共收录 812 条相关情报。
← 返回所有主题CVE-2026-15426
The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is v
CVE-2026-73218
Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in A
CVE-2026-68821
Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-20890
Improper privilege management for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Proc
CVE-2026-72537
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-s
CVE-2026-72534
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-s
CVE-2026-18950
A flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a vulnerability related to how Rol
CVE-2026-72886
Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.29.2 until 0.29.13, schedule.create and schedule.u
CVE-2026-72863
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy's WebSocket handlers (in-app te
CVE-2026-16742
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed
CVE-2026-40920
Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0. Users are recommended to upgrade
CVE-2026-19381
A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unkn
CVE-2026-19360
A vulnerability was detected in wongcyrus ExcelLexBot up to 0.0.3. This affects the function ExcelLexBotS3TriggerFunctio
CVE-2026-14526
The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and
CVE-2026-14526
The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and
CVE-2026-64637
Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an
CVE-2026-64637
Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an
CVE-2026-15215
The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify the user's capability before installing
CVE-2026-19189
A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is some unknown functional
CVE-2026-48086
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver