CVE ID :CVE-2026-86060 Published : Sept. 5, 2026, 8:17 p.m. | 4 hours, 20 minutes ago Description :RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited…
CVE-2026-67281 – Unauthenticated file read in Mikrotik RouterOS
CVE ID :CVE-2026-67281 Published : Sept. 5, 2026, 8:17 p.m. | 4 hours, 20 minutes ago Description :RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains…
CVE-2026-52777 – YesWiki: Authenticated PHP Object Injection in BazarImportAction via unserialize
CVE ID :CVE-2026-52777 Published : Sept. 5, 2026, 12:17 a.m. | 20 minutes ago Description :YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object…
CVE-2026-52775 – YesWiki Authenticated SQL Injection in ReactionManager
CVE ID :CVE-2026-52775 Published : Sept. 5, 2026, 12:17 a.m. | 20 minutes ago Description :YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki through the latest development branch…
CVE-2026-52771 – YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)
CVE ID :CVE-2026-52771 Published : Sept. 5, 2026, 12:17 a.m. | 20 minutes ago Description :YesWiki is a wiki system written in PHP. From version 4.2.0 to before version 4.6.6, ApiController::deletePage() interpolates a…
CVE-2026-52769 – YesWiki: Unauthenticated Server-Side Request Forgery via ActivityPub `Signature.keyId`
CVE ID :CVE-2026-52769 Published : Sept. 5, 2026, 12:17 a.m. | 20 minutes ago Description :YesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, the POST /api/forms/{formId}/actor/inbox…
CVE-2026-52767 – YesWiki: Unauthenticated ActivityPub Signature-Verification Bypass via `!openssl_verify(…)` accepting `int(-1)`
CVE ID :CVE-2026-52767 Published : Sept. 5, 2026, 12:17 a.m. | 20 minutes ago Description :YesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, HttpSignatureService::verifySignature() checks the…
CVE-2026-67402 – ConfigServer Security & Firewall Remote Command Execution Vulnerability
CVE ID :CVE-2026-67402 Published : Sept. 4, 2026, 12:17 a.m. | 20 minutes ago Description :An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3…
CVE-2026-67398 – WHMCS 2Checkout Payment Gateway Missing Authorization Vulnerability
CVE ID :CVE-2026-67398 Published : Sept. 4, 2026, 12:17 a.m. | 20 minutes ago Description :Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.8, from 9.0.0…
CVE-2026-67397 – Plesk Path Traversal Arbitrary Code Execution
CVE ID :CVE-2026-67397 Published : Sept. 4, 2026, 12:17 a.m. | 20 minutes ago Description :Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code…