CVE Find : surveillez les vulnérabilités en temps réel

CVE-2026-95687 - HIGH
01/10/2026

The WPC Shop as a Customer for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.0.0 This is due to the plugin not properly validating the target user's role prior to issuing a new authentication session, allowing an authenticated attacker to log in as any WordPress Administrator by directly supplying an Administrato...

priviliegemanagementOWSAP: A04

Plus d'informations avec CVE Find

CVE-2026-75957 - CRITICAL
01/10/2026

The Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.15.0 via the `checkout_form` parameter of the `login_customer_after_checkout` function. This is due to the publicly accessible `wu_ajax_nopriv_wu_validate_form` AJAX handler accepting a freely obtainable checkout nonce, and the `che...

authorisationproblemOWSAP: A07

Plus d'informations avec CVE Find

CVE-2026-19807 - HIGH
01/10/2026

The ByteCoreStack – MCP Connector for AI Tools plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.3 This is due to the `wp_update_user_meta` MCP tool in `execute_tool` gating writes solely with `current_user_can('edit_user', $uid)` — a check that WordPress core's `map_meta_cap` resolves to the `read` primitive when the target user ID matches th...

priviliegemanagementOWSAP: A04

Plus d'informations avec CVE Find

CVE-2026-15989 - CRITICAL
01/10/2026

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's before_email_success_msg() function whitelisting the client-submitted 'role' key and copying it into the user-data array that is passed directly to wp_insert_user(), without validating the submitted role ...

priviliegemanagementOWSAP: A04

Plus d'informations avec CVE Find

CVE-2026-103655 - CRITICAL
01/10/2026

MISP contains a vulnerability in its two-factor authentication (TOTP) verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor. Because the system did not record whether a given TOTP period had already been consumed, the same c...

OWSAP: A07

Plus d'informations avec CVE Find

CVE-2025-41753 - CRITICAL
01/10/2026

The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the device, which may lead to full system compromise.

directorytraversalOWSAP: A01

Plus d'informations avec CVE Find

CVE-2026-80275 - HIGH
01/10/2026

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer (administrator) account password.

authorisationproblemOWSAP: A01

Plus d'informations avec CVE Find

CVE-2026-82829 - CRITICAL
01/10/2026

Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauthorized access by exploiting hidden accounts or hard coded credentials. This issue affects Hitachi Coding Software Suite: through 3.3.0.

Plus d'informations avec CVE Find

CVE-2026-82828 - HIGH
01/10/2026

Hitachi Coding Software Suite contains an Incorrect Authorization vulnerability that allows an unprivileged user to perform administrator-level operations. This issue affects Hitachi Coding Software Suite: through 3.3.0.

authorisationproblemOWSAP: A01

Plus d'informations avec CVE Find

CVE-2026-82827 - CRITICAL
01/10/2026

Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions. This issue affects Hitachi Coding Software Suite: through 3.3.0.

OWSAP: A02

Plus d'informations avec CVE Find

CVE-2026-82825 - CRITICAL
01/10/2026

Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticated attacker to invoke a critical API, potentially leading to unauthorized retrieval or alteration of sensitive information, or unauthorized manipulation. This issue affects Hitachi Coding Software Suite: through 3.3.0.

authorisationproblemOWSAP: A07

Plus d'informations avec CVE Find

CVE-2026-82824 - CRITICAL
01/10/2026

Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files. This issue affects Hitachi Coding Software Suite: through 3.3.0.

OWSAP: A01

Plus d'informations avec CVE Find

CVE-2026-92966 - CRITICAL
01/10/2026

The The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.7.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arb...

codeinjectionOWSAP: A03

Plus d'informations avec CVE Find

CVE-2026-101283 - CRITICAL
30/09/2026

iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (guard warns only), so an unauthenticated client overflows the heap via an oversized authtoken; fixed in 3.22

Plus d'informations avec CVE Find

CVE-2026-102149 - CRITICAL
30/09/2026

Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attacker to associate a certificate with another user's account, affecting the confidentiality and integrity of that account's encrypted mail and, where certificate-based login is enabled, potentially permitting unauthorized access to the account.

authorisationproblemOWSAP: A07

Plus d'informations avec CVE Find

CVE-2026-102147 - CRITICAL
30/09/2026

A stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an unauthenticated attacker to store crafted content that later executes arbitrary JavaScript in the authenticated session of an administrator who views the affected page. This could have permitted the attacker to gain full administrative control, including the creation of a new administrative account.

crosssitescriptingOWSAP: A03

Plus d'informations avec CVE Find

CVE-2026-102125 - HIGH
30/09/2026

The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it. Code already executing within that sandbox could potentially escape its confinement and act with the privileges of the service account that runs the application, which could allow an attacker in that position to read or modify application data and configuration, or to disrupt th...

OWSAP: A04OWSAP: A01

Plus d'informations avec CVE Find

CVE-2026-102121 - HIGH
30/09/2026

A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms can be displayed to anonymous visitors, but it returned more data than the form itself required. Anyone who knew the web address of a published form could potentially retrieve the form owner's Kiteworks account profile, including personal details, along with parts of the deploymen...

authorisationproblemOWSAP: A01OWSAP: A07

Plus d'informations avec CVE Find

CVE-2026-102120 - HIGH
30/09/2026

A privilege escalation vulnerability in Kiteworks could have allowed an attacker who had already obtained code execution on one node of a clustered Kiteworks deployment to run operating system commands with elevated privileges on another node of the same cluster. Insufficient input validation in an internal cluster management function let attacker-supplied values reach a privileged execution conte...

oscommandinjectionpriviliegemanagementOWSAP: A03OWSAP: A04

Plus d'informations avec CVE Find

CVE-2026-102115 - CRITICAL
30/09/2026

Kiteworks Core did not correctly validate a parameter submitted to the password reset workflow. An unauthenticated attacker who knew the email address of a user with a locally stored password could potentially reset that account's password without access to the emailed reset link and then authenticate as that user, including where the account holds administrative privileges.

OWSAP: A07

Plus d'informations avec CVE Find