CVE ID :CVE-2026-116819 Published : Oct. 26, 2026, 11:05 p.m. | 1 hour, 17 minutes ago Description :OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain plaintext integration…
CVE-2026-116818 – OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocket
CVE ID :CVE-2026-116818 Published : Oct. 26, 2026, 11:05 p.m. | 1 hour, 17 minutes ago Description :OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that allows remote attackers to inject SQL…
CVE-2026-116811 – OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Template
CVE ID :CVE-2026-116811 Published : Oct. 26, 2026, 11:05 p.m. | 1 hour, 17 minutes ago Description :OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allows a project member…
CVE-2026-116748 – Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token
CVE ID :CVE-2026-116748 Published : Oct. 26, 2026, 10:16 p.m. | 2 hours, 6 minutes ago Description :Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id…
CVE-2026-116747 – Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret
CVE ID :CVE-2026-116747 Published : Oct. 26, 2026, 10:16 p.m. | 2 hours, 6 minutes ago Description :Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge session tokens…
CVE-2026-116211 – YesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry create
CVE ID :CVE-2026-116211 Published : Oct. 25, 2026, 2:17 p.m. | 10 hours, 5 minutes ago Description :YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche field of a…
CVE-2026-116208 – YesWiki 4.6.2 before 4.7.0 Missing Authorization in ActivityPub syncActorPosts
CVE ID :CVE-2026-116208 Published : Oct. 25, 2026, 2:17 p.m. | 10 hours, 5 minutes ago Description :YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubService::syncActorPosts that lets malicious ActivityPub servers…
CVE-2026-116207 – YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API
CVE ID :CVE-2026-116207 Published : Oct. 25, 2026, 2:17 p.m. | 10 hours, 5 minutes ago Description :YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest(). Field…
CVE-2026-116204 – YesWiki before 4.7.0 CSRF via despam Admin Action
CVE ID :CVE-2026-116204 Published : Oct. 25, 2026, 2:17 p.m. | 10 hours, 5 minutes ago Description :YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action (tools/security/actions/despam.php) that lets unauthenticated…
CVE-2026-116201 – Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition
CVE ID :CVE-2026-116201 Published : Oct. 25, 2026, 2:17 p.m. | 10 hours, 5 minutes ago Description :Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by…