Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 5.9 CVE-2026-56009

WordPress Bricksable for Bricks Builder plugin <= 1.6.83 - Cross Site Scripting (XSS) vulnerability_CVE-2026-56009

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bricksable for Bricks Builder allows Stored X...

Bricksable Bricksable for Bricks Builder n/a CVE
MEDIUM 5.1 CVE-2026-54221

Reflected XSS in UBB.threads_CVE-2026-54221

UBB.threads is vulnerable to Reflected XSS. The application improperly handles user input in certain requests, enabling attackers to execute arbitr...

UBB Systems UBB.threads CVE
MEDIUM 5.1 CVE-2026-54219

Stored XSS in UBB.threads_CVE-2026-54219

UBB.threads is vulnerable to Stored XSS via user posts and user profile fields. The application fails to properly sanitize user input, allowing low...

UBB Systems UBB.threads CVE
MEDIUM 5.2 CVE-2026-9158

CVE-2026-9158_CVE-2026-9158

In Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to the management interface can lead to a dangling po...

Eclipse Foundation Eclipse 4diac 3.0.0 CVE
MEDIUM 6.5 CVE-2026-42490

domctl lock open to abuse_CVE-2026-42490

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To create and man...

Xen Xen consult Xen advisory XSA-492 CVE
MEDIUM 5.3 CVE-2026-42489

domctl lock open to abuse_CVE-2026-42489

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To create and man...

Xen Xen consult Xen advisory XSA-492 CVE
MEDIUM 5.7 CVE-2026-12539

Docker Sandboxes ICMP egress restriction bypass after daemon restart_CVE-2026-12539

Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at network-creation time, and does not re-apply it to networks rebuilt fr...

Docker Docker Sandboxes 0.14.0 CVE
MEDIUM 6 CVE-2026-12527

CVE-2026-12527_CVE-2026-12527

A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFH...

Shenzhen Liandian Communication Technology LTD V380 IP Camera / AppFHE1_V1.0.6.0 AppFHE1_V1.0.6.020230803 CVE
MEDIUM 5.7 CVE-2026-12039

Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution_CVE-2026-12039

Docker Sandboxes (sbx) enforces an HTTP/S-only egress allowlist but does not apply it to DNS resolution: the per-network embedded DNS server forwar...

Docker Docker Sandboxes 0.13.0 CVE
MEDIUM 6.7 CVE-2026-22551

CVE-2026-22551_CVE-2026-22551

In Eclipse Theia versions prior to 1.71.0, the AI chat rendered Markdown image tags from AI responses, triggering HTTP requests to arbitrary extern...

Eclipse Foundation Eclipse Theia CVE