CVE ID :CVE-2026-71450 Published : Nov. 2, 2026, 11:17 p.m. | 1 hour, 46 minutes ago Description :Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW…
CVE-2026-86596 – s2Member <= 260927 – Unauthenticated Remote Code Execution via 'item_name' IPN Parameter
CVE ID :CVE-2026-86596 Published : Nov. 2, 2026, 10:17 p.m. | 2 hours, 46 minutes ago Description :The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and…
CVE-2026-120091 – Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host
CVE ID :CVE-2026-120091 Published : Nov. 2, 2026, 10:17 p.m. | 2 hours, 46 minutes ago Description :Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-workers, into its Worker Service, and that module registers…
CVE-2026-115403 – NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full
CVE ID :CVE-2026-115403 Published : Nov. 2, 2026, 10:17 p.m. | 2 hours, 46 minutes ago Description :In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, built with BSD raw socket and IPv6 support,…
CVE-2026-115215 – NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session pool
CVE ID :CVE-2026-115215 Published : Nov. 2, 2026, 10:17 p.m. | 2 hours, 46 minutes ago Description :In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the NetX Secure DTLS server allocates a session…
CVE-2026-120277 – WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection
CVE ID :CVE-2026-120277 Published : Nov. 2, 2026, 12:18 a.m. | 44 minutes ago Description :A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the…
CVE-2026-120276 – WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection
CVE ID :CVE-2026-120276 Published : Nov. 2, 2026, 12:18 a.m. | 44 minutes ago Description :A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file…
CVE-2026-84170 – Apache Wicket: Configured upload limits are not enforced by the standalone file upload resource
CVE ID :CVE-2026-84170 Published : Nov. 1, 2026, 11:17 p.m. | 1 hour, 44 minutes ago Description :Allocation of resources without limits or throttling in Apache Wicket. org.apache.wicket.markup.html.form.upload.resource.AbstractFileUploadResource is the server side of the…
CVE-2026-83594 – Apache Wicket: FileUploadToResourceField accepts a client-asserted upload result and allocates the size it names
CVE ID :CVE-2026-83594 Published : Nov. 1, 2026, 11:17 p.m. | 1 hour, 44 minutes ago Description :Memory allocation with an excessive size value in Apache Wicket. org.apache.wicket.markup.html.form.upload.resource.FileUploadToResourceField uploads files to a separately mounted…
CVE-2026-120240 – WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injection
CVE ID :CVE-2026-120240 Published : Nov. 1, 2026, 7:16 p.m. | 5 hours, 45 minutes ago Description :A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file…