rapid7

CVE-2026-86265: itsourcecode Sales and Inventory System: A vulnerability has been found in itsourcecode Sales and Inventory System 1.0

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/us_transac.php. Such manipulation of the ...
rapid7

CVE-2026-86303: 92181 markdown: A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f

A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c ...
rapid7

CVE-2026-18922: Red Hat: A flaw was found in 389 Directory Server

A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried in a Cyrus SASL auxiliary property from a prior failed bind attempt can be installed on a ...
rapid7

CVE-2026-12757: icegram: The The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress plugin…

The The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up ...
rapid7

CVE-2026-86428: thephpleague commonmark: commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when…

commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. Attackers can submit Markdown with ...
rapid7

CVE-2026-86297: D-Link DIR-605: A vulnerability was identified in D-Link DIR-605 B1v202WWB03

A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel_set_params of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the ...
rapid7

CVE-2026-18796: Nordic Semiconductor ASA nRF5340: Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for…

Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK ...
rapid7

CVE-2026-78043: OpenVPN: The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the…

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
rapid7

CVE-2026-20508: MediaTek, Inc. MediaTek chipset: In Power HAL, there is a possible escalation of privilege due to type confusion

In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User ...
rapid7

CVE-2026-86491: JetBrains YouTrack: In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads

CVSS 3.1 Base Score: 3.5 CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) With curated Threat Intelligence, you can see which vulnerabilities truly put ...
rapid7

CVE-2026-84256: OpenVPN: An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows remote…

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
rapid7

CVE-2026-84219: Improper Neutralization of Input During Web Page Generation

The Kirki WordPress plugin before 6.3.0 does not hold back every spelling of the HTML entities it decodes when rendering, allowing unauthenticated users to store JavaScript in a comment which then ...