CVE ID :CVE-2026-129352 Published : Nov. 14, 2026, 11:16 p.m. | 58 minutes ago Description :A vulnerability was detected in TRENDnet TEW-657BRM 1.00.1. This issue affects some unknown processing of the file /usr/sbin/upgrade_flash.cgi….
CVE-2026-129351 – TRENDnet TEW-657BRM mini_httpd setup.cgi sprintf out-of-bounds write
CVE ID :CVE-2026-129351 Published : Nov. 14, 2026, 11:16 p.m. | 58 minutes ago Description :A security vulnerability has been detected in TRENDnet TEW-657BRM 1.00.1. This vulnerability affects the function sprintf of the…
CVE-2026-129261 – Kingston FURY CTRL RGB Control Software IOCTL NTIOLib_X64.sys exposed ioctl with insufficient access control
CVE ID :CVE-2026-129261 Published : Nov. 14, 2026, 4:17 p.m. | 7 hours, 58 minutes ago Description :A vulnerability was found in Kingston FURY CTRL RGB Control Software up to 2.0.66.0. The impacted element…
CVE-2026-129258 – Tenda AC18 Firmware Upgrade upgrade data authenticity
CVE ID :CVE-2026-129258 Published : Nov. 14, 2026, 3:16 p.m. | 8 hours, 58 minutes ago Description :A vulnerability was identified in Tenda AC18 15.03.05.05_multi/15.03.05.19 Build 6318. Affected by this vulnerability is an unknown…
CVE-2026-19907 – Shipo 1.6 – 1.8.0 – Authentication Bypass to Administrator
CVE ID :CVE-2026-19907 Published : Nov. 14, 2026, 1:17 p.m. | 10 hours, 57 minutes ago Description :The Shipo plugin for WordPress is vulnerable to Authentication Bypass in versions 1.6 through 1.8.0. This is…
CVE-2026-71531 – PrestaShop Webservice API Authorization Bypass via id_shop Parameter
CVE ID :CVE-2026-71531 Published : Nov. 13, 2026, 11:17 p.m. | 57 minutes ago Description :PrestaShop before 8.2.9 and 9.2.1 contains an authorization flaw in the Webservice API that allows an attacker holding…
CVE-2026-71519 – PrestaShop Webservice API Broken Access Control via Customer Endpoint
CVE ID :CVE-2026-71519 Published : Nov. 13, 2026, 11:17 p.m. | 57 minutes ago Description :PrestaShop before 8.2.9 and 9.2.1 contains a broken access control vulnerability that allows an authenticated Webservice API key…
CVE-2026-91869 – IBM Security QRadar EDR Improper Restriction of Excessive Authentication Attempts
CVE ID :CVE-2026-91869 Published : Nov. 13, 2026, 10:17 p.m. | 1 hour, 57 minutes ago Description :IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to bypass security restrictions…
CVE-2026-124021 – Control Web Panel < 1.30.6 Authorization Bypass via oauth_authorization_codes
CVE ID :CVE-2026-124021 Published : Nov. 13, 2026, 10:17 p.m. | 1 hour, 57 minutes ago Description :Control Web Panel (CWP) before webpanel_version 1.30.6 contains an authorization bypass vulnerability in the validate() function of…
CVE-2026-124020 – Control Web Panel < 1.30.6 Host Header Password Reset Poisoning
CVE ID :CVE-2026-124020 Published : Nov. 13, 2026, 10:17 p.m. | 1 hour, 57 minutes ago Description :Control Web Panel (CWP) before webpanel_version 1.30.6 contains a host header injection vulnerability that allows unauthenticated attackers…