https://cyberdeltaforce.ai/news/5f1699a09110909b94cd CyberDeltaForce en 2026-09-07T12:17:20.320Z Critical Unauthenticated Broken Access Control Vulnerability Tracked as CVE-2026-84238 https://cyberdeltaforce.ai/news/f5c857bf0af503557684 CyberDeltaForce en 2026-09-07T12:17:20.100Z CVE-2026-83627: The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in all versions up t https://cyberdeltaforce.ai/news/6c44b1a84c387a33ca70 CyberDeltaForce en 2026-09-07T12:17:18.850Z CVE-2026-75816: The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, https://cyberdeltaforce.ai/news/42bc268d3eaf47716e82 CyberDeltaForce en 2026-09-07T12:17:17.460Z CVE-2026-16310: The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.5 via the 'id' paramet https://cyberdeltaforce.ai/news/91ef10109d1e84ab67ad CyberDeltaForce en 2026-09-07T12:17:16.820Z CVE-2026-10196: The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to PHP Object Injection in all v https://cyberdeltaforce.ai/news/c4681389c3fbdb232fb4 CyberDeltaForce en 2026-09-07T12:17:15.787Z CVE-2024-11080: The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via https://cyberdeltaforce.ai/news/c5ff9225f1750b6a5959 CyberDeltaForce en 2026-09-06T04:18:21.540Z Critical A use-after-free was found Vulnerability Tracked as CVE-2025-49794 https://cyberdeltaforce.ai/news/5a523206528f0b3f546d CyberDeltaForce en 2026-09-07T13:19:54.620Z CVE-2026-44005: vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes mutable proxies for real host-realm intrinsic prototypes and https://cyberdeltaforce.ai/news/a86e245400b9ee24396b CyberDeltaForce en 2026-09-07T13:19:18.933Z Critical A malicious SSH peer Vulnerability Tracked as CVE-2026-39830 https://cyberdeltaforce.ai/news/90600e0b4f2176580f85 CyberDeltaForce en 2026-09-07T13:18:36.523Z CVE-2026-29063: Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutab https://cyberdeltaforce.ai/news/166368e5b024a5374276 CyberDeltaForce en 2026-09-07T13:17:29.797Z Critical The value function Vulnerability Tracked as CVE-2025-61140 https://cyberdeltaforce.ai/news/f96743f1a32e344f7e40 CyberDeltaForce en 2026-09-07T02:17:17.630Z Critical An authentication bypass exists Vulnerability Tracked as CVE-2026-16876 https://cyberdeltaforce.ai/news/0af2b6c55a6e9e4cf5f4 CyberDeltaForce en 2026-09-06T11:18:01.910Z Critical The SEO Flow by LupsOnline WordPress plugin Vulnerability Tracked as CVE-2026-78362 https://cyberdeltaforce.ai/news/12fcbf6e295bbb8d4a18 CyberDeltaForce en 2026-09-07T07:16:47.420Z Critical A was identified Vulnerability Tracked as CVE-2026-79698 https://cyberdeltaforce.ai/news/8c4f8ebf8b91c9c51983 CyberDeltaForce en 2026-09-07T07:16:45.903Z Critical A was determined Vulnerability Tracked as CVE-2026-79697 https://cyberdeltaforce.ai/news/b8aeac9a9c9e58467b47 CyberDeltaForce en 2026-09-07T17:17:26.150Z Critical In JetBrains Hub Vulnerability Tracked as CVE-2026-86480 https://cyberdeltaforce.ai/news/2c853393a7babd367626 CyberDeltaForce en 2026-09-07T17:17:25.920Z Critical In JetBrains YouTrack Vulnerability Tracked as CVE-2026-86478 https://cyberdeltaforce.ai/news/c02df059c1595aeb2756 CyberDeltaForce en 2026-09-07T12:17:20.727Z Unauthenticated Denial of Service Attack Vulnerability Tracked as CVE-2026-84778 https://cyberdeltaforce.ai/news/731e0e5e29aeac3fe4d8 CyberDeltaForce en 2026-09-07T12:17:19.990Z CVE-2026-83625: The Contact Form by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via IP Address Header in all versions up to, and inclu https://cyberdeltaforce.ai/news/bbaf6e20f7309b67485a CyberDeltaForce en 2026-09-07T12:17:19.860Z CVE-2026-82712: Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker t https://cyberdeltaforce.ai/news/6c7fef5fde026bc324cd CyberDeltaForce en 2026-09-07T12:17:19.753Z CVE-2026-81543: The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This i https://cyberdeltaforce.ai/news/716f77f89669dffd643a CyberDeltaForce en 2026-09-07T12:17:19.537Z CVE-2026-78438: The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via LazyLoad Background Mutator in all versio https://cyberdeltaforce.ai/news/fa224592c69001455de4 CyberDeltaForce en 2026-09-07T12:17:19.230Z CVE-2026-77393: In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects https://cyberdeltaforce.ai/news/35ea002791ce2f78d730 CyberDeltaForce en 2026-09-07T12:17:17.773Z CVE-2026-18406: The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text https://cyberdeltaforce.ai/news/82f49291d75de1a54bcb CyberDeltaForce en 2026-09-07T12:17:17.567Z CVE-2026-18056: The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the access_token parameter in all versions up to, and inc https://cyberdeltaforce.ai/news/a1fb9435c6a4803a2eae CyberDeltaForce en 2026-09-07T22:17:22.163Z Lara Dashboard Vulnerability Tracked as CVE-2026-86438 https://cyberdeltaforce.ai/news/8006ea2634a142f600fe CyberDeltaForce en 2026-09-07T16:17:28.090Z CVE-2026-43009: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix incorrect pruning due to atomic fetch precision tracking When backtrack https://cyberdeltaforce.ai/news/9be8a94e827460c390bd CyberDeltaForce en 2026-09-07T11:17:22.390Z CVE-2026-20502: In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex https://cyberdeltaforce.ai/news/58fe1312a9a4074ca2a2 CyberDeltaForce en 2026-09-07T03:17:19.407Z Out-of-bounds write Vulnerability Tracked as CVE-2026-86313 https://cyberdeltaforce.ai/news/60d6fa5af3a1e8661417 CyberDeltaForce en 2026-09-07T13:18:45.610Z CVE-2026-32286: The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a n https://cyberdeltaforce.ai/news/00c1823a6ed25d96ab62 CyberDeltaForce en 2026-09-06T13:17:10.963Z OpenMAIC Vulnerability Tracked as CVE-2026-86259 https://cyberdeltaforce.ai/news/b916b1531539de40865d CyberDeltaForce en 2026-09-06T13:17:10.307Z PocketMine-MP Vulnerability Tracked as CVE-2022-51009 https://cyberdeltaforce.ai/news/e8e61ee3606c2584d1e0 CyberDeltaForce en 2026-09-07T20:16:58.953Z A was found Vulnerability Tracked as CVE-2025-6020 https://cyberdeltaforce.ai/news/d27b304339b347c1014a CyberDeltaForce en 2026-09-07T20:16:58.500Z A has been identified Vulnerability Tracked as CVE-2025-5914 https://cyberdeltaforce.ai/news/f6a9a07c8bb71dccca5b CyberDeltaForce en 2026-09-07T13:19:52.227Z Improper Validation of Certificate Vulnerability Tracked as CVE-2026-43869 https://cyberdeltaforce.ai/news/11d7a792d35019cf0bc7 CyberDeltaForce en 2026-09-07T13:19:51.667Z An was discovered Vulnerability Tracked as CVE-2026-43003 https://cyberdeltaforce.ai/news/4ec342d2f5fa586fb33b CyberDeltaForce en 2026-09-07T13:19:50.293Z NGINX Plus and NGINX Open Source have a Vulnerability Tracked as CVE-2026-42945 https://cyberdeltaforce.ai/news/df6ad316d6cd22f25057 CyberDeltaForce en 2026-09-07T13:19:30.917Z Integer Overflow or Wraparound Vulnerability Tracked as CVE-2026-41605 https://cyberdeltaforce.ai/news/0f7fe384677fa5ee2b85 CyberDeltaForce en 2026-09-07T13:19:30.323Z Out-of-bounds Read Vulnerability Tracked as CVE-2026-41604 https://cyberdeltaforce.ai/news/38b527ef8b2558b0294e CyberDeltaForce en 2026-09-07T13:18:57.257Z CVE-2026-33810: When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a d https://cyberdeltaforce.ai/news/c50e5d3f24f5362b8c52 CyberDeltaForce en 2026-09-07T19:17:26.363Z A was found Vulnerability Tracked as CVE-2026-17107 https://cyberdeltaforce.ai/news/bd0e27ad88258997d6fb CyberDeltaForce en 2026-09-07T13:18:43.050Z CVE-2026-32283: If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrol https://cyberdeltaforce.ai/news/15b8bb89875529946ee8 CyberDeltaForce en 2026-09-07T13:18:40.537Z CVE-2026-32280: During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyO https://cyberdeltaforce.ai/news/0cca2ee7c71d22f694ac CyberDeltaForce en 2026-09-07T13:18:31.033Z SWIG file names containing 'cgo' and well-crafted payloads Vulnerability Tracked as CVE-2026-27140 https://cyberdeltaforce.ai/news/9a4b10fcb98efa5cca78 CyberDeltaForce en 2026-09-07T13:18:11.477Z Tempo queries Vulnerability Tracked as CVE-2026-21728 https://cyberdeltaforce.ai/news/8cad4a5b277cec45caf9 CyberDeltaForce en 2026-09-07T17:17:28.903Z In JetBrains IntelliJ IDEA Vulnerability Tracked as CVE-2026-86504 https://cyberdeltaforce.ai/news/401f5a5e83e906243b1a CyberDeltaForce en 2026-09-07T17:17:28.670Z In JetBrains IntelliJ IDEA Vulnerability Tracked as CVE-2026-86502 https://cyberdeltaforce.ai/news/cae2d5fa45f1c7e22fea CyberDeltaForce en 2026-09-07T17:17:28.220Z In JetBrains YouTrack Vulnerability Tracked as CVE-2026-86498 https://cyberdeltaforce.ai/news/ff3b2b60be60172f805d CyberDeltaForce en 2026-09-07T17:17:26.383Z In JetBrains YouTrack Vulnerability Tracked as CVE-2026-86482 https://cyberdeltaforce.ai/news/b968e1f346e41944c642 CyberDeltaForce en 2026-09-07T17:17:25.570Z CVE-2026-80166: Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Manageme https://cyberdeltaforce.ai/news/134926b4954d2da60a3b CyberDeltaForce en 2026-09-07T12:17:17.043Z CVE-2026-12843: The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to the plugin not properly verify https://cyberdeltaforce.ai/news/1c9d2ef1f661b4b0156f CyberDeltaForce en 2026-09-07T22:17:21.833Z Lara Dashboard Vulnerability Tracked as CVE-2026-86436 https://cyberdeltaforce.ai/news/fedcbbd39e1ac5f2eb21 CyberDeltaForce en 2026-09-07T22:17:20.820Z A was found Vulnerability Tracked as CVE-2025-2842 https://cyberdeltaforce.ai/news/f66146ac8599872228a9 CyberDeltaForce en 2026-09-07T22:17:20.340Z A was found Vulnerability Tracked as CVE-2025-2786 https://cyberdeltaforce.ai/news/4abc413dc3d1d0bd3122 CyberDeltaForce en 2026-09-07T19:17:24.773Z CVE-2025-40910: Net:IP:LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypas https://cyberdeltaforce.ai/news/624e7c68f5b3acdf99b2 CyberDeltaForce en 2026-09-07T17:17:29.130Z In JetBrains GoLand Vulnerability Tracked as CVE-2026-86506 https://cyberdeltaforce.ai/news/4687e89ccc0f27db2a76 CyberDeltaForce en 2026-09-07T17:17:28.560Z In JetBrains IntelliJ IDEA Vulnerability Tracked as CVE-2026-86501 https://cyberdeltaforce.ai/news/4658d79a83f9fa0720a0 CyberDeltaForce en 2026-09-07T17:17:28.443Z In JetBrains YouTrack Vulnerability Tracked as CVE-2026-86500 https://cyberdeltaforce.ai/news/36bc0276c574cc7e32fe CyberDeltaForce en 2026-09-07T17:17:28.330Z In JetBrains YouTrack Vulnerability Tracked as CVE-2026-86499 https://cyberdeltaforce.ai/news/a5df3578ac6df658723c CyberDeltaForce en 2026-09-07T17:17:27.987Z In JetBrains YouTrack Vulnerability Tracked as CVE-2026-86496