A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUT_FILE of the file /tmp/wpa_supplicant.conf of the component TCP Service. Executing ...

CVE-2026-101053

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUT_FILE of the file /tmp/wpa

历史摘要 · 未重新核验 · NVD

A flaw has been found in Eyeplus 57.0.0.0308. The impacted element is an unknown function of the file /snapshot of the component p2pcam Service. This manipulation causes informa...

CVE-2026-100907

A flaw has been found in Eyeplus 57.0.0.0308. The impacted element is an unknown function of the file /snapshot of the c

历史摘要 · 未重新核验 · NVD

A vulnerability was detected in Eyeplus 57.0.0.0308. The affected element is the function GetUsers of the file /onvif/Device of the component ONVIF. The manipulation results in ...

CVE-2026-100906

A vulnerability was detected in Eyeplus 57.0.0.0308. The affected element is the function GetUsers of the file /onvif/De

历史摘要 · 未重新核验 · NVD

A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulati...

CVE-2026-100883

A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file package

历史摘要 · 未重新核验 · NVD

Krayin laravel-crm acl.php access control

CVE-2026-100883

A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file package

历史摘要 · 未重新核验 · OSV.dev

On a multi-user system, a user with an active local login session could downgrade a system-wide Flatpak app to an older version by removing the app's remote ref via the unprivil...

CVE-2026-96281

On a multi-user system, a user with an active local login session could downgrade a system-wide Flatpak app to an older

历史摘要 · 未重新核验 · NVD

Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

CVE-2026-97163

Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

历史摘要 · 未重新核验 · NVD

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

CVE-2026-97161

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.

历史摘要 · 未重新核验 · NVD

Capgo (capgo.app) contains an incomplete access-control/content-lock enforcement issue affecting all versions; no patch is available at the time of publication. The `enforce_enc...

CVE-2026-100621

Capgo (capgo.app) contains an incomplete access-control/content-lock enforcement issue affecting all versions; no patch

历史摘要 · 未重新核验 · NVD

OpenZeppelin Confidential Contracts `VestingWalletConfidential`: a malicious ERC-7984 token is able to extract private data from the vesting wallet

### Impact Two locations consume an encrypted handle returned by an untrusted external party and use it without verifyi

历史摘要 · 未重新核验 · GitHub Advisory

ServiceNow has remediated an authorization bypass security issue that was identified in the...

CVE-2026-86859

ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This

历史摘要 · 未重新核验 · GitHub Advisory

ServiceNow has remediated an improper access control security issue that was identified in the...

CVE-2026-86858

ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. T

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.3_20181106 Build 107. This affects the function loadCfg of the file /ini/sys_cfg.txt of the ...

CVE-2026-96774

CVE-2026-96774 是披露在 SPON Communications（世邦通信）IP 网络音频设备 XC-9603 上的一处信息泄露漏洞，受影响固件版本为 1.2.3_20181106 Build 107。问题位于设备管理端的“配

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation of the a...

CVE-2026-96772

Intelliants Subrion CMS（基于 PHP 的开源内容管理系统，公开发布版本止于 4.2.1，项目已停止维护）被披露存在一处信息泄露漏洞，编号 CVE-2026-96772。问题出现在后端接口 /actions.json?

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in kvcache-ai mooncake up to 0.3.12/0.3.13.post1/0.3.14-rc1. This issue affects the function ScopedSegmentAccess::MountSegment of the file se...

CVE-2026-96763

A security flaw has been discovered in kvcache-ai mooncake up to 0.3.12/0.3.13.post1/0.3.14-rc1. This issue affects the

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects unknown code of the file Mifi_config.bin of the component Configuration Backup Hand...

CVE-2026-96606

A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects unknown code of the file M

历史摘要 · 未重新核验 · NVD

Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0 - The endpoint administrator/index.php?optio...

CVE-2026-90905

Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension

历史摘要 · 未重新核验 · NVD

Joomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0 - The allowEdit() method in ApiControl...

CVE-2026-90904

Joomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store ext

历史摘要 · 未重新核验 · NVD

Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend manag...

CVE-2026-82368

Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrat

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in Neethuharii CafeManagement. This issue affects some unknown processing of the file AddProductCode.php. The manipulation of the argument im...

CVE-2026-96513

A security flaw has been discovered in Neethuharii CafeManagement. This issue affects some unknown processing of the fil

历史摘要 · 未重新核验 · NVD