cardosource MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution
webapps php CVE-2026-42471

Ünsal Furkan Harani Wing FTP Server 8.1.3 - Authenticated Remote Code Execution
remote multiple CVE-2026-44403

Lukas Johannes Moeller strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow
remote multiple CVE-2026-35330

Lukas Johannes Moeller strongSwan 5.9.13 - DoS
dos multiple CVE-2026-35333

nu11secur1ty Linux Kernel - Local Privilege Escalation
local linux CVE-2026-43500;CVE-2026-43284

Max Gabriel EspoCRM 9.3.3 - SSRF
webapps multiple CVE-2026-33534

Daniil Gordeev MeiG Smart FORGE_SLT711 - OS Command Injection
hardware linux CVE-2026-36356

Daniil Gordeev Realtek rtl819x - Local Privilege
local linux CVE-2026-36355

Gabriel Rodrigues OpenCATS 0.9.7.4 - SQL Injection
webapps multiple

Mustafa Murat Akgül Grav CMS 2.0.0-beta.2 - Remote Code Execution
webapps php CVE-2026-42607

Amir Hossein Jamshidi D-Link DSL2600U - 'rom-0' Admin Password Disclosure
hardware multiple

Amir Hossein Jamshidi Wordpress Temporary Login Plugin 1.0.0 - 'temp-login-token' Authentication Bypass to Account Takeover
webapps multiple CVE-2026-7567

nu11secur1ty cPanel - CRLF Injection
webapps php CVE-2026-41940

Gabriel Rodrigues BookStack 25.12.1 - Denial of Service
webapps multiple

nu11secur1ty solaredge - (CSRF-OOB-Injection)
webapps multiple

nu11secur1ty Windows Snipping Tool - NTLMv2 Hash Hijack
local windows CVE-2026-33829