Mustafa Murat Akgül Grav CMS 2.0.0-beta.2 - Remote Code Execution
webapps php CVE-2026-42607

alisunbul Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service
webapps multiple CVE-2026-23918

Amir Hossein Jamshidi D-Link DSL2600U - 'rom-0' Admin Password Disclosure
hardware multiple

Amir Hossein Jamshidi Wordpress Temporary Login Plugin 1.0.0 - 'temp-login-token' Authentication Bypass to Account Takeover
webapps multiple CVE-2026-7567

nu11secur1ty cPanel - CRLF Injection
webapps php CVE-2026-41940

Long Fong Chan Linux Kernel 6.8 - Local Privilege Escalation
local linux

Abdelazim Mohammed Cockpit 359 - RCE
webapps multiple CVE-2026-4631

Gabriel Rodrigues BookStack 25.12.1 - Denial of Service
webapps multiple

CENACIF-MX Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path
local windows

nu11secur1ty solaredge - (CSRF-OOB-Injection)
webapps multiple

Anthony Cihan FUXA 1.2.9 - RCE
webapps multiple CVE-2026-25895

nu11secur1ty Windows Snipping Tool - NTLMv2 Hash Hijack
local windows CVE-2026-33829

Chokri Hammedi Remote Sunrise Helper for Windows 2026.14 - Unauthenticated File/Directory Listing
local windows

Chokri Hammedi Remote Sunrise Helper for Windows 2026.14 - Remote Code Execution
local windows

bootstrapbool WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI
webapps multiple CVE-2026-4257

Brett Gervasoni Apache HertzBeat 1.8.0 - Remote Code Execution
webapps multiple