Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.8 CVE-2026-41120

CVE-2026-41120_CVE-2026-41120

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A lo...

Dell Wyse Management Suite CVE
MEDIUM 5.3 CVE-2026-40012

Information about ECS zero scoped answers might leak to clients that use a specific ECS_CVE-2026-40012

ECS zero scoped answers are stored in the packet cache while they should not. This impacts only configurations that have ECS enabled;

PowerDNS Recursor 5.2.0 CVE
HIGH 8.4 CVE-2026-2815

Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys_CVE-2026-2815

Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys

Silicon Labs SiSDK CVE
HIGH 7.5 CVE-2026-27366

WordPress MainWP Child plugin <= 6.1.1 - Broken Access Control vulnerability_CVE-2026-27366

Unauthenticated Broken Access Control in MainWP Child

MainWP MainWP Child n/a CVE
LOW 2.7 CVE-2026-12755

CVE-2026-12755_CVE-2026-12755

Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0 through 2026.2.7.0 allows an authenticated user with...

Devolutions Server 2026.2.4.0 CVE
MEDIUM 5.3 CVE-2026-6432

Improper bounds validation in EmberZNet SDK_CVE-2026-6432

Improper bounds validation in EmberZNet SDK versions 9.0.2 and earlier may result in crashes or dynamic memory leakage.

Silicon Labs SiSDK CVE
LOW 3.3 CVE-2026-57588

SQL Injection in Nessus via Malicious Scan Result File Import_CVE-2026-57588

A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file that, when imported by a privileged user, injects ...

tenable Nessus CVE
MEDIUM 5.3 CVE-2026-57587

SQL Injection in Nessus via Reverse DNS Lookup_CVE-2026-57587

A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject mal...

tenable Nessus CVE
MEDIUM 6.3 CVE-2026-57536

Insufficient validation of payment status in pretix-mollie_CVE-2026-57536

Our payment integration with Mollie did not properly validate payment status responses. An attacker could use a successful payment status respons...

pretix pretix-mollie CVE
LOW 2.1 CVE-2026-57535

CVE-2026-57535_CVE-2026-57535

Content injected to PDF rendering contexts could, in many places, include HTML content including tags. If the src attribute of these images point...

pretix pretix CVE