rapid7

CVE-2026-58865: Improper Restriction of Operations within the Bounds of a Memory Buffer

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution ...
rapid7

CVE-2026-20588: MediaTek, Inc. MediaTek chipset: In mtee, there is a possible escalation of privilege due to a missing bounds check

In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege.
rapid7

CVE-2026-55252: URL Redirection to Untrusted Site

OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes. Prior to version 0.17.7, the restrictions on redirect URLs in openrun can be ...
rapid7

CVE-2026-92767: zayedbaloch Twenty20 Image Before-After: The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset'…

The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode Attribute in all versions up to, and including, 2.0.5 due to insufficient input ...
rapid7

CVE-2026-97281: Missing Authorization

Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions. CVSS 3.1 Base Score: 6.3 CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L ...
rapid7

CVE-2026-103495: JetBrains YouTrack: In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs

CVSS 3.1 Base Score: 4.3 CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) With curated Threat Intelligence, you can see which vulnerabilities truly put ...