CVE Vulnerabilities - 2 July 2026

A vulnerability in UniFi Connect Application allows an attacker with network access to potentially take control of a device. This could happen if an attacker is able to execute malicious commands on t...

The obs-service-tar_scm software has a vulnerability in its Mercurial handler. If an attacker can trick the service into checking out a malicious _service file, they can execute code as the service or...

The Blocksy Companion Pro plugin for WordPress has a security issue that allows hackers to run their own code on your website without needing a password. This means they could potentially delete or mo...

Azure OpenAI's internal network access can be exploited by an authorized user, allowing them to access and manipulate sensitive data. This is a concern for organizations using Azure OpenAI, as it coul...

An authorized attacker can use a Microsoft Entra Provisioning Service (SyncFabric) to gain extra access to a network. This is a concern because it allows an attacker to do things they shouldn't be abl...

A security issue exists in Mautic 7's campaign import feature. An attacker with permission to import campaigns can write malicious files to sensitive areas of the system, potentially allowing them to ...

Mautic's theme engine is vulnerable to attacks that can execute malicious code on the hosting server. This is a risk because an authenticated user with permission to upload themes can potentially harm...

A local user on the same network as an OpenClaw server could potentially trick the system into thinking they are a trusted user. This could allow them to access sensitive features or information. To f...

The UniFi Protect Application is at risk of a security breach if a malicious actor can access the network. This could allow them to gain more control over the host device. To protect against this, ens...

A vulnerability in UniFi Access Application allows an attacker with low-level access to the network to potentially execute malicious code on the device. This could lead to unauthorized access or disru...

A hacker with network access and limited rights can use weaknesses in the UniFi Talk App to gain more control over the device. This could lead to sensitive data being accessed or modified. UniFi users...

If you use ntopng to monitor network traffic, an attacker could potentially take control of your account by guessing your session ID. This is because ntopng generates session IDs in a way that's predi...

9router's default secret is hardcoded and publicly known, allowing unauthorized users to access the dashboard and API if the server's JWT secret is not set. This vulnerability affects many public 9rou...

A security flaw in GravitLauncher's LaunchServer allows any user to access and read any file on the server that the LaunchServer process can read. This could allow an attacker to access sensitive info...

The 9router software does not properly check permissions for certain API requests, allowing an attacker to execute commands with root privileges and potentially take control of the system. This vulner...

AutoBangumi versions before 3.2.8 contain a security flaw that allows attackers to use a known set of default login credentials to gain full access to the application. This is a concern because an att...

An attacker can upload malicious files to Redsea Cloud eHR without needing a login. This could allow them to take control of your system remotely. We recommend updating to the latest version of Redsea...

An attacker can upload malicious files to a Yonyou KSOA 9.0 server without a password, potentially allowing them to execute code on the server. This is a serious risk because it allows unauthorized ac...

A security flaw in Dockwatch 0.6.567 allows an attacker to execute commands on your server without permission. This could lead to unauthorized access and potentially give the attacker control over you...

An attacker can upload, read, or delete sensitive data without a password. This is a security risk because it allows unauthorized access to user memories. To fix this, update the mcp-memory-service to...

A security issue in UniFi OS devices allows unauthorized access to change settings. This could happen if an attacker is on the same network and has the right setup. To protect your devices, ensure you...

The UniFi Protect Application has a security weakness that allows an unauthorized person with access to the network to bypass the authentication process for data streaming. This means they could poten...

The Divi Form Builder plugin for WordPress allows hackers to upload malicious files to the website, which can be used to take control of the site. This is a serious security risk that affects all vers...

Booktics software versions up to 1.0.21 are vulnerable to a type of attack that could allow an attacker to execute malicious code. This could lead to unauthorized access to sensitive data or system co...

An attacker can inject malicious code into WordPress sites using the ASE Pro plugin, potentially allowing them to steal sensitive information or take control of the site. This vulnerability affects al...