Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.5 CVE-2026-46697

Fediverse Embeds: Unauthenticated SSRF / open proxy via REST media-proxy endpoint_CVE-2026-46697

Fediverse Embeds embeds fediverse posts on WordPress sites. Prior to version 1.5.8, Fediverse Embeds registered an unauthenticated REST route ftf/m...

stefanbohacek fediverse-embeds-wordpress-plugin < 1.5.8 CVE
HIGH 8.7 CVE-2026-3329

Nexus Repository Manager – Improper Restriction of Excessive Authentication Attempts_CVE-2026-3329

A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository via authent...

Sonatype Nexus Repository Manager 3.0.0 CVE
MEDIUM 4.9 CVE-2026-11986

Keycloak-rest-admin-ui-ext: authorization bypass vulnerability in the admin-ui-ext bulk role-mapping-delete endpoints of keycloak_CVE-2026-11986

A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs be...

Red Hat Red Hat Build of Keycloak CVE
MEDIUM 6.5 CVE-2026-53702

Gstreamer1-plugins-bad-free: gstreamer: stack buffer overflow in h.265 buffering period sei parser_CVE-2026-53702

A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad). When parsing a buffering period SEI message, ...

Red Hat Red Hat Enterprise Linux 10 CVE
MEDIUM 6.5 CVE-2026-53701

Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds write in h.266/vvc pps picture partition parser_CVE-2026-53701

An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad. In the multi-slice-in-tile...

Red Hat Red Hat Enterprise Linux 10 CVE
HIGH 7.5 CVE-2026-52860

Vim: Arbitrary Code Execution via Python Omni-Completion_CVE-2026-52860

Vim is an open source, command line text editor. Prior to version 9.2.0597, Vim's Python omni-completion executes reconstructed function and class ...

vim vim < 9.2.0597 CVE
MEDIUM 6.9 CVE-2026-52859

Vim: Out-of-bounds Read in Terminal Screen Snapshot_CVE-2026-52859

Vim is an open source, command line text editor. Prior to version 9.2.0565, the update_snapshot() function in src/terminal.c copies the visible ter...

vim vim < 9.2.0565 CVE
HIGH 7.3 CVE-2026-52858

Vim: Arbitrary Code Execution via Python Omni-Completion_CVE-2026-52858

Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with t...

vim vim < 9.2.0561 CVE
HIGH 8.5 CVE-2026-48547

KanaDojo < 0.1.18 Command Injection via patchNotesData.json in release.yml_CVE-2026-48547

KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserti...

lingdojo kana-dojo CVE
MEDIUM 6.1 CVE-2026-47250

mcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration_CVE-2026-47250

mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Prior to version 3.7.0, the kubectl_generic tool in mcp...

Flux159 mcp-server-kubernetes < 3.7.0 CVE