CVE ID :CVE-2026-84476 Published : Sept. 1, 2026, 11:17 p.m. | 1 hour, 19 minutes ago Description :WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For headers, allowing attackers to spoof…
CVE-2026-84208 – AVideo User_Location Plugin Unauthenticated SQL Injection
CVE ID :CVE-2026-84208 Published : Sept. 1, 2026, 11:17 p.m. | 1 hour, 19 minutes ago Description :AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the User_Location plugin’s regions.json.php and cities.json.php…
CVE-2026-83524 – RedPort Optimizer wXa-223 System Clock datetime.php exec command injection
CVE ID :CVE-2026-83524 Published : Aug. 31, 2026, 11:16 p.m. | 1 hour, 20 minutes ago Description :A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to…
CVE-2026-82971 – QVidium Opera11 CGI Script net_tr.cgi command injection
CVE ID :CVE-2026-82971 Published : Aug. 31, 2026, 11:16 p.m. | 1 hour, 20 minutes ago Description :A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/net_tr.cgi…
CVE-2026-82954 – Dokploy Settings application.ts writeTraefikConfigInPath path traversal
CVE ID :CVE-2026-82954 Published : Aug. 31, 2026, 10:17 p.m. | 2 hours, 19 minutes ago Description :A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the…
CVE-2026-82882 – Devtron through 2.2.0 Missing Authorization via webhook API token endpoint
CVE ID :CVE-2026-82882 Published : Aug. 31, 2026, 10:17 p.m. | 2 hours, 19 minutes ago Description :Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token/webhook endpoint, allowing authenticated users to…
CVE-2026-77348 – Wallos incomplete fix for CVE-2026-33407: unauthenticated httpoxy SSRF still reachable via `endpoints/payments/search.php`
CVE ID :CVE-2026-77348 Published : Aug. 31, 2026, 10:17 p.m. | 2 hours, 19 minutes ago Description :Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, the fix for CVE-2026-33407 (GHSA-hhjq-82f8-m6rc,…
CVE-2026-82593 – D-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub_41802C stack-based overflow
CVE ID :CVE-2026-82593 Published : Aug. 31, 2026, 12:16 a.m. | 19 minutes ago Description :A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom…
CVE-2026-82592 – D-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflow
CVE ID :CVE-2026-82592 Published : Aug. 30, 2026, 11:17 p.m. | 1 hour, 19 minutes ago Description :A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat…
CVE-2026-81636 – Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service
CVE ID :CVE-2026-81636 Published : Aug. 30, 2026, 7:17 p.m. | 5 hours, 19 minutes ago Description :Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_graphql allows an unauthenticated client to bypass…