net/wiki/spaces/DrftSSIoT/pages/1475410/SmartServer+IoT+Release+Notes#Current-Stable-Release
CVE-2026-22885 - https://enoceanwiki.atlassian.net/wiki/spaces/IEC/pages/288063529/Enhancing+Security
@@ -150099,6 +150133,7 @@ CVE-2026-30345 - https://github.com/syphonetic/CVE-2026-30345
CVE-2026-30363 - https://gist.github.com/k6dpvrmm8z-glitch/7db9fb648a18ffcd8600bea436486884
CVE-2026-30364 - https://gist.github.com/k6dpvrmm8z-glitch/1687ad1d9fc1af696efa9f603c1006be
CVE-2026-30368 - https://github.com/truekas/ls-poc
+CVE-2026-30368 - https://truekas.dev/blog/lightspeed
CVE-2026-30368 - https://www.incognitotgt.me/blog/lightspeed
CVE-2026-3040 - https://github.com/master-abc/cve/issues/42
CVE-2026-3040 - https://vuldb.com/?id.347394
@@ -150934,6 +150969,8 @@ CVE-2026-34030 - https://r.sec-consult.com/wertheim
CVE-2026-34032 - http://www.openwall.com/lists/oss-security/2026/05/04/16
CVE-2026-34034 - https://github.com/coollabsio/coolify/commit/096d4369e59b3db7ace2db3ca42588c41b9b6019
CVE-2026-34034 - https://github.com/coollabsio/coolify/security/advisories/GHSA-rpr8-p7jc-x844
+CVE-2026-34035 - https://github.com/coollabsio/coolify/commit/fcd574e1eb1c2f504c48e5be4a5cb6d69f8f1f55
+CVE-2026-34035 - https://github.com/coollabsio/coolify/security/advisories/GHSA-3xm2-hqg8-4m2p
CVE-2026-34036 - https://github.com/Dolibarr/dolibarr/security/advisories/GHSA-2mfj-r695-5h9r
CVE-2026-34037 - https://github.com/coollabsio/coolify/security/advisories/GHSA-ggrr-wrvr-x83v
CVE-2026-34038 - https://github.com/coollabsio/coolify/security/advisories/GHSA-qqrq-r9h4-x6wp
@@ -150942,6 +150979,8 @@ CVE-2026-34044 - https://github.com/coollabsio/coolify/security/advisories/GHSA-
CVE-2026-34045 - https://github.com/podman-desktop/podman-desktop/security/advisories/GHSA-2q88-39rh-gxvv
CVE-2026-34047 - https://github.com/coollabsio/coolify/security/advisories/GHSA-652w-qv22-2r7c
CVE-2026-34048 - https://github.com/coollabsio/coolify/security/advisories/GHSA-mw6q-2hmg-mhxv
+CVE-2026-34049 - https://github.com/coollabsio/coolify/security/advisories/GHSA-4mpw-wcj4-v9pp
+CVE-2026-34051 - https://github.com/openemr/openemr/security/advisories/GHSA-54m8-wpg9-9665
CVE-2026-34053 - https://github.com/openemr/openemr/security/advisories/GHSA-3vvq-pfq6-pw98
CVE-2026-34056 - https://github.com/openemr/openemr/security/advisories/GHSA-6qg7-6jf3-xrfh
CVE-2026-34057 - https://github.com/coollabsio/coolify/security/advisories/GHSA-6r3g-w7x8-54fj
@@ -150989,12 +151028,14 @@ CVE-2026-34158 - https://github.com/coollabsio/coolify/security/advisories/GHSA-
CVE-2026-34159 - https://github.com/ggml-org/llama.cpp/security/advisories/GHSA-j8rj-fmpv-wcxw
CVE-2026-34162 - https://github.com/labring/FastGPT/security/advisories/GHSA-w36r-f268-pwrj
CVE-2026-34163 - https://github.com/labring/FastGPT/security/advisories/GHSA-x9vj-5m4j-9mfv
+CVE-2026-34166 - https://github.com/harttle/liquidjs/security/advisories/GHSA-mmg9-6m6j-jqqx
CVE-2026-34167 - https://github.com/coollabsio/coolify/security/advisories/GHSA-962v-gxmw-56hc
CVE-2026-34168 - https://github.com/coollabsio/coolify/security/advisories/GHSA-mh8x-fppq-cp77
CVE-2026-34170 - https://github.com/coollabsio/coolify/security/advisories/GHSA-3g6r-cxv5-3c7h
CVE-2026-34171 - https://github.com/coollabsio/coolify/security/advisories/GHSA-389w-cc6x-wr2m
CVE-2026-34172 - https://github.com/Giskard-AI/giskard-oss/security/advisories/GHSA-frv4-x25r-588m
CVE-2026-34177 - https://github.com/canonical/lxd/security/advisories/GHSA-fm2x-c5qw-4h6f
+CVE-2026-34178 - https://github.com/canonical/lxd/security/advisories/GHSA-q96j-3fmm-7fv4
CVE-2026-34179 - https://github.com/canonical/lxd/security/advisories/GHSA-c3h3-89qf-jqm5
CVE-2026-34198 - https://github.com/coollabsio/coolify/security/advisories/GHSA-cgj8-7m5q-x5gv
CVE-2026-34200 - https://github.com/nhost/nhost/security/advisories/GHSA-6c5x-3h35-vvw2
@@ -151026,6 +151067,7 @@ CVE-2026-34316 - https://www.oracle.com/security-alerts/cpujul2026.html
CVE-2026-3433 - https://mattermost.com/security-updates
CVE-2026-34358 - https://github.com/Ctrlpanel-gg/panel/security/advisories/GHSA-pxmw-gj52-9p68
CVE-2026-34359 - https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-fgv2-4q4g-wc35
+CVE-2026-34360 - https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-3ww8-jw56-9f5h
CVE-2026-34361 - https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-vr79-8m62-wh98
CVE-2026-34362 - https://github.com/WWBN/AVideo/security/advisories/GHSA-2mg4-pfgx-64cf
CVE-2026-34364 - https://github.com/WWBN/AVideo/security/advisories/GHSA-73gr-r64q-7jh4
@@ -151037,6 +151079,7 @@ CVE-2026-34369 - https://github.com/WWBN/AVideo/security/advisories/GHSA-q6jj-r4
CVE-2026-34371 - https://github.com/danny-avila/LibreChat/security/advisories/GHSA-qrm5-r67f-6692
CVE-2026-34374 - https://github.com/WWBN/AVideo/security/advisories/GHSA-xgv5-66wp-ch88
CVE-2026-34375 - https://github.com/WWBN/AVideo/security/advisories/GHSA-pm37-62g7-p768
+CVE-2026-34378 - https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-v76p-4qvv-vh4g
CVE-2026-34379 - https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-w88v-vqhq-5p24
CVE-2026-34380 - https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-q3v8-hw4m-59w5
CVE-2026-34381 - https://github.com/Admidio/admidio/security/advisories/GHSA-7fh7-8xqm-3g88
@@ -151047,6 +151090,7 @@ CVE-2026-34394 - https://github.com/WWBN/AVideo/security/advisories/GHSA-4wwr-7h
CVE-2026-34395 - https://github.com/WWBN/AVideo/security/advisories/GHSA-77jp-mgcw-rfmr
CVE-2026-34396 - https://github.com/WWBN/AVideo/security/advisories/GHSA-v4h7-3x43-qqw4
CVE-2026-34397 - https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-v7xx-7mqc-g835
+CVE-2026-34398 - https://github.com/FreeCAD/FreeCAD/security/advisories/GHSA-8rfj-7956-6gwf
CVE-2026-34399 - https://github.com/FreeCAD/FreeCAD/security/advisories/GHSA-chv4-vm6r-wjqj
CVE-2026-34403 - https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-78mf-482w-62qj
CVE-2026-34406 - https://github.com/APTRS/APTRS/security/advisories/GHSA-gv25-wp4h-9c35
@@ -151064,9 +151108,11 @@ CVE-2026-34415 - https://xerte.org.uk/xertetoolkits_3.15_ChangeLog.html
CVE-2026-34416 - https://gist.github.com/cyberinforepo/5a8d369a005826b6b42bfeed9607c2dd
CVE-2026-34417 - https://gist.github.com/cyberinforepo/5a8d369a005826b6b42bfeed9607c2dd
CVE-2026-34429 - https://delta.cyberm.ca/bugbin/ur66bvB7BYTC9y0eCIk3uzhZQgbjzAkG/
+CVE-2026-34441 - https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-jv63-rm9j-6jwc
CVE-2026-34442 - https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-822g-7rw5-53xj
CVE-2026-34444 - https://github.com/scoder/lupa/security/advisories/GHSA-69v7-xpr6-6gjm
CVE-2026-34447 - https://github.com/onnx/onnx/security/advisories/GHSA-p433-9wv8-28xj
+CVE-2026-34448 - https://github.com/siyuan-note/siyuan/security/advisories/GHSA-rx4h-526q-4458
CVE-2026-34449 - https://github.com/siyuan-note/siyuan/security/advisories/GHSA-68p4-j234-43mv
CVE-2026-34453 - https://github.com/siyuan-note/siyuan/security/advisories/GHSA-c77m-r996-jr3q
CVE-2026-34455 - https://github.com/HiEventsDev/Hi.Events/security/advisories/GHSA-2qcp-24fh-fx6p
@@ -151085,16 +151131,19 @@ CVE-2026-34486 - https://www.vicarius.io/vsociety/posts/cve-2026-34486-detection
CVE-2026-34486 - https://www.vicarius.io/vsociety/posts/cve-2026-34486-mitigation-script-rce-on-apache-tomcat
CVE-2026-3449 - https://github.com/TooTallNate/once/issues/8
CVE-2026-3449 - https://security.snyk.io/vuln/SNYK-JS-TOOTALLNATEONCE-15250612
+CVE-2026-34522 - https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-xvww-xhx6-22pf
CVE-2026-34523 - https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-525j-2hrj-m8fp
CVE-2026-34524 - https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-vprr-q85p-79mf
CVE-2026-34526 - https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-wm7j-m6jm-8797
CVE-2026-34527 - https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-w37h-qm9p-h4x2
CVE-2026-34528 - https://github.com/filebrowser/filebrowser/security/advisories/GHSA-x8jc-jvqm-pm3f
CVE-2026-34529 - https://github.com/filebrowser/filebrowser/security/advisories/GHSA-5vpr-4fgw-f69h
+CVE-2026-34530 - https://github.com/filebrowser/filebrowser/security/advisories/GHSA-xfqj-3vmx-63wv
CVE-2026-34533 - https://github.com/InternationalColorConsortium/iccDEV/issues/664
CVE-2026-34533 - https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-8jj3-77m7-c3pq
CVE-2026-34534 - https://github.com/InternationalColorConsortium/iccDEV/issues/665
CVE-2026-34534 - https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-7x9w-g476-wcc2
+CVE-2026-34535 - https://github.com/InternationalColorConsortium/iccDEV/issues/666
CVE-2026-34535 - https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-965q-9pp6-6vw5
CVE-2026-34536 - https://github.com/InternationalColorConsortium/iccDEV/issues/669
CVE-2026-34536 - https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-cr68-xp9x-8597
@@ -151115,6 +151164,7 @@ CVE-2026-34545 - https://github.com/AcademySoftwareFoundation/openexr/security/a
CVE-2026-34546 - https://github.com/InternationalColorConsortium/iccDEV/issues/719
CVE-2026-34547 - https://github.com/InternationalColorConsortium/iccDEV/issues/720
CVE-2026-34548 - https://github.com/InternationalColorConsortium/iccDEV/issues/722
+CVE-2026-34549 - https://github.com/InternationalColorConsortium/iccDEV/issues/721
CVE-2026-3455 - https://gist.github.com/hayageek/7fcb225e3b1ea9a341d560403fbb585a
CVE-2026-3455 - https://security.snyk.io/vuln/SNYK-JS-MAILPARSER-15204032
CVE-2026-34550 - https://github.com/InternationalColorConsortium/iccDEV/issues/718
@@ -151126,10 +151176,14 @@ CVE-2026-34555 - https://github.com/InternationalColorConsortium/iccDEV/issues/6
CVE-2026-34555 - https://github.com/InternationalColorConsortium/iccDEV/issues/698
CVE-2026-34555 - https://github.com/InternationalColorConsortium/iccDEV/issues/703
CVE-2026-34556 - https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-p9wm-xfv4-43qg
+CVE-2026-34571 - https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-fc4p-p49v-r948
+CVE-2026-34578 - https://github.com/opnsense/core/security/advisories/GHSA-jpm7-f59c-mp54
CVE-2026-34581 - https://github.com/patrickhener/goshs/security/advisories/GHSA-jgfx-74g2-9r6g
CVE-2026-34585 - https://github.com/siyuan-note/siyuan/security/advisories/GHSA-ff66-236v-p4fg
CVE-2026-34586 - https://github.com/mrmn2/PdfDing/security/advisories/GHSA-vfqx-2464-38wf
+CVE-2026-34591 - https://github.com/python-poetry/poetry/security/advisories/GHSA-2599-h6xx-hpxp
CVE-2026-34594 - https://github.com/coollabsio/coolify/security/advisories/GHSA-mf8p-rj62-9f9m
+CVE-2026-34596 - https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-xjvp-63f2-v585
CVE-2026-34597 - https://github.com/coollabsio/coolify/security/advisories/GHSA-9pp4-wcmj-rq73
CVE-2026-34598 - https://github.com/YesWiki/yeswiki/security/advisories/GHSA-37fq-47qj-6j5j
CVE-2026-34599 - https://github.com/coollabsio/coolify/security/advisories/GHSA-q9j6-xcvx-px63
@@ -151161,18 +151215,22 @@ CVE-2026-34737 - https://github.com/WWBN/AVideo/security/advisories/GHSA-38rh-4v
CVE-2026-34738 - https://github.com/WWBN/AVideo/security/advisories/GHSA-m577-w9j8-ch7j
CVE-2026-34739 - https://github.com/WWBN/AVideo/security/advisories/GHSA-jqrj-chh6-8h78
CVE-2026-34740 - https://github.com/WWBN/AVideo/security/advisories/GHSA-x5vx-vrpf-r45f
+CVE-2026-34742 - https://github.com/modelcontextprotocol/go-sdk/pull/760
CVE-2026-34744 - https://mantisbt.org/bugs/view.php?id=36977
CVE-2026-34745 - https://github.com/ShaneIsrael/fireshare/security/advisories/GHSA-fvvp-rj8g-c7gc
+CVE-2026-34752 - https://github.com/haraka/Haraka/security/advisories/GHSA-xph3-r2jf-4vp3
CVE-2026-34757 - https://github.com/pnggroup/libpng/issues/837
CVE-2026-34758 - https://github.com/OneUptime/oneuptime/security/advisories/GHSA-q253-6wcm-h8hp
CVE-2026-34783 - https://github.com/MontFerret/ferret/security/advisories/GHSA-j6v5-g24h-vg4j
CVE-2026-34787 - https://github.com/emlog/emlog/security/advisories/GHSA-7mvq-qj5x-5phm
CVE-2026-34788 - https://github.com/emlog/emlog/security/advisories/GHSA-32mg-33qq-p3gf
CVE-2026-34789 - https://github.com/FreeCAD/FreeCAD/security/advisories/GHSA-493w-pp4h-h77v
+CVE-2026-34824 - https://github.com/mesop-dev/mesop/security/advisories/GHSA-3jr7-6hqp-x679
CVE-2026-34825 - https://github.com/nocobase/nocobase/security/advisories/GHSA-vx58-fwwq-5g8j
CVE-2026-34828 - https://github.com/knadh/listmonk/security/advisories/GHSA-h5j9-cvrw-v5qh
CVE-2026-34832 - https://github.com/Erudika/scoold/security/advisories/GHSA-g5fv-xw88-vw44
CVE-2026-34839 - https://github.com/nicolargo/glances/security/advisories/GHSA-gfc2-9qmw-w7vh
+CVE-2026-34840 - https://github.com/OneUptime/oneuptime/security/advisories/GHSA-5w5c-766x-265g
CVE-2026-34847 - https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-27pm-c9ch-746q
CVE-2026-3486 - https://github.com/ltranquility/cve_submit/issues/7
CVE-2026-3487 - https://github.com/ltranquility/cve_submit/issues/8
@@ -151180,6 +151238,7 @@ CVE-2026-34881 - https://bugs.launchpad.net/glance/+bug/2138602
CVE-2026-34908 - https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/
CVE-2026-34909 - https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/
CVE-2026-34910 - https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/
+CVE-2026-34931 - https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-7fg7-wx5q-6m3v
CVE-2026-34932 - https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-wj4r-hr4h-g98v
CVE-2026-34933 - http://www.openwall.com/lists/oss-security/2026/04/11/9
CVE-2026-34933 - https://github.com/avahi/avahi/security/advisories/GHSA-w65r-6gxh-vhvc
@@ -151188,22 +151247,27 @@ CVE-2026-34935 - https://github.com/MervinPraison/PraisonAI/security/advisories/
CVE-2026-34936 - https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x6m9-gxvr-7jpv
CVE-2026-34937 - https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-w37c-qqfp-c67f
CVE-2026-34938 - https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6vh2-h83c-9294
+CVE-2026-34939 - https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-8w9j-hc3g-3g7f
CVE-2026-34940 - https://github.com/kubeai-project/kubeai/security/advisories/GHSA-324q-cwx9-7crr
CVE-2026-3495 - https://mattermost.com/security-updates
CVE-2026-34950 - https://github.com/nearform/fast-jwt/security/advisories/GHSA-mvf2-f6gm-w987
CVE-2026-34952 - https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cfh6-vr3j-qc3g
CVE-2026-34953 - https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-98f9-fqg5-hvq5
CVE-2026-34954 - https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-44c2-3rw4-5gvh
+CVE-2026-34955 - https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-r4f2-3m54-pp7q
+CVE-2026-34959 - https://github.com/vrana/adminer/security/advisories/GHSA-8478-xrj3-h9c2
CVE-2026-34960 - https://y637f9qq2x.com/posts/barebox-sandbox-vulns/
CVE-2026-34961 - https://y637f9qq2x.com/posts/barebox-sandbox-vulns/
CVE-2026-34962 - https://y637f9qq2x.com/posts/barebox-sandbox-vulns/
CVE-2026-34963 - https://y637f9qq2x.com/posts/barebox-sandbox-vulns/
+CVE-2026-34964 - https://github.com/vrana/adminer/security/advisories/GHSA-58cq-mgw2-38m5
CVE-2026-34966 - https://github.com/go-gitea/gitea/security/advisories/GHSA-2wm4-vwp6-v7xc
CVE-2026-34968 - https://github.com/vrana/adminer/security/advisories/GHSA-6pg3-chwq-wgqc
CVE-2026-34969 - https://github.com/nhost/nhost/security/advisories/GHSA-g2qj-prgh-4g9r
CVE-2026-3497 - https://cert-portal.siemens.com/productcert/html/ssa-019113.html
CVE-2026-34973 - https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-gcp9-5jc8-976x
CVE-2026-34974 - https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-5crx-pfhq-4hgg
+CVE-2026-34976 - https://github.com/dgraph-io/dgraph/security/advisories/GHSA-p5rh-vmhp-gvcw
CVE-2026-34977 - https://github.com/Zeecka/AperiSolve/pull/195
CVE-2026-34977 - https://github.com/Zeecka/AperiSolve/security/advisories/GHSA-8r22-62p7-9jrp
CVE-2026-34978 - https://github.com/OpenPrinting/cups/security/advisories/GHSA-f53q-7mxp-9gcr
@@ -153263,6 +153327,7 @@ CVE-2026-4575 - https://github.com/yao536/cve/issues/1
CVE-2026-45750 - https://github.com/Termix-SSH/Termix/security/advisories/GHSA-v26q-rpv5-9m72
CVE-2026-45757 - https://github.com/RocketChat/Rocket.Chat/security/advisories/GHSA-6g3w-vg5p-w892
CVE-2026-4576 - https://github.com/rockycheng1/cve/issues/4
+CVE-2026-45769 - https://redmine.openinfosecfoundation.org/issues/8415
CVE-2026-4577 - https://github.com/rockycheng1/cve/issues/3
CVE-2026-45774 - https://github.com/oscal-compass/compliance-trestle/security/advisories/GHSA-mj4x-vf5c-5xg8
CVE-2026-45774 - https://github.com/pypa/advisory-database/tree/main/vulns/compliance-trestle/PYSEC-2026-2426.yaml
@@ -155079,6 +155144,7 @@ CVE-2026-57053 - https://lists.gnu.org/archive/html/help-libidn/2026-06/msg00001
CVE-2026-57156 - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v5wf-j8j4-77h7
CVE-2026-57157 - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-47fr-jw86-c3fj
CVE-2026-57158 - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mp3f-59pg-c5pp
+CVE-2026-57170 - https://github.com/oscal-compass/compliance-trestle/security/advisories/GHSA-mr95-65j8-9mxp
CVE-2026-57171 - https://github.com/oscal-compass/compliance-trestle/security/advisories/GHSA-4q5v-7g7x-j79w
CVE-2026-57171 - https://github.com/oscal-compass/compliance-trestle/security/advisories/GHSA-r4vp-3vw6-r2x5
CVE-2026-5720 - https://github.com/miniupnp/miniupnp/
@@ -157824,6 +157890,7 @@ CVE-2026-74903 - https://github.com/siyuan-note/siyuan/security/advisories/GHSA-
CVE-2026-74905 - https://github.com/siyuan-note/siyuan/security/advisories/GHSA-qq8m-8p8v-x4xg
CVE-2026-74907 - https://github.com/getgrav/grav/security/advisories/GHSA-4v9q-p283-qc2m
CVE-2026-74916 - https://wpscan.com/vulnerability/b6f8be96-13d9-497a-8e57-5a65b519958b/
+CVE-2026-74925 - https://wpscan.com/vulnerability/04d64797-751a-4cdd-a37d-70afbad5d784/
CVE-2026-74927 - https://wpscan.com/vulnerability/c81aa489-0663-40b7-b2ce-f4c8f2edd4b6/
CVE-2026-74928 - https://wpscan.com/vulnerability/667093bc-e030-45ff-83e0-0d5a4f3abc16/
CVE-2026-74929 - https://wpscan.com/vulnerability/6c8a1143-2f91-4977-a2bb-e3d3ca3a64f0/
@@ -158573,6 +158640,7 @@ CVE-2026-80438 - https://wpscan.com/vulnerability/befced17-95ff-4809-ad13-f63bc6
CVE-2026-80439 - https://wpscan.com/vulnerability/96562897-f18c-45d3-9f31-0e40e8df1383/
CVE-2026-80440 - https://wpscan.com/vulnerability/7b86b462-e021-4906-bbf3-bf83f89a03ee/
CVE-2026-80467 - https://wpscan.com/vulnerability/929f243b-2f1c-4eca-88bc-03b1a86270ed/
+CVE-2026-80469 - https://www.first.org/cvss/calculator/3.1
CVE-2026-80488 - https://wpscan.com/vulnerability/94ed94c8-88e9-4fe8-ad83-cacd4f39dd20/
CVE-2026-80515 - https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/752
CVE-2026-80530 - http://www.openwall.com/lists/oss-security/2026/09/03/1
@@ -158709,6 +158777,7 @@ CVE-2026-82289 - https://github.com/coderamp-labs/gitingest/issues/592
CVE-2026-82290 - https://github.com/Chainlit/chainlit/issues/2975
CVE-2026-82291 - https://github.com/heyform/heyform/security/advisories/GHSA-fg7j-rmgr-rc9g
CVE-2026-82304 - https://wpscan.com/vulnerability/0a4d2ffc-a437-430e-a760-d8d7fb388f0c/
+CVE-2026-82305 - https://wpscan.com/vulnerability/2a0a8762-582d-41ae-bb85-a1e906be811a/
CVE-2026-82306 - https://github.com/StarRocks/starrocks/issues/75747
CVE-2026-82367 - https://github.com/ash-project/ash_graphql/security/advisories/GHSA-wm4m-cjmc-5v8c
CVE-2026-82393 - https://github.com/pnpm/pnpm/security/advisories/GHSA-vq4v-j7r6-jq4m
@@ -158747,6 +158816,8 @@ CVE-2026-82564 - https://github.com/ash-project/ash_ai/security/advisories/GHSA-
CVE-2026-8257 - https://github.com/WebAssembly/binaryen/issues/8633
CVE-2026-82579 - https://github.com/ash-project/ash_ai/security/advisories/GHSA-rcx7-x2w5-mmc2
CVE-2026-82580 - https://github.com/ash-project/ash_ai/security/advisories/GHSA-5747-6mpw-6m9c
+CVE-2026-82589 - https://vuldb.com/vuln/397084
+CVE-2026-82589 - https://vuldb.com/vuln/397084/cti
CVE-2026-82592 - https://github.com/Robots10/IoT_vlu/blob/main/reports/Dlink/formDiskFormat/formDiskFormat.md
CVE-2026-82593 - https://github.com/Robots10/IoT_vlu/blob/main/reports/Dlink/formLtefotaUpgradeFibocom/formLtefotaUpgradeFibocom.md
CVE-2026-82594 - https://github.com/LogNet/grpc-spring-boot-starter/issues/423
@@ -158874,6 +158945,8 @@ CVE-2026-83537 - https://wpscan.com/vulnerability/02b39e4f-181d-4573-9175-bf5a6d
CVE-2026-83541 - https://wpscan.com/vulnerability/3bd0cd85-9fc2-4111-a626-cc4d8daa6977/
CVE-2026-83543 - https://wpscan.com/vulnerability/902e46ad-e577-4a3e-be19-a3bcc75ece77/
CVE-2026-83544 - https://wpscan.com/vulnerability/f2bd202b-43fc-4ca7-9bab-649ed87e7cbd/
+CVE-2026-83545 - https://wpscan.com/vulnerability/d331d834-08f7-46e2-859a-7b797213ad0b/
+CVE-2026-83546 - https://wpscan.com/vulnerability/57fcdde1-1723-42e1-a6d0-16e63a532ac7/
CVE-2026-83547 - https://wpscan.com/vulnerability/a8298cc0-9e5b-41e2-ba44-b6f1bad30a67/
CVE-2026-83557 - https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j
CVE-2026-8359 - https://www.tenable.com/security/research/TRA-2026-45
@@ -158921,6 +158994,7 @@ CVE-2026-8407 - https://devolutions.net/security/advisories/DEVO-2026-0010/
CVE-2026-84113 - https://wpscan.com/vulnerability/359127b1-94a5-4007-94ac-a1d813b04ce0/
CVE-2026-84146 - https://wpscan.com/vulnerability/8e7cdd07-0337-4e0b-adf6-b865e13322a2/
CVE-2026-84175 - https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/659
+CVE-2026-84197 - https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/660
CVE-2026-84219 - https://wpscan.com/vulnerability/e95bd1e3-6f61-423f-add6-519e1ca7bf66/
CVE-2026-84221 - https://wpscan.com/vulnerability/6c34da62-46fb-4dd4-a433-bd3df4d9fcfd/
CVE-2026-84222 - https://wpscan.com/vulnerability/56ba6cf9-79c5-40ce-acfc-7616769ac8cf/
@@ -159001,6 +159075,8 @@ CVE-2026-8558 - https://issues.chromium.org/issues/503425922
CVE-2026-8561 - https://issues.chromium.org/issues/343352552
CVE-2026-8564 - https://issues.chromium.org/issues/418273622
CVE-2026-8567 - https://issues.chromium.org/issues/484986863
+CVE-2026-85677 - https://wpscan.com/vulnerability/80a2cc9f-4242-4ffb-a781-cffdceb84ab3/
+CVE-2026-85678 - https://wpscan.com/vulnerability/d81ebdaa-4a06-48df-a471-c11ea7dc62f8/
CVE-2026-8571 - https://issues.chromium.org/issues/491422244
CVE-2026-8573 - https://issues.chromium.org/issues/495417883
CVE-2026-8575 - https://issues.chromium.org/issues/496217775
@@ -159010,6 +159086,7 @@ CVE-2026-8582 - https://issues.chromium.org/issues/497594413
CVE-2026-8583 - https://issues.chromium.org/issues/497975477
CVE-2026-8585 - https://issues.chromium.org/issues/499052720
CVE-2026-8587 - https://issues.chromium.org/issues/507356235
+CVE-2026-85978 - https://portal.perforce.com/s/cve/a91Qi000003CcxRIAS/unauthenticated-remote-code-execution-in-akana-policy-manager-console
CVE-2026-86060 - https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800
CVE-2026-86244 - https://lhzzz08.github.io/posts/cveapplication4/
CVE-2026-86270 - https://github.com/ltranquility/submit_repository/issues/10
@@ -159024,6 +159101,12 @@ CVE-2026-8657 - https://security.snyk.io/vuln/SNYK-JS-JSONDIFFPATCH-16322990
CVE-2026-86590 - https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/617
CVE-2026-86675 - https://github.com/ltranquility/submit_repository/issues/12
CVE-2026-86776 - https://www.vulncheck.com/advisories/keepass-2.35-through-2.61.1-memory-exhaustion-via-kdbx-header-field-size
+CVE-2026-86779 - https://wpscan.com/vulnerability/12a30aca-9b78-4ee8-9cf0-29e579ea5a0b/
+CVE-2026-86780 - https://wpscan.com/vulnerability/7c5795a2-e0bd-41b6-a3a9-d80ff66799d6/
+CVE-2026-86781 - https://wpscan.com/vulnerability/858977f8-8ea3-4d3d-8967-31567f6786ff/
+CVE-2026-86782 - https://wpscan.com/vulnerability/ad9909b8-c302-4cb5-bbe7-bff89c64b6ce/
+CVE-2026-86812 - https://wpscan.com/vulnerability/fe8d76b2-6d57-49cc-9927-5231e1a26a41/
+CVE-2026-86815 - https://wpscan.com/vulnerability/fa66c458-f14f-47bc-87e6-b603200ef8e9/
CVE-2026-8683 - https://mattermost.com/security-updates
CVE-2026-8694 - https://devolutions.net/security/advisories/DEVO-2026-0016/
CVE-2026-8715 - http://www.openwall.com/lists/oss-security/2026/08/28/3
@@ -159036,6 +159119,8 @@ CVE-2026-8738 - https://vulnplus-note.wetolink.com/share/ayeMf4xWK0ZZ
CVE-2026-8739 - https://vulnplus-note.wetolink.com/share/PCVUlOncmwTC
CVE-2026-8740 - https://vulnplus-note.wetolink.com/share/ILcCnOvJ1fMc
CVE-2026-8743 - https://github.com/open5gs/open5gs/issues/4498
+CVE-2026-87432 - https://issues.chromium.org/issues/511820041
+CVE-2026-87433 - https://issues.chromium.org/issues/497574154
CVE-2026-87435 - https://issues.chromium.org/issues/533070113
CVE-2026-87437 - https://issues.chromium.org/issues/540082621
CVE-2026-87439 - https://issues.chromium.org/issues/517415433
@@ -159046,12 +159131,14 @@ CVE-2026-87481 - https://issues.chromium.org/issues/498730641
CVE-2026-87482 - https://issues.chromium.org/issues/503736006
CVE-2026-87483 - https://issues.chromium.org/issues/520201931
CVE-2026-87486 - https://issues.chromium.org/issues/514017067
+CVE-2026-87491 - https://issues.chromium.org/issues/543557673
CVE-2026-87496 - https://issues.chromium.org/issues/514074827
CVE-2026-87497 - https://issues.chromium.org/issues/504670493
CVE-2026-87504 - https://issues.chromium.org/issues/499206649
CVE-2026-87510 - https://issues.chromium.org/issues/532957878
CVE-2026-87513 - https://issues.chromium.org/issues/511773417
CVE-2026-87516 - https://issues.chromium.org/issues/513608513
+CVE-2026-87517 - https://issues.chromium.org/issues/517581661
CVE-2026-87529 - https://issues.chromium.org/issues/536423794
CVE-2026-87531 - https://issues.chromium.org/issues/533597592
CVE-2026-87532 - https://issues.chromium.org/issues/517369256
@@ -159081,6 +159168,7 @@ CVE-2026-87611 - https://issues.chromium.org/issues/495876543
CVE-2026-87616 - https://issues.chromium.org/issues/520469117
CVE-2026-87622 - https://issues.chromium.org/issues/517602176
CVE-2026-87632 - https://issues.chromium.org/issues/538197156
+CVE-2026-87637 - https://issues.chromium.org/issues/534863145
CVE-2026-87640 - https://issues.chromium.org/issues/498482618
CVE-2026-87643 - https://issues.chromium.org/issues/513416699
CVE-2026-87644 - https://issues.chromium.org/issues/521616899
@@ -159098,6 +159186,17 @@ CVE-2026-8781 - https://vuldb.com/vuln/364405/cti
CVE-2026-8784 - https://github.com/npitre/cramfs-tools/issues/13
CVE-2026-8784 - https://github.com/npitre/cramfs-tools/issues/13#issuecomment-4306102583
CVE-2026-8786 - https://gist.github.com/YLChen-007/1cdc50418f29af7ae671466425e52c7b
+CVE-2026-88023 - https://jira.mongodb.org/browse/PHPLIB-1929
+CVE-2026-88024 - https://jira.mongodb.org/browse/RUST-2469
+CVE-2026-88025 - https://jira.mongodb.org/browse/CSHARP-6190
+CVE-2026-88026 - https://jira.mongodb.org/browse/CSHARP-6177
+CVE-2026-88029 - https://jira.mongodb.org/browse/PYTHON-5994
+CVE-2026-88030 - https://jira.mongodb.org/browse/RUBY-3941
+CVE-2026-88031 - https://jira.mongodb.org/browse/GODRIVER-4081
+CVE-2026-88032 - https://jira.mongodb.org/browse/JAVA-6276
+CVE-2026-88033 - https://jira.mongodb.org/browse/JAVA-6283
+CVE-2026-88034 - https://jira.mongodb.org/browse/CXX-3556
+CVE-2026-88036 - https://jira.mongodb.org/browse/CDRIVER-6427
CVE-2026-8804 - https://portal.perforce.com/s/cve/a91Qi000003511lIAA/cve20268804-cleartext-storage-of-sensitive-information-for-puppet-resource-api
CVE-2026-8813 - https://security.snyk.io/vuln/SNYK-JS-EXIFREADER-16689335
CVE-2026-8814 - https://security.snyk.io/vuln/SNYK-JS-EXIFREADER-16689340