CVE-2026-65667 - Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over

CVE-2026-63508 - Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthori

CVE-2026-56162 - Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges

CVE-2026-14812 - The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a h

CVE-2026-11976 - The official MonsterInsights Pro update distribution bucket (`monster-insights.s3.amazonaws.com`) wa

CVE-2026-66665 - Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions.

CVE-2026-65553 - Unauthenticated Remote Code Execution (RCE) in Spider Analyser &#8211; WordPress搜索引擎蜘蛛分析插件 <= 2.1.3

CVE-2026-5430 - The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly c

CVE-2026-48168 - PraisonAI is a multi-agent teams system. In versions prior to 4.6.40, the bundled Claude GitHub Acti

CVE-2026-16940 - The Custom Fields WordPress plugin before 1.5.1 does not validate a user-supplied file path before d