CVE-2026-104973Published
Plane: DNS Rebinding Bypass of CVE-2026-30242 SSRF Fix in Webhook Delivery
cve-program ·
Vendor product: plane
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
698127 source statements · aliases may refer to the same vulnerabilityCVE-2026-102282Published
adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation
cve-program ·
Vendor product: adm-zip
CVE-2026-104963Published
Plane: Workspace cycle and module endpoints missing project-membership filter expose private project metadata to any workspace member
cve-program ·
Vendor product: plane
CVE-2026-104955Published
Plane: Project Member can escalate Project Guest to Member via PATCH /project-members/{pk} (BAC / Privilege Escalation)
cve-program ·
Vendor product: plane
CVE-2026-104890Published
Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code execution
cve-program ·
Vendor product: KunstmaanBundlesCMS · Vendor product: bundles-cms · Vendor product: media-bundle
CVE-2026-105329Published
TallCMS PluginManager ThemeManager.php code injection
cve-program ·
Vendor product: TallCMS
CVE-2026-105397Published
LearnPress WordPress Plugin through 4.4.9.1 Stored XSS via Quiz Question Hint and Explanation
cve-program ·
Vendor product: LearnPress
CVE-2026-105290Published
feelec-yishu feelcrm-os getCurlData Endpoint GoogleController.class.php server-side request forgery
cve-program ·
Vendor product: feelcrm-os
CVE-2026-105140Published
Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 Race Condition Restores Revoked Group Membership
cve-program ·
Vendor product: obot
CVE-2026-105286Published
Totolink A3002MU File Upload formUploadFile sub_44B250 path traversal
cve-program ·
Vendor product: A3002MU
CVE-2026-105254Published
itsourcecode Online Admission System schoolyear.php sql injection
cve-program ·
Vendor product: Online Admission System
GHSA-xhm9-gwgw-3q2qPublished
@payloadcms/plugin-multi-tenant has a cross-tenant create issue
osv · CVE-2026-105864
npm: @payloadcms/plugin-multi-tenant · npm: @payloadcms/plugin-multi-tenant
GHSA-v5gf-vpjc-pc7wPublished
Payload: Unauthenticated account-lockout denial of service
osv · CVE-2026-105866
npm: payload · npm: payload
GHSA-3w37-wq28-93x7Published
Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages
osv · CVE-2026-94544
npm: next
GHSA-p223-2wr2-j562Published
Payload: Incomplete validation during the upload file lifecycle
osv · CVE-2026-105865
npm: payload · npm: payload
GHSA-4jqv-mc3x-m676Published
Next.js has cache poisoning of SSG and ISR pages in self-hosted applications
osv · CVE-2026-94543
npm: next · npm: next
GHSA-cjq9-62q9-8jv4Published
Next.js has Server-Side Request Forgery in Image Optimization
osv · CVE-2026-94483
npm: next
GHSA-pj5h-5q6c-3pfxPublished
Payload external upload trust validation issue
osv · CVE-2026-105861
npm: payload · npm: payload
GHSA-39w2-rjm5-chcvPublished
Next.js has information disclosure in development server's Model Context Protocol endpoint
osv · CVE-2026-94486
npm: next
GHSA-p96c-xwx8-3cqjPublished
Payload has a tenant authorization bypass in Multi-Tenant Plugin
osv · CVE-2026-105860
npm: @payloadcms/plugin-multi-tenant · npm: @payloadcms/plugin-multi-tenant
GHSA-66wr-7vmr-p5jqPublished
Payload authentication token field handling issue
osv · CVE-2026-105863
npm: payload · npm: payload
GHSA-f7hx-52q9-hcrfPublished
Payload: Unauthorized update to collection documents
osv · CVE-2026-105859
npm: payload · npm: payload
GHSA-mcj8-r9mp-w47pPublished
Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service
osv · CVE-2026-94484
npm: next · npm: next
GHSA-7vg8-29qx-jgj8Published
Payload: Client uploads could overwrite S3 objects
osv · CVE-2026-105867
npm: @payloadcms/storage-s3 · npm: @payloadcms/storage-s3
GHSA-97rh-rhh2-7vjvPublished
Payload: Remote Code Execution through first-register
osv · CVE-2026-105858
npm: payload · npm: payload
GHSA-9qpg-3cf8-w33xPublished
Payload: Uploaded XML files could execute same-origin JavaScript
osv · CVE-2026-105868
npm: payload · npm: payload
GHSA-f87g-xv8r-7p7xPublished
Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass
osv · CVE-2026-94485
npm: next
GHSA-r488-j9vj-wx3qPublished
Payload Form Builder has an RCE issue
osv · CVE-2026-105857
npm: @payloadcms/plugin-form-builder · npm: @payloadcms/plugin-form-builder
GHSA-2pwp-2369-8fg3Published
Payload: Bypassed sanitization of user uploaded SVGs
osv · CVE-2026-105862
npm: payload · npm: payload
CVE-2026-105249Published
vgmstream TXTP File txtp_process.c make_group_random use after free
cve-program ·
Vendor product: vgmstream
CVE-2026-107207Published
LMCache through 0.5.5 Missing Authentication in Frontend Node Catalog Allows SSRF Allowlist Bypass
cve-program ·
Vendor product: LMCache
CVE-2026-107273Published
Gophish 0.11.0 through 0.12.1 SSRF via POST /api/import/site
cve-program ·
Vendor product: gophish
CVE-2026-105245Published
sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission
cve-program ·
Vendor product: sglang
CVE-2026-105232Published
kishor-23 food-waste-management-system Registration deliverysignup.php sql injection
cve-program ·
Vendor product: food-waste-management-system
CVE-2026-105226Published
osCommerce osCommerce2 Newsletter Management newsletters.php include code injection
cve-program ·
Vendor product: osCommerce2
CVE-2026-97715Published
Denial of Service in Absolute Secure Access
cve-program ·
Vendor product: Secure Access
CVE-2026-34499Published
Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable.
cve-program ·
Vendor product: ADVMS
CVE-2026-107353Published
traverse: set() can write to built-in prototypes via an untrusted path
cve-program ·
https://www.npmjs.com: traverse
CVE-2026-97714Published
Denial of service vulnerability in Secure Access
cve-program ·
Vendor product: Secure Access
CVE-2026-107313Published
pgjdbc stores bytes of earlier messages in place of a large value on GSS-encrypted connections
cve-program ·
https://repo.maven.apache.org/maven2: org.postgresql:postgresql
CVE-2026-106344Published
Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. (…
cve-program ·
Vendor product: Chrome
CVE-2026-106299Published
Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
cve-program ·
Vendor product: Chrome
CVE-2026-97716Published
Denial of Service in Absolute Secure Access
cve-program ·
Vendor product: Secure Access
CVE-2026-97717Published
Denial of Service in Absolute Secure Access
cve-program ·
Vendor product: Secure Access
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.