CVE Vulnerabilities - 10 October 2026

Kortix Suna allows internal network access via IPv6 trick

CVE-2026-108115

Versions of Kortix Suna before 0.13.52 let a user who can change connector URLs point them to internal services, including cloud metadata, by using special IPv6 addresses that hide private IPs. This c...

2.3

zotero-mcp can expose internal network resources

CVE-2026-108583

Versions 0.10.0 to 0.14.1 of the zotero-mcp tool let a remote user cause the software to request any URL without checking where it goes. This can be abused to reach private or internal servers, reveal...

2.3

PairDrop 1.11.2 can be tricked with a forged IP address

CVE-2026-108555

The PairDrop file‑sharing tool up to version 1.11.2 can be fooled into thinking a request comes from a trusted network by sending a fake cf-connecting-ip header. An attacker who knows a victim's publi...

2.3

Red Hat Apache web server could experience stability issues

RHBA-2026:50158

The Red Hat Apache (httpd) packages, including core and debugging versions, contain bugs that may affect the server's reliability. Updating to the latest packages fixes these problems and adds enhance...

3.7

SpeedyCache allows anyone to read commenters’ names and emails

CVE-2026-104006

The SpeedyCache plugin for WordPress stores the name and email that returning visitors type into comment forms in its public cache. Because the cache is written without checking who is viewing it, any...

3.7

n8n could let attackers upload harmful files

CLEANSTART-2026-VJ23809

The n8n automation tool uses the multer component to process file uploads. A weakness in this processing could allow an attacker to upload malicious files that might be executed or expose data. Apply ...

3.7

n8n may deliver extra data in partial responses

CLEANSTART-2026-FA02454

The n8n workflow tool uses a component that can mistakenly attach extra content to a response that was already partially sent, while still showing the original status and headers. This could cause inc...

3.7

Apache NiFi LZ4 compression may allow data tampering

CLEANSTART-2026-EA15585

The LZ4 compression library used by Apache NiFi can be tricked into processing specially crafted data, which could let an attacker alter or corrupt information. This could affect any NiFi flows that u...

3.7

Rank Math SEO plugin lets admin inject script via redirects

CVE-2026-104754

The Rank Math SEO WordPress plugin (versions before 1.0.280) lets someone who can manage URL redirects store malicious JavaScript in the redirect source field. When any administrator opens the redirec...

3.5

ZTE Z80 Ultra can leak device information to apps

CVE-2026-108505

The ZTE Z80 Ultra handheld device may reveal internal details to any app running on it. Malicious or poorly designed apps could read system data and learn about the device's configuration. Update the ...

3.3

ZTE Z80 Ultra can expose data to attackers

CVE-2026-108503

The ZTE Z80 Ultra device has a weakness where some system functions do not check who is using them. Because of this, a malicious user could call those functions and read information they should not se...

3.3

ZTE Z80 Ultra lets apps read private data

CVE-2026-108502

The ZTE Z80 Ultra smartphone can be accessed by third‑party apps to view information they shouldn’t see. This happens because the apps can intercept system calls and retrieve data. Update the device w...

3.3

AI Puffer plugin lets low-level users change search settings

CVE-2026-104742

The AI Puffer – Chat, Create, Automate WordPress plugin allows anyone with a subscriber account or higher to alter site-wide semantic search configurations that should be limited to administrators. Th...

3.1

AI Puffer plugin lets low‑privilege users change global settings

CVE-2026-104741

The AI Puffer chatbot and automation plugin for WordPress lets anyone who can log in – even a basic subscriber – change important plugin-wide settings if the site owner has given that role access to t...

3.1

Red Hat libxml2 may allow unauthorized data access

RHSA-2026:79121

The libxml2 libraries supplied by Red Hat can be tricked into revealing information they shouldn't. This could let an attacker read sensitive data from your systems. Update the libxml2 packages to the...

2.5

libxml2 could let attackers execute code

RHSA-2026:79120

The libxml2 software used on Red Hat systems for handling XML files has a security flaw that could allow a crafted XML document to run unwanted code or crash the program. This could expose your server...

2.5

Red Hat libxml2 can be made to crash or run code

RHSA-2026:79119

The libxml2 library used in Red Hat systems can mishandle specially crafted XML data, which could let an attacker cause the program to stop working or execute unwanted actions. This affects the libxml...

2.5

Red Hat libxml2 may let attackers run code

RHSA-2026:79118

The libxml2 library included in Red Hat systems can be tricked into processing specially crafted XML data, which could let an attacker execute unauthorized commands on the server. This could lead to d...

2.5

Red Hat popt packages could allow privilege escalation

RHSA-2026:77932

The popt, popt-devel, and popt-static packages in Red Hat Hardened Images contain a flaw that could let a malicious user gain higher system privileges. This risk affects any system using these package...

2.2

Portfolio Filter Gallery lets contributors delete others' video thumbnails

CVE-2026-105977

Versions 2.0.2 through 2.2.0 of the Portfolio Filter Gallery plugin let users who can contribute content remove video thumbnail images that belong to other users, even administrators. This could cause...

2.2