https://cyberdeltaforce.ai/news/5f1699a09110909b94cd CyberDeltaForce en 2026-09-07T12:17:20.320Z CVE-2026-84238: Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium < 4.46.0 versions. https://cyberdeltaforce.ai/news/f5c857bf0af503557684 CyberDeltaForce en 2026-09-07T12:17:20.100Z CVE-2026-83627: The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in all versions up t https://cyberdeltaforce.ai/news/bfc23203ca96a82c1961 CyberDeltaForce en 2026-09-07T12:17:18.960Z CVE-2026-75925: Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. Configurat https://cyberdeltaforce.ai/news/6c44b1a84c387a33ca70 CyberDeltaForce en 2026-09-07T12:17:18.850Z CVE-2026-75816: The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, https://cyberdeltaforce.ai/news/42bc268d3eaf47716e82 CyberDeltaForce en 2026-09-07T12:17:17.460Z CVE-2026-16310: The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.5 via the 'id' paramet https://cyberdeltaforce.ai/news/315d59f9145189da9dc5 CyberDeltaForce en 2026-09-07T12:17:17.147Z CVE-2026-13447: The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to mis https://cyberdeltaforce.ai/news/aca359bfbb47bd9a5172 CyberDeltaForce en 2026-09-07T12:17:16.933Z CVE-2026-11613: The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'custom_loop_templ https://cyberdeltaforce.ai/news/91ef10109d1e84ab67ad CyberDeltaForce en 2026-09-07T12:17:16.820Z CVE-2026-10196: The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to PHP Object Injection in all v https://cyberdeltaforce.ai/news/c4681389c3fbdb232fb4 CyberDeltaForce en 2026-09-07T12:17:15.787Z CVE-2024-11080: The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via https://cyberdeltaforce.ai/news/3b6a1455ce81c1423299 CyberDeltaForce en 2026-09-06T18:17:19.933Z CVE-2026-16242: A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca- https://cyberdeltaforce.ai/news/34f4ffb7631a9c61899b CyberDeltaForce en 2026-09-06T04:18:32.523Z CVE-2026-86165: A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/admin/formURL. Performing a ma https://cyberdeltaforce.ai/news/9a9604c19088e658b51d CyberDeltaForce en 2026-09-06T04:18:23.357Z CVE-2025-49796: A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw al https://cyberdeltaforce.ai/news/c5ff9225f1750b6a5959 CyberDeltaForce en 2026-09-06T04:18:21.540Z CVE-2025-49794: A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron https://cyberdeltaforce.ai/news/daedce18be8c316946c0 CyberDeltaForce en 2026-09-07T11:17:38.400Z CVE-2026-86218: N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14. https://cyberdeltaforce.ai/news/4f88073eb47cd9419193 CyberDeltaForce en 2026-09-05T21:16:51.400Z CVE-2026-86060: RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted https://cyberdeltaforce.ai/news/c6b36fb39569fde91388 CyberDeltaForce en 2026-09-05T21:16:49.387Z CVE-2026-67276: RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and https://cyberdeltaforce.ai/news/b2f973478aa0c7330deb CyberDeltaForce en 2026-09-05T14:17:22.187Z CVE-2026-10090: A flaw was found in the Application Subscription controller (multicluster-operators-subscription) of Red Hat Advanced Cluster Management for Kubernete https://cyberdeltaforce.ai/news/f96743f1a32e344f7e40 CyberDeltaForce en 2026-09-07T02:17:17.630Z CVE-2026-16876: An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI https://cyberdeltaforce.ai/news/ac83dfcc2a03cd7e52d2 CyberDeltaForce en 2026-09-06T02:17:19.770Z CVE-2026-86153: A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. https://cyberdeltaforce.ai/news/b0f7f55973cf7853f276 CyberDeltaForce en 2026-09-06T02:17:19.370Z CVE-2026-86152: A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadProc of the file Functions/AutoAddWifi.cpp of https://cyberdeltaforce.ai/news/f6a658d839d36e50dd0e CyberDeltaForce en 2026-09-05T22:17:18.943Z CVE-2026-86149: A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulatio https://cyberdeltaforce.ai/news/f5a7e2f3efaf9d963fe0 CyberDeltaForce en 2026-09-05T22:17:18.743Z CVE-2026-86148: A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the compo https://cyberdeltaforce.ai/news/d4e8b894c262c3a6e552 CyberDeltaForce en 2026-09-05T13:18:14.150Z CVE-2026-86190: WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user records including password hashes, r https://cyberdeltaforce.ai/news/d10f9d5b6b23069207f7 CyberDeltaForce en 2026-09-05T13:18:14.000Z CVE-2026-86189: WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows unauthenticated attackers to write files to arbitrary locati https://cyberdeltaforce.ai/news/41b0d0701e026774a9dc CyberDeltaForce en 2026-09-05T15:17:31.100Z CVE-2026-73269: A flaw was found in the cluster-curator-controller component. A local user, by creating a ClusterCurator resource with a specific naming convention, c https://cyberdeltaforce.ai/news/93fb96cc6ba5acb8c6ee CyberDeltaForce en 2026-09-05T15:17:30.963Z CVE-2026-73268: A flaw was found in the cluster-curator-controller component of multicluster engine (MCE). A tenant with create or update permissions on ClusterCurato https://cyberdeltaforce.ai/news/d67f2b17e03c2e5bd3cc CyberDeltaForce en 2026-09-05T15:17:29.240Z CVE-2026-66794: A flaw was found in the `cluster-proxy-addon` component of Multicluster Engine for Kubernetes. This vulnerability allows an unauthenticated attacker, https://cyberdeltaforce.ai/news/b057719a6ed8ddc21077 CyberDeltaForce en 2026-09-05T15:17:27.253Z CVE-2026-10059: A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant administrator with namespace-scoped privileges can expl https://cyberdeltaforce.ai/news/0af2b6c55a6e9e4cf5f4 CyberDeltaForce en 2026-09-06T11:18:01.910Z CVE-2026-78362: The SEO Flow by LupsOnline WordPress plugin before 3.0.3 does not correctly validate the credential supplied with its API requests, allowing unauthent https://cyberdeltaforce.ai/news/12fcbf6e295bbb8d4a18 CyberDeltaForce en 2026-09-07T07:16:47.420Z CVE-2026-79698: A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WI https://cyberdeltaforce.ai/news/8c4f8ebf8b91c9c51983 CyberDeltaForce en 2026-09-07T07:16:45.903Z CVE-2026-79697: A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WI https://cyberdeltaforce.ai/news/f21323eb1aa0ac76fd02 CyberDeltaForce en 2026-09-06T05:16:50.477Z CVE-2026-86167: A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component https://cyberdeltaforce.ai/news/c02df059c1595aeb2756 CyberDeltaForce en 2026-09-07T12:17:20.727Z CVE-2026-84778: Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning <= 6.65 versions. https://cyberdeltaforce.ai/news/731e0e5e29aeac3fe4d8 CyberDeltaForce en 2026-09-07T12:17:19.990Z CVE-2026-83625: The Contact Form by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via IP Address Header in all versions up to, and inclu https://cyberdeltaforce.ai/news/bbaf6e20f7309b67485a CyberDeltaForce en 2026-09-07T12:17:19.860Z CVE-2026-82712: Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker t https://cyberdeltaforce.ai/news/6c7fef5fde026bc324cd CyberDeltaForce en 2026-09-07T12:17:19.753Z CVE-2026-81543: The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This i https://cyberdeltaforce.ai/news/716f77f89669dffd643a CyberDeltaForce en 2026-09-07T12:17:19.537Z CVE-2026-78438: The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via LazyLoad Background Mutator in all versio https://cyberdeltaforce.ai/news/fa224592c69001455de4 CyberDeltaForce en 2026-09-07T12:17:19.230Z CVE-2026-77393: In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects https://cyberdeltaforce.ai/news/35ea002791ce2f78d730 CyberDeltaForce en 2026-09-07T12:17:17.773Z CVE-2026-18406: The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text https://cyberdeltaforce.ai/news/82f49291d75de1a54bcb CyberDeltaForce en 2026-09-07T12:17:17.567Z CVE-2026-18056: The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the access_token parameter in all versions up to, and inc https://cyberdeltaforce.ai/news/39a1f8a71add4645b0ac CyberDeltaForce en 2026-09-07T12:17:16.710Z CVE-2025-9049: The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the https://cyberdeltaforce.ai/news/b43f5ac9cdd9db123971 CyberDeltaForce en 2026-09-07T04:17:55.277Z CVE-2026-86268: A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown function of the file User_Login.php. The manipulatio https://cyberdeltaforce.ai/news/d18855a8c293266c98f5 CyberDeltaForce en 2026-09-06T18:17:23.150Z CVE-2026-86220: A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. The affected element is the function mysqli_query of the file /a https://cyberdeltaforce.ai/news/554af87670eb9f3245f7 CyberDeltaForce en 2026-09-06T18:17:21.720Z CVE-2026-49332: A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only dash-variant keys (X-Forwarded-User) but does not https://cyberdeltaforce.ai/news/530baa4ebd051511d056 CyberDeltaForce en 2026-09-06T18:17:21.057Z CVE-2026-46579: A flaw was found in the OpenShift Router. When a Route has `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend does not remove `X-SSL-Clie https://cyberdeltaforce.ai/news/17b0045f220f702fd7cf CyberDeltaForce en 2026-09-06T15:17:24.813Z CVE-2026-86283: MISP's UiBeta theme collection view (app/View/Themed/UiBeta/Collections/view.ctp) performed a secondary query of member events by UUID without applyin https://cyberdeltaforce.ai/news/d0808b8ef96f2db855be CyberDeltaForce en 2026-09-05T18:17:28.207Z CVE-2026-71474: A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can include the cloud.opensh https://cyberdeltaforce.ai/news/9be8a94e827460c390bd CyberDeltaForce en 2026-09-07T11:17:22.390Z CVE-2026-20502: In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex https://cyberdeltaforce.ai/news/58fe1312a9a4074ca2a2 CyberDeltaForce en 2026-09-07T03:17:19.407Z CVE-2026-86313: Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers. This issue affects Walrus: af80e665ea49d9003695a66502f841ed1d https://cyberdeltaforce.ai/news/50184889e3b2aca08e50 CyberDeltaForce en 2026-09-07T03:17:19.070Z CVE-2026-86263: A vulnerability was detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This impacts the function orderRecordsService.canc https://cyberdeltaforce.ai/news/9b661c705c165396a89d CyberDeltaForce en 2026-09-07T03:17:18.893Z CVE-2026-86262: A security vulnerability has been detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects the function updateOrde https://cyberdeltaforce.ai/news/303718d77c6cd1fc7efa CyberDeltaForce en 2026-09-07T03:17:18.723Z CVE-2026-86261: A weakness has been identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown function of t https://cyberdeltaforce.ai/news/c9ae925632dff7098ff0 CyberDeltaForce en 2026-09-06T21:17:22.567Z CVE-2026-86224: A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqli_query of the file /admin/modal https://cyberdeltaforce.ai/news/e2dcbaba6361ca1808c4 CyberDeltaForce en 2026-09-06T17:17:56.070Z CVE-2026-82751: Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per spon https://cyberdeltaforce.ai/news/2b9e8a609fda63269ead CyberDeltaForce en 2026-09-05T21:16:50.723Z CVE-2026-67281: RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized https://cyberdeltaforce.ai/news/9020a01f1155fb34c68f CyberDeltaForce en 2026-09-05T14:17:23.587Z CVE-2026-76139: A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its a https://cyberdeltaforce.ai/news/8413d1ac7332e484db8b CyberDeltaForce en 2026-09-06T22:17:20.507Z CVE-2026-86225: A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is the function mysqli_query of https://cyberdeltaforce.ai/news/d5ea01d7b1a0eaa71cda CyberDeltaForce en 2026-09-06T20:17:28.280Z CVE-2026-86223: A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqli_query of the file /admin/modal_add https://cyberdeltaforce.ai/news/e5d2922c3adc51e45274 CyberDeltaForce en 2026-09-06T20:17:28.117Z CVE-2026-86222: A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. This affects the function mysqli_query of the file /admin/moda https://cyberdeltaforce.ai/news/1345e657ee9ac2db5376 CyberDeltaForce en 2026-09-06T20:17:27.890Z CVE-2026-54100: A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. WMCO establishes SSH connections to Windows w https://cyberdeltaforce.ai/news/e8e61ee3606c2584d1e0 CyberDeltaForce en 2026-09-06T20:17:26.500Z CVE-2025-6020: A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevat https://cyberdeltaforce.ai/news/db9ecaaf19583f0fd1c4 CyberDeltaForce en 2026-09-06T16:16:49.583Z CVE-2026-19633: PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbitrary code by abusing operators, domain casts, or https://cyberdeltaforce.ai/news/00c1823a6ed25d96ab62 CyberDeltaForce en 2026-09-06T13:17:10.963Z CVE-2026-86259: OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instanc https://cyberdeltaforce.ai/news/3db89bf181a819e7799d CyberDeltaForce en 2026-09-06T13:17:10.487Z CVE-2026-86213: A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqli_query of the file Front-end/university.php of https://cyberdeltaforce.ai/news/b916b1531539de40865d CyberDeltaForce en 2026-09-06T13:17:10.307Z CVE-2022-51009: PocketMine-MP before 4.7.2 fails to properly handle exceptions from the adhocore/json-comment library when parsing skin geometry data. Attackers can s https://cyberdeltaforce.ai/news/356ff0b75d6239dd9e8a CyberDeltaForce en 2026-09-06T19:17:27.943Z CVE-2026-86221: A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is the function mysqli_query of the file /admin/mo https://cyberdeltaforce.ai/news/eed2ea286008c2011f48 CyberDeltaForce en 2026-09-06T19:17:27.767Z CVE-2026-75569: A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, https://cyberdeltaforce.ai/news/134926b4954d2da60a3b CyberDeltaForce en 2026-09-07T12:17:17.043Z CVE-2026-12843: The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to the plugin not properly verify https://cyberdeltaforce.ai/news/b6d2f536b2d6483bc368 CyberDeltaForce en 2026-09-07T04:17:55.467Z CVE-2026-86269: A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/emp_edit1.php. Th https://cyberdeltaforce.ai/news/59c62893e3ef858f107e CyberDeltaForce en 2026-09-07T04:17:55.087Z CVE-2026-86267: A security vulnerability has been detected in itsourcecode Information System Society Membership System 1.0. This issue affects some unknown processin https://cyberdeltaforce.ai/news/76161893afb285c227af CyberDeltaForce en 2026-09-05T18:17:28.630Z CVE-2026-71846: A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permi https://cyberdeltaforce.ai/news/1a895a42e49def3f064e CyberDeltaForce en 2026-09-05T18:17:28.350Z CVE-2026-71475: A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can inject unencoded data into the Insights API URL path https://cyberdeltaforce.ai/news/dc0d4d51bee1ad5d814a CyberDeltaForce en 2026-09-05T18:17:28.070Z CVE-2026-71468: A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes its cache, it improperly reuses a user's bearer token f https://cyberdeltaforce.ai/news/3973c202a0a2ea7622b2 CyberDeltaForce en 2026-09-05T18:17:27.930Z CVE-2026-64927: A flaw was found in the multicloud-operators-channel component. This vulnerability allows a user with specific permissions to manipulate how the syste https://cyberdeltaforce.ai/news/0a88b4ef171a424638b5 CyberDeltaForce en 2026-09-07T11:17:20.360Z CVE-2025-52652: HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it https://cyberdeltaforce.ai/news/34af6a110672229f66c3 CyberDeltaForce en 2026-09-06T21:43:17.000Z Critical MikroTik Vulnerability - Patch Now, (Sun, Sep 6th) https://cyberdeltaforce.ai/news/7d08525acf4ae331764d CyberDeltaForce en 2026-09-07T10:36:37.000Z ChatGPT can now connect to your personal apps to mimic writing style https://cyberdeltaforce.ai/news/041d5da0437cd240691e CyberDeltaForce en 2026-09-05T20:14:47.000Z Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores https://cyberdeltaforce.ai/news/ecfb3b986a6f1bd0f800 CyberDeltaForce en 2026-09-05T16:05:08.000Z Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code https://cyberdeltaforce.ai/news/3e1eed6b3067c904d120 CyberDeltaForce en 2026-09-06T08:34:20.000Z Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner https://cyberdeltaforce.ai/news/87ce28a6890ed0fda925 CyberDeltaForce en 2026-09-07T08:31:12.000Z N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw https://cyberdeltaforce.ai/news/e20db26e269fed5e5d8d CyberDeltaForce en 2026-09-05T14:17:02.000Z Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted