Web Security Insights By Maloy Roy Orko

IFTTT

CVE-2026-10190 - Tenda W12 Web Management httpd cgiSysWebTimeoutSet denial of service

byMaloy Roy Orko -May 31, 2026

CVE ID : CVE-2026-10190 Published : May 31, 2026, 4:16 p.m. | 1 hour, 36 minutes ago …

IFTTT

CVE-2026-10123 - TRENDnet TEW-432BRP formSetDomainFilter stack-based overflow

byMaloy Roy Orko -May 30, 2026

CVE ID : CVE-2026-10123 Published : May 30, 2026, 4:17 p.m. | 1 hour, 35 minutes ago …

IFTTT

CVE-2026-39276 - Emlog Pro PHP Remote Code Execution (RCE)

byMaloy Roy Orko -May 29, 2026

CVE ID : CVE-2026-39276 Published : May 29, 2026, 4:16 p.m. | 1 hour, 36 minutes ago …

IFTTT

CVE-2026-44462 - Zed: Allowlist Bypass via Bash Variable Expansion Chain in Terminal Tool Permissions

byMaloy Roy Orko -May 28, 2026

CVE ID : CVE-2026-44462 Published : May 28, 2026, 5:16 p.m. | 35 minutes ago Descr…

IFTTT

CVE-2026-44327 - free5GC: NEF nnef-oam route group is unauthenticated; no-token requests reach the OAM handler

byMaloy Roy Orko -May 27, 2026

CVE ID : CVE-2026-44327 Published : May 27, 2026, 5:16 p.m. | 34 minutes ago Descr…

IFTTT

CVE-2026-44325 - free5GC: NRF POST /oauth2/token structured-form parser type-confusion panic family (Reflect.Set on incompatible types)

byMaloy Roy Orko -May 27, 2026

CVE ID : CVE-2026-44325 Published : May 27, 2026, 5:16 p.m. | 34 minutes ago Descr…

IFTTT

CVE-2026-8676 - "Bluetooth LE Bond Spoofing Vulnerability in Vendor's Product"

byMaloy Roy Orko -May 26, 2026

CVE ID : CVE-2026-8676 Published : May 26, 2026, 9:16 p.m. | 33 minutes ago Descri…

IFTTT

CVE-2026-24527 - WordPress Autoship Cloud for WooCommerce Subscription Products plugin <= 2.14.0 - Broken Access Control vulnerability

byMaloy Roy Orko -May 25, 2026

CVE ID : CVE-2026-24527 Published : May 25, 2026, 9:40 p.m. | 2 hours, 9 minutes ago …

IFTTT

CVE-2026-9395 - Besen BS20 EV Charging Station BLE/UDP insufficiently protected credentials

byMaloy Roy Orko -May 24, 2026

CVE ID : CVE-2026-9395 Published : May 24, 2026, 8 p.m. | 1 hour, 49 minutes ago D…

IFTTT

CVE-2026-9393 - H3C Magic B0 aspForm Edit_BasicSSID_5G buffer overflow

byMaloy Roy Orko -May 24, 2026

CVE ID : CVE-2026-9393 Published : May 24, 2026, 7 p.m. | 49 minutes ago Descripti…

IFTTT

CVE-2018-25340 - Smartshop 1 SQL Injection via category.php

byMaloy Roy Orko -May 23, 2026

CVE ID : CVE-2018-25340 Published : May 23, 2026, 6:30 p.m. | 1 hour, 18 minutes ago …

IFTTT

CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLI

byMaloy Roy Orko -May 22, 2026

CVE ID : CVE-2026-9255 Published : May 22, 2026, 4:38 p.m. | 1 hour, 9 minutes ago …

IFTTT

CVE-2026-28735 - GitHub OAuth Scope Validation

byMaloy Roy Orko -May 22, 2026

CVE ID : CVE-2026-28735 Published : May 22, 2026, 4:26 p.m. | 1 hour, 22 minutes ago …

IFTTT

CVE-2026-28445 - Typebot: Stored XSS via Rating Block Custom Icon Bypasses isUnsafe Sandbox in Builder Preview

byMaloy Roy Orko -May 22, 2026

CVE ID : CVE-2026-28445 Published : May 22, 2026, 4:12 p.m. | 1 hour, 35 minutes ago …

IFTTT

CVE-2026-28444 - Typebot: IDOR in Result Logs Endpoint Allows Cross-Workspace Data Disclosure

byMaloy Roy Orko -May 22, 2026

CVE ID : CVE-2026-28444 Published : May 22, 2026, 4 p.m. | 1 hour, 47 minutes ago …

IFTTT

CVE-2026-48228 - Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id Parameters

byMaloy Roy Orko -May 21, 2026

CVE ID : CVE-2026-48228 Published : May 21, 2026, 5:10 p.m. | 35 minutes ago Descr…

IFTTT

CVE-2026-48227 - Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id Parameters

byMaloy Roy Orko -May 21, 2026

CVE ID : CVE-2026-48227 Published : May 21, 2026, 5:10 p.m. | 35 minutes ago Descr…

IFTTT

CVE-2026-20199 - Cisco ThousandEyes Virtual Appliance SSL Certificate Command Execution Vulnerability

byMaloy Roy Orko -May 20, 2026

CVE ID : CVE-2026-20199 Published : May 20, 2026, 5:16 p.m. | 28 minutes ago Descr…

IFTTT

CVE-2026-20171 - Cisco Nexus 3000 and 9000 Series Border Gateway Protocol Denial of Service Vulnerability

byMaloy Roy Orko -May 20, 2026

CVE ID : CVE-2026-20171 Published : May 20, 2026, 5:16 p.m. | 28 minutes ago Descr…

IFTTT

CVE-2026-39047 - EPSON L14150 Buffer Overflow Remote Code Execution

byMaloy Roy Orko -May 20, 2026

CVE ID : CVE-2026-39047 Published : May 20, 2026, 4:16 p.m. | 1 hour, 28 minutes ago …

IFTTT

CVE-2026-8624 - LJ comments import: reloaded <= 0.97.1 - Reflected Cross-Site Scripting via PHP_SELF Parameter

byMaloy Roy Orko -May 19, 2026

CVE ID : CVE-2026-8624 Published : May 20, 2026, 2:16 a.m. | 3 hours, 26 minutes ago …

IFTTT

CVE-2026-38719 - OpENer ENIP/CPF Out-of-Bounds Read Vulnerability

byMaloy Roy Orko -May 18, 2026

CVE ID : CVE-2026-38719 Published : May 18, 2026, 5:16 p.m. | 2 hours, 13 minutes ago …

IFTTT

CVE-2026-8765 - Kilo-Org kilocode File Diff API Endpoint worktree-diff.ts Bun.file path traversal

byMaloy Roy Orko -May 17, 2026

CVE ID : CVE-2026-8765 Published : May 17, 2026, 10 p.m. | 1 hour, 29 minutes ago …

IFTTT

CVE-2026-46720 - Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections

byMaloy Roy Orko -May 17, 2026

CVE ID : CVE-2026-46720 Published : May 17, 2026, 6:16 p.m. | 1 hour, 12 minutes ago …

IFTTT

CVE-2026-8724 - Dataease Data Dashboard SqlparserUtils.java SqlparserUtils.transFilter sql injection

byMaloy Roy Orko -May 16, 2026

CVE ID : CVE-2026-8724 Published : May 17, 2026, 2:16 a.m. | 1 hour, 11 minutes ago …

IFTTT

CVE-2026-6050 - CVE-2019-11510 - Apache Struts Remote Code Execution

byMaloy Roy Orko -May 16, 2026

CVE ID : CVE-2026-6050 Published : May 16, 2026, 11:16 p.m. | 2 hours, 11 minutes ago …

IFTTT

CVE-2026-46728 - Das U-Boot FIT Signature Verification Bypass

byMaloy Roy Orko -May 16, 2026

CVE ID : CVE-2026-46728 Published : May 16, 2026, 10:16 p.m. | 1 hour, 12 minutes ago …

IFTTT

CVE-2026-34253 - Vorbis-tools Ogg123 Buffer Underflow Vulnerability

byMaloy Roy Orko -May 15, 2026

CVE ID : CVE-2026-34253 Published : May 15, 2026, 3:16 p.m. | 1 hour, 51 minutes ago …

IFTTT

CVE-2025-14972 - Insufficient DPA countermeasure reseeding

byMaloy Roy Orko -May 15, 2026

CVE ID : CVE-2025-14972 Published : May 15, 2026, 3:16 p.m. | 1 hour, 51 minutes ago …

IFTTT

CVE-2026-42159 - Flowsint: Stored XSS in description of node

byMaloy Roy Orko -May 14, 2026

CVE ID : CVE-2026-42159 Published : May 14, 2026, 4:16 p.m. | 51 minutes ago Descr…

IFTTT

CVE-2026-44002 - vm2: Host File Path Disclosure via Stack Trace Information Leak

byMaloy Roy Orko -May 13, 2026

CVE ID : CVE-2026-44002 Published : May 13, 2026, 6:16 p.m. | 50 minutes ago Descr…

IFTTT

CVE-2026-42156 - Flowsint: Cypher query injection in node type on node creation

byMaloy Roy Orko -May 12, 2026

CVE ID : CVE-2026-42156 Published : May 12, 2026, 11:16 p.m. | 1 hour, 50 minutes ago …

IFTTT

CVE-2026-42608 - Grav: Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component.

byMaloy Roy Orko -May 11, 2026

CVE ID : CVE-2026-42608 Published : May 11, 2026, 4:17 p.m. | 48 minutes ago Descr…

IFTTT

CVE-2026-45180 - Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids

byMaloy Roy Orko -May 10, 2026

CVE ID : CVE-2026-45180 Published : May 10, 2026, 8:03 p.m. | 1 hour, 1 minute ago …

IFTTT

CVE-2026-8191 - Wavlink NU516U1 adm.cgi wifi_region os command injection

byMaloy Roy Orko -May 09, 2026

CVE ID : CVE-2026-8191 Published : May 9, 2026, 6:15 p.m. | 49 minutes ago Descrip…

IFTTT

CVE-2026-8189 - Wavlink NU516U1 adm.cgi wzdrepeater os command injection

byMaloy Roy Orko -May 09, 2026

CVE ID : CVE-2026-8189 Published : May 9, 2026, 4:15 p.m. | 49 minutes ago Descrip…

IFTTT

CVE-2026-41495 - n8n-MCP Logs Sensitive Request Data on Unauthorized /mcp Requests

byMaloy Roy Orko -May 08, 2026

CVE ID : CVE-2026-41495 Published : May 8, 2026, 8:16 p.m. | 47 minutes ago Descri…

IFTTT

CVE-2026-41903 - FreeScout IDOR Vulnerability: PERM_EDIT_USERS allows modifying any user's notification subscriptions (incomplete fix of CVE-2025-48472)

byMaloy Roy Orko -May 07, 2026

CVE ID : CVE-2026-41903 Published : May 7, 2026, 6:02 p.m. | 1 hour, 1 minute ago …

IFTTT

CVE-2026-40195 - Incus nil-pointer dereference in storage bucket import allows denial of service

byMaloy Roy Orko -May 06, 2026

CVE ID : CVE-2026-40195 Published : May 6, 2026, 9:16 p.m. | 1 hour, 39 minutes ago …

IFTTT

CVE-2025-71251 - Apache IMS Remote Denial of Service Vulnerability

byMaloy Roy Orko -May 05, 2026

CVE ID : CVE-2025-71251 Published : May 6, 2026, 1:42 a.m. | 45 minutes ago Descri…

IFTTT

CVE-2026-44405 - Paramiko RSA Key SHA-1 Vulnerability

byMaloy Roy Orko -May 05, 2026

CVE ID : CVE-2026-44405 Published : May 5, 2026, 11:50 p.m. | 37 minutes ago Descr…

IFTTT

CVE-2025-67796 - IKUS Rdiffweb Improper Authorization Vulnerability

byMaloy Roy Orko -May 04, 2026

CVE ID : CVE-2025-67796 Published : May 4, 2026, 8:16 p.m. | 1 hour, 54 minutes ago …

IFTTT

CVE-2026-7710 - YunaiV yudao-cloud Ruoyi-Vue-Pro JwtAuthenticationTokenFilter.java doFilterInternal improper authentication

byMaloy Roy Orko -May 03, 2026

CVE ID : CVE-2026-7710 Published : May 3, 2026, 11:15 p.m. | 53 minutes ago Descri…

IFTTT

CVE-2026-7702 - toeverything AFFiNE Public Markdown Preview Endpoint :docId allowDocPreview authorization

byMaloy Roy Orko -May 03, 2026

CVE ID : CVE-2026-7702 Published : May 3, 2026, 4:15 p.m. | 1 hour, 53 minutes ago …

IFTTT

CVE-2026-7669 - sgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer deserialization

byMaloy Roy Orko -May 02, 2026

CVE ID : CVE-2026-7669 Published : May 2, 2026, 10:16 p.m. | 1 hour, 52 minutes ago …

IFTTT

CVE-2026-7668 - MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds

byMaloy Roy Orko -May 02, 2026

CVE ID : CVE-2026-7668 Published : May 2, 2026, 9:16 p.m. | 52 minutes ago Descrip…

Latest Vulnerabilities

CVE-2026-41940 ~ Critical Zero Day in Cpanel & WHM

byMaloy Roy Orko -May 02, 2026

A critical, actively exploited zero-day vulnerability ( CVE-2026-41940 ) in cPanel & WHM all…

Latest Vulnerabilities

CVE-2026-6378 - Maxi Blocks <= 2.1.9 - Authenticated (Author+) Stored Cross-Site Scripting via Style Card REST API

byMaloy Roy Orko -May 01, 2026

CVE ID : CVE-2026-6378 Published : May 2, 2026, 4:16 a.m. | 1 hour, 50 minutes ago …

Latest Vulnerabilities

CVE-2026-7601 - Open5GS AMF gmm-handler.c denial of service

byMaloy Roy Orko -May 01, 2026

CVE ID : CVE-2026-7601 Published : May 2, 2026, 3:15 a.m. | 51 minutes ago Descrip…

IFTTT

CVE-2026-7600 - ArtMin96 yii2-mcp-server MCP index.ts yii_execute_command os command injection

byMaloy Roy Orko -May 01, 2026

CVE ID : CVE-2026-7600 Published : May 2, 2026, 1:16 a.m. | 51 minutes ago Descrip…