Web Security Insights By Maloy Roy Orko

IFTTT

CVE-2026-11426 - UnderConstructionPage PRO <= 5.76 - Authenticated (Subscriber+) Arbitrary File Read via template_thumbnail Parameter

byMaloy Roy Orko -July 10, 2026

CVE ID : CVE-2026-11426 Published : July 11, 2026, 2:16 a.m. | 1 hour, 55 minutes ago …

IFTTT

CVE-2026-59218 - Open WebUI: Account enumeration via observable login timing discrepancy

byMaloy Roy Orko -July 09, 2026

CVE ID : CVE-2026-59218 Published : July 9, 2026, 5:17 p.m. | 52 minutes ago Descr…

IFTTT

CVE-2026-45045 - Fiber: X-Real-IP Spoofing via Header.Add() in BalancerForward

byMaloy Roy Orko -July 08, 2026

CVE ID : CVE-2026-45045 Published : July 8, 2026, 7:26 p.m. | 20 minutes ago Descr…

IFTTT

CVE-2026-59938 - pypdf: Possible large memory usage for wrong image dimensions

byMaloy Roy Orko -July 08, 2026

CVE ID : CVE-2026-59938 Published : July 8, 2026, 6:16 p.m. | 1 hour, 30 minutes ago …

IFTTT

CVE-2026-50530 - DataEase: Token with Overly Broad Privileges in Share Mode: Access to Unshared Datasets

byMaloy Roy Orko -July 07, 2026

CVE ID : CVE-2026-50530 Published : July 7, 2026, 9:17 p.m. | 28 minutes ago Descr…

IFTTT

CVE-2026-11405 - Hidden backdoor authentication mechanism in multiple versions of Tenda firmware allows admin access to web management interface

byMaloy Roy Orko -July 06, 2026

CVE ID : CVE-2026-11405 Published : July 6, 2026, 7:17 p.m. | 28 minutes ago Descr…

IFTTT

CVE-2026-13753 - CVE-2026-13753

byMaloy Roy Orko -July 06, 2026

CVE ID : CVE-2026-13753 Published : July 6, 2026, 7:16 p.m. | 28 minutes ago Descr…

IFTTT

CVE-2026-58404 - Hugo security.http.urls deny rules bypassed by alternate IPv4 encodings

byMaloy Roy Orko -July 06, 2026

CVE ID : CVE-2026-58404 Published : July 6, 2026, 7:16 p.m. | 29 minutes ago Descr…

IFTTT

CVE-2026-41514 - OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery

byMaloy Roy Orko -July 06, 2026

CVE ID : CVE-2026-41514 Published : July 6, 2026, 7:06 p.m. | 38 minutes ago Descr…

IFTTT

CVE-2026-14761 - radareorg radare2 str.c r_str_append integer overflow

byMaloy Roy Orko -July 05, 2026

CVE ID : CVE-2026-14761 Published : July 5, 2026, 4:19 p.m. | 1 hour, 25 minutes ago …

IFTTT

CVE-2026-12195 - myVesta is affected by an authenticated remote cod

byMaloy Roy Orko -July 04, 2026

CVE ID : CVE-2026-12195 Published : July 4, 2026, 12:16 p.m. | 7 hours, 27 minutes ago …

IFTTT

CVE-2026-14612 - Freeipa: ipa: idm: freeipa: off-by-one buffer overflows in ipa-otpd oauth2.c during oauth2 device authorization

byMaloy Roy Orko -July 03, 2026

CVE ID : CVE-2026-14612 Published : July 3, 2026, 3:11 p.m. | 2 hours, 32 minutes ago …

IFTTT

CVE-2026-13768 - Gardyn IoT Hub Use of Hard-coded Credentials

byMaloy Roy Orko -July 02, 2026

CVE ID : CVE-2026-13768 Published : July 2, 2026, 11:40 p.m. | 2 hours, 2 minutes ago …

IFTTT

CVE-2026-13743 - Improper verification of cryptographic signature in CubeSpace CW0057 Reaction Wheel

byMaloy Roy Orko -July 02, 2026

CVE ID : CVE-2026-13743 Published : July 2, 2026, 6:35 p.m. | 1 hour, 7 minutes ago …

IFTTT

CVE-2026-58465 - Eclipse Wakaama CoAP Block1 Handler Unbounded Memory Allocation DoS

byMaloy Roy Orko -July 02, 2026

CVE ID : CVE-2026-58465 Published : July 2, 2026, 5:55 p.m. | 1 hour, 48 minutes ago …

IFTTT

CVE-2026-55791 - Craft CMS: Blind SSRF and Arbitrary JavaScript Injection via Host Header Poisoning in actionResourceJs

byMaloy Roy Orko -July 01, 2026

CVE ID : CVE-2026-55791 Published : July 1, 2026, 11:13 p.m. | 2 hours, 28 minutes ago …