GiveWP < 4.19.0.1 - Authenticated Arbitrary Donor Address Modification via donor_manage_addresses
Newly collected advisory
CVE-2026-111981
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Weekly briefing
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
2295 source records · 1652 groupsSecurityGiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Import
GiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Import
Newly collected advisory
CVE-2026-111978
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityGiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grant
GiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grant
Newly collected advisory
CVE-2026-111980
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityGiveWP < 4.19.0.1 - Give Worker+ Stored XSS via Form Template Primary Color
GiveWP < 4.19.0.1 - Give Worker+ Stored XSS via Form Template Primary Color
Newly collected advisory
CVE-2026-111979
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityGiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Route
GiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Route
Newly collected advisory
CVE-2026-111976
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityHTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length
HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length
Newly collected advisory
CVE-2026-115825
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix
Newly collected advisory
CVE-2026-116145
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options
Newly collected advisory
CVE-2026-116148
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate
Newly collected advisory
CVE-2026-116160
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder
Newly collected advisory
CVE-2026-116151
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder
Newly collected advisory
CVE-2026-116146
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option
Newly collected advisory
CVE-2026-116159
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option
Newly collected advisory
CVE-2026-116156
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile
Newly collected advisory
CVE-2026-116155
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit
Newly collected advisory
CVE-2026-116154
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Decoder
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Decoder
Newly collected advisory
CVE-2026-116147
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS Decoders
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS Decoders
Newly collected advisory
CVE-2026-116143
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing
Newly collected advisory
CVE-2026-116140
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images
Newly collected advisory
CVE-2026-116149
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG Decoder
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG Decoder
Newly collected advisory
CVE-2026-116144
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box
ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box
Newly collected advisory
CVE-2026-116142
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit
ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit
Newly collected advisory
CVE-2026-116153
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 7.1.2-33 Memory Leak in FPX Encoder
ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder
Newly collected advisory
CVE-2026-116150
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path
ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path
Newly collected advisory
CVE-2026-116152
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.