CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In Flowise prior to version 3.1.2, the checkBasicAuth endpoint validates credentials in plaintext without rate limiting and with direct comparison. This allows an attacker to perform a brute-force attack on passwords.
Buffer Underwrite vulnerability in Apache HTTP Server when processing crafted regular expressions in configuration. Affects versions 2.4.0 through 2.4.67.
In Flowise prior to version 3.1.2, a mass assignment vulnerability exists in the variable update endpoint. An authenticated attacker can modify server-controlled properties such as workspaceId, potentially breaking tenant isolation in multi-workspace environments.
A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes.
Apache HTTP Server versions 2.4.0 through 2.4.67 have a Use After Free vulnerability in mod_ldap with per-directory configuration. This can lead to undefined behavior.
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange. An unauthenticated attacker can bypass user authentication and establish a VPN connection without a valid password.
A vulnerability in Tenda HG7, HG9, and HG10 devices (firmware version 300001138_en_xpon) in the formDOMAINBLK function of /boaform/formDOMAINBLK. Manipulating the blkDomain argument leads to a stack-based buffer overflow. The attack can be performed remotely.
WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability. Unauthenticated attackers can upload malicious files by exploiting insufficient validation in the theme's upload functionality.
The WordPress Background Image Cropper plugin version 1.2 contains a remote code execution vulnerability, allowing unauthenticated attackers to upload arbitrary files via the ups.php endpoint. Attackers can upload PHP files and execute code on the server.
WordPress Seotheme has a remote code execution vulnerability. Unauthenticated attackers can execute arbitrary PHP code by uploading malicious files to the theme directory. Attackers can access the uploaded PHP shell at /wp-content/themes/seotheme/mar.php.
Two endpoints in the Vault Service ScriptsController, shared by Altium Enterprise Server and Altium 365, accept file uploads where a user-supplied filename is used to construct the destination path without validation, allowing arbitrary file writes. The write occurs before authentication, so no credentials are needed.
Path traversal vulnerability in Altium Enterprise Server Collaboration Service allows an authenticated user to read arbitrary files from the server filesystem via a crafted filename in a collaboration message. This can lead to exposure of configuration with passwords and full server compromise.
OpenXDMoD prior to version 10.0.3 contains an SQL injection vulnerability that allows an unauthenticated remote attacker to execute arbitrary SQL statements. Exploitation requires no authentication or user interaction and can result in complete compromise of the underlying database.
Open XDMoD versions 9.5.0 through 11.0.2 contain a vulnerability allowing remote arbitrary system command execution on the web server. An attacker can execute commands with the privileges of the web server process.
A malicious version of 'guardrails-ai' (0.10.1) was published on PyPI on May 11, 2026. Users who installed this version may be affected. Upgrade to 0.10.2 or downgrade to 0.10.0.
Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise Server allow an unauthenticated network attacker to write arbitrary files to writable locations and read package archive files. No authentication is required.
Altium Enterprise Server has a vulnerability related to the use of a hard-coded cryptographic key for signing file download URLs. This key is identical across all installations, allowing unauthenticated attackers to forge signatures and retrieve files from the Vault storage area without authentication.
HAX CMS, który zarządza mikrositami z backendami PHP lub NodeJs, ma podatność na przechowywane ataki XSS w wersjach przed 26.0.0. Problem wynika z niewłaściwego oczyszczania komponentu `<video-player>`, który pozwala na użycie URI `javascript:` w atrybucie `source`.
HAX CMS versions prior to 26.0.0 have an authenticated file overwrite vulnerability. An attacker can exploit this vulnerability to configure malicious Git filter commands, leading to code execution on the HAX CMS server.
HAX CMS, which manages microsites with PHP or NodeJs backends, has a stored XSS vulnerability in versions prior to 26.0.0. The issue arises from improper sanitization of `<iframe>` elements, allowing execution of malicious JavaScript.