CVE ID :CVE-2026-71531 Published : Nov. 13, 2026, 11:17 p.m. | 57 minutes ago Description :PrestaShop before 8.2.9 and 9.2.1 contains an authorization flaw in the Webservice API that allows an attacker holding…
CVE-2026-71519 – PrestaShop Webservice API Broken Access Control via Customer Endpoint
CVE ID :CVE-2026-71519 Published : Nov. 13, 2026, 11:17 p.m. | 57 minutes ago Description :PrestaShop before 8.2.9 and 9.2.1 contains a broken access control vulnerability that allows an authenticated Webservice API key…
CVE-2026-91869 – IBM Security QRadar EDR Improper Restriction of Excessive Authentication Attempts
CVE ID :CVE-2026-91869 Published : Nov. 13, 2026, 10:17 p.m. | 1 hour, 57 minutes ago Description :IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to bypass security restrictions…
CVE-2026-124021 – Control Web Panel < 1.30.6 Authorization Bypass via oauth_authorization_codes
CVE ID :CVE-2026-124021 Published : Nov. 13, 2026, 10:17 p.m. | 1 hour, 57 minutes ago Description :Control Web Panel (CWP) before webpanel_version 1.30.6 contains an authorization bypass vulnerability in the validate() function of…
CVE-2026-124020 – Control Web Panel < 1.30.6 Host Header Password Reset Poisoning
CVE ID :CVE-2026-124020 Published : Nov. 13, 2026, 10:17 p.m. | 1 hour, 57 minutes ago Description :Control Web Panel (CWP) before webpanel_version 1.30.6 contains a host header injection vulnerability that allows unauthenticated attackers…
CVE-2026-128067 – Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size
CVE ID :CVE-2026-128067 Published : Nov. 13, 2026, 12:20 a.m. | 56 minutes ago Description :Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through…
CVE-2026-128066 – Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data
CVE ID :CVE-2026-128066 Published : Nov. 13, 2026, 12:20 a.m. | 56 minutes ago Description :Pillow is a Python imaging library. From 1.0 through 12.3.0, ImageFileDirectory_v2.load() in src/PIL/TiffImagePlugin.py retains a separate bytes object…
CVE-2026-127275 – Linksys EA8100 JNAP API ui_server.lua SetUnsecuredWiFiWarning missing authentication
CVE ID :CVE-2026-127275 Published : Nov. 13, 2026, 12:20 a.m. | 56 minutes ago Description :A vulnerability was determined in Linksys EA8100 1.0.3.216940. This issue affects the function SetRemoteSetting/SetUnsecuredWiFiWarning of the file ui_server.lua…
CVE-2026-120868 – Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway
CVE ID :CVE-2026-120868 Published : Nov. 13, 2026, 12:20 a.m. | 56 minutes ago Description :Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler…
CVE-2026-86322 – Foreman: authorization flaw in the foreman::controller::useraware#find_user handling used by api::v2::personalaccesstokenscontroller
CVE ID :CVE-2026-86322 Published : Nov. 12, 2026, 9:17 p.m. | 1 hour, 59 minutes ago Description :A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller::UserAware#find_user resolves the target account using User.find(params[:user_id]) without applying…