CVE Vulnerabilities - 23 September 2026

RabbitMQ allows unauthorized creation of super‑streams via HTTP

CVE-2026-67218 UBUNTU-CVE-2026-67218 DEBIAN-CVE-2026-67218 GHSA-34jw-rm7g-hph4

In certain older versions of RabbitMQ, a user who can only view the management console could create new super‑streams (a group of queues and an exchange) through the HTTP API, even though they lack pe...

2.1

RabbitMQ lets management users see other vhost queue details

CVE-2026-66076 UBUNTU-CVE-2026-66076 DEBIAN-CVE-2026-66076 GHSA-j45q-v7g2-82ph

In certain older versions of RabbitMQ, a user with the management role could request information about queues in virtual hosts they are not allowed to access. This reveals internal queue names and clu...

2.3

spring-boot-forum avatar upload can access unauthorized files

CVE-2026-96678

The avatar upload feature in the spring-boot-forum application does not properly check the username field, allowing an attacker to trick the system into reading or writing files outside the intended f...

2.1

Fast FAC1900R uhttpd can be crashed remotely

CVE-2026-96676

The Fast FAC1900R router’s web server component (uhttpd) contains a flaw that can cause it to overflow memory and stop working when specially crafted data is sent. An attacker from anywhere on the int...

2.1

AdithyaYelloju Restaurant Management System search form permits remote data access

CVE-2026-95868

The search feature in the restaurant management system does not check the information you type before sending it to the database. Because of this, a remote attacker could craft a request that runs the...

2.1

itsourcecode Leave Management System can expose data via index.php

CVE-2026-95833

The Leave Management System’s index page accepts a request parameter that can be manipulated to run unauthorized database commands. An attacker could remotely extract or alter employee leave records. ...

2.1

Pixtream allows anyone to upload files

CVE-2026-95830

The Pixtream web component lets anyone send a file to the /post_upload.php page without checks. An attacker on the Internet could place malicious files on your server, which might be used to compromis...

2.1

TDuckCloud tduck-platform allows remote SQL injection via pagination

CVE-2026-95829

The TDuckCloud tduck-platform up to version 5.3 lets an attacker inject malicious database commands when it processes certain pagination settings. This can be triggered from outside the system and may...

2.1

sfturing hosp_order exposes database credentials

CVE-2026-96548

The sfturing hosp_order application contains a file that stores database login details in plain text. This makes it possible for an attacker to obtain those credentials remotely, potentially gaining a...

2.9

Recommenders library can be remotely compromised via crafted data

CVE-2026-95928

The Recommenders library (versions up to 1.2.1) can be tricked into loading malicious data when it reads certain files, allowing an attacker to run code on the server. This can be triggered over the n...

2.0

RabbitMQ server monitoring user can restart federation links

CVE-2026-66075 UBUNTU-CVE-2026-66075 DEBIAN-CVE-2026-66075 GHSA-g5v3-w5xg-62q2

In certain older versions of RabbitMQ server, a user who only has monitoring permissions can trigger a restart of federation links, which moves messages between brokers. This can interrupt the flow of...

2.3

RabbitMQ admin can write files outside trace folder

CVE-2026-67224 UBUNTU-CVE-2026-67224 DEBIAN-CVE-2026-67224 GHSA-h7cq-qrr8-7vgc

If the tracing feature is enabled, an administrator can name a trace log file so that RabbitMQ writes it to any location the server's operating system user can access, such as system directories. This...

2.1

Coze Scraper Extension lets remote attackers send messages without permission

CVE-2026-96680

The Coze Scraper Extension (versions up to 2.0.2) accepts external messages without properly checking who sent them. This lets someone on the internet send commands to the extension, potentially causi...

2.1

sfturing hosp_order allows unauthorized actions via forged requests

CVE-2026-96551

The hosp_order application from sfturing has a weakness that lets an attacker trick a logged‑in user into performing actions they did not intend. This can be done from anywhere on the Internet and cou...

2.1

Auktion NG password reset allows attackers to inject script

CVE-2026-96258

The public password reset page in Auktion NG up to version 20260722 lets a remote user place malicious code into the email field. This cross‑site scripting flaw could let attackers display false messa...

2.1

Smart Attendance System lets attackers run scripts on sign‑up

CVE-2026-95957

The student sign‑up page in the Smart Attendance System with QR Code Scanner can be tricked into inserting harmful code when a user’s full name is submitted. This could let an attacker display fake co...

2.1

rocky/libarchive can be tricked into reading data

RLSA-2026:69553

The libarchive library, which lets programs create and open archive files such as tar and zip, is included in Rocky Linux. A coding mistake can cause it to read beyond its memory or misuse size number...

3.9

CGA-ppg7-946f-f7xm

CGA-ppg7-946f-f7xm

3.8

CGA-83r5-mg5w-v69p

CGA-83r5-mg5w-v69p

3.8

CGA-3pm2-vh4q-r459

CGA-3pm2-vh4q-r459

3.8

CGA-7392-3hxp-qg7h

CGA-7392-3hxp-qg7h

3.8

The Events Calendar plugin lets low‑privilege users change others’ events

CVE-2026-84743

The Events Calendar WordPress plugin lets users with a contributor role edit, delete, trash, or take ownership of events, venues, and organizers that belong to other users, including administrators, t...

3.8

sfturing hosp_order sends email data in clear text

CVE-2026-96550

The hosp_order application from sfturing includes a MailUtil function that transmits email configuration details without encryption. An attacker who can influence the function could capture this infor...

2.9

CGA-65c3-h927-23r2

CGA-65c3-h927-23r2

3.7

Dell Secure Connect Gateway allows unauthorized access

CVE-2026-71178

Versions of Dell Secure Connect Gateway Policy Manager before 5.34.00.16 can be tricked into granting access without proper login. An attacker on the network could reach the system and view or change ...

3.7