Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.5 CVE-2026-54810

WordPress Nexi XPay plugin <= 8.3.1 - Broken Access Control vulnerability_CVE-2026-54810

Missing Authorization vulnerability in Nexi Payments Nexi XPay allows Exploiting Incorrectly Configured Access Control Security Levels. This issue...

Nexi Payments Nexi XPay n/a CVE
HIGH 8.1 CVE-2026-54415

Broken Access Control in Azuriom CMS Server Routes Allows Account Takeover_CVE-2026-54415

Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all platforms allows an authentica...

Azuriom Azuriom CMS CVE
HIGH 7.4 CVE-2026-49502

CVE-2026-49502_CVE-2026-49502

Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent netwo...

Dell PowerFlex CVE
HIGH 8.1 CVE-2026-42530

NGINX Open-Source ngx_http_v3_module vulnerability_CVE-2026-42530

NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remot...

F5 NGINX Open Source 1.31.0 CVE
HIGH 8.1 CVE-2026-42055

NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability_CVE-2026-42055

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists w...

F5 NGINX Open Source 1.13.10 CVE
HIGH 7.1 CVE-2026-35066

CVE-2026-35066_CVE-2026-35066

Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged attacker with remote access co...

Dell PowerFlex CVE
HIGH 8.8 CVE-2026-35065

CVE-2026-35065_CVE-2026-35065

Dell PowerFlex Manager, version(s) [Versions], contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker...

Dell PowerFlex CVE
HIGH 8.1 CVE-2026-32804

CVE-2026-32804_CVE-2026-32804

Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent netwo...

Dell PowerFlex CVE
HIGH 7.5 CVE-2026-22283

CVE-2026-22283_CVE-2026-22283

Dell PowerFlex Manager, version(s) Version prior to 4.8, contain(s) an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An u...

Dell PowerFlex CVE
HIGH 8.1 CVE-2026-11311

NGINX Gateway Fabric vulnerability_CVE-2026-11311

When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator co...

F5 NGINX Gateway Fabric 2.5.0 CVE