Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 8.1 CVE-2026-10820

ProfilePress < 4.16.17 - Subscriber+ Subscription Cancellation via IDOR_CVE-2026-10820

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.16.17 does no...

Unknown Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content CVE
HIGH 7 CVE-2026-49417

Multiple vulnerabilities in the sound(4) mmap path_CVE-2026-49417

Second, the audio buffer backing a mapping could be freed when the device was closed even though the mapping remained valid. The freed memory coul...

FreeBSD FreeBSD 15.0-RELEASE CVE
HIGH 7.1 CVE-2026-49413

Flaw in Linuxulator execution of setugid binaries_CVE-2026-49413

The Linuxulator determined whether a binary was set-user-ID or set-group-ID by checking the P_SUGID process flag. During execve(2), this flag is n...

FreeBSD FreeBSD 15.0-RELEASE CVE
HIGH 7.8 CVE-2026-49412

Use-after-free bug in the IPV6_MSFILTER socket option handler_CVE-2026-49412

The kernel handler for IPV6_MSFILTER dropped a serializing lock in order to copy the source-filter list from userspace, then reacquired the lock. ...

FreeBSD FreeBSD 15.0-RELEASE CVE
HIGH 7.8 CVE-2026-45258

Multiple vulnerabilities in the sound(4) mmap path_CVE-2026-45258

dsp_mmap_single() validated the requested mapping by checking the sum of the user-supplied offset and length against the buffer size. This additio...

FreeBSD FreeBSD 15.0-RELEASE CVE
HIGH 7.8 CVE-2026-49414

ASLR bypass for setuid executables via procctl(2)_CVE-2026-49414

The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather tha...

FreeBSD FreeBSD 15.0-RELEASE CVE
HIGH 7.5 CVE-2026-10083

APCu Manager < 4.5.0 - Unauthenticated Stored XSS via Cache Key Pollution_CVE-2026-10083

The APCu Manager WordPress plugin before 4.5.0 does not escape APCu object-cache keys before rendering them in an admin-area page, leading to a Sto...

Unknown APCu Manager CVE
HIGH 8.7 CVE-2026-13564

Edimax EW-7478APC POST Request formPPPoESetup stack-based overflow_CVE-2026-13564

A vulnerability was found in Edimax EW-7478APC 1.04. Affected is the function formPPPoESetup of the file /goform/formPPPoESetup of the component PO...

Edimax EW-7478APC 1.04 CVE
HIGH 8.7 CVE-2026-13563

Edimax EW-7478APC POST Request formL2TPSetup stack-based overflow_CVE-2026-13563

A vulnerability has been found in Edimax EW-7478APC 1.04. This impacts the function formL2TPSetup of the file /goform/formL2TPSetup of the componen...

Edimax EW-7478APC 1.04 CVE
HIGH 8.7 CVE-2026-13562

Edimax EW-7478APC POST Request formiNICSiteSurvey buffer overflow_CVE-2026-13562

A flaw has been found in Edimax EW-7478APC 1.04. This affects the function formiNICSiteSurvey of the file /goform/formiNICSiteSurvey of the compone...

Edimax EW-7478APC 1.04 CVE