Verified Advisories

Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 32 total.

Severity: All Critical High

Library: langflow_oss 11 jupyter-enterprise-gateway 2 aimogen_pro_all_in_one_ai_content_writer_editor_chatbot_automation_toolkit 1 bricksforge 1 clawvet 1 engineering_ai_hub 1 fastify_http_proxy 1 github.com/envoyproxy/gateway 1 grav 1 org.yamcs:yamcs-core 1 pheditor/pheditor 1 sma1000 1 surrealdb 1 webmail 1 websocket-driver 1 wordpress 1 zoom_workplace_for_windows 1 @cap-js/sqlite 1 zrok 1 Node.js 1

CVE-2026-15982 CRITICAL CVSS 9.8 Verified Advisory Jul 17, 2026

Privilege escalation in Aimogen Pro WordPress plugin (CVE-2026-15982)

CVE-2026-15982 is a critical privilege escalation vulnerability (CVSS 9.8) in the Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress. The vulnerability stems from a m...

Fixed in 2.8.5

Privilege Escalation WordPress PHP Aimogen Pro All In One Ai Co

CVE-2026-14956 CRITICAL CVSS 9.8 Verified Advisory Jul 17, 2026

Privilege escalation via improper validation in Bricksforge for WordPress (CVE-2026-14956)

The Bricksforge plugin for WordPress contains an improper validation vulnerability in the fieldIds parameter of the Pro Forms registration action, which permits attacker-supplied field IDs to be inserted into the trus...

Fixed in 3.1.8.7

Privilege Escalation WordPress Bricksforge

CVE-2026-62232 CRITICAL CVSS 9.1 Verified Advisory Jul 17, 2026

Two-factor authentication bypass in Grav CMS (CVE-2026-62232)

A two-factor authentication bypass vulnerability exists in Grav CMS where the `login.regenerate2FASecret` task checks only for user existence rather than authorization during the pending TOTP challenge window. An atta...

Fixed in 2.0.4

CSRF Authentication Bypass Grav

CVE-2026-62241 CRITICAL CVSS 9.3 Verified Advisory Jul 17, 2026

Hardcoded JWT secret and authentication bypass in clawvet API server (CVE-2026-62241)

The clawvet self-hosted API server (apps/api) hard-codes a fallback JWT signing secret ('clawvet-dev-secret-change-me') in source and ships the same value as the default in .env.example. The GET /api/v1/scans endpoint...

Fixed in 0.7.5

Authentication Bypass Node.js Clawvet

CVE-2026-44181 CRITICAL CVSS 10.0 Verified Advisory Jul 16, 2026

Server Side Template Injection (SSTI) in Jupyter Enterprise Gateway (CVE-2026-44181)

CVE-2026-44181 is a Server Side Template Injection (SSTI) vulnerability in Jupyter Enterprise Gateway affecting the rendering of Kubernetes manifest environment variables (`KERNEL_XXX`). An attacker can inject Jinja2 ...

Fixed in 3.3.0

RCE Kubernetes Python Ssti

CVE-2026-44182 CRITICAL CVSS 10.0 Verified Advisory Jul 16, 2026

YAML injection in jupyter-server/enterprise_gateway (CVE-2026-44182)

CVE-2026-44182 is a YAML injection vulnerability in jupyter-server/enterprise_gateway affecting Kubernetes manifest rendering via Jinja2 templates. The server interpolates untrusted `KERNEL_XXX` environment variables ...

Fixed in 3.3.0

Nginx RCE Kubernetes

CVE-2026-53412 CRITICAL CVSS 9.8 Verified Advisory Jul 16, 2026

Improper input validation in Zoom Desktop and VDI Client for Windows (CVE-2026-53412)

CVE-2026-53412 is a critical improper input validation vulnerability (CVSS 9.8) in Zoom Desktop Client for Windows and Zoom VDI Client for Windows. An unauthenticated attacker with network access may exploit this vuln...

Fixed in Zoom Workplace for Windows 7.0.0; Zoom Workplace VDI Client for Windows 7.0.10; 6.6.15; 6.5.18

Information Disclosure Microsoft Zoom Workplace For Windows

CVE-2026-55579 CRITICAL CVSS 9.8 Verified Advisory Jul 16, 2026

Hardcoded credentials in Pheditor (CVE-2026-55579)

CVE-2026-55579 is a hardcoded credentials vulnerability (CWE-798) in Pheditor, where the application ships with a default password of "admin" stored as an unsalted SHA-512 hash in the PHP source file with no mechanism...

Fixed in 2.0.6

RCE Authentication Bypass File Upload PHP

CVE-2026-53713 CRITICAL CVSS 9.1 Verified Advisory Jul 16, 2026

Path traversal in Envoy Gateway via double-slash bypass (CVE-2026-53713)

CVE-2026-53713 is a critical improper input validation vulnerability in Envoy Gateway's `to_absolute_normalized_path` function (security.lua:28-43) that fails to collapse redundant path separators (`//` to `/`). This ...

Fixed in 1.7.4; 1.8.1

RCE Kubernetes

CVE-2026-45568 CRITICAL CVSS 9.9 Verified Advisory Jul 16, 2026

SSRF in zrok Python SDK ProxyShare (CVE-2026-45568)

A Server-Side Request Forgery (SSRF) vulnerability exists in the zrok Python SDK's ProxyShare component. When a path containing an absolute URL is submitted to the Flask proxy handler, `urllib.parse.urljoin` resolves ...

Fixed in 2.0.3

Path Traversal Python

CVE-2026-46421 CRITICAL CVSS 9.3 Verified Advisory Jul 15, 2026

Supply chain compromise in cap-js/cds-dbs npm packages (CVE-2026-46421)

CVE-2026-46421 is a supply chain compromise in which malicious versions of `@cap-js/sqlite`, `@cap-js/postgres`, and `@cap-js/db-service` were published on April 29, 2026. The malicious packages harvested credentials ...

Fixed in @cap-js/sqlite >= 2.4.0; @cap-js/postgres >= 2.3.0; @cap-js/db-service >= 2.11.0

Information Disclosure Node.js PostgreSQL

CVE-2026-15409 CRITICAL CVSS 10.0 Verified Advisory Jul 15, 2026

Server-Side Request Forgery in SonicWall SMA1000 Appliance Work Place (CVE-2026-15409)

CVE-2026-15409 is a Server-Side Request Forgery (SSRF) vulnerability in the SonicWall SMA1000 Appliance Work Place interface (CWE-918). A remote unauthenticated attacker could exploit this vulnerability to cause the a...

Fixed in 12.4.3-03453 (platform-hotfix) and higher versions; 12.5.0-02835 (platform-hotfix) and higher versions

SSRF Sma1000

Prev Page 2 of 2