Where
-Infinity
0

Trending

Last week
Last month
Last year

CKAN MCP ServerCKAN MCP Server: Information disclosure via verbose error reflection

Risk 20
Severity
3.7
First published (updated )
CVE-2026-73844

Trendnet Tew-813druTRENDNET TEW-813DRU vsftpd vsftpd.conf default permission

Risk 17
Severity
3.1
First published (updated )
CVE-2026-19841

Webkul BagistoWebkul Bagisto Customer Search search information disclosure

Risk 17
Severity
2.7
First published (updated )
CVE-2026-19837

Webkul BagistoWebkul Bagisto Customer Item Deletion Endpoint access control

Risk 29
Severity
3.8
First published (updated )
CVE-2026-19835

Sourcecodester Air Cargo Management SystemSourceCodester Air Cargo Management System Master.php save_cargo_type sql injection

Risk 40
Severity
2
First published (updated )
CVE-2026-19787
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

francoisjacquet RosarioSISfrancoisjacquet RosarioSIS Referrals.php DBUpdate authorization

Risk 22
Severity
2.1
First published (updated )
CVE-2026-19784

feedmob fm-mcp-serversfeedmob fm-mcp-servers Download Endpoint index.ts downloadReport server-side request forgery

Risk 39
Severity
1.9
First published (updated )
CVE-2026-19770

itsourcecode Hospital Management Systemitsourcecode Hospital Management System viewdoctortimings.php sql injection

Risk 46
Severity
2.1
First published (updated )
CVE-2026-19767

fetch_swaggereyaushev swagger-testcase-mcp fetch_swagger swagger-parser.ts loadSource server-side request forgery

Risk 46
Severity
2.1
First published (updated )
CVE-2026-19765

Dromara lamp-cloud Code GeneratorDromara lamp-cloud Code Generator DefGenProjectController.java path traversal

Risk 46
Severity
2.1
First published (updated )
CVE-2026-19756
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

EnzoVezzaro mcp-dominican-layerEnzoVezzaro mcp-dominican-layer PDF Parsing index.ts parse-pdf server-side request forgery

Risk 46
Severity
2.1
First published (updated )
CVE-2026-19752

EnzoVezzaro/mcp-dominican-layer/parse-csvEnzoVezzaro mcp-dominican-layer parse-csv tool index.ts axios.get server-side request forgery

Risk 46
Severity
2.1
First published (updated )
CVE-2026-19751

Tenda CH7Tenda CH7 RTSP/ONVIF missing authentication

Risk 20
Severity
2.9
First published (updated )
CVE-2026-19749

Tenda Tenda CH7Tenda CH7 Kylin Web Service CWebSessionManager_ParseSession entropy

Risk 20
Severity
2.9
First published (updated )
CVE-2026-19748

Calix GigaSpireCalix GigaSpire traceroute.cmd denial of service

Risk 22
Severity
2.1
First published (updated )
CVE-2026-19746
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Calix GigaSpireCalix GigaSpire Web Management utilities_configurationsave.cgi denial of service

Risk 22
Severity
2.1
First published (updated )
CVE-2026-19745

Zimbra Zimbra Collaboration (ZCS)CSRF

Risk 17
Severity
3.1
First published (updated )
CVE-2026-73575

Zimbra Zimbra CollaborationIn Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the Zim…

Risk 17
Severity
3.1
First published (updated )
CVE-2026-73574

Zimbra Zimbra Collaboration (ZCS)Path Traversal

Risk 17
Severity
3.1
First published (updated )
CVE-2026-73573

Zimbra Zimbra Collaboration (ZCS)An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to imp…

Risk 17
Severity
3.1
First published (updated )
CVE-2026-73571
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

HCL AIONHCL AION is affected by multiple security vulnerabilities.

Risk 18
Severity
3.4
First published (updated )
CVE-2025-62315

HCL AIONHCL AION is affected by multiple security vulnerabilities.

Risk 25
Severity
3.7
First published (updated )
CVE-2025-62318

PostgreSQL postgresqlPostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership

Risk 26
Severity
3.8
First published (updated )
CVE-2026-6469

PostgreSQL PostgreSQL ECPGPostgreSQL ECPG integer underflow can crash the client

Risk 26
Severity
3.8
First published (updated )
CVE-2026-16241

PostgreSQL amcheckPostgreSQL amcheck does not clear untrusted search path

Risk 26
Severity
3.8
First published (updated )
CVE-2026-14673
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

wordpress/Booking for Appointments and Events CalendarAmelia < 2.4.6 - Provider+ Cross-Customer Appointment Data Disclosure via IDOR

Risk 20
Severity
3.7
First published (updated )
CVE-2026-14213

Palo Alto Networks Prisma Browser Prisma Browser: Inappropriate Implementation in Account Protection

Risk 9
Severity
0.5
First published (updated )
CVE-2026-0289

ruby/loofahLoofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons

Risk 25
Severity
2.3
First published (updated )
CVE-2026-73492

Loofah LoofahLoofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references

Risk 25
Severity
2.3
First published (updated )
CVE-2026-73491

Trix TrixTrix: XSS via JSON deserialization bypass in drag-and-drop (Level0InputController)

Risk 15
Severity
2.1
First published (updated )
CVE-2026-73427
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203