- CVE-2026-103011 - Heap-based Buffer Overflow in hMailServer
- CVE-2026-103010 - Heap-based Buffer Overflow in hMailServer
- CVE-2026-103649 - Synchronous Access of Remote Resource without Timeout in hMailServer
- CVE-2026-104659 - Origin Validation Error in hMailServer
- CVE-2026-104660 - Missing Authorization in hMailServer
- CVE-2026-104658 - Reliance on Untrusted Inputs in a Security Decision in hMailServer
- CVE-2026-104704 - Cleartext Transmission of Sensitive Information in hMailServer
- CVE-2026-93509 - Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Wallet Balance Manipulation via Negative Transfer Amount
- CVE-2026-105190 - Easy Digital Downloads < 3.7.1 - Unauthenticated Account Creation with Registration Disabled
- CVE-2026-104671 - TutorStarter < 4.0.4 - Unauthenticated User Registration Bypass via AJAX
- CVE-2026-103517 - Airwallex Online Payments Gateway < 1.36.0 - Unauthenticated Payment Bypass via Forged Webhook
- CVE-2026-107503 - Eclipse Ditto Explorer OpenID Connect Authority Injection Vulnerability
- CVE-2026-105110 - Iskratel Innbox Unauthenticated Remote Code Execution via login.xgi CLI Parameter
- CVE-2026-4894 - Authentication bypass in multiple products from Frappe Technologies
- CVE-2026-71896 - Apache DolphinScheduler: Missing Authorization Checks Allow Unauthorized Disclosure of User Account Information
- CVE-2026-71895 - Apache DolphinScheduler: Missing Authorization Checks Allow Non-Admin Users to Retrieve Kubernetes Credentials
- CVE-2026-71183 - Apache DolphinScheduler: Missing Authorization Checks Allow Disclosure of Data Source Information and Passwords
- CVE-2026-66087 - Apache DolphinScheduler: Project Authorization Bypass in the Task instance stop/savepoint Endpoint
- CVE-2026-66084 - Apache DolphinScheduler: Project Authorization Bypass in the Task Definition with-upstream Endpoint
- CVE-2026-66082 - Apache DolphinScheduler: Cross-project authorization bypasses in DolphinScheduler API (schedule / workflow）
- CVE-2026-107466 - Flatpak-builder: local file exfiltration via `file
- CVE-2026-93699 - WP Toolkit for cPanel Argument Injection Vulnerability
- CVE-2026-89191 - Stored Cross-Site Scripting in SQLView KRIS
- CVE-2026-12260 - SQL injection in the NetBoard CRM demo platform
- CVE-2026-87428 - Brocade ASCG Credential Disclosure Vulnerability
- CVE-2026-87426 - Brocade ASCG Information Disclosure Vulnerability
- CVE-2026-87425 - Brocade ASCG TLS Trust Store Improper Neutralization
- CVE-2026-87424 - Brocade ASCG Authentication Bypass Vulnerability
- CVE-2026-85490 - Brocade ASCG Path Traversal Vulnerability
- CVE-2026-85097 - Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter
- CVE-2026-85489 - Brocade ASCG Authentication Bypass Vulnerability
- CVE-2026-85488 - Brocade ASCG Hardcoded Credential Vulnerability
- CVE-2026-85487 - Brocade ASCG Path Traversal Vulnerability
- CVE-2026-85486 - Brocade ASCG Remote Code Execution
- CVE-2026-85423 - Brocade ASCG Authentication Bypass and Remote Code Execution Vulnerability
- CVE-2026-85422 - Brocade ASCG Hardcoded Cryptographic Key Vulnerability
- CVE-2026-94258 - SMS Alert 3.6.4 - 4.0.0 - Admin+ Network User Billing Phone Disclosure via Bulk User Actions
- CVE-2026-94275 - Track Orders for WooCommerce < 1.2.7 - Unauthenticated PII Disclosure via 'email' Parameter
- CVE-2026-94244 - Wallet System for WooCommerce < 2.8.0 - Subscriber+ Store-Wide Wallet Transaction Disclosure via Export
- CVE-2026-94245 - Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Arbitrary Wallet Balance Theft via IDOR
- CVE-2026-94246 - Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Forged Wallet Withdrawal Request via IDOR
- CVE-2026-86828 - BackWPup < 5.7.7 - Admin+ Path Traversal to RCE via Restore PclZip Fallback
- CVE-2026-5769 - Brocade SANnav Sensitive Information Disclosure via Memory Swap File
- CVE-2026-86826 - BackWPup < 5.7.7 - Unauthenticated Sensitive Data Disclosure via Restore Working Directory on NGINX
- CVE-2026-86827 - BackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.php
- CVE-2026-5048 - Brocade SANnav SQL Injection Vulnerability
- CVE-2026-5049 - Brocade SANnav Path Traversal Vulnerability
- CVE-2026-107459 - Openfind｜SecuShare Pro - OS Command Injection
- CVE-2026-5047 - Brocade SANnav Sensitive Information Disclosure
- CVE-2023-5649 - Brocade ASCG Improper Input Validation Denial of Service Vulnerability
- CVE-2023-5648 - Brocade ASCG Missing Security HTTP Headers Vulnerability
- CVE-2026-107450 - Stump Smart List Unauthorized Access Vulnerability
- CVE-2026-94585 - Brocade Fabric OS Authentication Bypass Vulnerability
- CVE-2026-94587 - Brocade Fabric OS WebTools Buffer Overflow Vulnerability
- CVE-2026-94579 - Brocade Fabric OS PAM Session OS Command Injection
- CVE-2026-94576 - Brocade Fabric OS Authentication Bypass and Privilege Escalation Vulnerability
- CVE-2026-87661 - Brocade Fabric OS Apache Configuration Injection Denial of Service Vulnerability
- CVE-2026-17196 - Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute
- CVE-2026-17609 - Super Forms <= 6.3.316 - Unauthenticated Arbitrary Directory Deletion via 'data[...][files][][subdir]' Parameter
- CVE-2026-107449 - Heimdall Server-Side Request Forgery
- CVE-2026-87677 - Brocade Fabric OS OS Command Injection Vulnerability
- CVE-2026-94586 - Brocade Fabric OS Command Injection Vulnerability
- CVE-2026-94581 - Brocade Fabric OS OS Command Injection Vulnerability
- CVE-2026-94577 - Brocade Fabric OS Privilege Escalation Vulnerability
- CVE-2026-94575 - Brocade Fabric OS RBAC Bypass Vulnerability
- CVE-2026-94580 - Brocade Fabric OS Arbitrary File Deletion Vulnerability
- CVE-2026-94584 - Brocade Fabric OS Race Condition Vulnerability
- CVE-2026-87685 - Brocade Fabric OS WebTools Arbitrary File Manipulation Vulnerability
- CVE-2026-87687 - Brocade Fabric OS Improper Authorization Vulnerability
- CVE-2026-87688 - Brocade Fabric OS Command Injection Vulnerability
- CVE-2026-87675 - Brocade Fabric OS OS Command Injection Vulnerability
- CVE-2026-87673 - Brocade Fabric OS OS Command Injection Vulnerability
- CVE-2026-87674 - Brocade Fabric OS Local Privilege Escalation Vulnerability
- CVE-2026-87667 - Brocade Fabric OS Argument Injection Vulnerability
- CVE-2026-94583 - Brocade Fabric OS Race Condition Vulnerability
- CVE-2026-94582 - Brocade Fabric OS FSPF Component Memory Buffer Overflow
- CVE-2026-87668 - Brocade Fabric OS Stack-Based Buffer Overflow Vulnerability
- CVE-2026-87665 - Brocade Fabric OS Stack-Based Buffer Overflow
- CVE-2026-87672 - Brocade Fabric OS SupportLink Information Disclosure Vulnerability
- CVE-2026-92862 - Ticket Ryutsu Center Improper Intent Handling Vulnerability
- CVE-2026-92861 - Ticket Ryutsu Center Hard-Coded Credentials Vulnerability
- CVE-2026-87670 - Brocade Fabric OS REST API Authorization Bypass
- CVE-2026-87669 - Brocade Fabric OS Improper Authorization Vulnerability
- CVE-2026-87678 - Brocade Fabric OS Improper Input Validation and Output Encoding Vulnerability
- CVE-2026-87676 - Brocade Fabric OS Stack-Based Buffer Overflow
- CVE-2026-87686 - Brocade Fabric OS Authentication Bypass Vulnerability
- CVE-2026-94578 - Brocade Fabric OS Authorization Bypass Vulnerability
- CVE-2026-87659 - Brocade Fabric OS Authorization Bypass Vulnerability
- CVE-2026-87671 - Brocade Fabric OS Web Management Daemon Out-of-Bounds Read Vulnerability
- CVE-2026-87684 - Brocade Fabric SNMP Daemon Stack-Based Buffer Overflow
- CVE-2026-82627 - Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included <= 7.6.1.1 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion
- CVE-2026-87682 - Brocade Fabric OS OS Command Injection Vulnerability
- CVE-2026-87683 - Brocade Fabric OS REST API Stack-Based Buffer Overflow
- CVE-2026-87726 - NXP NXPNfcRdLib Memory Out-of-Bounds Access Vulnerability
- CVE-2026-102488 - Octopus Server Privilege Escalation Vulnerability
- CVE-2017-20283 - NXP MQX Classic RTCS UDP Out-of-Bounds Write
- CVE-2026-87681 - Brocade Fabric OS Access Control Bypass Vulnerability
- CVE-2026-87680 - Brocade Fabric OS Command Injection Vulnerability
- CVE-2026-87679 - Brocade Fabric OS Heap-Based Buffer Overflow
- CVE-2026-17538 - Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress <= 5.6.9 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Customer PII Modification
Sysadmin & Photographe du Luxembourg
