CVE ID :CVE-2026-19117 Published : Sept. 2, 2026, 7:17 p.m. | 5 hours, 20 minutes ago Description :Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then…
CVE-2026-66786 – Submariner Configuration Injection Remote Code Execution
CVE ID :CVE-2026-66786 Published : Sept. 2, 2026, 6:21 p.m. | 6 hours, 16 minutes ago Description :A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings…
CVE-2026-84482 – WWBN AVideo Cross-Site Request Forgery via get_domain() validation
CVE ID :CVE-2026-84482 Published : Sept. 1, 2026, 11:17 p.m. | 1 hour, 19 minutes ago Description :WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the get_domain() and isSameDomain() functions…
CVE-2026-84480 – WWBN AVideo Password Recovery Token Expiration Bypass
CVE ID :CVE-2026-84480 Published : Sept. 1, 2026, 11:17 p.m. | 1 hour, 19 minutes ago Description :WWBN AVideo fails to validate password recovery token expiration in userRecoverPassSave.json.php, allowing attackers to use expired tokens…
CVE-2026-84479 – WWBN AVideo Authentication Bypass via User-Agent Header
CVE ID :CVE-2026-84479 Published : Sept. 1, 2026, 11:17 p.m. | 1 hour, 19 minutes ago Description :WWBN AVideo (current e01e41ecc and earlier) makes three login-time security controls depend solely on the client-supplied User-Agent…
CVE-2026-84476 – WWBN AVideo Authentication Bypass via X-Real-IP Header
CVE ID :CVE-2026-84476 Published : Sept. 1, 2026, 11:17 p.m. | 1 hour, 19 minutes ago Description :WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For headers, allowing attackers to spoof…
CVE-2026-84208 – AVideo User_Location Plugin Unauthenticated SQL Injection
CVE ID :CVE-2026-84208 Published : Sept. 1, 2026, 11:17 p.m. | 1 hour, 19 minutes ago Description :AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the User_Location plugin’s regions.json.php and cities.json.php…
CVE-2026-83524 – RedPort Optimizer wXa-223 System Clock datetime.php exec command injection
CVE ID :CVE-2026-83524 Published : Aug. 31, 2026, 11:16 p.m. | 1 hour, 20 minutes ago Description :A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to…
CVE-2026-82971 – QVidium Opera11 CGI Script net_tr.cgi command injection
CVE ID :CVE-2026-82971 Published : Aug. 31, 2026, 11:16 p.m. | 1 hour, 20 minutes ago Description :A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/net_tr.cgi…
CVE-2026-82954 – Dokploy Settings application.ts writeTraefikConfigInPath path traversal
CVE ID :CVE-2026-82954 Published : Aug. 31, 2026, 10:17 p.m. | 2 hours, 19 minutes ago Description :A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the…