https://cyberdeltaforce.ai/news/da1e48c32192fe5dd296 CyberDeltaForce en 2026-09-12T08:16:24.377Z CVE-2026-78159: The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.3 via the parse_array f https://cyberdeltaforce.ai/news/9d6085f350ec6a58de1b CyberDeltaForce en 2026-09-12T04:16:44.907Z Critical GitLab has remediated an Vulnerability Tracked as CVE-2026-85706 https://cyberdeltaforce.ai/news/4f88073eb47cd9419193 CyberDeltaForce en 2026-09-11T04:18:02.840Z Critical RouterOS contains an argument-handling Vulnerability Tracked as CVE-2026-86060 https://cyberdeltaforce.ai/news/c016134d807e95dcc50d CyberDeltaForce en 2026-09-11T04:17:58.087Z CVE-2026-81468: Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection' https://cyberdeltaforce.ai/news/53c3a7a2ea03d6a8c5f1 CyberDeltaForce en 2026-09-11T04:17:57.060Z CVE-2026-81048: Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnera https://cyberdeltaforce.ai/news/a041480c41e6c35c8e05 CyberDeltaForce en 2026-09-11T04:17:56.037Z CVE-2026-81046: Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access c https://cyberdeltaforce.ai/news/e11327253cdad708c509 CyberDeltaForce en 2026-09-11T04:17:42.130Z CVE-2026-28606: In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote https://cyberdeltaforce.ai/news/270072e82a204c73656a CyberDeltaForce en 2026-09-11T04:17:36.577Z Critical Heap-based buffer overflow Vulnerability Tracked as CVE-2026-21096 https://cyberdeltaforce.ai/news/4135d56edad009ca214a CyberDeltaForce en 2026-09-11T15:30:05.387Z Critical A path traversal Vulnerability Tracked as CVE-2026-66898 https://cyberdeltaforce.ai/news/06df6f7756d5bdde1b9c CyberDeltaForce en 2026-09-12T04:16:44.783Z Critical IBM Langflow OSS 1.0.0 Vulnerability Tracked as CVE-2026-85025 https://cyberdeltaforce.ai/news/9d61f995892f2db971d9 CyberDeltaForce en 2026-09-12T08:16:24.810Z CVE-2026-85200: The GEO my WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.5.5.3 via the gmw_posts_locator_ajax_ https://cyberdeltaforce.ai/news/11f2256506aafddab6bf CyberDeltaForce en 2026-09-12T08:16:24.507Z CVE-2026-78175: The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, https://cyberdeltaforce.ai/news/065863e5a87b60e48ca1 CyberDeltaForce en 2026-09-12T08:16:23.797Z CVE-2026-16482: The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'compare' parameter in https://cyberdeltaforce.ai/news/a6b313f2c13f1400ab91 CyberDeltaForce en 2026-09-12T04:16:42.333Z Heap-based buffer overflow Vulnerability Tracked as CVE-2026-83987 https://cyberdeltaforce.ai/news/07e4e4cc630cb24f4a0d CyberDeltaForce en 2026-09-12T04:16:37.090Z Use after free Vulnerability Tracked as CVE-2026-70341 https://cyberdeltaforce.ai/news/d6af2170b71dff066b0d CyberDeltaForce en 2026-09-12T04:16:36.557Z There is an improper access control Vulnerability Tracked as CVE-2026-4129 https://cyberdeltaforce.ai/news/68c5b6ae24371cd7615c CyberDeltaForce en 2026-09-12T04:16:33.587Z JFrog Artifactory Vulnerability Tracked as CVE-2026-42018 https://cyberdeltaforce.ai/news/01c6b6460a43c172a379 CyberDeltaForce en 2026-09-12T04:16:32.483Z JFrog Artifactory (Self Hosted) versions Vulnerability Tracked as CVE-2026-42016 https://cyberdeltaforce.ai/news/c6f706b2f454d95f5775 CyberDeltaForce en 2026-09-11T04:17:58.947Z CVE-2026-81825: The Simple Ajax Chat – Add a Fast, Secure Chat Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Chat Message in all versions https://cyberdeltaforce.ai/news/3f6d14fa8c1939b2a6ec CyberDeltaForce en 2026-09-11T04:17:58.190Z CVE-2026-81754: The Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… plugin for WordPress is vulnerable to Stored Cross-Site Scripting via https://cyberdeltaforce.ai/news/ae70d2b5bca25df2b6a9 CyberDeltaForce en 2026-09-12T13:16:51.667Z WWBN AVideo Vulnerability Tracked as CVE-2026-90537 https://cyberdeltaforce.ai/news/501cac89a97aec1dcb3b CyberDeltaForce en 2026-09-12T13:16:50.940Z CVE-2026-15451: The MemberPress Corporate Accounts plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.39. This is due to https://cyberdeltaforce.ai/news/ded71b1bc6566a545f89 CyberDeltaForce en 2026-09-12T13:16:54.040Z CVE-2026-90554: vLLM versions >=0.10.2 and <0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemotronVL mode https://cyberdeltaforce.ai/news/8494a4b32b427fbbacaf CyberDeltaForce en 2026-09-12T14:14:32.000Z Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent