CVE ID : CVE-2026-26366 Published : Feb. 15, 2026, 3:29 p.m. | 32 minutes ago Description : eNet SMART HOME server 2.2.1 and 2.3.1 ships with default credentials (user:user, admin:admin) that remain active…
CVE-2026-2540 – Micca KE700 Acceptance of previously used rolling codes
CVE ID : CVE-2026-2540 Published : Feb. 15, 2026, 11:15 a.m. | 46 minutes ago Description : The Micca KE700 system contains flawed resynchronization logic and is vulnerable to replay attacks. This attack…
CVE-2025-32062 – Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
CVE ID : CVE-2025-32062 Published : Feb. 15, 2026, 11:15 a.m. | 46 minutes ago Description : The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU…
CVE-2025-32061 – Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
CVE ID : CVE-2025-32061 Published : Feb. 15, 2026, 11:15 a.m. | 46 minutes ago Description : The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU…
CVE-2025-32059 – Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
CVE ID : CVE-2025-32059 Published : Feb. 15, 2026, 11:15 a.m. | 46 minutes ago Description : The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU…
CVE-2025-32058 – Stack Overflow in processing requests over INC interface on RH850 side of Infotainment ECU
CVE ID : CVE-2025-32058 Published : Feb. 15, 2026, 11:15 a.m. | 46 minutes ago Description : The Infotainment ECU manufactured by Bosch uses a RH850 module for CAN communication. RH850 is connected…
CVE-2026-1750 – Ecwid by Lightspeed Ecommerce Shopping Cart <= 7.0.7 – Authenticated (Subscriber+) Privilege Escalation via ec_store_admin_access
CVE ID : CVE-2026-1750 Published : Feb. 15, 2026, 4:15 a.m. | 1 hour, 46 minutes ago Description : The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Privilege Escalation…
CVE-2026-1490 – Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 – Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Installation
CVE ID : CVE-2026-1490 Published : Feb. 15, 2026, 4:15 a.m. | 1 hour, 46 minutes ago Description : The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary…
CVE-2025-8572 – Truelysell Core <= 1.8.7 – Unauthenticated Privilege Escalation via Registration
CVE ID : CVE-2025-8572 Published : Feb. 14, 2026, 9:16 a.m. | 46 minutes ago Description : The Truelysell Core plugin for WordPress is vulnerable to privilege escalation in versions less than, or…
CVE-2026-1306 – midi-Synth <= 1.1.0 – Unauthenticated Arbitrary File Upload via 'export' AJAX Action
CVE ID : CVE-2026-1306 Published : Feb. 14, 2026, 7:16 a.m. | 46 minutes ago Description : The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…