CVE ID :CVE-2026-126543 Published : Nov. 11, 2026, 12:58 a.m. | 16 minutes ago Description :WWBN AVideo through 29.7.1 contains an improper payment verification vulnerability in plugin/PayPalYPT/ipnV2.php that credits wallets from PayPal IPNs…
CVE-2026-126542 – WWBN AVideo 6.5 through 29.7.1 Authentication Bypass via Hybridauth Social Login
CVE ID :CVE-2026-126542 Published : Nov. 11, 2026, 12:58 a.m. | 16 minutes ago Description :WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as…
CVE-2026-126541 – WWBN AVideo through 29.7.1 Missing Authorization via Live Restream Endpoints
CVE ID :CVE-2026-126541 Published : Nov. 11, 2026, 12:58 a.m. | 16 minutes ago Description :WWBN AVideo through 29.7.1 contains a missing authorization vulnerability in Live plugin restream endpoints that allows authenticated streamers…
CVE-2026-126539 – Directus before 12.1.0 Authorization Bypass via Public WebSocket REST Interface
CVE ID :CVE-2026-126539 Published : Nov. 11, 2026, 12:58 a.m. | 16 minutes ago Description :Directus before 12.1.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to skip permission checks by sending…
CVE-2026-126499 – Jellyfin before 12.0 Path Traversal via Library VirtualFolders Endpoints
CVE ID :CVE-2026-126499 Published : Nov. 11, 2026, 12:58 a.m. | 16 minutes ago Description :Jellyfin before 12.0 contains a path traversal vulnerability in the DELETE /Library/VirtualFolders and POST /Library/VirtualFolders/Name endpoints that allows…
CVE-2026-126261 – Fortinet FortiManager Improper Authorization Vulnerability
CVE ID :CVE-2026-126261 Published : Nov. 10, 2026, 10:23 p.m. | 51 minutes ago Description :A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0…
CVE-2026-96437 – Kong Gateway Enterprise ai-azure-content-safety Security Bypass Vulnerability
CVE ID :CVE-2026-96437 Published : Nov. 10, 2026, 10:21 p.m. | 54 minutes ago Description :The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than the in-memory body buffer,…
CVE-2026-92545 – Kong Gateway Cache Key Collision Vulnerability
CVE ID :CVE-2026-92545 Published : Nov. 10, 2026, 10:21 p.m. | 54 minutes ago Description :The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from…
CVE-2026-92443 – Kong Gateway Improper Authorization Caching Vulnerability
CVE ID :CVE-2026-92443 Published : Nov. 10, 2026, 10:21 p.m. | 54 minutes ago Description :The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a…
CVE-2026-92442 – Kong Gateway Enterprise GraphQL Proxy Cache Advanced Cache Poisoning Vulnerability
CVE ID :CVE-2026-92442 Published : Nov. 10, 2026, 10:21 p.m. | 54 minutes ago Description :The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller’s identity from the cache key, allowing a response…