CVE-2026-84789

Broken Access Control vulnerability

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privilege user to create alert notifications for firewalls outside their assigned scope.

CVSS 3.1 · 7.1 High EPSS 1.4% KEV · Not listed

Vendors

Zohocorp

Products

Manageengine Firewall Analyzer Manageengine Opmanager

CVE-2026-84787

Privilege Escalation vulnerability

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalation vulnerability that allowed an authenticated low-privilege user to gain Administrator privileges through Report Profile import.

CVSS 3.1 · 8.1 High EPSS 2.1% KEV · Not listed

Vendors

Zohocorp

Products

Manageengine Firewall Analyzer Manageengine Opmanager

CVE-2026-82000

Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS 3.1 · 9.6 Critical EPSS < 1% KEV · Not listed

Vendors

Adobe

Products

Aem 6.5 Forms Jee Aem 6.5 Lts Forms Jee

CVE-2026-81995

Adobe Experience Manager Forms JEE | Improper Input Validation (CWE-20)

Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS 3.1 · 9.1 Critical EPSS 1.2% KEV · Not listed

Vendors

Adobe

Products

Aem 6.5 Forms Jee Aem 6.5 Lts Forms Jee

CVE-2026-76980

Data Exposure vulnerability

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Data Exposure vulnerability in the Firewall Analyzer syslog collector.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Zohocorp

Products

Manageengine Firewall Analyzer Manageengine Opmanager

CVE-2026-65829

MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, reading a suitably crafted Primavera P3 PRX or SureTrak STX file can cause MPXJ to write files to arbitrary locations in the filesystem. This issue is fixed in version 16.5.0.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Joniles

Products

Mpxj

CVE-2026-58268

SIPGO: DoS via unvalidated Content-Length in the stream parser

SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.1, ParserStream.parseSingle in sip/parser_stream.go allocates a SIP body buffer from the client-controlled Content-Length header before ParseMaxMessageLength is enforced. An unauthenticated peer can send a stream-transport message over TCP, TLS, WS, or WSS with an oversized declared length, causing excessive memory allocation and denial of service before the body is read. This issue is fixed in version 1.4.1.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Emiago

Products

Sipgo

CVE-2026-14913

SQL Injection vulnerability

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vulnerability in Rule Management Search Reports.

CVSS 3.1 · 8.8 High EPSS 2.5% KEV · Not listed

Vendors

Zohocorp

Products

Manageengine Firewall Analyzer Manageengine Opmanager

CVE-2026-73014

Data Sharing Service Client Elevation of Privilege Vulnerability

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 18 more

CVE-2026-73018

Graphic Fonts Remote Code Execution Vulnerability

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Graphics Component Windows 10 1607 Windows 10 1809 and 24 more

CVE-2026-92360

ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation

A weakness has been identified in ag-ui-protocol ag-ui 1.0. The impacted element is the function prepareRunAgentInput of the file agent/agent.ts of the component Event Application Layer. This manipulation of the argument TEXT_MESSAGE_START causes origin validation error. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Ag-ui-protocol

Products

Ag-ui

CVE-2026-13745

Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOME

A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within an untrusted directory. The vulnerability is triggered via untrusted .env files overriding GEMINI_CLI_HOME to load malicious configuration files and bypass folder trust prompts.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed

Vendors

Google Cloud

Products

Gemini Cli Run-gemini-cli Github Action

CVE-2026-84835

WordPress Rentsyst plugin <= 2.1.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in DimaFreund Rentsyst rentsyst allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rentsyst: from n/a through 2.1.5.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Dimafreund Wordpress

Products

Rentsyst Wordpress

CVE-2026-84217

WordPress Classified Listing plugin <= 6.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.3.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Mamunur Rashid Wordpress

Products

Classified Listing Wordpress

CVE-2026-6285

Improper Authentication in Ankaref's LIBRID/LIBREF

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Password Recovery Exploitation. This issue affects LIBRID/LIBREF: from 2.01.0.2183 before 18.9.26.2319.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Ankaref Innovation And Technology Inc.

Products

Librid/libref

CVE-2026-27422

WordPress YT Player plugin <= 2.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in bPlugins YT Player yt-player allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YT Player: from n/a through 2.1.2.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Bplugins Wordpress

Products

Yt Player Wordpress

CVE-2026-12683

Stored XSS Yönetim panel in Ankaref's LIBRID/LIBREF

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 before 18.9.26.2319.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Ankaref Innovation And Technology Inc.

Products

Librid/libref

CVE-2026-12682

Stored XSS in Ankaref's LIBRID/LIBREF

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 before 18.9.26.2319.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Ankaref Innovation And Technology Inc.

Products

Librid/libref

CVE-2026-93778

WP Yelp Review Slider <= 9.2 - Unauthenticated Stored Cross-Site Scripting via Yelp Review Text (imported via wpyelp_download_source)

The WP Yelp Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Yelp Review Text (imported via wpyelp_download_source) in all versions up to, and including, 9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The malicious payload originates from an anonymous Yelp reviewer on a public platform and requires no WordPress account; it is introduced into the database during the site administrator's ordinary use of the plugin's Download Reviews feature, making the effective attacker unauthenticated.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Jgwhite33 Wordpress

Products

Wp Yelp Review Slider Wordpress

CVE-2026-95511

cups: cups-filters: cups-filters: lpadmin can escalate to root via privileged serial backend (cups2root)

Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in SystemGroups (lpadmin), which is an opt-in cupsd admin role granted by a superuser. No privilege boundary is crossed.

CVSS 3.1 · 8.2 High EPSS n/a KEV · Not listed

Vendors

Cups Redhat

Products

Cups Enterprise Linux Hardened Images