Recent Advisories

Severity ID Title Vendor Product Date Type
NONE FF82ECA6-EB6F-

openvpn-connect-echo-script-ace-poc_FF82ECA6-EB6F-5D36-9241-105F429FAB91

OpenVPN Connect Server-Pushed Option Findings PoC Benign proof of concept bundle for two locally verified OpenVPN Connect for Windows behaviors rea...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 0AEDA014-6D72-

Exploit for CVE-2026-49085_0AEDA014-6D72-5806-924F-7B0209A2C53F

CVE-2026-49085 CVE-2026-49085 WP Insightly PHP Object Injection Exploit...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 4F0393C2-BADE-

Exploit for CVE-2026-9691_4F0393C2-BADE-5B76-95DF-EFAA886343AB

CVE-2026-9691 CVE-2026-9691: Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms = 1.1.1 Unauthenticated PHP Object ...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 16463D74-5F76-

Exploit for CVE-2026-49104_16463D74-5F76-59A5-8CB7-6AD1A9CD2ED6

CVE-2026-49104- CVE-2026-49104 Integration for Keap/Infusionsoft PHP Object Injection Exploit...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 7EF1048B-EC16-

Exploit for CVE-2026-49105_7EF1048B-EC16-5C52-ADFF-9E459A7BCD0E

CVE-2026-49105 CVE-2026-49105 WP Zendesk PHP Object Injection Exploit...

N/A N/A GITHUBEXPLOIT
NONE 24B08E86-9B8F-

Exploit for CVE-2026-49079_24B08E86-9B8F-5BF7-AAB3-E33143DE5E53

CVE-2026-49079 CVE-2026-49079 JetSearch SQL Injection Exploit...

N/A N/A GITHUBEXPLOIT
HIGH 7.5 64C268B8-DAA9-

Exploit for CVE-2026-49083_64C268B8-DAA9-5742-A8DC-477457B77A6F

CVE-2026-49083 CVE-2026-49083 LatePoint Calendar Booking Plugin Privilege Escalation Exploit...

N/A N/A GITHUBEXPLOIT
MEDIUM 5.5 CVE-2026-40722

WordPress Yoast SEO Premium plugin <= 26.6 - Broken Access Control vulnerability_CVE-2026-40722

Missing Authorization vulnerability in Yoast BV Yoast SEO Premium allows Exploiting Incorrectly Configured Access Control Security Levels. This is...

Yoast BV Yoast SEO Premium n/a CVE
MEDIUM 4.8 CVE-2026-27870

CROSS-SITE SCRIPTING (XSS) VIA MALICIOUS FILE UPLOAD ON REGESTA SMART HD-PLC OF TELDAT_CVE-2026-27870

An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, registration action IS required) who has the ...

Teldat Regesta Smart HD-PLC - TLDPH16D2 11.02.05.10.02 CVE
MEDIUM 6.9 CVE-2026-27869

WEB SERVICE (HTTP) DENIAL OF SERVICE VIA SLOW HEADERS ON REGESTA SMART HD-PLC OF TELDAT_CVE-2026-27869

An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has t...

Teldat Regesta Smart HD-PLC - TLDPH16D2 11.02.05.10.02 CVE