Our news and updates

In ngx_http_v3_module component for NGINX in certain versions a medium severity vulnerability CVE-2026-90439 was detected. This vulnerability allows for a potential limited heap buffer overflow while processing a TLS handshake. To address this issue, users should upgrade NGINX to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-90439.

In MotoPress Hotel Booking plugin component for WordPress versions 6.2.4 and earlier a high severity vulnerability CVE-2026-90650 was detected. This vulnerability allows unauthenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade MotoPress Hotel Booking plugin to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-90650.

In Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 a high severity vulnerability CVE-2026-19407 was detected. This vulnerability allows an attacker to achieve Remote Code Execution (RCE) and tenant-project token theft. To address this issue, users should upgrade the Google Cloud Gemini Enterprise Agent Platform SDK for Python to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19407.

In fluent-plugin-opentelemetry component for Fluentd versions prior to 0.5.3 a medium severity vulnerability CVE-2026-44163 was detected. This vulnerability allows attackers to cause resource exhaustion by sending a large, compressed payload. To address this issue, users should upgrade fluent-plugin-opentelemetry to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-44163.

In PostGIS component for PostgreSQL versions 3.7.0 and earlier a medium severity vulnerability CVE-2026-90775 was detected. This vulnerability allows attackers to cause the backend process to crash, leading to a denial of service. To address this issue, users should upgrade PostGIS to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-90775.

In LibreNMS version 1.65 and earlier a medium severity vulnerability CVE-2020-15875 was detected. This vulnerability allows a remote authenticated attacker to extract all information from the database via SQL injection. To address this issue, users should upgrade LibreNMS to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2020-15875.

In GenieWords component for WordPress versions 1.5.34 and earlier a high severity vulnerability CVE-2026-74933 was detected. This vulnerability allows unauthenticated users to overwrite its configuration and inject arbitrary web scripts. To address this issue, users should upgrade GenieWords to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-74933.

In Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 a high severity vulnerability CVE-2026-90561 was detected. This vulnerability allows an authenticated user with author-level privileges to achieve account takeover of an administrator’s account. To address this issue, users should upgrade Strapi to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-90561.

In Open Notebook versions before 1.11.0 a high severity vulnerability CVE-2026-90769 was detected. This vulnerability allows authenticated users to perform server-side requests to internal services. To address this issue, users should upgrade Open Notebook to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-90769.