2026

Apache CXF’s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim che

Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter map witho

In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and stores the `scope` val

The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btn_wrapper_classes' attribute

The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Stored C

A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via c

A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by this issue is the function new_qoslimit_start of

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to authorization bypass in all versions up

The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More plugin for WordPress is

Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, wit

Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs and external entities. Ho

An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF

Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the "maxFormParameterCount" co

The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the `c_hash` parameter when operating in th

Apache CXF allows to control the maximum attachment size via the "attachment-max-size". Prior to Apache CXF 4.2.3 and 4.

A vulnerability was determined in Shibby Tomato 1.28.0000. Affected by this vulnerability is the function new_qoslimit_s

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leadin

An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke Ca

An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an

Apache Polaris did not consistently validate storage locations supplied during table and view registration. An authenti

A vulnerability was determined in OpenHands up to 0.62.0. The affected element is the function initialize_repo of the fi

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update if

In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify handle

In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize completion before reque

In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: capture_urb_complete: redundant us

In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in meson_cry

In the Linux kernel, the following vulnerability has been resolved: smb/client: Fix error code in smb2_aead_req_alloc()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_close() replay

In the Linux kernel, the following vulnerability has been resolved: libfs: set SB_I_NOEXEC and SB_I_NODEV by default in

In the Linux kernel, the following vulnerability has been resolved: HID: hid-lenovo-go: cancel cfg_setup work in hid_go

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: initialize reset_work at allocat

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not trim a device which is not writeable

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Unconditionally sfence.vma for spurious

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid WARNING in sva unbind path The I

In the Linux kernel, the following vulnerability has been resolved: dma-buf/udmabuf: skip redundant cpu sync to fix cac

In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration f

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix data races on ring->ready On weakl

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: arc: emac: quiesce interrupts before

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain bus_reset work on device remo

In the Linux kernel, the following vulnerability has been resolved: can: esd_usb: kill anchored URBs before freeing net

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: cancel pending IN work before

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain func_wake

The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or support

Tokens issued to a low-privileged user are not sufficiently restricted, allowing them to be used to access product-level

A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by thi

A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unkn

A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function WorkspaceManager._setup_

A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packa

A security vulnerability has been detected in TinyAGI 0.0.20. Impacted is the function processMessage of the file packag