CVE ID :CVE-2026-120277 Published : Nov. 2, 2026, 12:18 a.m. | 44 minutes ago Description :A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the…
CVE-2026-120276 – WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection
CVE ID :CVE-2026-120276 Published : Nov. 2, 2026, 12:18 a.m. | 44 minutes ago Description :A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file…
CVE-2026-84170 – Apache Wicket: Configured upload limits are not enforced by the standalone file upload resource
CVE ID :CVE-2026-84170 Published : Nov. 1, 2026, 11:17 p.m. | 1 hour, 44 minutes ago Description :Allocation of resources without limits or throttling in Apache Wicket. org.apache.wicket.markup.html.form.upload.resource.AbstractFileUploadResource is the server side of the…
CVE-2026-83594 – Apache Wicket: FileUploadToResourceField accepts a client-asserted upload result and allocates the size it names
CVE ID :CVE-2026-83594 Published : Nov. 1, 2026, 11:17 p.m. | 1 hour, 44 minutes ago Description :Memory allocation with an excessive size value in Apache Wicket. org.apache.wicket.markup.html.form.upload.resource.FileUploadToResourceField uploads files to a separately mounted…
CVE-2026-120240 – WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injection
CVE ID :CVE-2026-120240 Published : Nov. 1, 2026, 7:16 p.m. | 5 hours, 45 minutes ago Description :A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file…
CVE-2026-120189 – D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflow
CVE ID :CVE-2026-120189 Published : Nov. 1, 2026, 1:17 a.m. | 44 minutes ago Description :A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of…
CVE-2026-120135 – Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by default
CVE ID :CVE-2026-120135 Published : Oct. 31, 2026, 9:16 p.m. | 2 hours, 44 minutes ago Description :Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0. Users are…
CVE-2026-118636 – Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoder
CVE ID :CVE-2026-118636 Published : Oct. 31, 2026, 9:16 p.m. | 2 hours, 44 minutes ago Description :**UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on frame bytes with no…
CVE-2026-120209 – AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token
CVE ID :CVE-2026-120209 Published : Oct. 31, 2026, 6:17 p.m. | 5 hours, 44 minutes ago Description :AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens…
CVE-2026-120205 – Thelia before 3.1.0 Stored XSS via Coupon Condition Customer Name
CVE ID :CVE-2026-120205 Published : Oct. 31, 2026, 6:17 p.m. | 5 hours, 44 minutes ago Description :Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows unauthenticated attackers to inject…