CVE ID :CVE-2026-116211 Published : Oct. 25, 2026, 2:17 p.m. | 10 hours, 5 minutes ago Description :YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche field of a…
CVE-2026-116208 – YesWiki 4.6.2 before 4.7.0 Missing Authorization in ActivityPub syncActorPosts
CVE ID :CVE-2026-116208 Published : Oct. 25, 2026, 2:17 p.m. | 10 hours, 5 minutes ago Description :YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubService::syncActorPosts that lets malicious ActivityPub servers…
CVE-2026-116207 – YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API
CVE ID :CVE-2026-116207 Published : Oct. 25, 2026, 2:17 p.m. | 10 hours, 5 minutes ago Description :YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest(). Field…
CVE-2026-116204 – YesWiki before 4.7.0 CSRF via despam Admin Action
CVE ID :CVE-2026-116204 Published : Oct. 25, 2026, 2:17 p.m. | 10 hours, 5 minutes ago Description :YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action (tools/security/actions/despam.php) that lets unauthenticated…
CVE-2026-116201 – Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition
CVE ID :CVE-2026-116201 Published : Oct. 25, 2026, 2:17 p.m. | 10 hours, 5 minutes ago Description :Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by…
CVE-2026-115995 – Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection
CVE ID :CVE-2026-115995 Published : Oct. 24, 2026, 11:16 p.m. | 1 hour, 3 minutes ago Description :A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element…
CVE-2026-114820 – Vulnerability in the Oracle Java SE, Oracle GraalV
CVE ID :CVE-2026-114820 Published : Oct. 24, 2026, 7:17 p.m. | 5 hours, 3 minutes ago Description :Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle…
CVE-2026-115933 – Forged signed tokens let any registered user take over other users and organizations
CVE ID :CVE-2026-115933 Published : Oct. 24, 2026, 3:17 p.m. | 9 hours, 3 minutes ago Description :Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker…
CVE-2026-115557 – Distrust compromised intermediate certificates in ssl module
CVE ID :CVE-2026-115557 Published : Oct. 24, 2026, 3:17 p.m. | 9 hours, 3 minutes ago Description :Python has added a denylist for known compromised certificates to the “ssl” module to ensure user safety…
CVE-2026-115932 – Path traversal in post media lets any registered user read server files
CVE ID :CVE-2026-115932 Published : Oct. 24, 2026, 1:16 p.m. | 11 hours, 4 minutes ago Description :When a post is published, Postiz treats a media path that is not a web address as…