https://cyberdeltaforce.ai/news/5f1699a09110909b94cd CyberDeltaForce en 2026-09-07T12:17:20.320Z Critical Unauthenticated Broken Access Control Vulnerability Tracked as CVE-2026-84238 https://cyberdeltaforce.ai/news/f5c857bf0af503557684 CyberDeltaForce en 2026-09-07T12:17:20.100Z CVE-2026-83627: The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in all versions up t https://cyberdeltaforce.ai/news/bfc23203ca96a82c1961 CyberDeltaForce en 2026-09-07T12:17:18.960Z Critical Improper neutralization of CRLF sequences Vulnerability Tracked as CVE-2026-75925 https://cyberdeltaforce.ai/news/6c44b1a84c387a33ca70 CyberDeltaForce en 2026-09-07T12:17:18.850Z CVE-2026-75816: The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, https://cyberdeltaforce.ai/news/42bc268d3eaf47716e82 CyberDeltaForce en 2026-09-07T12:17:17.460Z CVE-2026-16310: The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.5 via the 'id' paramet https://cyberdeltaforce.ai/news/91ef10109d1e84ab67ad CyberDeltaForce en 2026-09-07T12:17:16.820Z CVE-2026-10196: The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to PHP Object Injection in all v https://cyberdeltaforce.ai/news/c4681389c3fbdb232fb4 CyberDeltaForce en 2026-09-07T12:17:15.787Z CVE-2024-11080: The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via https://cyberdeltaforce.ai/news/34f4ffb7631a9c61899b CyberDeltaForce en 2026-09-06T04:18:32.523Z Critical A was found Vulnerability Tracked as CVE-2026-86165 https://cyberdeltaforce.ai/news/9a9604c19088e658b51d CyberDeltaForce en 2026-09-06T04:18:23.357Z Critical A was found Vulnerability Tracked as CVE-2025-49796 https://cyberdeltaforce.ai/news/c5ff9225f1750b6a5959 CyberDeltaForce en 2026-09-06T04:18:21.540Z Critical A use-after-free was found Vulnerability Tracked as CVE-2025-49794 https://cyberdeltaforce.ai/news/c6b36fb39569fde91388 CyberDeltaForce en 2026-09-05T21:16:49.387Z CVE-2026-67276: RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and https://cyberdeltaforce.ai/news/46408ca908c07270ef14 CyberDeltaForce en 2026-09-07T13:20:07.813Z CVE-2026-45411: vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.3, it is possible to catch a host exception using the yield* expression inside an async ge https://cyberdeltaforce.ai/news/5a523206528f0b3f546d CyberDeltaForce en 2026-09-07T13:19:54.620Z CVE-2026-44005: vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes mutable proxies for real host-realm intrinsic prototypes and https://cyberdeltaforce.ai/news/fb5888526a7cac4c2f59 CyberDeltaForce en 2026-09-07T13:19:49.737Z CVE-2026-42880: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a m https://cyberdeltaforce.ai/news/c7e62ffccea62ac0783b CyberDeltaForce en 2026-09-07T13:19:28.157Z Critical protobufjs compiles protobuf definitions into JavaScript (JS) functions. Vulnerability Tracked as CVE-2026-41242 https://cyberdeltaforce.ai/news/a86e245400b9ee24396b CyberDeltaForce en 2026-09-07T13:19:18.933Z Critical A malicious SSH peer Vulnerability Tracked as CVE-2026-39830 https://cyberdeltaforce.ai/news/90600e0b4f2176580f85 CyberDeltaForce en 2026-09-07T13:18:36.523Z CVE-2026-29063: Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutab https://cyberdeltaforce.ai/news/8b9a5d6c502bad6b93c7 CyberDeltaForce en 2026-09-07T13:18:13.360Z Critical An was discovered Vulnerability Tracked as CVE-2026-22797 https://cyberdeltaforce.ai/news/166368e5b024a5374276 CyberDeltaForce en 2026-09-07T13:17:29.797Z Critical The value function Vulnerability Tracked as CVE-2025-61140 https://cyberdeltaforce.ai/news/f96743f1a32e344f7e40 CyberDeltaForce en 2026-09-07T02:17:17.630Z Critical An authentication bypass exists Vulnerability Tracked as CVE-2026-16876 https://cyberdeltaforce.ai/news/ac83dfcc2a03cd7e52d2 CyberDeltaForce en 2026-09-06T02:17:19.770Z Critical A has been found Vulnerability Tracked as CVE-2026-86153 https://cyberdeltaforce.ai/news/b0f7f55973cf7853f276 CyberDeltaForce en 2026-09-06T02:17:19.370Z Critical A has been found Vulnerability Tracked as CVE-2026-86152 https://cyberdeltaforce.ai/news/f6a658d839d36e50dd0e CyberDeltaForce en 2026-09-05T22:17:18.943Z Critical A weakness has been identified Vulnerability Tracked as CVE-2026-86149 https://cyberdeltaforce.ai/news/f5a7e2f3efaf9d963fe0 CyberDeltaForce en 2026-09-05T22:17:18.743Z Critical A has been discovered Vulnerability Tracked as CVE-2026-86148 https://cyberdeltaforce.ai/news/0af2b6c55a6e9e4cf5f4 CyberDeltaForce en 2026-09-06T11:18:01.910Z Critical The SEO Flow by LupsOnline WordPress plugin Vulnerability Tracked as CVE-2026-78362 https://cyberdeltaforce.ai/news/12fcbf6e295bbb8d4a18 CyberDeltaForce en 2026-09-07T07:16:47.420Z Critical A was identified Vulnerability Tracked as CVE-2026-79698 https://cyberdeltaforce.ai/news/8c4f8ebf8b91c9c51983 CyberDeltaForce en 2026-09-07T07:16:45.903Z Critical A was determined Vulnerability Tracked as CVE-2026-79697 https://cyberdeltaforce.ai/news/f21323eb1aa0ac76fd02 CyberDeltaForce en 2026-09-06T05:16:50.477Z Critical A was identified Vulnerability Tracked as CVE-2026-86167 https://cyberdeltaforce.ai/news/c02df059c1595aeb2756 CyberDeltaForce en 2026-09-07T12:17:20.727Z Unauthenticated Denial of Service Attack Vulnerability Tracked as CVE-2026-84778 https://cyberdeltaforce.ai/news/731e0e5e29aeac3fe4d8 CyberDeltaForce en 2026-09-07T12:17:19.990Z CVE-2026-83625: The Contact Form by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via IP Address Header in all versions up to, and inclu https://cyberdeltaforce.ai/news/bbaf6e20f7309b67485a CyberDeltaForce en 2026-09-07T12:17:19.860Z CVE-2026-82712: Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker t https://cyberdeltaforce.ai/news/6c7fef5fde026bc324cd CyberDeltaForce en 2026-09-07T12:17:19.753Z CVE-2026-81543: The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This i https://cyberdeltaforce.ai/news/716f77f89669dffd643a CyberDeltaForce en 2026-09-07T12:17:19.537Z CVE-2026-78438: The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via LazyLoad Background Mutator in all versio https://cyberdeltaforce.ai/news/fa224592c69001455de4 CyberDeltaForce en 2026-09-07T12:17:19.230Z CVE-2026-77393: In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects https://cyberdeltaforce.ai/news/35ea002791ce2f78d730 CyberDeltaForce en 2026-09-07T12:17:17.773Z CVE-2026-18406: The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text https://cyberdeltaforce.ai/news/82f49291d75de1a54bcb CyberDeltaForce en 2026-09-07T12:17:17.567Z CVE-2026-18056: The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the access_token parameter in all versions up to, and inc https://cyberdeltaforce.ai/news/39a1f8a71add4645b0ac CyberDeltaForce en 2026-09-07T12:17:16.710Z CVE-2025-9049: The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the https://cyberdeltaforce.ai/news/554af87670eb9f3245f7 CyberDeltaForce en 2026-09-06T18:17:21.720Z A was found Vulnerability Tracked as CVE-2026-49332 https://cyberdeltaforce.ai/news/9be8a94e827460c390bd CyberDeltaForce en 2026-09-07T11:17:22.390Z CVE-2026-20502: In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex https://cyberdeltaforce.ai/news/58fe1312a9a4074ca2a2 CyberDeltaForce en 2026-09-07T03:17:19.407Z Out-of-bounds write Vulnerability Tracked as CVE-2026-86313 https://cyberdeltaforce.ai/news/2b9e8a609fda63269ead CyberDeltaForce en 2026-09-05T21:16:50.723Z RouterOS WebFig contains an unauthenticated file-read Vulnerability Tracked as CVE-2026-67281 https://cyberdeltaforce.ai/news/a4be324da3a0e79ca98e CyberDeltaForce en 2026-09-07T13:20:35.310Z CVE-2026-6322: fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serializ https://cyberdeltaforce.ai/news/00457f47f1241eec5353 CyberDeltaForce en 2026-09-07T13:20:34.113Z fast-uri decoded percent-encoded path separators and dot segments Vulnerability Tracked as CVE-2026-6321 https://cyberdeltaforce.ai/news/66bc1a3dc62231fbf426 CyberDeltaForce en 2026-09-07T13:20:33.067Z CVE-2026-5795: In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the init https://cyberdeltaforce.ai/news/60d6fa5af3a1e8661417 CyberDeltaForce en 2026-09-07T13:18:45.610Z CVE-2026-32286: The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a n https://cyberdeltaforce.ai/news/1345e657ee9ac2db5376 CyberDeltaForce en 2026-09-06T20:17:27.890Z A was found Vulnerability Tracked as CVE-2026-54100 https://cyberdeltaforce.ai/news/e8e61ee3606c2584d1e0 CyberDeltaForce en 2026-09-06T20:17:26.500Z A was found Vulnerability Tracked as CVE-2025-6020 https://cyberdeltaforce.ai/news/db9ecaaf19583f0fd1c4 CyberDeltaForce en 2026-09-06T16:16:49.583Z PostgreSQL Anonymizer contains a that Vulnerability Tracked as CVE-2026-19633 https://cyberdeltaforce.ai/news/00c1823a6ed25d96ab62 CyberDeltaForce en 2026-09-06T13:17:10.963Z OpenMAIC Vulnerability Tracked as CVE-2026-86259 https://cyberdeltaforce.ai/news/b916b1531539de40865d CyberDeltaForce en 2026-09-06T13:17:10.307Z PocketMine-MP Vulnerability Tracked as CVE-2022-51009 https://cyberdeltaforce.ai/news/134926b4954d2da60a3b CyberDeltaForce en 2026-09-07T12:17:17.043Z CVE-2026-12843: The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to the plugin not properly verify https://cyberdeltaforce.ai/news/76161893afb285c227af CyberDeltaForce en 2026-09-05T18:17:28.630Z A was found Vulnerability Tracked as CVE-2026-71846 https://cyberdeltaforce.ai/news/1a895a42e49def3f064e CyberDeltaForce en 2026-09-05T18:17:28.350Z A was found Vulnerability Tracked as CVE-2026-71475 https://cyberdeltaforce.ai/news/dc0d4d51bee1ad5d814a CyberDeltaForce en 2026-09-05T18:17:28.070Z A was found Vulnerability Tracked as CVE-2026-71468 https://cyberdeltaforce.ai/news/0a88b4ef171a424638b5 CyberDeltaForce en 2026-09-07T11:17:20.360Z CVE-2025-52652: HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it https://cyberdeltaforce.ai/news/ecfb3b986a6f1bd0f800 CyberDeltaForce en 2026-09-05T16:05:08.000Z Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code