Web Security Insights By Maloy Roy Orko

CVE-2026-28554 - wpForo Forum 2.4.14 Missing Authorization via Post Approval AJAX Handler

CVE ID : CVE-2026-28554 Published : Feb. 28, 2026, 10:16 p.m. | 1 hour, 25 minutes ago Descr…

CVE-2025-69437 - PublicCMS Stored XSS in PDF Upload

CVE ID : CVE-2025-69437 Published : Feb. 27, 2026, 5:16 p.m. | 1 hour, 5 minutes ago Descrip…

CVE-2025-56605 - PuneethReddyHC Event Management System Reflected Cross-Site Scripting

CVE ID : CVE-2025-56605 Published : Feb. 26, 2026, 4:23 p.m. | 1 hour, 56 minutes ago Descri…

CVE-2026-26228 - VLC for Android < 3.7.0 Remote Access Path Traversal

CVE ID : CVE-2026-26228 Published : Feb. 26, 2026, 3:21 p.m. | 58 minutes ago Description : …

CVE-2026-20033 - Cisco NX-OS Software Denial of Service Vulnerability

CVE ID : CVE-2026-20033 Published : Feb. 25, 2026, 5:25 p.m. | 7 minutes ago Description : …

CVE-2026-23678 - Binardat 10G08-0800GSM Network Switch Traceroute CLI Command Injection

CVE ID : CVE-2026-23678 Published : Feb. 24, 2026, 3:03 p.m. | 1 hour, 4 minutes ago Descrip…

CVE-2025-14905 - 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow

CVE ID : CVE-2025-14905 Published : Feb. 23, 2026, 4:29 p.m. | 1 hour, 31 minutes ago Descri…

CVE-2026-2956 - qinming99 dst-admin restore revertBackup command injection

CVE ID : CVE-2026-2956 Published : Feb. 22, 2026, 10:15 p.m. | 1 hour, 44 minutes ago Descri…

CVE-2026-2872 - Tenda A21 MAC Filtering Configuration Endpoint setBlackRule set_device_name stack-based overflow

CVE ID : CVE-2026-2872 Published : Feb. 21, 2026, 4:16 p.m. | 1 hour, 40 minutes ago Descrip…

CVE-2026-26095 - Incorrect Permission Assignment for Critical Resource in Owl opds

CVE ID : CVE-2026-26095 Published : Feb. 20, 2026, 5:25 p.m. | 27 minutes ago Description : …

CVE-2026-23604 - GFI MailEssentials AI < 22.4 Keyword Filtering Rule Stored XSS

CVE ID : CVE-2026-23604 Published : Feb. 19, 2026, 6:24 p.m. | 14 minutes ago Description : …

CVE-2025-13602 - Apache Remote Code Execution

CVE ID : CVE-2025-13602 Published : Feb. 18, 2026, 5:21 p.m. | 1 hour, 16 minutes ago Descri…

CVE-2024-55271 - PhpGurukul Gym Management System CSRF Vulnerability

CVE ID : CVE-2024-55271 Published : Feb. 17, 2026, 5:21 p.m. | 1 hour, 14 minutes ago Descri…

CVE-2026-26930 - SmarterTools SmarterMail MAPI Cross-Site Scripting Vulnerability

CVE ID : CVE-2026-26930 Published : Feb. 16, 2026, 5:18 p.m. | 1 hour, 14 minutes ago Descri…

CVE-2026-2523 - Open5GS SMF gn-handler.c smf_gn_handle_create_pdp_context_request assertion

CVE ID : CVE-2026-2523 Published : Feb. 16, 2026, 1:15 a.m. | 1 hour, 16 minutes ago Descrip…

CVE-2026-2521 - Open5GS SGW-C sgwc_s5c_handle_create_session_response memory corruption

CVE ID : CVE-2026-2521 Published : Feb. 15, 2026, 11:16 p.m. | 1 hour, 15 minutes ago Descri…

CVE-2026-23189 - ceph: fix NULL pointer dereference in ceph_mds_auth_match()

CVE ID : CVE-2026-23189 Published : Feb. 14, 2026, 5:15 p.m. | 1 hour, 14 minutes ago Descri…

CVE-2026-23188 - net: usb: r8152: fix resume reset deadlock

CVE-2026-23187 - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains

CVE ID : CVE-2026-23187 Published : Feb. 14, 2026, 5:15 p.m. | 1 hour, 14 minutes ago Descri…

CVE-2026-23186 - hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify()

CVE ID : CVE-2026-23186 Published : Feb. 14, 2026, 5:15 p.m. | 1 hour, 14 minutes ago Descri…

CVE-2026-2026 - Improper Access Control Allows Denial of Service

CVE ID : CVE-2026-2026 Published : Feb. 13, 2026, 4:14 p.m. | 1 hour, 14 minutes ago Descrip…

CVE-2025-56647 - Farmfe Core Origin Validation Bypass (WebSocket)

CVE ID : CVE-2025-56647 Published : Feb. 12, 2026, 4:16 p.m. | 1 hour, 12 minutes ago Descri…

CVE-2026-25084 - ZLAN Information Technology ZLAN5143D Missing Authentication for Critical Function

CVE ID : CVE-2026-25084 Published : Feb. 11, 2026, 4:11 p.m. | 1 hour, 16 minutes ago Descri…

CVE-2025-31655 - Intel Battery Life Diagnostic Tool Privilege Escalation Vulnerability

CVE ID : CVE-2025-31655 Published : Feb. 10, 2026, 5:16 p.m. | 58 minutes ago Description : …

CVE-2026-2241 - janet-lang janet os.c os_strftime out-of-bounds

CVE ID : CVE-2026-2241 Published : Feb. 9, 2026, 4:02 p.m. | 1 hour, 15 minutes ago Descript…

CVE-2025-63354 - Hitron HI3120 Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-63354 Published : Feb. 9, 2026, 3:16 p.m. | 55 minutes ago Description : …

CVE-2026-2161 - itsourcecode Directory Management System forget-password.php sql injection

CVE ID : CVE-2026-2161 Published : Feb. 8, 2026, 4:15 p.m. | 1 hour, 48 minutes ago Descript…

CVE-2026-2107 - yeqifu warehouse Log Info LoginfoController.java batchDeleteLoginfo improper authorization

CVE ID : CVE-2026-2107 Published : Feb. 7, 2026, 7:15 p.m. | 45 minutes ago Description : A…

CVE-2026-2105 - yeqifu warehouse Department Management DeptController.java deleteDept improper authorization

CVE ID : CVE-2026-2105 Published : Feb. 7, 2026, 5:15 p.m. | 45 minutes ago Description : A…

CVE-2025-13523 - Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow

CVE ID : CVE-2025-13523 Published : Feb. 6, 2026, 4:16 p.m. | 1 hour, 43 minutes ago Descrip…

CVE-2020-37132 - UltraVNC Launcher 1.2.4.0 - 'Password' Denial of Service

CVE ID : CVE-2020-37132 Published : Feb. 5, 2026, 5:16 p.m. | 41 minutes ago Description : …

CVE-2026-23094 - uacce: fix isolate sysfs check condition

CVE ID : CVE-2026-23094 Published : Feb. 4, 2026, 5:16 p.m. | 39 minutes ago Description : …

CVE-2020-37105 - PMB 5.6 - 'logid' SQL Injection

CVE ID : CVE-2020-37105 Published : Feb. 3, 2026, 4:52 p.m. | 59 minutes ago Description : …

CVE-2026-0630 - Command Injection Vulnerability on TP-Link Archer BE230 v1.2

CVE ID : CVE-2026-0630 Published : Feb. 2, 2026, 6:16 p.m. | 1 hour, 34 minutes ago Descript…

CVE-2026-1770 - Improper Control of Dynamically-Managed Code Resources in Crafter Studio

CVE ID : CVE-2026-1770 Published : Feb. 2, 2026, 5:16 p.m. | 34 minutes ago Description : I…

CVE-2026-0921 - Apache HTTP Server Remote Code Execution

CVE ID : CVE-2026-0921 Published : Feb. 2, 2026, 5:16 p.m. | 34 minutes ago Description : R…

CVE-2026-1737 - Open5GS CreateBearerRequest s5c-handler.c sgwc_s5c_handle_create_bearer_request assertion

CVE ID : CVE-2026-1737 Published : Feb. 2, 2026, 1:02 a.m. | 46 minutes ago Description : A…

CVE-2026-1733 - Zhong Bang CRMEB :uni tidyOrder improper authorization

CVE ID : CVE-2026-1733 Published : Feb. 1, 2026, 11:15 p.m. | 32 minutes ago Description : …

CVE-2021-47856 - Easy Cart Shopping Cart 2021 Cross-Site Scripting via Search Parameter

CVE ID : CVE-2021-47856 Published : Feb. 1, 2026, 1:15 p.m. | 30 minutes ago Description : …