CVE ID :CVE-2026-68579 Published : Aug. 2, 2026, 1:16 p.m. | 10 hours, 26 minutes ago Description :FreeRDP before 3.30.0 ( Severity: 9.6 | CRITICAL Visit the link for more details, such as CVSS…
CVE-2026-67356 – ArcadeDB before 26.7.3 Privilege Escalation via JavaScript Trigger
CVE ID :CVE-2026-67356 Published : Aug. 2, 2026, 1:16 p.m. | 10 hours, 26 minutes ago Description :ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with HostAccess.ALL, allowing schema-admins to…
CVE-2026-8457 – WooCommerce – Social Login <= 2.8.7 – Unauthenticated Authentication Bypass via Forged Apple 'id_token' JWT
CVE ID :CVE-2026-8457 Published : Aug. 2, 2026, 12:16 a.m. | 1 hour, 25 minutes ago Description :The WooCommerce – Social Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up…
CVE-2026-18556 – Unauthenticated administrative account takeover
CVE ID :CVE-2026-18556 Published : Aug. 1, 2026, 8:16 p.m. | 3 hours, 25 minutes ago Description :Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue…
CVE-2026-55735 – Guardian.revoke/3 acts on unverified token claims, allowing forged-token session revocation
CVE ID :CVE-2026-55735 Published : Aug. 1, 2026, 7:16 p.m. | 4 hours, 25 minutes ago Description :Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim’s session…
CVE-2026-67343 – ArcadeDB before 26.7.2 Cluster Token Disclosure via GET /api/v1/server
CVE ID :CVE-2026-67343 Published : Aug. 1, 2026, 1:17 p.m. | 10 hours, 25 minutes ago Description :ArcadeDB versions before 26.7.2 fail to properly redact the cluster token in the GET /api/v1/server endpoint, allowing…
CVE-2026-67342 – ArcadeDB before 26.7.2 Authorization Bypass via Database Handlers
CVE ID :CVE-2026-67342 Published : Aug. 1, 2026, 1:17 p.m. | 10 hours, 25 minutes ago Description :ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus,…
CVE-2026-67341 – ArcadeDB before 26.7.2 Authorization Bypass via SQL DEFINE FUNCTION
CVE ID :CVE-2026-67341 Published : Aug. 1, 2026, 1:17 p.m. | 10 hours, 25 minutes ago Description :ArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFINE FUNCTION statement with…
CVE-2026-9044 – Command Injection Vulnerability in OpenVPN of TP-Link Archer AXE75
CVE ID :CVE-2026-9044 Published : July 31, 2026, 11:17 p.m. | 24 minutes ago Description :An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows…
CVE-2026-68771 – ComfyUI 0.23.0 Unauthenticated RCE via LoadTrainingDataset Pickle Deserialization
CVE ID :CVE-2026-68771 Published : July 31, 2026, 10:17 p.m. | 1 hour, 25 minutes ago Description :ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to…